broken_sasl_auth_clients = yes
config_directory = /etc/postfix
debug_peer_level = 2
disable_vrfy_command = yes
hash_queue_depth = 2
hash_queue_names = incoming,active,deferred,bounce,defer,flush,hold
header_checks = regexp:/etc/postfix/header_checks
html_directory = /usr/local/share/doc/postfix
inet_interfaces = all
inet_protocols = ipv4, ipv6
mail_owner = postfix
mailbox_size_limit = 0
mailbox_transport = virtual
message_size_limit = 150000000
mydestination = leavenworth.sequestered.net
mydomain = sequestered.net
myhostname = leavenworth.sequestered.net
mynetworks = 192.168.0.0/16, 10.0.0.0/8, 127.0.0.0/8
proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $virtual_mailbox_limit_maps
queue_directory = /var/spool/postfix
relay_domains = proxy:mysql:/etc/postfix/mysql_relay_domains_maps.cf
sample_directory = /etc/postfix
setgid_group = vmail
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
smtp_sasl_security_options =
smtp_tls_note_starttls_offer = yes
smtp_use_tls = yes
smtpd_client_restrictions = ${stress?reject_unknown_client_hostname}    check_client_access cidr:/etc/postfix/cidr_access
smtpd_data_restrictions = reject_multi_recipient_bounce   reject_unauth_pipelining
smtpd_helo_required = yes
smtpd_recipient_restrictions = permit_sasl_authenticated        permit_mynetworks        reject_unauth_destination        reject_unlisted_recipient             check_client_access cidr:/etc/postfix/whitelisted_senders        check_recipient_access hash:/etc/postfix/access        check_sender_access hash:/etc/postfix/undesirable_senders        check_sender_access regexp:/etc/postfix/dynamic        reject_non_fqdn_hostname        reject_unknown_reverse_client_hostname        reject_rbl_client psbl.surriel.com        reject_rbl_client zen.spamhaus.org        reject_rbl_client dnsbl.ahbl.org        reject_rbl_client bl.spamcop.net        reject_rhsbl_sender rhsbl.ahbl.org        warn_if_reject reject_rbl_client dnsbl.sorbs.net        permit
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = yes
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_path = private/auth
smtpd_sasl_security_options = noanonymous
smtpd_sasl_type = dovecot
smtpd_timeout = 120
smtpd_tls_CAfile = /etc/postfix/mail.pem
smtpd_tls_cert_file = /etc/postfix/mail.pem
smtpd_tls_key_file = $smtpd_tls_cert_file
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
tls_random_source = dev:/dev/urandom
unknown_local_recipient_reject_code = 550
virtual_alias_maps = proxy:mysql:/etc/postfix/mysql_virtual_alias_maps.cf
virtual_gid_maps = static:1008
virtual_mailbox_base = /usr/local/virtual
virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql_virtual_domains_maps.cf
virtual_mailbox_limit = 5120000000000
virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf
virtual_minimum_uid = 125
virtual_uid_maps = static:1008