Advertisement
Guest User

Untitled

a guest
Feb 11th, 2017
113
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 8.27 KB | None | 0 0
  1. # See /usr/share/postfix/main.cf.dist for a commented, more complete version
  2.  
  3.  
  4. # Debian specific: Specifying a file name will cause the first
  5. # line of that file to be used as the name. The Debian default
  6. # is /etc/mailname.
  7. #myorigin = /etc/mailname
  8.  
  9. smtpd_banner = $myhostname ESMTP $mail_name
  10. biff = no
  11.  
  12. # appending .domain is the MUA's job.
  13. append_dot_mydomain = no
  14.  
  15. # Uncomment the next line to generate "delayed mail" warnings
  16. #delay_warning_time = 4h
  17.  
  18. readme_directory = /usr/share/doc/postfix
  19.  
  20. # TLS parameters
  21. smtpd_tls_cert_file = /etc/postfix/smtpd.cert
  22. smtpd_tls_key_file = /etc/postfix/smtpd.key
  23. smtpd_use_tls = no
  24. smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
  25. smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
  26.  
  27. # See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
  28. # information on enabling SSL in the smtp client.
  29.  
  30. myhostname = SERVERNAME
  31. alias_maps = hash:/etc/aliases
  32. alias_database = hash:/etc/aliases
  33. myorigin = /etc/mailname
  34. mydestination = SERVERNAME.COM, localhost, localhost.localdomain
  35. mynetworks = 127.0.0.0/8
  36. mailbox_command =
  37. mailbox_size_limit = 0
  38. recipient_delimiter = +
  39. inet_interfaces = all
  40. inet_protocols = all
  41. smtpd_sasl_local_domain =
  42. broken_sasl_auth_clients = yes
  43. smtpd_sasl_authenticated_header = yes
  44. smtpd_recipient_restrictions = permit_mynetworks, check_sender_access hash:/etc/postfix/restricted_senders, permit_sasl_authenticated, reject_unauth_destination permit_inet_interfaces
  45. #smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination, permit_inet_interfaces
  46. #smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, check_recipient_access mysql:/etc/postfix/mysql-virtual_recipient.cf, reject_unauth_destination
  47. smtpd_tls_auth_only = no
  48. smtp_use_tls = no
  49. smtp_tls_note_starttls_offer = yes
  50. smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
  51. smtpd_tls_loglevel = 1
  52. smtpd_tls_received_header = yes
  53. smtpd_tls_session_cache_timeout = 3600s
  54. tls_random_source = dev:/dev/urandom
  55. home_mailbox = Maildir/
  56.  
  57. smtpd_helo_required = yes
  58. smtpd_helo_restrictions = permit_mynetworks,
  59. permit_sasl_authenticated,
  60. reject_unauth_pipelining,
  61. reject_non_fqdn_sender,
  62. reject_non_fqdn_recipient,
  63. reject_unknown_sender_domain,
  64. reject_unknown_recipient_domain,
  65. reject_unauth_destination,
  66. reject_rbl_client sbl.spamhaus.org,
  67. reject_rbl_client blackholes.wirehub.net,
  68. reject_rbl_client bl.spamcop.net,
  69. permit
  70.  
  71.  
  72. content_filter = amavis:[127.0.0.1]:10024
  73. receive_override_options = no_address_mappings
  74. html_directory = /usr/share/doc/postfix/html
  75. message_size_limit = 30720000
  76. virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-virtual_forwardings.cf, mysql:/etc/postfix/mysql-virtual_email2email.cf
  77. virtual_alias_domains =
  78. virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf
  79. virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailboxes.cf
  80. virtual_mailbox_base = /var/vmail
  81. virtual_uid_maps = static:5000
  82. virtual_gid_maps = static:5000
  83. transport_maps = proxy:mysql:/etc/postfix/mysql-virtual_transports.cf
  84. #relay_domains = mysql:/etc/postfix/mysql-virtual_relaydomains.cf
  85. #virtual_create_maildirsize = yes
  86. #virtual_maildir_extended = yes
  87. #virtual_mailbox_limit_inbox = yes
  88. virtual_mailbox_limit_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailbox_limit_maps.cf
  89. #virtual_mailbox_limit_override = yes
  90. #virtual_maildir_limit_message = "The user you are trying to reach is over quota."
  91. #virtual_overquota_bounce = yes
  92. proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $virtual_mailbox_limit_maps
  93. #smtpd_sender_restrictions = check_sender_access mysql:/etc/postfix/mysql-virtual_sender.cf
  94. # smtpd_client_restrictions = check_client_access mysql:/etc/postfix/mysql-virtual_client.cf
  95. maildrop_destination_concurrency_limit = 1
  96. maildrop_destination_recipient_limit = 1
  97. virtual_transport = maildrop
  98. header_checks = regexp:/etc/postfix/header_checks
  99. mime_header_checks = regexp:/etc/postfix/mime_header_checks
  100. nested_header_checks = regexp:/etc/postfix/nested_header_checks
  101. body_checks = regexp:/etc/postfix/body_checks
  102.  
  103. ## local ###
  104. disable_vrfy_command = yes
  105. smtpd_banner = $myhostname
  106. #smtpd_client_restrictions = permit_mynetworks permit_inet_interfaces
  107. smtpd_tls_security_level = may
  108. smtpd_sasl_auth_enable = yes
  109. smtpd_client_restrictions = permit_mynetworks permit_inet_interfaces permit_tls_all_clientcerts
  110.  
  111.  
  112.  
  113. smtpd_sasl_type = dovecot
  114. smtpd_sasl_path = private/auth
  115. smtpd_sasl_security_options = noanonymous
  116. #smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, check_recipient_access mysql:/etc/postfix/mysql-virtual_recipient.cf, reject_unauth_destinatination
  117.  
  118. cyrus
  119. dovecot
  120.  
  121. alias_database = hash:/etc/aliases
  122. alias_maps = hash:/etc/aliases
  123. append_dot_mydomain = no
  124. biff = no
  125. body_checks = regexp:/etc/postfix/body_checks
  126. broken_sasl_auth_clients = yes
  127. config_directory = /etc/postfix
  128. content_filter = amavis:[127.0.0.1]:10024
  129. disable_vrfy_command = yes
  130. header_checks = regexp:/etc/postfix/header_checks
  131. home_mailbox = Maildir/
  132. html_directory = /usr/share/doc/postfix/html
  133. inet_interfaces = all
  134. inet_protocols = all
  135. mailbox_command =
  136. mailbox_size_limit = 0
  137. maildrop_destination_concurrency_limit = 1
  138. maildrop_destination_recipient_limit = 1
  139. message_size_limit = 30720000
  140. mime_header_checks = regexp:/etc/postfix/mime_header_checks
  141. mydestination = SERVERNAME.COM, localhost, localhost.localdomain
  142. myhostname = SERVERNAME.COM
  143. mynetworks = 127.0.0.0/8
  144. myorigin = /etc/mailname
  145. nested_header_checks = regexp:/etc/postfix/nested_header_checks
  146. proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $virtual_mailbox_limit_maps
  147. readme_directory = /usr/share/doc/postfix
  148. receive_override_options = no_address_mappings
  149. recipient_delimiter = +
  150. smtp_tls_note_starttls_offer = yes
  151. smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
  152. smtp_use_tls = no
  153. smtpd_banner = $myhostname
  154. smtpd_client_restrictions = permit_mynetworks permit_inet_interfaces permit_tls_all_clientcerts
  155. smtpd_helo_required = yes
  156. smtpd_helo_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_pipelining, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_unauth_destination, reject_rbl_client sbl.spamhaus.org, reject_rbl_client blackholes.wirehub.net, reject_rbl_client bl.spamcop.net, permit
  157. smtpd_recipient_restrictions = permit_mynetworks, check_sender_access hash:/etc/postfix/restricted_senders, permit_sasl_authenticated, reject_unauth_destination permit_inet_interfaces
  158. smtpd_sasl_auth_enable = yes
  159. smtpd_sasl_authenticated_header = yes
  160. smtpd_sasl_local_domain =
  161. smtpd_sasl_path = private/auth
  162. smtpd_sasl_security_options = noanonymous
  163. smtpd_sasl_type = dovecot
  164. smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
  165. smtpd_tls_auth_only = no
  166. smtpd_tls_cert_file = /etc/postfix/smtpd.cert
  167. smtpd_tls_key_file = /etc/postfix/smtpd.key
  168. smtpd_tls_loglevel = 1
  169. smtpd_tls_received_header = yes
  170. smtpd_tls_security_level = may
  171. smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
  172. smtpd_tls_session_cache_timeout = 3600s
  173. smtpd_use_tls = no
  174. tls_random_source = dev:/dev/urandom
  175. transport_maps = proxy:mysql:/etc/postfix/mysql-virtual_transports.cf
  176. virtual_alias_domains =
  177. virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-virtual_forwardings.cf, mysql:/etc/postfix/mysql-virtual_email2email.cf
  178. virtual_gid_maps = static:5000
  179. virtual_mailbox_base = /var/vmail
  180. virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf
  181. virtual_mailbox_limit_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailbox_limit_maps.cf
  182. virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailboxes.cf
  183. virtual_transport = maildrop
  184. virtual_uid_maps = static:5000
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement