main.cf snipper

disable_vrfy_command = yes
smtpd_delay_reject = yes

smtpd_error_sleep_time = 1s
smtpd_soft_error_limit = 10
smtpd_hard_error_limit = 20

smtpd_client_restrictions =
    permit_sasl_authenticated,
    permit_mynetworks,
    check_client_access hash:/etc/postfix/client_access,
    reject_unknown_client,
    permit

smtpd_data_restrictions =
    reject_multi_recipient_bounce,
    reject_unauth_pipelining,
    permit

smtpd_helo_required = yes
smtpd_helo_restrictions =
    permit_sasl_authenticated,
    permit_mynetworks,
    check_helo_access hash:/etc/postfix/helo_access,
    reject_unauth_pipelining,
    reject_non_fqdn_helo_hostname,
    reject_invalid_helo_hostname,
    warn_if_reject reject_unknown_helo_hostname,
    permit

smtpd_recipient_restrictions =
    reject_invalid_hostname,
    reject_unknown_recipient_domain,
    reject_unknown_sender_domain,
    reject_unauth_pipelining,
    reject_non_fqdn_sender,
    reject_non_fqdn_recipient,
    permit_mynetworks,
    permit_sasl_authenticated,
    reject_non_fqdn_hostname,
    reject_unauth_destination,
    check_sender_access hash:/etc/postfix/sender_access,
    reject_rbl_client zen.spamhaus.org,
    reject_rbl_client b.barracudacentral.org,
#   reject_rbl_client dnsbl.sorbs.net,
    reject_rbl_client bl.spamcop.net,
    reject_rbl_client hostkarma.junkemailfilter.com=127.0.0.2,
    check_policy_service inet:127.0.0.1:10023,
    check_policy_service unix:private/policy-spf,
    permit

smtpd_sender_restrictions =
    reject_unknown_sender_domain,
    reject_non_fqdn_sender,
    permit_sasl_authenticated,
    permit_mynetworks,
    reject_unknown_reverse_client_hostname,
    permit

content_filter = smtp-amavis:[127.0.0.1]:10024