postconf -n

alias_maps =

append_dot_mydomain = no

broken_sasl_auth_clients = yes

disable_vrfy_command = yes

header_size_limit = 4096000

inet_interfaces = all

inet_protocols = ipv4

local_transport = error:Local Transport Disabled

mydestination = $myhostname localhost.$mydomain localhost

mydomain = gozen.systems

myhostname = smtp1.gozen.systems

mynetworks = 127.0.0.0/8 185.136.58.0/24

postscreen_greet_action = enforce

smtp_sasl_auth_enable = yes

smtp_sasl_security_options = noanonymous

smtp_tls_CAfile = $smtpd_tls_CAfile

smtp_tls_loglevel = 1

smtp_tls_security_level = may

smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache

smtp_use_tls = yes

smtpd_banner = $myhostname ESMTP $mail_name

smtpd_client_new_tls_session_rate_limit = 10

smtpd_client_restrictions = sleep 5 check_client_access cidr:/etc/postfix/drop.cidr permit_sasl_authenticated permit_mynetworks

smtpd_data_restrictions = reject_multi_recipient_bounce

smtpd_delay_reject = no

smtpd_error_sleep_time = 30

smtpd_hard_error_limit = 20

smtpd_helo_required = yes

smtpd_helo_restrictions = permit_mynetworks check_helo_access pcre:/etc/postfix/identitycheck.pcre reject_invalid_hostname

smtpd_recipient_restrictions = reject_non_fqdn_recipient reject_unknown_recipient_domain reject_unauth_pipelining permit_sasl_authenticated permit_mynetworks reject_unauth_destination check_sender_access hash:/etc/postfix/sender_access check_sender_ns_access cidr:/etc/postfix/drop.cidr check_sender_mx_access cidr:/etc/postfix/drop.cidr check_relay_domains reject_rbl_client zen.spamhaus.org reject_rbl_client bl.spamcop.net permit

smtpd_sasl_auth_enable = yes

smtpd_sasl_authenticated_header = no

smtpd_sasl_exceptions_networks = $mynetworks

smtpd_sasl_security_options = noanonymous

smtpd_sender_restrictions = reject_non_fqdn_sender reject_unknown_sender_domain

smtpd_soft_error_limit = 10

smtpd_tls_CAfile = /etc/postfix/certs/startssl-ca-bundle.pem

smtpd_tls_auth_only = no

smtpd_tls_cert_file = /etc/postfix/certs/smtp1.crt

smtpd_tls_dh1024_param_file = ${config_directory}/certs/dh_1024.pem

smtpd_tls_dh512_param_file = ${config_directory}/certs/dh_512.pem

smtpd_tls_exclude_ciphers = EXP EDH-RSA-DES-CBC-SHA ADH-DES-CBC-SHA DES-CBC-SHA SEED-SHA

smtpd_tls_key_file = /etc/postfix/certs/smtp1_nopass.key

smtpd_tls_loglevel = 1

smtpd_tls_received_header = yes

smtpd_tls_security_level = may

smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache

tls_random_source = dev:/dev/urandom

virtual_alias_maps = proxy:ldap:/etc/postfix/ldap_virtual_aliases.cf

virtual_mailbox_domains = hash:/etc/postfix/virtual_domains

virtual_mailbox_maps = proxy:ldap:/etc/postfix/ldap_virtual_recipients.cf

virtual_transport = lmtp:inet:185.xx.xx.xx:24