Advertisement
Guest User

Untitled

a guest
Nov 14th, 2016
102
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 44.21 KB | None | 0 0
  1. ✘ ⚡ root@mx  /etc/letsencrypt  postconf
  2. 2bounce_notice_recipient = postmaster
  3. access_map_defer_code = 450
  4. access_map_reject_code = 554
  5. address_verify_cache_cleanup_interval = 12h
  6. address_verify_default_transport = $default_transport
  7. address_verify_local_transport = $local_transport
  8. address_verify_map = btree:$data_directory/verify_cache
  9. address_verify_negative_cache = yes
  10. address_verify_negative_expire_time = 3d
  11. address_verify_negative_refresh_time = 3h
  12. address_verify_poll_count = ${stress?1}${stress:3}
  13. address_verify_poll_delay = 3s
  14. address_verify_positive_expire_time = 31d
  15. address_verify_positive_refresh_time = 7d
  16. address_verify_relay_transport = $relay_transport
  17. address_verify_relayhost = $relayhost
  18. address_verify_sender = $double_bounce_sender
  19. address_verify_sender_dependent_default_transport_maps = $sender_dependent_default_transport_maps
  20. address_verify_sender_dependent_relayhost_maps = $sender_dependent_relayhost_maps
  21. address_verify_sender_ttl = 0s
  22. address_verify_service_name = verify
  23. address_verify_transport_maps = $transport_maps
  24. address_verify_virtual_transport = $virtual_transport
  25. alias_database = hash:/etc/postfix/aliases
  26. alias_maps = hash:/etc/postfix/aliases
  27. allow_mail_to_commands = alias, forward
  28. allow_mail_to_files = alias, forward
  29. allow_min_user = no
  30. allow_percent_hack = no
  31. allow_untrusted_routing = no
  32. alternate_config_directories =
  33. always_add_missing_headers = no
  34. always_bcc =
  35. anvil_rate_time_unit = 60s
  36. anvil_status_update_time = 600s
  37. append_at_myorigin = yes
  38. append_dot_mydomain = yes
  39. application_event_drain_time = 100s
  40. authorized_flush_users = static:anyone
  41. authorized_mailq_users = static:anyone
  42. authorized_submit_users = static:anyone
  43. backwards_bounce_logfile_compatibility = yes
  44. berkeley_db_create_buffer_size = 16777216
  45. berkeley_db_read_buffer_size = 131072
  46. best_mx_transport =
  47. biff = no
  48. body_checks = pcre:/etc/postfix/body_checks.pcre
  49. body_checks_size_limit = 51200
  50. bounce_notice_recipient = postmaster
  51. bounce_queue_lifetime = 5d
  52. bounce_service_name = bounce
  53. bounce_size_limit = 50000
  54. bounce_template_file =
  55. broken_sasl_auth_clients = no
  56. bsmtp_delivery_slot_cost = $default_delivery_slot_cost
  57. bsmtp_delivery_slot_discount = $default_delivery_slot_discount
  58. bsmtp_delivery_slot_loan = $default_delivery_slot_loan
  59. bsmtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  60. bsmtp_destination_concurrency_limit = $default_destination_concurrency_limit
  61. bsmtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  62. bsmtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  63. bsmtp_destination_rate_delay = $default_destination_rate_delay
  64. bsmtp_destination_recipient_limit = $default_destination_recipient_limit
  65. bsmtp_extra_recipient_limit = $default_extra_recipient_limit
  66. bsmtp_initial_destination_concurrency = $initial_destination_concurrency
  67. bsmtp_minimum_delivery_slots = $default_minimum_delivery_slots
  68. bsmtp_recipient_limit = $default_recipient_limit
  69. bsmtp_recipient_refill_delay = $default_recipient_refill_delay
  70. bsmtp_recipient_refill_limit = $default_recipient_refill_limit
  71. bsmtp_time_limit = $command_time_limit
  72. canonical_classes = envelope_sender, envelope_recipient, header_sender, header_recipient
  73. canonical_maps =
  74. cleanup_service_name = cleanup
  75. command_directory = /usr/sbin
  76. command_execution_directory =
  77. command_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
  78. command_time_limit = 1000s
  79. config_directory = /etc/postfix
  80. connection_cache_protocol_timeout = 5s
  81. connection_cache_service_name = scache
  82. connection_cache_status_update_time = 600s
  83. connection_cache_ttl_limit = 2s
  84. content_filter = smtp-amavis:[127.0.0.1]:10024
  85. cyrus_sasl_config_path =
  86. daemon_directory = /usr/lib/postfix
  87. daemon_table_open_error_is_fatal = no
  88. daemon_timeout = 18000s
  89. data_directory = /var/lib/postfix
  90. debug_peer_level = 2
  91. debug_peer_list =
  92. debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd $daemon_directory/$process_name $process_id & sleep 5
  93. default_database_type = hash
  94. default_delivery_slot_cost = 5
  95. default_delivery_slot_discount = 50
  96. default_delivery_slot_loan = 3
  97. default_destination_concurrency_failed_cohort_limit = 1
  98. default_destination_concurrency_limit = 20
  99. default_destination_concurrency_negative_feedback = 1
  100. default_destination_concurrency_positive_feedback = 1
  101. default_destination_rate_delay = 0s
  102. default_destination_recipient_limit = 50
  103. default_extra_recipient_limit = 1000
  104. default_filter_nexthop =
  105. default_minimum_delivery_slots = 3
  106. default_privs = nobody
  107. default_process_limit = 100
  108. default_rbl_reply = $rbl_code Service unavailable; $rbl_class [$rbl_what] blocked using $rbl_domain${rbl_reason?; $rbl_reason}
  109. default_recipient_limit = 20000
  110. default_recipient_refill_delay = 5s
  111. default_recipient_refill_limit = 100
  112. default_transport = smtp
  113. default_verp_delimiters = +=
  114. defer_code = 450
  115. defer_service_name = defer
  116. defer_transports =
  117. delay_logging_resolution_limit = 2
  118. delay_notice_recipient = postmaster
  119. delay_warning_time = 0h
  120. deliver_lock_attempts = 20
  121. deliver_lock_delay = 1s
  122. destination_concurrency_feedback_debug = no
  123. detect_8bit_encoding_header = yes
  124. disable_dns_lookups = no
  125. disable_mime_input_processing = no
  126. disable_mime_output_conversion = no
  127. disable_verp_bounces = no
  128. disable_vrfy_command = yes
  129. dnsblog_reply_delay = 0s
  130. dnsblog_service_name = dnsblog
  131. dont_remove = 0
  132. double_bounce_sender = double-bounce
  133. dovecot_delivery_slot_cost = $default_delivery_slot_cost
  134. dovecot_delivery_slot_discount = $default_delivery_slot_discount
  135. dovecot_delivery_slot_loan = $default_delivery_slot_loan
  136. dovecot_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  137. dovecot_destination_concurrency_limit = $default_destination_concurrency_limit
  138. dovecot_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  139. dovecot_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  140. dovecot_destination_rate_delay = $default_destination_rate_delay
  141. dovecot_destination_recipient_limit = 1
  142. dovecot_extra_recipient_limit = $default_extra_recipient_limit
  143. dovecot_initial_destination_concurrency = $initial_destination_concurrency
  144. dovecot_minimum_delivery_slots = $default_minimum_delivery_slots
  145. dovecot_recipient_limit = $default_recipient_limit
  146. dovecot_recipient_refill_delay = $default_recipient_refill_delay
  147. dovecot_recipient_refill_limit = $default_recipient_refill_limit
  148. dovecot_time_limit = $command_time_limit
  149. duplicate_filter_limit = 1000
  150. empty_address_default_transport_maps_lookup_key = <>
  151. empty_address_recipient = MAILER-DAEMON
  152. empty_address_relayhost_maps_lookup_key = <>
  153. enable_long_queue_ids = no
  154. enable_original_recipient = no
  155. error_delivery_slot_cost = $default_delivery_slot_cost
  156. error_delivery_slot_discount = $default_delivery_slot_discount
  157. error_delivery_slot_loan = $default_delivery_slot_loan
  158. error_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  159. error_destination_concurrency_limit = $default_destination_concurrency_limit
  160. error_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  161. error_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  162. error_destination_rate_delay = $default_destination_rate_delay
  163. error_destination_recipient_limit = $default_destination_recipient_limit
  164. error_extra_recipient_limit = $default_extra_recipient_limit
  165. error_initial_destination_concurrency = $initial_destination_concurrency
  166. error_minimum_delivery_slots = $default_minimum_delivery_slots
  167. error_notice_recipient = postmaster
  168. error_recipient_limit = $default_recipient_limit
  169. error_recipient_refill_delay = $default_recipient_refill_delay
  170. error_recipient_refill_limit = $default_recipient_refill_limit
  171. error_service_name = error
  172. execution_directory_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
  173. expand_owner_alias = no
  174. export_environment = TZ MAIL_CONFIG LANG
  175. fallback_transport =
  176. fallback_transport_maps =
  177. fast_flush_domains = $relay_domains
  178. fast_flush_purge_time = 7d
  179. fast_flush_refresh_time = 12h
  180. fault_injection_code = 0
  181. flush_service_name = flush
  182. fork_attempts = 5
  183. fork_delay = 1s
  184. forward_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
  185. forward_path = $home/.forward${recipient_delimiter}${extension}, $home/.forward
  186. frozen_delivered_to = yes
  187. hash_queue_depth = 1
  188. hash_queue_names = deferred, defer
  189. header_address_token_limit = 10240
  190. header_checks = pcre:/etc/postfix/header_checks
  191. header_size_limit = 102400
  192. helpful_warnings = yes
  193. home_mailbox =
  194. hopcount_limit = 50
  195. html_directory = no
  196. ifmail_delivery_slot_cost = $default_delivery_slot_cost
  197. ifmail_delivery_slot_discount = $default_delivery_slot_discount
  198. ifmail_delivery_slot_loan = $default_delivery_slot_loan
  199. ifmail_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  200. ifmail_destination_concurrency_limit = $default_destination_concurrency_limit
  201. ifmail_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  202. ifmail_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  203. ifmail_destination_rate_delay = $default_destination_rate_delay
  204. ifmail_destination_recipient_limit = $default_destination_recipient_limit
  205. ifmail_extra_recipient_limit = $default_extra_recipient_limit
  206. ifmail_initial_destination_concurrency = $initial_destination_concurrency
  207. ifmail_minimum_delivery_slots = $default_minimum_delivery_slots
  208. ifmail_recipient_limit = $default_recipient_limit
  209. ifmail_recipient_refill_delay = $default_recipient_refill_delay
  210. ifmail_recipient_refill_limit = $default_recipient_refill_limit
  211. ifmail_time_limit = $command_time_limit
  212. ignore_mx_lookup_error = no
  213. import_environment = MAIL_CONFIG MAIL_DEBUG MAIL_LOGTAG TZ XAUTHORITY DISPLAY LANG=C
  214. in_flow_delay = 1s
  215. inet_interfaces = all
  216. inet_protocols = all
  217. initial_destination_concurrency = 5
  218. internal_mail_filter_classes =
  219. invalid_hostname_reject_code = 501
  220. ipc_idle = 5s
  221. ipc_timeout = 3600s
  222. ipc_ttl = 1000s
  223. line_length_limit = 2048
  224. lmdb_map_size = 16777216
  225. lmtp_address_preference = any
  226. lmtp_assume_final = no
  227. lmtp_bind_address =
  228. lmtp_bind_address6 =
  229. lmtp_body_checks =
  230. lmtp_cname_overrides_servername = no
  231. lmtp_connect_timeout = 0s
  232. lmtp_connection_cache_destinations =
  233. lmtp_connection_cache_on_demand = yes
  234. lmtp_connection_cache_time_limit = 2s
  235. lmtp_connection_reuse_count_limit = 0
  236. lmtp_connection_reuse_time_limit = 300s
  237. lmtp_data_done_timeout = 600s
  238. lmtp_data_init_timeout = 120s
  239. lmtp_data_xfer_timeout = 180s
  240. lmtp_defer_if_no_mx_address_found = no
  241. lmtp_delivery_slot_cost = $default_delivery_slot_cost
  242. lmtp_delivery_slot_discount = $default_delivery_slot_discount
  243. lmtp_delivery_slot_loan = $default_delivery_slot_loan
  244. lmtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  245. lmtp_destination_concurrency_limit = $default_destination_concurrency_limit
  246. lmtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  247. lmtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  248. lmtp_destination_rate_delay = $default_destination_rate_delay
  249. lmtp_destination_recipient_limit = $default_destination_recipient_limit
  250. lmtp_discard_lhlo_keyword_address_maps =
  251. lmtp_discard_lhlo_keywords =
  252. lmtp_dns_resolver_options =
  253. lmtp_dns_support_level =
  254. lmtp_enforce_tls = no
  255. lmtp_extra_recipient_limit = $default_extra_recipient_limit
  256. lmtp_generic_maps =
  257. lmtp_header_checks =
  258. lmtp_host_lookup = dns
  259. lmtp_initial_destination_concurrency = $initial_destination_concurrency
  260. lmtp_lhlo_name = $myhostname
  261. lmtp_lhlo_timeout = 300s
  262. lmtp_line_length_limit = 998
  263. lmtp_mail_timeout = 300s
  264. lmtp_mime_header_checks =
  265. lmtp_minimum_delivery_slots = $default_minimum_delivery_slots
  266. lmtp_mx_address_limit = 5
  267. lmtp_mx_session_limit = 2
  268. lmtp_nested_header_checks =
  269. lmtp_per_record_deadline = no
  270. lmtp_pix_workaround_delay_time = 10s
  271. lmtp_pix_workaround_maps =
  272. lmtp_pix_workaround_threshold_time = 500s
  273. lmtp_pix_workarounds = disable_esmtp,delay_dotcrlf
  274. lmtp_quit_timeout = 300s
  275. lmtp_quote_rfc821_envelope = yes
  276. lmtp_randomize_addresses = yes
  277. lmtp_rcpt_timeout = 300s
  278. lmtp_recipient_limit = $default_recipient_limit
  279. lmtp_recipient_refill_delay = $default_recipient_refill_delay
  280. lmtp_recipient_refill_limit = $default_recipient_refill_limit
  281. lmtp_reply_filter =
  282. lmtp_rset_timeout = 20s
  283. lmtp_sasl_auth_cache_name =
  284. lmtp_sasl_auth_cache_time = 90d
  285. lmtp_sasl_auth_enable = no
  286. lmtp_sasl_auth_soft_bounce = yes
  287. lmtp_sasl_mechanism_filter =
  288. lmtp_sasl_password_maps =
  289. lmtp_sasl_path =
  290. lmtp_sasl_security_options = noplaintext, noanonymous
  291. lmtp_sasl_tls_security_options = $lmtp_sasl_security_options
  292. lmtp_sasl_tls_verified_security_options = $lmtp_sasl_tls_security_options
  293. lmtp_sasl_type = cyrus
  294. lmtp_send_dummy_mail_auth = no
  295. lmtp_send_xforward_command = no
  296. lmtp_sender_dependent_authentication = no
  297. lmtp_skip_5xx_greeting = yes
  298. lmtp_skip_quit_response = no
  299. lmtp_starttls_timeout = 300s
  300. lmtp_tcp_port = 24
  301. lmtp_tls_CAfile =
  302. lmtp_tls_CApath =
  303. lmtp_tls_block_early_mail_reply = no
  304. lmtp_tls_cert_file =
  305. lmtp_tls_ciphers = export
  306. lmtp_tls_dcert_file =
  307. lmtp_tls_dkey_file = $lmtp_tls_dcert_file
  308. lmtp_tls_eccert_file =
  309. lmtp_tls_eckey_file = $lmtp_tls_eccert_file
  310. lmtp_tls_enforce_peername = yes
  311. lmtp_tls_exclude_ciphers =
  312. lmtp_tls_fingerprint_cert_match =
  313. lmtp_tls_fingerprint_digest = md5
  314. lmtp_tls_force_insecure_host_tlsa_lookup = no
  315. lmtp_tls_key_file = $lmtp_tls_cert_file
  316. lmtp_tls_loglevel = 0
  317. lmtp_tls_mandatory_ciphers = medium
  318. lmtp_tls_mandatory_exclude_ciphers =
  319. lmtp_tls_mandatory_protocols = !SSLv2 !SSLv3
  320. lmtp_tls_note_starttls_offer = no
  321. lmtp_tls_per_site =
  322. lmtp_tls_policy_maps =
  323. lmtp_tls_protocols = !SSLv2 !SSLv3
  324. lmtp_tls_scert_verifydepth = 9
  325. lmtp_tls_secure_cert_match = nexthop
  326. lmtp_tls_security_level =
  327. lmtp_tls_session_cache_database =
  328. lmtp_tls_session_cache_timeout = 3600s
  329. lmtp_tls_trust_anchor_file =
  330. lmtp_tls_verify_cert_match = hostname
  331. lmtp_use_tls = no
  332. lmtp_xforward_timeout = 300s
  333. local_command_shell =
  334. local_delivery_slot_cost = $default_delivery_slot_cost
  335. local_delivery_slot_discount = $default_delivery_slot_discount
  336. local_delivery_slot_loan = $default_delivery_slot_loan
  337. local_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  338. local_destination_concurrency_limit = 2
  339. local_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  340. local_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  341. local_destination_rate_delay = $default_destination_rate_delay
  342. local_destination_recipient_limit = 1
  343. local_extra_recipient_limit = $default_extra_recipient_limit
  344. local_header_rewrite_clients = permit_inet_interfaces
  345. local_initial_destination_concurrency = $initial_destination_concurrency
  346. local_minimum_delivery_slots = $default_minimum_delivery_slots
  347. local_recipient_limit = $default_recipient_limit
  348. local_recipient_maps = proxy:unix:passwd.byname $alias_maps
  349. local_recipient_refill_delay = $default_recipient_refill_delay
  350. local_recipient_refill_limit = $default_recipient_refill_limit
  351. local_transport = local:$myhostname
  352. luser_relay =
  353. mail_name = Postfix
  354. mail_owner = postfix
  355. mail_release_date = 20141019
  356. mail_spool_directory = /var/mail
  357. mail_version = 2.11.3
  358. mailbox_command =
  359. mailbox_command_maps =
  360. mailbox_delivery_lock = fcntl, dotlock
  361. mailbox_size_limit = 51200000
  362. mailbox_transport =
  363. mailbox_transport_maps =
  364. maildrop_delivery_slot_cost = $default_delivery_slot_cost
  365. maildrop_delivery_slot_discount = $default_delivery_slot_discount
  366. maildrop_delivery_slot_loan = $default_delivery_slot_loan
  367. maildrop_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  368. maildrop_destination_concurrency_limit = $default_destination_concurrency_limit
  369. maildrop_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  370. maildrop_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  371. maildrop_destination_rate_delay = $default_destination_rate_delay
  372. maildrop_destination_recipient_limit = $default_destination_recipient_limit
  373. maildrop_extra_recipient_limit = $default_extra_recipient_limit
  374. maildrop_initial_destination_concurrency = $initial_destination_concurrency
  375. maildrop_minimum_delivery_slots = $default_minimum_delivery_slots
  376. maildrop_recipient_limit = $default_recipient_limit
  377. maildrop_recipient_refill_delay = $default_recipient_refill_delay
  378. maildrop_recipient_refill_limit = $default_recipient_refill_limit
  379. maildrop_time_limit = $command_time_limit
  380. mailman_delivery_slot_cost = $default_delivery_slot_cost
  381. mailman_delivery_slot_discount = $default_delivery_slot_discount
  382. mailman_delivery_slot_loan = $default_delivery_slot_loan
  383. mailman_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  384. mailman_destination_concurrency_limit = $default_destination_concurrency_limit
  385. mailman_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  386. mailman_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  387. mailman_destination_rate_delay = $default_destination_rate_delay
  388. mailman_destination_recipient_limit = $default_destination_recipient_limit
  389. mailman_extra_recipient_limit = $default_extra_recipient_limit
  390. mailman_initial_destination_concurrency = $initial_destination_concurrency
  391. mailman_minimum_delivery_slots = $default_minimum_delivery_slots
  392. mailman_recipient_limit = $default_recipient_limit
  393. mailman_recipient_refill_delay = $default_recipient_refill_delay
  394. mailman_recipient_refill_limit = $default_recipient_refill_limit
  395. mailman_time_limit = $command_time_limit
  396. mailq_path = /usr/bin/mailq
  397. manpage_directory = /usr/share/man
  398. maps_rbl_domains =
  399. maps_rbl_reject_code = 554
  400. masquerade_classes = envelope_sender, header_sender, header_recipient
  401. masquerade_domains =
  402. masquerade_exceptions =
  403. master_service_disable =
  404. max_idle = 100s
  405. max_use = 100
  406. maximal_backoff_time = 4000s
  407. maximal_queue_lifetime = 5d
  408. message_reject_characters =
  409. message_size_limit = 15728640
  410. message_strip_characters =
  411. milter_command_timeout = 30s
  412. milter_connect_macros = j {daemon_name} v
  413. milter_connect_timeout = 30s
  414. milter_content_timeout = 300s
  415. milter_data_macros = i
  416. milter_default_action = tempfail
  417. milter_end_of_data_macros = i
  418. milter_end_of_header_macros = i
  419. milter_header_checks =
  420. milter_helo_macros = {tls_version} {cipher} {cipher_bits} {cert_subject} {cert_issuer}
  421. milter_macro_daemon_name = $myhostname
  422. milter_macro_v = $mail_name $mail_version
  423. milter_mail_macros = i {auth_type} {auth_authen} {auth_author} {mail_addr} {mail_host} {mail_mailer}
  424. milter_protocol = 6
  425. milter_rcpt_macros = i {rcpt_addr} {rcpt_host} {rcpt_mailer}
  426. milter_unknown_command_macros =
  427. mime_boundary_length_limit = 2048
  428. mime_header_checks = $header_checks
  429. mime_nesting_limit = 100
  430. minimal_backoff_time = 300s
  431. multi_instance_directories =
  432. multi_instance_enable = no
  433. multi_instance_group =
  434. multi_instance_name =
  435. multi_instance_wrapper =
  436. multi_recipient_bounce_reject_code = 550
  437. mydestination = $myhostname, localhost, localhost.localdomain
  438. mydomain = mx.d0ssmann.fr
  439. myhostname = mx.d0ssmann.fr
  440. mynetworks = 127.0.0.1
  441. mynetworks_style = subnet
  442. myorigin = mx.d0ssmann.fr
  443. nested_header_checks = $header_checks
  444. newaliases_path = /usr/bin/newaliases
  445. non_fqdn_reject_code = 504
  446. non_smtpd_milters =
  447. notify_classes = resource, software
  448. owner_request_special = yes
  449. parent_domain_matches_subdomains = debug_peer_list,fast_flush_domains,mynetworks,permit_mx_backup_networks,qmqpd_authorized_clients,relay_domains,smtpd_access_maps
  450. permit_mx_backup_networks =
  451. pickup_service_name = pickup
  452. plaintext_reject_code = 450
  453. postmulti_control_commands = reload flush
  454. postmulti_start_commands = start
  455. postmulti_stop_commands = stop abort drain quick-stop
  456. postscreen_access_list = permit_mynetworks, cidr:/etc/postfix/postscreen_access.cidr
  457. postscreen_bare_newline_action = ignore
  458. postscreen_bare_newline_enable = no
  459. postscreen_bare_newline_ttl = 30d
  460. postscreen_blacklist_action = enforce
  461. postscreen_cache_cleanup_interval = 12h
  462. postscreen_cache_map = btree:$data_directory/postscreen_cache
  463. postscreen_cache_retention_time = 7d
  464. postscreen_client_connection_count_limit = $smtpd_client_connection_count_limit
  465. postscreen_command_count_limit = 20
  466. postscreen_command_filter =
  467. postscreen_command_time_limit = ${stress?10}${stress:300}s
  468. postscreen_disable_vrfy_command = $disable_vrfy_command
  469. postscreen_discard_ehlo_keyword_address_maps = $smtpd_discard_ehlo_keyword_address_maps
  470. postscreen_discard_ehlo_keywords = $smtpd_discard_ehlo_keywords
  471. postscreen_dnsbl_action = enforce
  472. postscreen_dnsbl_reply_map = texthash:/etc/postfix/postscreen_dnsbl_reply
  473. postscreen_dnsbl_sites = zen.spamhaus.org*3 b.barracudacentral.org*2
  474. postscreen_dnsbl_threshold = 2
  475. postscreen_dnsbl_ttl = 1h
  476. postscreen_dnsbl_whitelist_threshold = -2
  477. postscreen_enforce_tls = $smtpd_enforce_tls
  478. postscreen_expansion_filter = $smtpd_expansion_filter
  479. postscreen_forbidden_commands = $smtpd_forbidden_commands
  480. postscreen_greet_action = enforce
  481. postscreen_greet_banner = $smtpd_banner
  482. postscreen_greet_ttl = 1d
  483. postscreen_greet_wait = ${stress?2}${stress:6}s
  484. postscreen_helo_required = $smtpd_helo_required
  485. postscreen_non_smtp_command_action = drop
  486. postscreen_non_smtp_command_enable = no
  487. postscreen_non_smtp_command_ttl = 30d
  488. postscreen_pipelining_action = enforce
  489. postscreen_pipelining_enable = no
  490. postscreen_pipelining_ttl = 30d
  491. postscreen_post_queue_limit = $default_process_limit
  492. postscreen_pre_queue_limit = $default_process_limit
  493. postscreen_reject_footer = $smtpd_reject_footer
  494. postscreen_tls_security_level = $smtpd_tls_security_level
  495. postscreen_upstream_proxy_protocol =
  496. postscreen_upstream_proxy_timeout = 5s
  497. postscreen_use_tls = $smtpd_use_tls
  498. postscreen_watchdog_timeout = 10s
  499. postscreen_whitelist_interfaces = static:all
  500. prepend_delivered_header = command, file, forward
  501. process_id = 16053
  502. process_id_directory = pid
  503. process_name = postconf
  504. propagate_unmatched_extensions = canonical, virtual
  505. proxy_interfaces =
  506. proxy_read_maps = $canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps
  507. proxy_write_maps = $smtp_sasl_auth_cache_name $lmtp_sasl_auth_cache_name $address_verify_map $postscreen_cache_map
  508. proxymap_service_name = proxymap
  509. proxywrite_service_name = proxywrite
  510. qmgr_clog_warn_time = 300s
  511. qmgr_daemon_timeout = 1000s
  512. qmgr_fudge_factor = 100
  513. qmgr_ipc_timeout = 60s
  514. qmgr_message_active_limit = 20000
  515. qmgr_message_recipient_limit = 20000
  516. qmgr_message_recipient_minimum = 10
  517. qmqpd_authorized_clients =
  518. qmqpd_client_port_logging = no
  519. qmqpd_error_delay = 1s
  520. qmqpd_timeout = 300s
  521. queue_directory = /var/spool/postfix
  522. queue_file_attribute_count_limit = 100
  523. queue_minfree = 0
  524. queue_run_delay = 300s
  525. queue_service_name = qmgr
  526. rbl_reply_maps =
  527. readme_directory = /usr/share/doc/postfix
  528. receive_override_options =
  529. recipient_bcc_maps = proxy:mysql:/etc/postfix/mysql/recipient_bcc_maps_user.cf proxy:mysql:/etc/postfix/mysql/recipient_bcc_maps_domain.cf
  530. recipient_canonical_classes = envelope_recipient, header_recipient
  531. recipient_canonical_maps =
  532. recipient_delimiter = +
  533. reject_code = 554
  534. reject_tempfail_action = defer_if_permit
  535. relay_clientcerts =
  536. relay_delivery_slot_cost = $default_delivery_slot_cost
  537. relay_delivery_slot_discount = $default_delivery_slot_discount
  538. relay_delivery_slot_loan = $default_delivery_slot_loan
  539. relay_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  540. relay_destination_concurrency_limit = $default_destination_concurrency_limit
  541. relay_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  542. relay_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  543. relay_destination_rate_delay = $default_destination_rate_delay
  544. relay_destination_recipient_limit = $default_destination_recipient_limit
  545. relay_domains = $mydestination proxy:mysql:/etc/postfix/mysql/relay_domains.cf
  546. relay_domains_reject_code = 554
  547. relay_extra_recipient_limit = $default_extra_recipient_limit
  548. relay_initial_destination_concurrency = $initial_destination_concurrency
  549. relay_minimum_delivery_slots = $default_minimum_delivery_slots
  550. relay_recipient_limit = $default_recipient_limit
  551. relay_recipient_maps =
  552. relay_recipient_refill_delay = $default_recipient_refill_delay
  553. relay_recipient_refill_limit = $default_recipient_refill_limit
  554. relay_transport = relay
  555. relayhost =
  556. relocated_maps =
  557. remote_header_rewrite_domain =
  558. require_home_directory = no
  559. reset_owner_alias = no
  560. resolve_dequoted_address = yes
  561. resolve_null_domain = no
  562. resolve_numeric_domain = no
  563. retry_delivery_slot_cost = $default_delivery_slot_cost
  564. retry_delivery_slot_discount = $default_delivery_slot_discount
  565. retry_delivery_slot_loan = $default_delivery_slot_loan
  566. retry_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  567. retry_destination_concurrency_limit = $default_destination_concurrency_limit
  568. retry_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  569. retry_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  570. retry_destination_rate_delay = $default_destination_rate_delay
  571. retry_destination_recipient_limit = $default_destination_recipient_limit
  572. retry_extra_recipient_limit = $default_extra_recipient_limit
  573. retry_initial_destination_concurrency = $initial_destination_concurrency
  574. retry_minimum_delivery_slots = $default_minimum_delivery_slots
  575. retry_recipient_limit = $default_recipient_limit
  576. retry_recipient_refill_delay = $default_recipient_refill_delay
  577. retry_recipient_refill_limit = $default_recipient_refill_limit
  578. rewrite_service_name = rewrite
  579. sample_directory = /usr/share/doc/postfix/examples
  580. scalemail-backend_delivery_slot_cost = $default_delivery_slot_cost
  581. scalemail-backend_delivery_slot_discount = $default_delivery_slot_discount
  582. scalemail-backend_delivery_slot_loan = $default_delivery_slot_loan
  583. scalemail-backend_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  584. scalemail-backend_destination_concurrency_limit = $default_destination_concurrency_limit
  585. scalemail-backend_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  586. scalemail-backend_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  587. scalemail-backend_destination_rate_delay = $default_destination_rate_delay
  588. scalemail-backend_destination_recipient_limit = $default_destination_recipient_limit
  589. scalemail-backend_extra_recipient_limit = $default_extra_recipient_limit
  590. scalemail-backend_initial_destination_concurrency = $initial_destination_concurrency
  591. scalemail-backend_minimum_delivery_slots = $default_minimum_delivery_slots
  592. scalemail-backend_recipient_limit = $default_recipient_limit
  593. scalemail-backend_recipient_refill_delay = $default_recipient_refill_delay
  594. scalemail-backend_recipient_refill_limit = $default_recipient_refill_limit
  595. scalemail-backend_time_limit = $command_time_limit
  596. send_cyrus_sasl_authzid = no
  597. sender_bcc_maps = proxy:mysql:/etc/postfix/mysql/sender_bcc_maps_user.cf proxy:mysql:/etc/postfix/mysql/sender_bcc_maps_domain.cf
  598. sender_canonical_classes = envelope_sender, header_sender
  599. sender_canonical_maps =
  600. sender_dependent_default_transport_maps =
  601. sender_dependent_relayhost_maps = proxy:mysql:/etc/postfix/mysql/sender_dependent_relayhost_maps.cf
  602. sendmail_fix_line_endings = always
  603. sendmail_path = /usr/sbin/sendmail
  604. service_throttle_time = 60s
  605. setgid_group = postdrop
  606. show_user_unknown_table_name = yes
  607. showq_service_name = showq
  608. smtp-amavis_delivery_slot_cost = $default_delivery_slot_cost
  609. smtp-amavis_delivery_slot_discount = $default_delivery_slot_discount
  610. smtp-amavis_delivery_slot_loan = $default_delivery_slot_loan
  611. smtp-amavis_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  612. smtp-amavis_destination_concurrency_limit = $default_destination_concurrency_limit
  613. smtp-amavis_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  614. smtp-amavis_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  615. smtp-amavis_destination_rate_delay = $default_destination_rate_delay
  616. smtp-amavis_destination_recipient_limit = 1
  617. smtp-amavis_extra_recipient_limit = $default_extra_recipient_limit
  618. smtp-amavis_initial_destination_concurrency = $initial_destination_concurrency
  619. smtp-amavis_minimum_delivery_slots = $default_minimum_delivery_slots
  620. smtp-amavis_recipient_limit = $default_recipient_limit
  621. smtp-amavis_recipient_refill_delay = $default_recipient_refill_delay
  622. smtp-amavis_recipient_refill_limit = $default_recipient_refill_limit
  623. smtp_address_preference = any
  624. smtp_always_send_ehlo = yes
  625. smtp_bind_address =
  626. smtp_bind_address6 =
  627. smtp_body_checks =
  628. smtp_cname_overrides_servername = no
  629. smtp_connect_timeout = 30s
  630. smtp_connection_cache_destinations =
  631. smtp_connection_cache_on_demand = yes
  632. smtp_connection_cache_time_limit = 2s
  633. smtp_connection_reuse_count_limit = 0
  634. smtp_connection_reuse_time_limit = 300s
  635. smtp_data_done_timeout = 600s
  636. smtp_data_init_timeout = 120s
  637. smtp_data_xfer_timeout = 180s
  638. smtp_defer_if_no_mx_address_found = no
  639. smtp_delivery_slot_cost = $default_delivery_slot_cost
  640. smtp_delivery_slot_discount = $default_delivery_slot_discount
  641. smtp_delivery_slot_loan = $default_delivery_slot_loan
  642. smtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  643. smtp_destination_concurrency_limit = $default_destination_concurrency_limit
  644. smtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  645. smtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  646. smtp_destination_rate_delay = $default_destination_rate_delay
  647. smtp_destination_recipient_limit = $default_destination_recipient_limit
  648. smtp_discard_ehlo_keyword_address_maps =
  649. smtp_discard_ehlo_keywords =
  650. smtp_dns_resolver_options =
  651. smtp_dns_support_level =
  652. smtp_enforce_tls = no
  653. smtp_extra_recipient_limit = $default_extra_recipient_limit
  654. smtp_fallback_relay = $fallback_relay
  655. smtp_generic_maps =
  656. smtp_header_checks =
  657. smtp_helo_name = $myhostname
  658. smtp_helo_timeout = 300s
  659. smtp_host_lookup = dns
  660. smtp_initial_destination_concurrency = $initial_destination_concurrency
  661. smtp_line_length_limit = 998
  662. smtp_mail_timeout = 300s
  663. smtp_mime_header_checks =
  664. smtp_minimum_delivery_slots = $default_minimum_delivery_slots
  665. smtp_mx_address_limit = 5
  666. smtp_mx_session_limit = 2
  667. smtp_nested_header_checks =
  668. smtp_never_send_ehlo = no
  669. smtp_per_record_deadline = no
  670. smtp_pix_workaround_delay_time = 10s
  671. smtp_pix_workaround_maps =
  672. smtp_pix_workaround_threshold_time = 500s
  673. smtp_pix_workarounds = disable_esmtp,delay_dotcrlf
  674. smtp_quit_timeout = 300s
  675. smtp_quote_rfc821_envelope = yes
  676. smtp_randomize_addresses = yes
  677. smtp_rcpt_timeout = 300s
  678. smtp_recipient_limit = $default_recipient_limit
  679. smtp_recipient_refill_delay = $default_recipient_refill_delay
  680. smtp_recipient_refill_limit = $default_recipient_refill_limit
  681. smtp_reply_filter =
  682. smtp_rset_timeout = 20s
  683. smtp_sasl_auth_cache_name =
  684. smtp_sasl_auth_cache_time = 90d
  685. smtp_sasl_auth_enable = no
  686. smtp_sasl_auth_soft_bounce = yes
  687. smtp_sasl_mechanism_filter =
  688. smtp_sasl_password_maps =
  689. smtp_sasl_path =
  690. smtp_sasl_security_options = noplaintext, noanonymous
  691. smtp_sasl_tls_security_options = $smtp_sasl_security_options
  692. smtp_sasl_tls_verified_security_options = $smtp_sasl_tls_security_options
  693. smtp_sasl_type = cyrus
  694. smtp_send_dummy_mail_auth = no
  695. smtp_send_xforward_command = no
  696. smtp_sender_dependent_authentication = no
  697. smtp_skip_5xx_greeting = yes
  698. smtp_skip_quit_response = yes
  699. smtp_starttls_timeout = 300s
  700. smtp_tls_CAfile = $smtpd_tls_CAfile
  701. smtp_tls_CApath =
  702. smtp_tls_block_early_mail_reply = no
  703. smtp_tls_cert_file =
  704. smtp_tls_ciphers = export
  705. smtp_tls_dcert_file =
  706. smtp_tls_dkey_file = $smtp_tls_dcert_file
  707. smtp_tls_eccert_file =
  708. smtp_tls_eckey_file = $smtp_tls_eccert_file
  709. smtp_tls_enforce_peername = yes
  710. smtp_tls_exclude_ciphers =
  711. smtp_tls_fingerprint_cert_match =
  712. smtp_tls_fingerprint_digest = md5
  713. smtp_tls_force_insecure_host_tlsa_lookup = no
  714. smtp_tls_key_file = $smtp_tls_cert_file
  715. smtp_tls_loglevel = 1
  716. smtp_tls_mandatory_ciphers = medium
  717. smtp_tls_mandatory_exclude_ciphers =
  718. smtp_tls_mandatory_protocols = !SSLv2 !SSLv3
  719. smtp_tls_note_starttls_offer = yes
  720. smtp_tls_per_site =
  721. smtp_tls_policy_maps =
  722. smtp_tls_protocols = !SSLv2 !SSLv3
  723. smtp_tls_scert_verifydepth = 9
  724. smtp_tls_secure_cert_match = nexthop, dot-nexthop
  725. smtp_tls_security_level = may
  726. smtp_tls_session_cache_database =
  727. smtp_tls_session_cache_timeout = 3600s
  728. smtp_tls_trust_anchor_file =
  729. smtp_tls_verify_cert_match = hostname
  730. smtp_use_tls = no
  731. smtp_xforward_timeout = 300s
  732. smtpd_authorized_verp_clients = $authorized_verp_clients
  733. smtpd_authorized_xclient_hosts =
  734. smtpd_authorized_xforward_hosts =
  735. smtpd_banner = $myhostname ESMTP $mail_name
  736. smtpd_client_connection_count_limit = 50
  737. smtpd_client_connection_rate_limit = 0
  738. smtpd_client_event_limit_exceptions = ${smtpd_client_connection_limit_exceptions:$mynetworks}
  739. smtpd_client_message_rate_limit = 0
  740. smtpd_client_new_tls_session_rate_limit = 0
  741. smtpd_client_port_logging = no
  742. smtpd_client_recipient_rate_limit = 0
  743. smtpd_client_restrictions =
  744. smtpd_command_filter =
  745. smtpd_data_restrictions = reject_unauth_pipelining
  746. smtpd_delay_open_until_valid_rcpt = yes
  747. smtpd_delay_reject = yes
  748. smtpd_discard_ehlo_keyword_address_maps =
  749. smtpd_discard_ehlo_keywords =
  750. smtpd_end_of_data_restrictions = check_policy_service inet:127.0.0.1:7777
  751. smtpd_enforce_tls = no
  752. smtpd_error_sleep_time = 1s
  753. smtpd_etrn_restrictions =
  754. smtpd_expansion_filter = \t\40!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~
  755. smtpd_forbidden_commands = CONNECT GET POST
  756. smtpd_hard_error_limit = ${stress?1}${stress:20}
  757. smtpd_helo_required = yes
  758. smtpd_helo_restrictions = permit_mynetworks permit_sasl_authenticated reject_non_fqdn_helo_hostname reject_invalid_helo_hostname check_helo_access pcre:/etc/postfix/helo_access.pcre
  759. smtpd_history_flush_threshold = 100
  760. smtpd_junk_command_limit = ${stress?1}${stress:100}
  761. smtpd_log_access_permit_actions =
  762. smtpd_milters =
  763. smtpd_noop_commands =
  764. smtpd_null_access_lookup_key = <>
  765. smtpd_peername_lookup = yes
  766. smtpd_per_record_deadline = ${stress?yes}${stress:no}
  767. smtpd_policy_service_max_idle = 300s
  768. smtpd_policy_service_max_ttl = 1000s
  769. smtpd_policy_service_timeout = 100s
  770. smtpd_proxy_ehlo = $myhostname
  771. smtpd_proxy_filter =
  772. smtpd_proxy_options =
  773. smtpd_proxy_timeout = 100s
  774. smtpd_recipient_limit = 1000
  775. smtpd_recipient_overshoot_limit = 1000
  776. smtpd_recipient_restrictions = reject_unknown_recipient_domain reject_non_fqdn_recipient reject_unlisted_recipient check_policy_service inet:127.0.0.1:7777 permit_mynetworks permit_sasl_authenticated reject_unauth_destination
  777. smtpd_reject_footer =
  778. smtpd_reject_unlisted_recipient = yes
  779. smtpd_reject_unlisted_sender = yes
  780. smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, defer_unauth_destination
  781. smtpd_restriction_classes =
  782. smtpd_sasl_auth_enable = no
  783. smtpd_sasl_authenticated_header = no
  784. smtpd_sasl_exceptions_networks =
  785. smtpd_sasl_local_domain =
  786. smtpd_sasl_path = private/dovecot-auth
  787. smtpd_sasl_security_options = noanonymous
  788. smtpd_sasl_service = smtp
  789. smtpd_sasl_tls_security_options = $smtpd_sasl_security_options
  790. smtpd_sasl_type = dovecot
  791. smtpd_sender_login_maps = proxy:mysql:/etc/postfix/mysql/sender_login_maps.cf
  792. smtpd_sender_restrictions = reject_unknown_sender_domain reject_non_fqdn_sender reject_unlisted_sender permit_mynetworks permit_sasl_authenticated check_sender_access pcre:/etc/postfix/sender_access.pcre
  793. smtpd_service_name = smtpd
  794. smtpd_soft_error_limit = 10
  795. smtpd_starttls_timeout = ${stress?10}${stress:300}s
  796. smtpd_timeout = ${stress?10}${stress:300}s
  797. smtpd_tls_CAfile = /etc/ssl/certs/iRedMail.crt
  798. smtpd_tls_CApath =
  799. smtpd_tls_always_issue_session_ids = yes
  800. smtpd_tls_ask_ccert = no
  801. smtpd_tls_auth_only = no
  802. smtpd_tls_ccert_verifydepth = 9
  803. smtpd_tls_cert_file = /etc/ssl/certs/iRedMail.crt
  804. smtpd_tls_ciphers = export
  805. smtpd_tls_dcert_file =
  806. smtpd_tls_dh1024_param_file = /etc/ssl/dh2048_param.pem
  807. smtpd_tls_dh512_param_file = /etc/ssl/dh512_param.pem
  808. smtpd_tls_dkey_file = $smtpd_tls_dcert_file
  809. smtpd_tls_eccert_file =
  810. smtpd_tls_eckey_file = $smtpd_tls_eccert_file
  811. smtpd_tls_eecdh_grade = strong
  812. smtpd_tls_exclude_ciphers = aNULL, eNULL, EXPORT, DES, RC4, MD5, PSK, aECDH, EDH-DSS-DES-CBC3-SHA, EDH-RSA-DES-CDC3-SHA, KRB5-DE5, CBC3-SHA
  813. smtpd_tls_fingerprint_digest = md5
  814. smtpd_tls_key_file = /etc/ssl/private/iRedMail.key
  815. smtpd_tls_loglevel = 1
  816. smtpd_tls_mandatory_ciphers = medium
  817. smtpd_tls_mandatory_exclude_ciphers =
  818. smtpd_tls_mandatory_protocols = !SSLv2 !SSLv3
  819. smtpd_tls_protocols = !SSLv2 !SSLv3
  820. smtpd_tls_received_header = no
  821. smtpd_tls_req_ccert = no
  822. smtpd_tls_security_level = may
  823. smtpd_tls_session_cache_database =
  824. smtpd_tls_session_cache_timeout = 3600s
  825. smtpd_tls_wrappermode = no
  826. smtpd_upstream_proxy_protocol =
  827. smtpd_upstream_proxy_timeout = 5s
  828. smtpd_use_tls = no
  829. soft_bounce = no
  830. stale_lock_time = 500s
  831. stress =
  832. strict_7bit_headers = no
  833. strict_8bitmime = no
  834. strict_8bitmime_body = no
  835. strict_mailbox_ownership = yes
  836. strict_mime_encoding_domain = no
  837. strict_rfc821_envelopes = no
  838. sun_mailtool_compatibility = no
  839. swap_bangpath = no
  840. syslog_facility = mail
  841. syslog_name = ${multi_instance_name:postfix}${multi_instance_name?$multi_instance_name}
  842. tcp_windowsize = 0
  843. tls_append_default_CA = no
  844. tls_daemon_random_bytes = 32
  845. tls_dane_digest_agility = on
  846. tls_dane_digests = sha512 sha256
  847. tls_dane_trust_anchor_digest_enable = yes
  848. tls_disable_workarounds =
  849. tls_eecdh_strong_curve = prime256v1
  850. tls_eecdh_ultra_curve = secp384r1
  851. tls_export_cipherlist = aNULL:-aNULL:ALL:+RC4:@STRENGTH
  852. tls_high_cipherlist = aNULL:-aNULL:ALL:!EXPORT:!LOW:!MEDIUM:+RC4:@STRENGTH
  853. tls_legacy_public_key_fingerprints = no
  854. tls_low_cipherlist = aNULL:-aNULL:ALL:!EXPORT:+RC4:@STRENGTH
  855. tls_medium_cipherlist = aNULL:-aNULL:ALL:!EXPORT:!LOW:+RC4:@STRENGTH
  856. tls_null_cipherlist = eNULL:!aNULL
  857. tls_preempt_cipherlist = no
  858. tls_random_bytes = 32
  859. tls_random_exchange_name = ${data_directory}/prng_exch
  860. tls_random_prng_update_period = 3600s
  861. tls_random_reseed_period = 3600s
  862. tls_random_source = dev:/dev/urandom
  863. tls_ssl_options =
  864. tls_wildcard_matches_multiple_labels = yes
  865. tlsmgr_service_name = tlsmgr
  866. tlsproxy_enforce_tls = $smtpd_enforce_tls
  867. tlsproxy_service_name = tlsproxy
  868. tlsproxy_tls_CAfile = $smtpd_tls_CAfile
  869. tlsproxy_tls_CApath = $smtpd_tls_CApath
  870. tlsproxy_tls_always_issue_session_ids = $smtpd_tls_always_issue_session_ids
  871. tlsproxy_tls_ask_ccert = $smtpd_tls_ask_ccert
  872. tlsproxy_tls_ccert_verifydepth = $smtpd_tls_ccert_verifydepth
  873. tlsproxy_tls_cert_file = $smtpd_tls_cert_file
  874. tlsproxy_tls_ciphers = $smtpd_tls_ciphers
  875. tlsproxy_tls_dcert_file = $smtpd_tls_dcert_file
  876. tlsproxy_tls_dh1024_param_file = $smtpd_tls_dh1024_param_file
  877. tlsproxy_tls_dh512_param_file = $smtpd_tls_dh512_param_file
  878. tlsproxy_tls_dkey_file = $smtpd_tls_dkey_file
  879. tlsproxy_tls_eccert_file = $smtpd_tls_eccert_file
  880. tlsproxy_tls_eckey_file = $smtpd_tls_eckey_file
  881. tlsproxy_tls_eecdh_grade = $smtpd_tls_eecdh_grade
  882. tlsproxy_tls_exclude_ciphers = $smtpd_tls_exclude_ciphers
  883. tlsproxy_tls_fingerprint_digest = $smtpd_tls_fingerprint_digest
  884. tlsproxy_tls_key_file = $smtpd_tls_key_file
  885. tlsproxy_tls_loglevel = $smtpd_tls_loglevel
  886. tlsproxy_tls_mandatory_ciphers = $smtpd_tls_mandatory_ciphers
  887. tlsproxy_tls_mandatory_exclude_ciphers = $smtpd_tls_mandatory_exclude_ciphers
  888. tlsproxy_tls_mandatory_protocols = $smtpd_tls_mandatory_protocols
  889. tlsproxy_tls_protocols = $smtpd_tls_protocols
  890. tlsproxy_tls_req_ccert = $smtpd_tls_req_ccert
  891. tlsproxy_tls_security_level = $smtpd_tls_security_level
  892. tlsproxy_use_tls = $smtpd_use_tls
  893. tlsproxy_watchdog_timeout = 10s
  894. trace_service_name = trace
  895. transport_maps = proxy:mysql:/etc/postfix/mysql/transport_maps_user.cf proxy:mysql:/etc/postfix/mysql/transport_maps_domain.cf
  896. transport_retry_time = 60s
  897. trigger_timeout = 10s
  898. undisclosed_recipients_header =
  899. unknown_address_reject_code = 450
  900. unknown_address_tempfail_action = $reject_tempfail_action
  901. unknown_client_reject_code = 450
  902. unknown_helo_hostname_tempfail_action = $reject_tempfail_action
  903. unknown_hostname_reject_code = 450
  904. unknown_local_recipient_reject_code = 550
  905. unknown_relay_recipient_reject_code = 550
  906. unknown_virtual_alias_reject_code = 550
  907. unknown_virtual_mailbox_reject_code = 550
  908. unverified_recipient_defer_code = 450
  909. unverified_recipient_reject_code = 450
  910. unverified_recipient_reject_reason =
  911. unverified_recipient_tempfail_action = $reject_tempfail_action
  912. unverified_sender_defer_code = 450
  913. unverified_sender_reject_code = 450
  914. unverified_sender_reject_reason =
  915. unverified_sender_tempfail_action = $reject_tempfail_action
  916. uucp_delivery_slot_cost = $default_delivery_slot_cost
  917. uucp_delivery_slot_discount = $default_delivery_slot_discount
  918. uucp_delivery_slot_loan = $default_delivery_slot_loan
  919. uucp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  920. uucp_destination_concurrency_limit = $default_destination_concurrency_limit
  921. uucp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  922. uucp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  923. uucp_destination_rate_delay = $default_destination_rate_delay
  924. uucp_destination_recipient_limit = $default_destination_recipient_limit
  925. uucp_extra_recipient_limit = $default_extra_recipient_limit
  926. uucp_initial_destination_concurrency = $initial_destination_concurrency
  927. uucp_minimum_delivery_slots = $default_minimum_delivery_slots
  928. uucp_recipient_limit = $default_recipient_limit
  929. uucp_recipient_refill_delay = $default_recipient_refill_delay
  930. uucp_recipient_refill_limit = $default_recipient_refill_limit
  931. uucp_time_limit = $command_time_limit
  932. verp_delimiter_filter = -=+
  933. virtual_alias_domains =
  934. virtual_alias_expansion_limit = 1000
  935. virtual_alias_maps = proxy:mysql:/etc/postfix/mysql/virtual_alias_maps.cf proxy:mysql:/etc/postfix/mysql/domain_alias_maps.cf proxy:mysql:/etc/postfix/mysql/catchall_maps.cf proxy:mysql:/etc/postfix/mysql/domain_alias_catchall_maps.cf
  936. virtual_alias_recursion_limit = 1000
  937. virtual_delivery_slot_cost = $default_delivery_slot_cost
  938. virtual_delivery_slot_discount = $default_delivery_slot_discount
  939. virtual_delivery_slot_loan = $default_delivery_slot_loan
  940. virtual_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  941. virtual_destination_concurrency_limit = $default_destination_concurrency_limit
  942. virtual_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  943. virtual_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  944. virtual_destination_rate_delay = $default_destination_rate_delay
  945. virtual_destination_recipient_limit = $default_destination_recipient_limit
  946. virtual_extra_recipient_limit = $default_extra_recipient_limit
  947. virtual_gid_maps = static:2000
  948. virtual_initial_destination_concurrency = $initial_destination_concurrency
  949. virtual_mailbox_base = /var/vmail
  950. virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql/virtual_mailbox_domains.cf
  951. virtual_mailbox_limit = 51200000
  952. virtual_mailbox_lock = fcntl, dotlock
  953. virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql/virtual_mailbox_maps.cf
  954. virtual_minimum_delivery_slots = $default_minimum_delivery_slots
  955. virtual_minimum_uid = 2000
  956. virtual_recipient_limit = $default_recipient_limit
  957. virtual_recipient_refill_delay = $default_recipient_refill_delay
  958. virtual_recipient_refill_limit = $default_recipient_refill_limit
  959. virtual_transport = dovecot
  960. virtual_uid_maps = static:2000
  961. ⚡ root@mx  /etc/letsencrypt 
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement