Postfix main.cf

smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no
append_dot_mydomain = no
myhostname = mail2test.domain.tld
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = $mydomain
mydestination = $myhostname, private.mail2test.domain.tld, localhost.$mydomain, localhost
mynetworks = 127.0.0.0/8 10.0.0.0/8
recipient_delimiter = +
home_mailbox = Maildir/
smtpd_helo_required = yes
strict_rfc821_envelopes = yes
relay_domains = proxy:mysql:/etc/postfix/mysql_relay_domains_maps.cf
relay_recipient_maps = proxy:mysql:/etc/postfix/mysql_relay_recipients_maps.cf
virtual_alias_maps = proxy:mysql:/etc/postfix/mysql_virtual_alias_maps.cf,proxy:mysql:/etc/postfix/mysql_virtual_alias_domain_maps.cf,proxy:mysql:/etc/postfix/mysql_virtual_alias_domain_catchall_maps.cf
virtual_gid_maps = static:20001
virtual_mailbox_base = /home/virtual
virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql_virtual_domains_maps.cf
virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf,proxy:mysql:/etc/postfix/mysql_virtual_alias_domain_mailbox_maps.cf
virtual_minimum_uid = 20001
virtual_uid_maps = static:20001
#transport_maps = proxy:mysql:/etc/postfix/mysql_transport.cf,proxy:mysql:/etc/postfix/mysql_transport2.cf
transport_maps = hash:/etc/postfix/transport
proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $smtpd_recipient_restrictions $smtpd_sender_login_maps $has_our_domain_as_sender
message_size_limit = 50240000
smtpd_sender_login_maps = proxy:mysql:/etc/postfix/mysql-sasl-sender-check.cf,proxy:mysql:/etc/postfix/mysql_virtual_alias_domain_maps.cf
smtpd_reject_unlisted_sender = yes
smtpd_restriction_classes =
  has_our_domain_as_sender,
  client_throttle
has_our_domain_as_sender = reject
client_throttle =
  check_policy_service inet:127.0.0.1:10031
smtpd_client_restrictions =
        permit_sasl_authenticated
        #check_policy_service inet:127.0.0.1:10031
smtpd_recipient_restrictions =
        reject_non_fqdn_recipient,
        reject_unknown_sender_domain,
        reject_non_fqdn_sender,
        reject_unknown_recipient_domain,
        reject_invalid_helo_hostname,
        reject_unlisted_recipient,
        reject_unlisted_sender,
        permit_mynetworks,
        permit_sasl_authenticated,
        reject_unauth_destination,
        #check_policy_service unix:private/policy-spf,
        #check_client_access hash:/etc/postfix/internal_networks,
        #check_sender_access proxy:mysql:/etc/postfix/mysql_not_our_domain_as_sender.cf,
        check_helo_access proxy:mysql:/etc/postfix/mysql-hello.cf,
        check_sender_access proxy:mysql:/etc/postfix/mysql-sender.cf,
        check_client_access proxy:mysql:/etc/postfix/mysql-client.cf,
        permit
smtpd_data_restrictions =
        reject_unauth_pipelining,
        permit
smtpd_end_of_data_restrictions =
            check_policy_service inet:127.0.0.1:10031
smtp_tls_security_level = may
smtp_tls_session_cache_database = btree:${data_directory}/smtp_tls_session_cache
smtpd_tls_security_level = may
smtpd_tls_auth_only = no
smtp_tls_loglevel = 1
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_tls_session_cache
tls_random_source = dev:/dev/urandom
dovecot_destination_recipient_limit = 1
virtual_transport = dovecot
smtpd_sasl_auth_enable = yes
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_security_options = noanonymous
smtpd_sasl_local_domain =
broken_sasl_auth_clients = yes
smtpd_sasl_authenticated_header = yes
postscreen_dnsbl_threshold = 2
postscreen_dnsbl_sites = bl.spamcop.net*2 bl.mailspike.net*1
postscreen_dnsbl_action = enforce
postscreen_greet_action = enforce
header_checks = regexp:/etc/postfix/header_checks.cf
mime_header_checks = regexp:/etc/postfix/header_checks.cf
content_filter = smtp-amavis:[127.0.0.1]:10024
virtual_maps = hash:/etc/postfix/virtusertable
smtp_bind_address = xxx.xxx.xxx.xxx
smtpd_recipient_limit = 100
sender_dependent_default_transport_maps = regexp:/etc/postfix/sdd_transport_maps.regexp
smtp_tls_CAfile = /var/www/_letsencrypt/live/mail2test.domain.tld-0002/chain.pem
smtpd_tls_cert_file = /var/www/_letsencrypt/live/mail2test.domain.tld-0002/cert.pem
smtpd_tls_key_file = /var/www/_letsencrypt/live/mail2test.domain.tld-0002/privkey.pem
sender_bcc_maps = hash:/etc/postfix/sender_bcc
policy-spf_time_limit = 3600s
smtpd_relay_restrictions = permit_sasl_authenticated, reject_unauth_destination