SHOW:
|
|
- or go back to the newest paste.
1 | - | 2bounce_notice_recipient = postmaster |
1 | + | postconf -nf: |
2 | - | access_map_defer_code = 450 |
2 | + | |
3 | - | access_map_reject_code = 554 |
3 | + | |
4 | - | address_verify_cache_cleanup_interval = 12h |
4 | + | |
5 | - | address_verify_default_transport = $default_transport |
5 | + | |
6 | - | address_verify_local_transport = $local_transport |
6 | + | |
7 | - | address_verify_map = btree:$data_directory/verify_cache |
7 | + | |
8 | - | address_verify_negative_cache = yes |
8 | + | |
9 | - | address_verify_negative_expire_time = 3d |
9 | + | |
10 | - | address_verify_negative_refresh_time = 3h |
10 | + | |
11 | - | address_verify_poll_count = ${stress?1}${stress:3} |
11 | + | |
12 | - | address_verify_poll_delay = 3s |
12 | + | |
13 | - | address_verify_positive_expire_time = 31d |
13 | + | |
14 | - | address_verify_positive_refresh_time = 7d |
14 | + | |
15 | - | address_verify_relay_transport = $relay_transport |
15 | + | |
16 | - | address_verify_relayhost = $relayhost |
16 | + | |
17 | - | address_verify_sender = $double_bounce_sender |
17 | + | |
18 | - | address_verify_sender_dependent_default_transport_maps = $sender_dependent_default_transport_maps |
18 | + | |
19 | - | address_verify_sender_dependent_relayhost_maps = $sender_dependent_relayhost_maps |
19 | + | |
20 | - | address_verify_sender_ttl = 0s |
20 | + | |
21 | - | address_verify_service_name = verify |
21 | + | |
22 | - | address_verify_transport_maps = $transport_maps |
22 | + | |
23 | - | address_verify_virtual_transport = $virtual_transport |
23 | + | |
24 | smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt | |
25 | smtp_tls_loglevel = 2 | |
26 | - | allow_mail_to_commands = alias, forward |
26 | + | |
27 | - | allow_mail_to_files = alias, forward |
27 | + | |
28 | - | allow_min_user = no |
28 | + | |
29 | - | allow_percent_hack = yes |
29 | + | smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, |
30 | - | allow_untrusted_routing = no |
30 | + | reject_rbl_client zen.spamhaus.org, reject_unlisted_recipient, |
31 | - | alternate_config_directories = |
31 | + | check_policy_service inet:127.0.0.1:10023 |
32 | - | always_add_missing_headers = no |
32 | + | smtpd_relay_restrictions = |
33 | - | always_bcc = |
33 | + | permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination |
34 | - | anvil_rate_time_unit = 60s |
34 | + | |
35 | - | anvil_status_update_time = 600s |
35 | + | |
36 | - | append_at_myorigin = yes |
36 | + | |
37 | smtpd_sender_login_maps = pgsql:/etc/postfix/pgsql/sender-login-maps.cf | |
38 | - | application_event_drain_time = 100s |
38 | + | smtpd_sender_restrictions = reject_non_fqdn_sender, |
39 | - | authorized_flush_users = static:anyone |
39 | + | reject_unknown_sender_domain, reject_authenticated_sender_login_mismatch, |
40 | - | authorized_mailq_users = static:anyone |
40 | + | reject_rhsbl_sender dbl.spamhaus.org |
41 | - | authorized_submit_users = static:anyone |
41 | + | |
42 | - | backwards_bounce_logfile_compatibility = yes |
42 | + | smtpd_tls_cert_file = /etc/nginx/ssl/example.crt |
43 | - | berkeley_db_create_buffer_size = 16777216 |
43 | + | |
44 | - | berkeley_db_read_buffer_size = 131072 |
44 | + | |
45 | - | best_mx_transport = |
45 | + | |
46 | smtpd_tls_key_file = /etc/nginx/ssl/example.key | |
47 | - | body_checks = |
47 | + | |
48 | - | body_checks_size_limit = 51200 |
48 | + | |
49 | - | bounce_notice_recipient = postmaster |
49 | + | |
50 | - | bounce_queue_lifetime = 5d |
50 | + | |
51 | - | bounce_service_name = bounce |
51 | + | |
52 | - | bounce_size_limit = 50000 |
52 | + | |
53 | - | bounce_template_file = |
53 | + | |
54 | - | broken_sasl_auth_clients = no |
54 | + | |
55 | - | bsmtp_delivery_slot_cost = $default_delivery_slot_cost |
55 | + | |
56 | - | bsmtp_delivery_slot_discount = $default_delivery_slot_discount |
56 | + | |
57 | - | bsmtp_delivery_slot_loan = $default_delivery_slot_loan |
57 | + | |
58 | - | bsmtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit |
58 | + | |
59 | - | bsmtp_destination_concurrency_limit = $default_destination_concurrency_limit |
59 | + | postconf -Mf |
60 | - | bsmtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback |
60 | + | smtp inet n - - - - smtpd |
61 | - | bsmtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback |
61 | + | submission inet n - - - - smtpd |
62 | - | bsmtp_destination_rate_delay = $default_destination_rate_delay |
62 | + | |
63 | - | bsmtp_destination_recipient_limit = $default_destination_recipient_limit |
63 | + | |
64 | - | bsmtp_extra_recipient_limit = $default_extra_recipient_limit |
64 | + | |
65 | - | bsmtp_initial_destination_concurrency = $initial_destination_concurrency |
65 | + | |
66 | - | bsmtp_minimum_delivery_slots = $default_minimum_delivery_slots |
66 | + | -o smtpd_tls_ciphers=high |
67 | - | bsmtp_recipient_limit = $default_recipient_limit |
67 | + | -o smtpd_tls_exclude_ciphers=aNULL,DES,3DES,MD5,DES+MD5,RC4 |
68 | - | bsmtp_recipient_refill_delay = $default_recipient_refill_delay |
68 | + | -o smtpd_tls_mandatory_protocols=!SSLv2,!SSLv3 |
69 | - | bsmtp_recipient_refill_limit = $default_recipient_refill_limit |
69 | + | |
70 | - | bsmtp_time_limit = $command_time_limit |
70 | + | authclean unix n - - - 0 cleanup |
71 | - | canonical_classes = envelope_sender, envelope_recipient, header_sender, header_recipient |
71 | + | |
72 | - | canonical_maps = |
72 | + | pickup unix n - - 60 1 pickup |
73 | - | cleanup_service_name = cleanup |
73 | + | |
74 | - | command_directory = /usr/sbin |
74 | + | -o receive_override_options=no_header_body_checks |
75 | - | command_execution_directory = |
75 | + | cleanup unix n - - - 0 cleanup |
76 | - | command_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ |
76 | + | qmgr unix n - n 300 1 qmgr |
77 | - | command_time_limit = 1000s |
77 | + | tlsmgr unix - - - 1000? 1 tlsmgr |
78 | rewrite unix - - - - - trivial-rewrite | |
79 | - | connection_cache_protocol_timeout = 5s |
79 | + | bounce unix - - - - 0 bounce |
80 | - | connection_cache_service_name = scache |
80 | + | defer unix - - - - 0 bounce |
81 | - | connection_cache_status_update_time = 600s |
81 | + | trace unix - - - - 0 bounce |
82 | - | connection_cache_ttl_limit = 2s |
82 | + | verify unix - - - - 1 verify |
83 | flush unix n - - 1000? 0 flush | |
84 | - | cyrus_sasl_config_path = |
84 | + | proxymap unix - - n - - proxymap |
85 | - | daemon_directory = /usr/lib/postfix |
85 | + | proxywrite unix - - n - 1 proxymap |
86 | - | daemon_table_open_error_is_fatal = no |
86 | + | smtp unix - - - - - smtp |
87 | - | daemon_timeout = 18000s |
87 | + | relay unix - - - - - smtp |
88 | - | data_directory = /var/lib/postfix |
88 | + | showq unix n - - - - showq |
89 | - | debug_peer_level = 2 |
89 | + | error unix - - - - - error |
90 | - | debug_peer_list = 7s.lv |
90 | + | retry unix - - - - - error |
91 | - | debugger_command = |
91 | + | discard unix - - - - - discard |
92 | - | default_database_type = hash |
92 | + | local unix - n n - - local |
93 | - | default_delivery_slot_cost = 5 |
93 | + | virtual unix - n n - - virtual |
94 | - | default_delivery_slot_discount = 50 |
94 | + | lmtp unix - - - - - lmtp |
95 | - | default_delivery_slot_loan = 3 |
95 | + | anvil unix - - - - 1 anvil |
96 | - | default_destination_concurrency_failed_cohort_limit = 1 |
96 | + | scache unix - - - - 1 scache |
97 | - | default_destination_concurrency_limit = 20 |
97 | + | maildrop unix - n n - - pipe flags=DRhu |
98 | - | default_destination_concurrency_negative_feedback = 1 |
98 | + | user=vmail argv=/usr/bin/maildrop -d ${recipient} |
99 | - | default_destination_concurrency_positive_feedback = 1 |
99 | + | uucp unix - n n - - pipe flags=Fqhu |
100 | - | default_destination_rate_delay = 0s |
100 | + | user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) |
101 | - | default_destination_recipient_limit = 50 |
101 | + | ifmail unix - n n - - pipe flags=F user=ftn |
102 | - | default_extra_recipient_limit = 1000 |
102 | + | argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) |
103 | - | default_filter_nexthop = |
103 | + | bsmtp unix - n n - - pipe flags=Fq. |
104 | - | default_minimum_delivery_slots = 3 |
104 | + | user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient |
105 | - | default_privs = nobody |
105 | + | scalemail-backend unix - n n - 2 pipe flags=R |
106 | - | default_process_limit = 100 |
106 | + | user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} |
107 | - | default_rbl_reply = $rbl_code Service unavailable; $rbl_class [$rbl_what] blocked using $rbl_domain${rbl_reason?; $rbl_reason} |
107 | + | ${user} ${extension} |
108 | - | default_recipient_limit = 20000 |
108 | + | mailman unix - n n - - pipe flags=FR |
109 | - | default_recipient_refill_delay = 5s |
109 | + | user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py ${nexthop} |
110 | - | default_recipient_refill_limit = 100 |
110 | + | ${user} |
111 | - | default_transport = smtp |
111 | + | smtp-amavis unix - - - - 2 smtp |
112 | - | default_verp_delimiters = += |
112 | + | -o smtp_data_done_timeout=1200 |
113 | - | defer_code = 450 |
113 | + | -o smtp_send_xforward_command=yes |
114 | - | defer_service_name = defer |
114 | + | -o disable_dns_lookups=yes |
115 | - | defer_transports = |
115 | + | -o max_use=20 |
116 | - | delay_logging_resolution_limit = 2 |
116 | + | 127.0.0.1:10025 inet n - - - - smtpd |
117 | - | delay_notice_recipient = postmaster |
117 | + | |
118 | - | delay_warning_time = 0h |
118 | + | -o local_recipient_maps= |
119 | - | deliver_lock_attempts = 20 |
119 | + | -o relay_recipient_maps= |
120 | - | deliver_lock_delay = 1s |
120 | + | -o smtpd_restriction_classes= |
121 | - | destination_concurrency_feedback_debug = no |
121 | + | -o smtpd_delay_reject=no |
122 | - | detect_8bit_encoding_header = yes |
122 | + | -o smtpd_client_restrictions=permit_mynetworks,reject |
123 | - | disable_dns_lookups = no |
123 | + | -o smtpd_helo_restrictions= |
124 | - | disable_mime_input_processing = no |
124 | + | -o smtpd_sender_restrictions= |
125 | - | disable_mime_output_conversion = no |
125 | + | -o smtpd_recipient_restrictions=permit_mynetworks,reject |
126 | - | disable_verp_bounces = no |
126 | + | -o smtpd_data_restrictions=reject_unauth_pipelining |
127 | - | disable_vrfy_command = no |
127 | + | -o smtpd_end_of_data_restrictions= |
128 | - | dnsblog_reply_delay = 0s |
128 | + | -o mynetworks=127.0.0.0/8 |
129 | - | dnsblog_service_name = dnsblog |
129 | + | -o smtpd_error_sleep_time=0 |
130 | - | dont_remove = 0 |
130 | + | -o smtpd_soft_error_limit=1001 |
131 | - | double_bounce_sender = double-bounce |
131 | + | -o smtpd_hard_error_limit=1000 |
132 | - | duplicate_filter_limit = 1000 |
132 | + | -o smtpd_client_connection_count_limit=0 |
133 | - | empty_address_default_transport_maps_lookup_key = <> |
133 | + | -o smtpd_client_connection_rate_limit=0 |
134 | - | empty_address_recipient = MAILER-DAEMON |
134 | + | -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks,no_milters |
135 | - | empty_address_relayhost_maps_lookup_key = <> |
135 | + | |
136 | - | enable_long_queue_ids = no |
136 | + | |
137 | - | enable_original_recipient = yes |
137 | + | |
138 | - | error_delivery_slot_cost = $default_delivery_slot_cost |
138 | + | |
139 | - | error_delivery_slot_discount = $default_delivery_slot_discount |
139 | + | mail.log: |
140 | - | error_delivery_slot_loan = $default_delivery_slot_loan |
140 | + | |
141 | - | error_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit |
141 | + | Jul 31 08:19:49 b1037ca901c1 postfix/submission/smtpd[22107]: connect from localhost[127.0.0.1] |
142 | - | error_destination_concurrency_limit = $default_destination_concurrency_limit |
142 | + | Jul 31 08:19:49 b1037ca901c1 postfix/submission/smtpd[22107]: CCAF8D80222: client=localhost[127.0.0.1], sasl_method=LOGIN, [email protected] |
143 | - | error_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback |
143 | + | Jul 31 08:19:49 b1037ca901c1 postfix/cleanup[22109]: CCAF8D80222: replace: header Received: from box.example.com (localhost [127.0.0.1])??(using TLSv1 with cipher ECDHE-RSA-AES128-SHA (128/128 bits))??(No client certificate requested)??by box.example.com (Postfix) with ESMTPSA id CCAF8D802 from localhost[127.0.0.1]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<box.example.com>: Received: from authenticated-user (unknown [127.0.0.1])??(using TLSv1 with cipher ECDHE-RSA-AES128-SHA (128/128 bits))??(No client certificate requested)??by box.example.com (Postfix) with ESMTPSA id CCAF8D80222??for <[email protected]>; Fri, 31 Jul 2015 08:19:49 +0000 (UTC) |
144 | - | error_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback |
144 | + | Jul 31 08:19:49 b1037ca901c1 postfix/cleanup[22109]: CCAF8D80222: message-id=<[email protected]> |
145 | - | error_destination_rate_delay = $default_destination_rate_delay |
145 | + | Jul 31 08:19:49 b1037ca901c1 postfix/qmgr[20607]: CCAF8D80222: from=<[email protected]>, size=646, nrcpt=1 (queue active) |
146 | - | error_destination_recipient_limit = $default_destination_recipient_limit |
146 | + | Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: setting up TLS connection to smtp1.toexample.com[23.75.25.14]:25 |
147 | - | error_extra_recipient_limit = $default_extra_recipient_limit |
147 | + | Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: smtp1.toexample.com[23.75.25.14]:25: TLS cipher list "aNULL:-aNULL:ALL:+RC4:@STRENGTH" |
148 | - | error_initial_destination_concurrency = $initial_destination_concurrency |
148 | + | Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:before/connect initialization |
149 | - | error_minimum_delivery_slots = $default_minimum_delivery_slots |
149 | + | Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:unknown state |
150 | - | error_notice_recipient = postmaster |
150 | + | Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 read server hello A |
151 | - | error_recipient_limit = $default_recipient_limit |
151 | + | Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: smtp1.toexample.com[23.75.25.14]:25: depth=0 verify=0 subject=/C=LV/O=EXample/OU=ITC/CN=smtp1.toexample.com |
152 | - | error_recipient_refill_delay = $default_recipient_refill_delay |
152 | + | Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: smtp1.toexample.com[23.75.25.14]:25: depth=0 verify=0 subject=/C=LV/O=EXample/OU=ITC/CN=smtp1.toexample.com |
153 | - | error_recipient_refill_limit = $default_recipient_refill_limit |
153 | + | Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 read server certificate A |
154 | - | error_service_name = error |
154 | + | Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 read server certificate request A |
155 | - | execution_directory_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ |
155 | + | Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 read server done A |
156 | - | expand_owner_alias = no |
156 | + | Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 write client certificate A |
157 | - | export_environment = TZ MAIL_CONFIG LANG |
157 | + | Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 write client key exchange A |
158 | - | fallback_transport = |
158 | + | Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 write change cipher spec A |
159 | - | fallback_transport_maps = |
159 | + | Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 write finished A |
160 | - | fast_flush_domains = $relay_domains |
160 | + | Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 flush data |
161 | - | fast_flush_purge_time = 7d |
161 | + | Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 read finished A |
162 | - | fast_flush_refresh_time = 12h |
162 | + | Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: smtp1.toexample.com[23.75.25.14]:25: subject_CN=smtp1.toexample.com, issuer_CN=smtp1.toexample.com, fingerprint=F1:6E:B7:64:96:D3:DB:5C:F6:7D:37:89:BE:5D:E8:74, pkey_fingerprint=A8:F4:72:BA:D8:16:26:11:67:F5:10:4F:96:C3:CF:29 |
163 | - | fault_injection_code = 0 |
163 | + | Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: Untrusted TLS connection established to smtp1.toexample.com[23.75.25.14]:25: TLSv1 with cipher AES128-SHA (128/128 bits) |
164 | - | flush_service_name = flush |
164 | + | Jul 31 08:19:50 b1037ca901c1 postfix/submission/smtpd[22107]: disconnect from localhost[127.0.0.1] |
165 | - | fork_attempts = 5 |
165 | + | Jul 31 08:19:55 b1037ca901c1 postfix/smtp[22110]: CCAF8D80222: to=<[email protected]>, relay=smtp1.toexample.com[23.75.25.14]:25, delay=5.2, delays=0.08/0/0.07/5, dsn=4.3.0, status=deferred (bounce or trace service failure) |
166 | - | fork_delay = 1s |
166 | + | |
167 | - | forward_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ |
167 | + | === AND here goes bounce emails (one to user, one to postmaster) === |
168 | - | forward_path = $home/.forward${recipient_delimiter}${extension}, $home/.forward |
168 | + | |
169 | - | frozen_delivered_to = yes |
169 | + | Jul 31 08:20:05 b1037ca901c1 postfix/cleanup[22139]: 068B1D80225: message-id=<[email protected]> |
170 | - | hash_queue_depth = 1 |
170 | + | Jul 31 08:20:05 b1037ca901c1 postfix/bounce[22138]: CCAF8D80222: sender non-delivery notification: 068B1D80225 |
171 | - | hash_queue_names = deferred, defer |
171 | + | Jul 31 08:20:05 b1037ca901c1 postfix/qmgr[20607]: 068B1D80225: from=<>, size=2934, nrcpt=1 (queue active) |
172 | - | header_address_token_limit = 10240 |
172 | + | Jul 31 08:20:05 b1037ca901c1 postfix/cleanup[22139]: 090D2D80226: message-id=<[email protected]> |
173 | - | header_checks = |
173 | + | Jul 31 08:20:05 b1037ca901c1 postfix/bounce[22138]: CCAF8D80222: postmaster non-delivery notification: 090D2D80226 |
174 | - | header_size_limit = 102400 |
174 | + | Jul 31 08:20:05 b1037ca901c1 postfix/qmgr[20607]: 090D2D80226: from=<[email protected]>, size=2536, nrcpt=1 (queue active) |
175 | - | helpful_warnings = yes |
175 | + | Jul 31 08:20:05 b1037ca901c1 postfix/qmgr[20607]: CCAF8D80222: status=deferred (bounce failed) |
176 | - | home_mailbox = |
176 | + | Jul 31 08:20:05 b1037ca901c1 postfix/lmtp[22140]: 068B1D80225: to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10026, delay=0.03, delays=0.02/0/0/0.01, dsn=2.0.0, status=sent (250 2.0.0 <[email protected]> kdV1ArUvu1V+VgAADqs49A Saved) |
177 | - | hopcount_limit = 50 |
177 | + | Jul 31 08:20:05 b1037ca901c1 postfix/qmgr[20607]: 068B1D80225: removed |
178 | - | html_directory = no |
178 | + | Jul 31 08:20:05 b1037ca901c1 postfix/lmtp[22141]: 090D2D80226: to=<[email protected]>, orig_to=<postmaster>, relay=127.0.0.1[127.0.0.1]:10026, delay=0.01, delays=0/0/0/0.01, dsn=2.0.0, status=sent (250 2.0.0 <[email protected]> 4tOQArUvu1V/VgAADqs49A Saved) |
179 | - | ifmail_delivery_slot_cost = $default_delivery_slot_cost |
179 | + | Jul 31 08:20:05 b1037ca901c1 postfix/qmgr[20607]: 090D2D80226: removed |