View difference between Paste ID: u75w2qQ3 and jnBpAYXm
SHOW: | | - or go back to the newest paste.
1-
2bounce_notice_recipient = postmaster
1+
postconf -nf:
2-
access_map_defer_code = 450
2+
3-
access_map_reject_code = 554
3+
4-
address_verify_cache_cleanup_interval = 12h
4+
5-
address_verify_default_transport = $default_transport
5+
6-
address_verify_local_transport = $local_transport
6+
7-
address_verify_map = btree:$data_directory/verify_cache
7+
8-
address_verify_negative_cache = yes
8+
9-
address_verify_negative_expire_time = 3d
9+
10-
address_verify_negative_refresh_time = 3h
10+
11-
address_verify_poll_count = ${stress?1}${stress:3}
11+
12-
address_verify_poll_delay = 3s
12+
13-
address_verify_positive_expire_time = 31d
13+
14-
address_verify_positive_refresh_time = 7d
14+
15-
address_verify_relay_transport = $relay_transport
15+
16-
address_verify_relayhost = $relayhost
16+
17-
address_verify_sender = $double_bounce_sender
17+
18-
address_verify_sender_dependent_default_transport_maps = $sender_dependent_default_transport_maps
18+
19-
address_verify_sender_dependent_relayhost_maps = $sender_dependent_relayhost_maps
19+
20-
address_verify_sender_ttl = 0s
20+
21-
address_verify_service_name = verify
21+
22-
address_verify_transport_maps = $transport_maps
22+
23-
address_verify_virtual_transport = $virtual_transport
23+
24
smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt
25
smtp_tls_loglevel = 2
26-
allow_mail_to_commands = alias, forward
26+
27-
allow_mail_to_files = alias, forward
27+
28-
allow_min_user = no
28+
29-
allow_percent_hack = yes
29+
smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks,
30-
allow_untrusted_routing = no
30+
    reject_rbl_client zen.spamhaus.org, reject_unlisted_recipient,
31-
alternate_config_directories =
31+
    check_policy_service inet:127.0.0.1:10023
32-
always_add_missing_headers = no
32+
smtpd_relay_restrictions =
33-
always_bcc =
33+
    permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination
34-
anvil_rate_time_unit = 60s
34+
35-
anvil_status_update_time = 600s
35+
36-
append_at_myorigin = yes
36+
37
smtpd_sender_login_maps = pgsql:/etc/postfix/pgsql/sender-login-maps.cf
38-
application_event_drain_time = 100s
38+
smtpd_sender_restrictions = reject_non_fqdn_sender,
39-
authorized_flush_users = static:anyone
39+
    reject_unknown_sender_domain, reject_authenticated_sender_login_mismatch,
40-
authorized_mailq_users = static:anyone
40+
    reject_rhsbl_sender dbl.spamhaus.org
41-
authorized_submit_users = static:anyone
41+
42-
backwards_bounce_logfile_compatibility = yes
42+
smtpd_tls_cert_file = /etc/nginx/ssl/example.crt
43-
berkeley_db_create_buffer_size = 16777216
43+
44-
berkeley_db_read_buffer_size = 131072
44+
45-
best_mx_transport =
45+
46
smtpd_tls_key_file = /etc/nginx/ssl/example.key
47-
body_checks =
47+
48-
body_checks_size_limit = 51200
48+
49-
bounce_notice_recipient = postmaster
49+
50-
bounce_queue_lifetime = 5d
50+
51-
bounce_service_name = bounce
51+
52-
bounce_size_limit = 50000
52+
53-
bounce_template_file =
53+
54-
broken_sasl_auth_clients = no
54+
55-
bsmtp_delivery_slot_cost = $default_delivery_slot_cost
55+
56-
bsmtp_delivery_slot_discount = $default_delivery_slot_discount
56+
57-
bsmtp_delivery_slot_loan = $default_delivery_slot_loan
57+
58-
bsmtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
58+
59-
bsmtp_destination_concurrency_limit = $default_destination_concurrency_limit
59+
postconf -Mf
60-
bsmtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
60+
smtp       inet  n       -       -       -       -       smtpd
61-
bsmtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
61+
submission inet  n       -       -       -       -       smtpd
62-
bsmtp_destination_rate_delay = $default_destination_rate_delay
62+
63-
bsmtp_destination_recipient_limit = $default_destination_recipient_limit
63+
64-
bsmtp_extra_recipient_limit = $default_extra_recipient_limit
64+
65-
bsmtp_initial_destination_concurrency = $initial_destination_concurrency
65+
66-
bsmtp_minimum_delivery_slots = $default_minimum_delivery_slots
66+
    -o smtpd_tls_ciphers=high
67-
bsmtp_recipient_limit = $default_recipient_limit
67+
    -o smtpd_tls_exclude_ciphers=aNULL,DES,3DES,MD5,DES+MD5,RC4
68-
bsmtp_recipient_refill_delay = $default_recipient_refill_delay
68+
    -o smtpd_tls_mandatory_protocols=!SSLv2,!SSLv3
69-
bsmtp_recipient_refill_limit = $default_recipient_refill_limit
69+
70-
bsmtp_time_limit = $command_time_limit
70+
authclean  unix  n       -       -       -       0       cleanup
71-
canonical_classes = envelope_sender, envelope_recipient, header_sender, header_recipient
71+
72-
canonical_maps =
72+
pickup     unix  n       -       -       60      1       pickup
73-
cleanup_service_name = cleanup
73+
74-
command_directory = /usr/sbin
74+
    -o receive_override_options=no_header_body_checks
75-
command_execution_directory =
75+
cleanup    unix  n       -       -       -       0       cleanup
76-
command_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
76+
qmgr       unix  n       -       n       300     1       qmgr
77-
command_time_limit = 1000s
77+
tlsmgr     unix  -       -       -       1000?   1       tlsmgr
78
rewrite    unix  -       -       -       -       -       trivial-rewrite
79-
connection_cache_protocol_timeout = 5s
79+
bounce     unix  -       -       -       -       0       bounce
80-
connection_cache_service_name = scache
80+
defer      unix  -       -       -       -       0       bounce
81-
connection_cache_status_update_time = 600s
81+
trace      unix  -       -       -       -       0       bounce
82-
connection_cache_ttl_limit = 2s
82+
verify     unix  -       -       -       -       1       verify
83
flush      unix  n       -       -       1000?   0       flush
84-
cyrus_sasl_config_path =
84+
proxymap   unix  -       -       n       -       -       proxymap
85-
daemon_directory = /usr/lib/postfix
85+
proxywrite unix  -       -       n       -       1       proxymap
86-
daemon_table_open_error_is_fatal = no
86+
smtp       unix  -       -       -       -       -       smtp
87-
daemon_timeout = 18000s
87+
relay      unix  -       -       -       -       -       smtp
88-
data_directory = /var/lib/postfix
88+
showq      unix  n       -       -       -       -       showq
89-
debug_peer_level = 2
89+
error      unix  -       -       -       -       -       error
90-
debug_peer_list = 7s.lv
90+
retry      unix  -       -       -       -       -       error
91-
debugger_command =
91+
discard    unix  -       -       -       -       -       discard
92-
default_database_type = hash
92+
local      unix  -       n       n       -       -       local
93-
default_delivery_slot_cost = 5
93+
virtual    unix  -       n       n       -       -       virtual
94-
default_delivery_slot_discount = 50
94+
lmtp       unix  -       -       -       -       -       lmtp
95-
default_delivery_slot_loan = 3
95+
anvil      unix  -       -       -       -       1       anvil
96-
default_destination_concurrency_failed_cohort_limit = 1
96+
scache     unix  -       -       -       -       1       scache
97-
default_destination_concurrency_limit = 20
97+
maildrop   unix  -       n       n       -       -       pipe flags=DRhu
98-
default_destination_concurrency_negative_feedback = 1
98+
    user=vmail argv=/usr/bin/maildrop -d ${recipient}
99-
default_destination_concurrency_positive_feedback = 1
99+
uucp       unix  -       n       n       -       -       pipe flags=Fqhu
100-
default_destination_rate_delay = 0s
100+
    user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
101-
default_destination_recipient_limit = 50
101+
ifmail     unix  -       n       n       -       -       pipe flags=F user=ftn
102-
default_extra_recipient_limit = 1000
102+
    argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
103-
default_filter_nexthop =
103+
bsmtp      unix  -       n       n       -       -       pipe flags=Fq.
104-
default_minimum_delivery_slots = 3
104+
    user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
105-
default_privs = nobody
105+
scalemail-backend unix - n       n       -       2       pipe flags=R
106-
default_process_limit = 100
106+
    user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop}
107-
default_rbl_reply = $rbl_code Service unavailable; $rbl_class [$rbl_what] blocked using $rbl_domain${rbl_reason?; $rbl_reason}
107+
    ${user} ${extension}
108-
default_recipient_limit = 20000
108+
mailman    unix  -       n       n       -       -       pipe flags=FR
109-
default_recipient_refill_delay = 5s
109+
    user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py ${nexthop}
110-
default_recipient_refill_limit = 100
110+
    ${user}
111-
default_transport = smtp
111+
smtp-amavis unix -       -       -       -       2       smtp
112-
default_verp_delimiters = +=
112+
    -o smtp_data_done_timeout=1200
113-
defer_code = 450
113+
    -o smtp_send_xforward_command=yes
114-
defer_service_name = defer
114+
    -o disable_dns_lookups=yes
115-
defer_transports =
115+
    -o max_use=20
116-
delay_logging_resolution_limit = 2
116+
127.0.0.1:10025 inet n   -       -       -       -       smtpd
117-
delay_notice_recipient = postmaster
117+
118-
delay_warning_time = 0h
118+
    -o local_recipient_maps=
119-
deliver_lock_attempts = 20
119+
    -o relay_recipient_maps=
120-
deliver_lock_delay = 1s
120+
    -o smtpd_restriction_classes=
121-
destination_concurrency_feedback_debug = no
121+
    -o smtpd_delay_reject=no
122-
detect_8bit_encoding_header = yes
122+
    -o smtpd_client_restrictions=permit_mynetworks,reject
123-
disable_dns_lookups = no
123+
    -o smtpd_helo_restrictions=
124-
disable_mime_input_processing = no
124+
    -o smtpd_sender_restrictions=
125-
disable_mime_output_conversion = no
125+
    -o smtpd_recipient_restrictions=permit_mynetworks,reject
126-
disable_verp_bounces = no
126+
    -o smtpd_data_restrictions=reject_unauth_pipelining
127-
disable_vrfy_command = no
127+
    -o smtpd_end_of_data_restrictions=
128-
dnsblog_reply_delay = 0s
128+
    -o mynetworks=127.0.0.0/8
129-
dnsblog_service_name = dnsblog
129+
    -o smtpd_error_sleep_time=0
130-
dont_remove = 0
130+
    -o smtpd_soft_error_limit=1001
131-
double_bounce_sender = double-bounce
131+
    -o smtpd_hard_error_limit=1000
132-
duplicate_filter_limit = 1000
132+
    -o smtpd_client_connection_count_limit=0
133-
empty_address_default_transport_maps_lookup_key = <>
133+
    -o smtpd_client_connection_rate_limit=0
134-
empty_address_recipient = MAILER-DAEMON
134+
    -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks,no_milters
135-
empty_address_relayhost_maps_lookup_key = <>
135+
136-
enable_long_queue_ids = no
136+
137-
enable_original_recipient = yes
137+
138-
error_delivery_slot_cost = $default_delivery_slot_cost
138+
139-
error_delivery_slot_discount = $default_delivery_slot_discount
139+
mail.log:
140-
error_delivery_slot_loan = $default_delivery_slot_loan
140+
141-
error_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
141+
Jul 31 08:19:49 b1037ca901c1 postfix/submission/smtpd[22107]: connect from localhost[127.0.0.1]
142-
error_destination_concurrency_limit = $default_destination_concurrency_limit
142+
Jul 31 08:19:49 b1037ca901c1 postfix/submission/smtpd[22107]: CCAF8D80222: client=localhost[127.0.0.1], sasl_method=LOGIN, [email protected]
143-
error_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
143+
Jul 31 08:19:49 b1037ca901c1 postfix/cleanup[22109]: CCAF8D80222: replace: header Received: from box.example.com (localhost [127.0.0.1])??(using TLSv1 with cipher ECDHE-RSA-AES128-SHA (128/128 bits))??(No client certificate requested)??by box.example.com (Postfix) with ESMTPSA id CCAF8D802 from localhost[127.0.0.1]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<box.example.com>: Received: from authenticated-user (unknown [127.0.0.1])??(using TLSv1 with cipher ECDHE-RSA-AES128-SHA (128/128 bits))??(No client certificate requested)??by box.example.com (Postfix) with ESMTPSA id CCAF8D80222??for <[email protected]>; Fri, 31 Jul 2015 08:19:49 +0000 (UTC)
144-
error_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
144+
Jul 31 08:19:49 b1037ca901c1 postfix/cleanup[22109]: CCAF8D80222: message-id=<[email protected]>
145-
error_destination_rate_delay = $default_destination_rate_delay
145+
Jul 31 08:19:49 b1037ca901c1 postfix/qmgr[20607]: CCAF8D80222: from=<[email protected]>, size=646, nrcpt=1 (queue active)
146-
error_destination_recipient_limit = $default_destination_recipient_limit
146+
Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: setting up TLS connection to smtp1.toexample.com[23.75.25.14]:25
147-
error_extra_recipient_limit = $default_extra_recipient_limit
147+
Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: smtp1.toexample.com[23.75.25.14]:25: TLS cipher list "aNULL:-aNULL:ALL:+RC4:@STRENGTH"
148-
error_initial_destination_concurrency = $initial_destination_concurrency
148+
Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:before/connect initialization
149-
error_minimum_delivery_slots = $default_minimum_delivery_slots
149+
Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:unknown state
150-
error_notice_recipient = postmaster
150+
Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 read server hello A
151-
error_recipient_limit = $default_recipient_limit
151+
Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: smtp1.toexample.com[23.75.25.14]:25: depth=0 verify=0 subject=/C=LV/O=EXample/OU=ITC/CN=smtp1.toexample.com
152-
error_recipient_refill_delay = $default_recipient_refill_delay
152+
Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: smtp1.toexample.com[23.75.25.14]:25: depth=0 verify=0 subject=/C=LV/O=EXample/OU=ITC/CN=smtp1.toexample.com
153-
error_recipient_refill_limit = $default_recipient_refill_limit
153+
Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 read server certificate A
154-
error_service_name = error
154+
Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 read server certificate request A
155-
execution_directory_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
155+
Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 read server done A
156-
expand_owner_alias = no
156+
Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 write client certificate A
157-
export_environment = TZ MAIL_CONFIG LANG
157+
Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 write client key exchange A
158-
fallback_transport =
158+
Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 write change cipher spec A
159-
fallback_transport_maps =
159+
Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 write finished A
160-
fast_flush_domains = $relay_domains
160+
Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 flush data
161-
fast_flush_purge_time = 7d
161+
Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: SSL_connect:SSLv3 read finished A
162-
fast_flush_refresh_time = 12h
162+
Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: smtp1.toexample.com[23.75.25.14]:25: subject_CN=smtp1.toexample.com, issuer_CN=smtp1.toexample.com, fingerprint=F1:6E:B7:64:96:D3:DB:5C:F6:7D:37:89:BE:5D:E8:74, pkey_fingerprint=A8:F4:72:BA:D8:16:26:11:67:F5:10:4F:96:C3:CF:29
163-
fault_injection_code = 0
163+
Jul 31 08:19:49 b1037ca901c1 postfix/smtp[22110]: Untrusted TLS connection established to smtp1.toexample.com[23.75.25.14]:25: TLSv1 with cipher AES128-SHA (128/128 bits)
164-
flush_service_name = flush
164+
Jul 31 08:19:50 b1037ca901c1 postfix/submission/smtpd[22107]: disconnect from localhost[127.0.0.1]
165-
fork_attempts = 5
165+
Jul 31 08:19:55 b1037ca901c1 postfix/smtp[22110]: CCAF8D80222: to=<[email protected]>, relay=smtp1.toexample.com[23.75.25.14]:25, delay=5.2, delays=0.08/0/0.07/5, dsn=4.3.0, status=deferred (bounce or trace service failure)
166-
fork_delay = 1s
166+
167-
forward_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
167+
=== AND here goes bounce emails (one to user, one to postmaster) ===
168-
forward_path = $home/.forward${recipient_delimiter}${extension}, $home/.forward
168+
169-
frozen_delivered_to = yes
169+
Jul 31 08:20:05 b1037ca901c1 postfix/cleanup[22139]: 068B1D80225: message-id=<[email protected]>
170-
hash_queue_depth = 1
170+
Jul 31 08:20:05 b1037ca901c1 postfix/bounce[22138]: CCAF8D80222: sender non-delivery notification: 068B1D80225
171-
hash_queue_names = deferred, defer
171+
Jul 31 08:20:05 b1037ca901c1 postfix/qmgr[20607]: 068B1D80225: from=<>, size=2934, nrcpt=1 (queue active)
172-
header_address_token_limit = 10240
172+
Jul 31 08:20:05 b1037ca901c1 postfix/cleanup[22139]: 090D2D80226: message-id=<[email protected]>
173-
header_checks =
173+
Jul 31 08:20:05 b1037ca901c1 postfix/bounce[22138]: CCAF8D80222: postmaster non-delivery notification: 090D2D80226
174-
header_size_limit = 102400
174+
Jul 31 08:20:05 b1037ca901c1 postfix/qmgr[20607]: 090D2D80226: from=<[email protected]>, size=2536, nrcpt=1 (queue active)
175-
helpful_warnings = yes
175+
Jul 31 08:20:05 b1037ca901c1 postfix/qmgr[20607]: CCAF8D80222: status=deferred (bounce failed)
176-
home_mailbox =
176+
Jul 31 08:20:05 b1037ca901c1 postfix/lmtp[22140]: 068B1D80225: to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10026, delay=0.03, delays=0.02/0/0/0.01, dsn=2.0.0, status=sent (250 2.0.0 <[email protected]> kdV1ArUvu1V+VgAADqs49A Saved)
177-
hopcount_limit = 50
177+
Jul 31 08:20:05 b1037ca901c1 postfix/qmgr[20607]: 068B1D80225: removed
178-
html_directory = no
178+
Jul 31 08:20:05 b1037ca901c1 postfix/lmtp[22141]: 090D2D80226: to=<[email protected]>, orig_to=<postmaster>, relay=127.0.0.1[127.0.0.1]:10026, delay=0.01, delays=0/0/0/0.01, dsn=2.0.0, status=sent (250 2.0.0 <[email protected]> 4tOQArUvu1V/VgAADqs49A Saved)
179-
ifmail_delivery_slot_cost = $default_delivery_slot_cost
179+
Jul 31 08:20:05 b1037ca901c1 postfix/qmgr[20607]: 090D2D80226: removed