API tools faq
paste
Advertisement
Guest User

postconf

a guest
Dec 5th, 2016
112
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 43.52 KB | None | 0 0
raw download clone embed print report
  1. (root@a ~) postconf
  2. 2bounce_notice_recipient = postmaster
  3. access_map_defer_code = 450
  4. access_map_reject_code = 554
  5. address_verify_cache_cleanup_interval = 12h
  6. address_verify_default_transport = $default_transport
  7. address_verify_local_transport = $local_transport
  8. address_verify_map = btree:$data_directory/verify_cache
  9. address_verify_negative_cache = yes
  10. address_verify_negative_expire_time = 3d
  11. address_verify_negative_refresh_time = 3h
  12. address_verify_poll_count = ${stress?1}${stress:3}
  13. address_verify_poll_delay = 3s
  14. address_verify_positive_expire_time = 31d
  15. address_verify_positive_refresh_time = 7d
  16. address_verify_relay_transport = $relay_transport
  17. address_verify_relayhost = $relayhost
  18. address_verify_sender = $double_bounce_sender
  19. address_verify_sender_dependent_default_transport_maps = $sender_dependent_default_transport_maps
  20. address_verify_sender_dependent_relayhost_maps = $sender_dependent_relayhost_maps
  21. address_verify_sender_ttl = 0s
  22. address_verify_service_name = verify
  23. address_verify_transport_maps = $transport_maps
  24. address_verify_virtual_transport = $virtual_transport
  25. alias_database = hash:/etc/aliases
  26. alias_maps = hash:/etc/aliases
  27. allow_mail_to_commands = alias, forward
  28. allow_mail_to_files = alias, forward
  29. allow_min_user = no
  30. allow_percent_hack = yes
  31. allow_untrusted_routing = no
  32. alternate_config_directories =
  33. always_add_missing_headers = no
  34. always_bcc =
  35. anvil_rate_time_unit = 60s
  36. anvil_status_update_time = 600s
  37. append_at_myorigin = yes
  38. append_dot_mydomain = no
  39. application_event_drain_time = 100s
  40. authorized_flush_users = static:anyone
  41. authorized_mailq_users = static:anyone
  42. authorized_submit_users = static:anyone
  43. backwards_bounce_logfile_compatibility = yes
  44. berkeley_db_create_buffer_size = 16777216
  45. berkeley_db_read_buffer_size = 131072
  46. best_mx_transport =
  47. biff = no
  48. body_checks =
  49. body_checks_size_limit = 51200
  50. bounce_notice_recipient = postmaster
  51. bounce_queue_lifetime = 1d
  52. bounce_service_name = bounce
  53. bounce_size_limit = 50000
  54. bounce_template_file =
  55. broken_sasl_auth_clients = yes
  56. bsmtp_delivery_slot_cost = $default_delivery_slot_cost
  57. bsmtp_delivery_slot_discount = $default_delivery_slot_discount
  58. bsmtp_delivery_slot_loan = $default_delivery_slot_loan
  59. bsmtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  60. bsmtp_destination_concurrency_limit = $default_destination_concurrency_limit
  61. bsmtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  62. bsmtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  63. bsmtp_destination_rate_delay = $default_destination_rate_delay
  64. bsmtp_destination_recipient_limit = $default_destination_recipient_limit
  65. bsmtp_extra_recipient_limit = $default_extra_recipient_limit
  66. bsmtp_initial_destination_concurrency = $initial_destination_concurrency
  67. bsmtp_minimum_delivery_slots = $default_minimum_delivery_slots
  68. bsmtp_recipient_limit = $default_recipient_limit
  69. bsmtp_recipient_refill_delay = $default_recipient_refill_delay
  70. bsmtp_recipient_refill_limit = $default_recipient_refill_limit
  71. bsmtp_time_limit = $command_time_limit
  72. canonical_classes = envelope_sender, envelope_recipient, header_sender, header_recipient
  73. canonical_maps =
  74. cleanup_service_name = cleanup
  75. command_directory = /usr/sbin
  76. command_execution_directory =
  77. command_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
  78. command_time_limit = 1000s
  79. config_directory = /etc/postfix
  80. connection_cache_protocol_timeout = 5s
  81. connection_cache_service_name = scache
  82. connection_cache_status_update_time = 600s
  83. connection_cache_ttl_limit = 2s
  84. content_filter =
  85. cyrus_sasl_config_path =
  86. daemon_directory = /usr/lib/postfix
  87. daemon_table_open_error_is_fatal = no
  88. daemon_timeout = 18000s
  89. data_directory = /var/lib/postfix
  90. debug_peer_level = 2
  91. debug_peer_list =
  92. debugger_command =
  93. default_database_type = hash
  94. default_delivery_slot_cost = 5
  95. default_delivery_slot_discount = 50
  96. default_delivery_slot_loan = 3
  97. default_destination_concurrency_failed_cohort_limit = 1
  98. default_destination_concurrency_limit = 20
  99. default_destination_concurrency_negative_feedback = 1
  100. default_destination_concurrency_positive_feedback = 1
  101. default_destination_rate_delay = 0s
  102. default_destination_recipient_limit = 50
  103. default_extra_recipient_limit = 1000
  104. default_filter_nexthop =
  105. default_minimum_delivery_slots = 3
  106. default_privs = nobody
  107. default_process_limit = 100
  108. default_rbl_reply = $rbl_code Service unavailable; $rbl_class [$rbl_what] blocked using $rbl_domain${rbl_reason?; $rbl_reason}
  109. default_recipient_limit = 20000
  110. default_recipient_refill_delay = 5s
  111. default_recipient_refill_limit = 100
  112. default_transport = smtp
  113. default_verp_delimiters = +=
  114. defer_code = 450
  115. defer_service_name = defer
  116. defer_transports =
  117. delay_logging_resolution_limit = 2
  118. delay_notice_recipient = postmaster
  119. delay_warning_time = 0h
  120. deliver_lock_attempts = 20
  121. deliver_lock_delay = 1s
  122. destination_concurrency_feedback_debug = no
  123. detect_8bit_encoding_header = yes
  124. disable_dns_lookups = no
  125. disable_mime_input_processing = no
  126. disable_mime_output_conversion = no
  127. disable_verp_bounces = no
  128. disable_vrfy_command = yes
  129. dnsblog_reply_delay = 0s
  130. dnsblog_service_name = dnsblog
  131. dont_remove = 0
  132. double_bounce_sender = double-bounce
  133. duplicate_filter_limit = 1000
  134. empty_address_default_transport_maps_lookup_key = <>
  135. empty_address_recipient = MAILER-DAEMON
  136. empty_address_relayhost_maps_lookup_key = <>
  137. enable_long_queue_ids = no
  138. enable_original_recipient = yes
  139. error_delivery_slot_cost = $default_delivery_slot_cost
  140. error_delivery_slot_discount = $default_delivery_slot_discount
  141. error_delivery_slot_loan = $default_delivery_slot_loan
  142. error_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  143. error_destination_concurrency_limit = $default_destination_concurrency_limit
  144. error_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  145. error_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  146. error_destination_rate_delay = $default_destination_rate_delay
  147. error_destination_recipient_limit = $default_destination_recipient_limit
  148. error_extra_recipient_limit = $default_extra_recipient_limit
  149. error_initial_destination_concurrency = $initial_destination_concurrency
  150. error_minimum_delivery_slots = $default_minimum_delivery_slots
  151. error_notice_recipient = postmaster
  152. error_recipient_limit = $default_recipient_limit
  153. error_recipient_refill_delay = $default_recipient_refill_delay
  154. error_recipient_refill_limit = $default_recipient_refill_limit
  155. error_service_name = error
  156. execution_directory_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
  157. expand_owner_alias = no
  158. export_environment = TZ MAIL_CONFIG LANG
  159. fallback_transport =
  160. fallback_transport_maps =
  161. fast_flush_domains = $relay_domains
  162. fast_flush_purge_time = 7d
  163. fast_flush_refresh_time = 12h
  164. fault_injection_code = 0
  165. flush_service_name = flush
  166. fork_attempts = 5
  167. fork_delay = 1s
  168. forward_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
  169. forward_path = $home/.forward${recipient_delimiter}${extension}, $home/.forward
  170. frozen_delivered_to = yes
  171. greylist = permit_dnswl_client list.dnswl.org, check_policy_service inet:127.0.0.1:10023
  172. hash_queue_depth = 1
  173. hash_queue_names = deferred, defer
  174. header_address_token_limit = 10240
  175. header_checks =
  176. header_size_limit = 102400
  177. helpful_warnings = yes
  178. home_mailbox =
  179. hopcount_limit = 50
  180. html_directory = /usr/share/doc/postfix/html
  181. ifmail_delivery_slot_cost = $default_delivery_slot_cost
  182. ifmail_delivery_slot_discount = $default_delivery_slot_discount
  183. ifmail_delivery_slot_loan = $default_delivery_slot_loan
  184. ifmail_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  185. ifmail_destination_concurrency_limit = $default_destination_concurrency_limit
  186. ifmail_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  187. ifmail_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  188. ifmail_destination_rate_delay = $default_destination_rate_delay
  189. ifmail_destination_recipient_limit = $default_destination_recipient_limit
  190. ifmail_extra_recipient_limit = $default_extra_recipient_limit
  191. ifmail_initial_destination_concurrency = $initial_destination_concurrency
  192. ifmail_minimum_delivery_slots = $default_minimum_delivery_slots
  193. ifmail_recipient_limit = $default_recipient_limit
  194. ifmail_recipient_refill_delay = $default_recipient_refill_delay
  195. ifmail_recipient_refill_limit = $default_recipient_refill_limit
  196. ifmail_time_limit = $command_time_limit
  197. ignore_mx_lookup_error = no
  198. import_environment = MAIL_CONFIG MAIL_DEBUG MAIL_LOGTAG TZ XAUTHORITY DISPLAY LANG=C
  199. in_flow_delay = 1s
  200. inet_interfaces = all
  201. inet_protocols = all
  202. initial_destination_concurrency = 5
  203. internal_mail_filter_classes =
  204. invalid_hostname_reject_code = 501
  205. ipc_idle = 5s
  206. ipc_timeout = 3600s
  207. ipc_ttl = 1000s
  208. line_length_limit = 2048
  209. lmdb_map_size = 16777216
  210. lmtp_address_preference = any
  211. lmtp_assume_final = no
  212. lmtp_bind_address =
  213. lmtp_bind_address6 =
  214. lmtp_body_checks =
  215. lmtp_cname_overrides_servername = no
  216. lmtp_connect_timeout = 0s
  217. lmtp_connection_cache_destinations =
  218. lmtp_connection_cache_on_demand = yes
  219. lmtp_connection_cache_time_limit = 2s
  220. lmtp_connection_reuse_count_limit = 0
  221. lmtp_connection_reuse_time_limit = 300s
  222. lmtp_data_done_timeout = 600s
  223. lmtp_data_init_timeout = 120s
  224. lmtp_data_xfer_timeout = 180s
  225. lmtp_defer_if_no_mx_address_found = no
  226. lmtp_delivery_slot_cost = $default_delivery_slot_cost
  227. lmtp_delivery_slot_discount = $default_delivery_slot_discount
  228. lmtp_delivery_slot_loan = $default_delivery_slot_loan
  229. lmtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  230. lmtp_destination_concurrency_limit = $default_destination_concurrency_limit
  231. lmtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  232. lmtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  233. lmtp_destination_rate_delay = $default_destination_rate_delay
  234. lmtp_destination_recipient_limit = $default_destination_recipient_limit
  235. lmtp_discard_lhlo_keyword_address_maps =
  236. lmtp_discard_lhlo_keywords =
  237. lmtp_dns_resolver_options =
  238. lmtp_dns_support_level =
  239. lmtp_enforce_tls = no
  240. lmtp_extra_recipient_limit = $default_extra_recipient_limit
  241. lmtp_generic_maps =
  242. lmtp_header_checks =
  243. lmtp_host_lookup = dns
  244. lmtp_initial_destination_concurrency = $initial_destination_concurrency
  245. lmtp_lhlo_name = $myhostname
  246. lmtp_lhlo_timeout = 300s
  247. lmtp_line_length_limit = 998
  248. lmtp_mail_timeout = 300s
  249. lmtp_mime_header_checks =
  250. lmtp_minimum_delivery_slots = $default_minimum_delivery_slots
  251. lmtp_mx_address_limit = 5
  252. lmtp_mx_session_limit = 2
  253. lmtp_nested_header_checks =
  254. lmtp_per_record_deadline = no
  255. lmtp_pix_workaround_delay_time = 10s
  256. lmtp_pix_workaround_maps =
  257. lmtp_pix_workaround_threshold_time = 500s
  258. lmtp_pix_workarounds = disable_esmtp,delay_dotcrlf
  259. lmtp_quit_timeout = 300s
  260. lmtp_quote_rfc821_envelope = yes
  261. lmtp_randomize_addresses = yes
  262. lmtp_rcpt_timeout = 300s
  263. lmtp_recipient_limit = $default_recipient_limit
  264. lmtp_recipient_refill_delay = $default_recipient_refill_delay
  265. lmtp_recipient_refill_limit = $default_recipient_refill_limit
  266. lmtp_reply_filter =
  267. lmtp_rset_timeout = 20s
  268. lmtp_sasl_auth_cache_name =
  269. lmtp_sasl_auth_cache_time = 90d
  270. lmtp_sasl_auth_enable = no
  271. lmtp_sasl_auth_soft_bounce = yes
  272. lmtp_sasl_mechanism_filter =
  273. lmtp_sasl_password_maps =
  274. lmtp_sasl_path =
  275. lmtp_sasl_security_options = noplaintext, noanonymous
  276. lmtp_sasl_tls_security_options = $lmtp_sasl_security_options
  277. lmtp_sasl_tls_verified_security_options = $lmtp_sasl_tls_security_options
  278. lmtp_sasl_type = cyrus
  279. lmtp_send_dummy_mail_auth = no
  280. lmtp_send_xforward_command = no
  281. lmtp_sender_dependent_authentication = no
  282. lmtp_skip_5xx_greeting = yes
  283. lmtp_skip_quit_response = no
  284. lmtp_starttls_timeout = 300s
  285. lmtp_tcp_port = 24
  286. lmtp_tls_CAfile =
  287. lmtp_tls_CApath =
  288. lmtp_tls_block_early_mail_reply = no
  289. lmtp_tls_cert_file =
  290. lmtp_tls_ciphers = export
  291. lmtp_tls_dcert_file =
  292. lmtp_tls_dkey_file = $lmtp_tls_dcert_file
  293. lmtp_tls_eccert_file =
  294. lmtp_tls_eckey_file = $lmtp_tls_eccert_file
  295. lmtp_tls_enforce_peername = yes
  296. lmtp_tls_exclude_ciphers =
  297. lmtp_tls_fingerprint_cert_match =
  298. lmtp_tls_fingerprint_digest = md5
  299. lmtp_tls_force_insecure_host_tlsa_lookup = no
  300. lmtp_tls_key_file = $lmtp_tls_cert_file
  301. lmtp_tls_loglevel = 0
  302. lmtp_tls_mandatory_ciphers = medium
  303. lmtp_tls_mandatory_exclude_ciphers =
  304. lmtp_tls_mandatory_protocols = !SSLv2
  305. lmtp_tls_note_starttls_offer = no
  306. lmtp_tls_per_site =
  307. lmtp_tls_policy_maps =
  308. lmtp_tls_protocols = !SSLv2
  309. lmtp_tls_scert_verifydepth = 9
  310. lmtp_tls_secure_cert_match = nexthop
  311. lmtp_tls_security_level =
  312. lmtp_tls_session_cache_database =
  313. lmtp_tls_session_cache_timeout = 3600s
  314. lmtp_tls_trust_anchor_file =
  315. lmtp_tls_verify_cert_match = hostname
  316. lmtp_use_tls = no
  317. lmtp_xforward_timeout = 300s
  318. local_command_shell =
  319. local_delivery_slot_cost = $default_delivery_slot_cost
  320. local_delivery_slot_discount = $default_delivery_slot_discount
  321. local_delivery_slot_loan = $default_delivery_slot_loan
  322. local_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  323. local_destination_concurrency_limit = 2
  324. local_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  325. local_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  326. local_destination_rate_delay = $default_destination_rate_delay
  327. local_destination_recipient_limit = 1
  328. local_extra_recipient_limit = $default_extra_recipient_limit
  329. local_header_rewrite_clients = permit_inet_interfaces
  330. local_initial_destination_concurrency = $initial_destination_concurrency
  331. local_minimum_delivery_slots = $default_minimum_delivery_slots
  332. local_recipient_limit = $default_recipient_limit
  333. local_recipient_maps = proxy:unix:passwd.byname $alias_maps
  334. local_recipient_refill_delay = $default_recipient_refill_delay
  335. local_recipient_refill_limit = $default_recipient_refill_limit
  336. local_transport = local:$myhostname
  337. luser_relay =
  338. mail_name = Postfix
  339. mail_owner = postfix
  340. mail_release_date = 20141019
  341. mail_spool_directory = /var/mail
  342. mail_version = 2.11.3
  343. mailbox_command =
  344. mailbox_command_maps =
  345. mailbox_delivery_lock = fcntl, dotlock
  346. mailbox_size_limit = 0
  347. mailbox_transport =
  348. mailbox_transport_maps =
  349. maildrop_delivery_slot_cost = $default_delivery_slot_cost
  350. maildrop_delivery_slot_discount = $default_delivery_slot_discount
  351. maildrop_delivery_slot_loan = $default_delivery_slot_loan
  352. maildrop_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  353. maildrop_destination_concurrency_limit = $default_destination_concurrency_limit
  354. maildrop_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  355. maildrop_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  356. maildrop_destination_rate_delay = $default_destination_rate_delay
  357. maildrop_destination_recipient_limit = $default_destination_recipient_limit
  358. maildrop_extra_recipient_limit = $default_extra_recipient_limit
  359. maildrop_initial_destination_concurrency = $initial_destination_concurrency
  360. maildrop_minimum_delivery_slots = $default_minimum_delivery_slots
  361. maildrop_recipient_limit = $default_recipient_limit
  362. maildrop_recipient_refill_delay = $default_recipient_refill_delay
  363. maildrop_recipient_refill_limit = $default_recipient_refill_limit
  364. maildrop_time_limit = $command_time_limit
  365. mailman_delivery_slot_cost = $default_delivery_slot_cost
  366. mailman_delivery_slot_discount = $default_delivery_slot_discount
  367. mailman_delivery_slot_loan = $default_delivery_slot_loan
  368. mailman_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  369. mailman_destination_concurrency_limit = $default_destination_concurrency_limit
  370. mailman_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  371. mailman_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  372. mailman_destination_rate_delay = $default_destination_rate_delay
  373. mailman_destination_recipient_limit = $default_destination_recipient_limit
  374. mailman_extra_recipient_limit = $default_extra_recipient_limit
  375. mailman_initial_destination_concurrency = $initial_destination_concurrency
  376. mailman_minimum_delivery_slots = $default_minimum_delivery_slots
  377. mailman_recipient_limit = $default_recipient_limit
  378. mailman_recipient_refill_delay = $default_recipient_refill_delay
  379. mailman_recipient_refill_limit = $default_recipient_refill_limit
  380. mailman_time_limit = $command_time_limit
  381. mailq_path = /usr/bin/mailq
  382. manpage_directory = /usr/share/man
  383. maps_rbl_domains =
  384. maps_rbl_reject_code = 554
  385. masquerade_classes = envelope_sender, header_sender, header_recipient
  386. masquerade_domains =
  387. masquerade_exceptions =
  388. master_service_disable =
  389. max_idle = 100s
  390. max_use = 100
  391. maximal_backoff_time = 1800s
  392. maximal_queue_lifetime = 1d
  393. message_reject_characters =
  394. message_size_limit = 26214400
  395. message_strip_characters =
  396. milter_command_timeout = 30s
  397. milter_connect_macros = j {daemon_name} v
  398. milter_connect_timeout = 30s
  399. milter_content_timeout = 300s
  400. milter_data_macros = i
  401. milter_default_action = accept
  402. milter_end_of_data_macros = i
  403. milter_end_of_header_macros = i
  404. milter_header_checks =
  405. milter_helo_macros = {tls_version} {cipher} {cipher_bits} {cert_subject} {cert_issuer}
  406. milter_macro_daemon_name = $myhostname
  407. milter_macro_v = $mail_name $mail_version
  408. milter_mail_macros = i {auth_type} {auth_authen} {auth_author} {mail_addr} {mail_host} {mail_mailer}
  409. milter_protocol = 6
  410. milter_rcpt_macros = i {rcpt_addr} {rcpt_host} {rcpt_mailer}
  411. milter_unknown_command_macros =
  412. mime_boundary_length_limit = 2048
  413. mime_header_checks = $header_checks
  414. mime_nesting_limit = 100
  415. minimal_backoff_time = 300s
  416. multi_instance_directories =
  417. multi_instance_enable = no
  418. multi_instance_group =
  419. multi_instance_name =
  420. multi_instance_wrapper =
  421. multi_recipient_bounce_reject_code = 550
  422. mydestination = a.sub.domain.tld
  423. mydomain = domain.tld
  424. myhostname = a.sub.domain.tld
  425. mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
  426. mynetworks_style = subnet
  427. myorigin = /etc/mailname
  428. nested_header_checks = $header_checks
  429. newaliases_path = /usr/bin/newaliases
  430. non_fqdn_reject_code = 504
  431. non_smtpd_milters =
  432. notify_classes = resource, software
  433. owner_request_special = yes
  434. parent_domain_matches_subdomains = debug_peer_list,fast_flush_domains,mynetworks,permit_mx_backup_networks,qmqpd_authorized_clients,relay_domains,smtpd_access_maps
  435. permit_mx_backup_networks =
  436. pickup_service_name = pickup
  437. plaintext_reject_code = 550
  438. postmulti_control_commands = reload flush
  439. postmulti_start_commands = start
  440. postmulti_stop_commands = stop abort drain quick-stop
  441. postscreen_access_list = permit_mynetworks, cidr:/etc/postfix/postscreen_access.cidr
  442. postscreen_bare_newline_action = ignore
  443. postscreen_bare_newline_enable = no
  444. postscreen_bare_newline_ttl = 30d
  445. postscreen_blacklist_action = drop
  446. postscreen_cache_cleanup_interval = 24h
  447. postscreen_cache_map = proxy:btree:$data_directory/postscreen_cache
  448. postscreen_cache_retention_time = 7d
  449. postscreen_client_connection_count_limit = $smtpd_client_connection_count_limit
  450. postscreen_command_count_limit = 20
  451. postscreen_command_filter =
  452. postscreen_command_time_limit = ${stress?10}${stress:300}s
  453. postscreen_disable_vrfy_command = $disable_vrfy_command
  454. postscreen_discard_ehlo_keyword_address_maps = $smtpd_discard_ehlo_keyword_address_maps
  455. postscreen_discard_ehlo_keywords = $smtpd_discard_ehlo_keywords
  456. postscreen_dnsbl_action = enforce
  457. postscreen_dnsbl_reply_map =
  458. postscreen_dnsbl_sites = b.barracudacentral.org=127.0.0.2*7 dnsbl.inps.de=127.0.0.2*7 bl.mailspike.net=127.0.0.2*5 bl.mailspike.net=127.0.0.[10;11;12]*4 dnsbl.sorbs.net=127.0.0.10*8 dnsbl.sorbs.net=127.0.0.5*6 dnsbl.sorbs.net=127.0.0.7*3 dnsbl.sorbs.net=127.0.0.8*2 dnsbl.sorbs.net=127.0.0.6*2 dnsbl.sorbs.net=127.0.0.9*2 zen.spamhaus.org=127.0.0.[10;11]*8 zen.spamhaus.org=127.0.0.[4..7]*6 zen.spamhaus.org=127.0.0.3*4 zen.spamhaus.org=127.0.0.2*3 hostkarma.junkemailfilter.com=127.0.0.2*3 hostkarma.junkemailfilter.com=127.0.0.4*1 hostkarma.junkemailfilter.com=127.0.1.2*1 wl.mailspike.net=127.0.0.[18;19;20]*-2 hostkarma.junkemailfilter.com=127.0.0.1*-2
  459. postscreen_dnsbl_threshold = 8
  460. postscreen_dnsbl_ttl = 5m
  461. postscreen_dnsbl_whitelist_threshold = 0
  462. postscreen_enforce_tls = $smtpd_enforce_tls
  463. postscreen_expansion_filter = $smtpd_expansion_filter
  464. postscreen_forbidden_commands = $smtpd_forbidden_commands
  465. postscreen_greet_action = enforce
  466. postscreen_greet_banner = $smtpd_banner
  467. postscreen_greet_ttl = 2d
  468. postscreen_greet_wait = 3s
  469. postscreen_helo_required = $smtpd_helo_required
  470. postscreen_non_smtp_command_action = drop
  471. postscreen_non_smtp_command_enable = no
  472. postscreen_non_smtp_command_ttl = 30d
  473. postscreen_pipelining_action = enforce
  474. postscreen_pipelining_enable = no
  475. postscreen_pipelining_ttl = 30d
  476. postscreen_post_queue_limit = $default_process_limit
  477. postscreen_pre_queue_limit = $default_process_limit
  478. postscreen_reject_footer = $smtpd_reject_footer
  479. postscreen_tls_security_level = $smtpd_tls_security_level
  480. postscreen_upstream_proxy_protocol =
  481. postscreen_upstream_proxy_timeout = 5s
  482. postscreen_use_tls = $smtpd_use_tls
  483. postscreen_watchdog_timeout = 10s
  484. postscreen_whitelist_interfaces = static:all
  485. prepend_delivered_header = command, file, forward
  486. process_id = 32421
  487. process_id_directory = pid
  488. process_name = postconf
  489. propagate_unmatched_extensions = canonical, virtual
  490. proxy_interfaces =
  491. proxy_read_maps = proxy:mysql:/etc/postfix/sql/mysql_virtual_sender_acl.cf, proxy:mysql:/etc/postfix/sql/mysql_tls_enforce_out_policy.cf, proxy:mysql:/etc/postfix/sql/mysql_tls_enforce_in_policy.cf, $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $smtpd_sender_login_maps
  492. proxy_write_maps = $smtp_sasl_auth_cache_name $lmtp_sasl_auth_cache_name $address_verify_map $postscreen_cache_map
  493. proxymap_service_name = proxymap
  494. proxywrite_service_name = proxywrite
  495. qmgr_clog_warn_time = 300s
  496. qmgr_daemon_timeout = 1000s
  497. qmgr_fudge_factor = 100
  498. qmgr_ipc_timeout = 60s
  499. qmgr_message_active_limit = 20000
  500. qmgr_message_recipient_limit = 20000
  501. qmgr_message_recipient_minimum = 10
  502. qmqpd_authorized_clients =
  503. qmqpd_client_port_logging = no
  504. qmqpd_error_delay = 1s
  505. qmqpd_timeout = 300s
  506. queue_directory = /var/spool/postfix
  507. queue_file_attribute_count_limit = 100
  508. queue_minfree = 0
  509. queue_run_delay = 300s
  510. queue_service_name = qmgr
  511. rbl_reply_maps =
  512. readme_directory = /usr/share/doc/postfix
  513. receive_override_options =
  514. recipient_bcc_maps =
  515. recipient_canonical_classes = envelope_recipient, header_recipient
  516. recipient_canonical_maps =
  517. recipient_delimiter = +
  518. reject_code = 554
  519. reject_tempfail_action = defer_if_permit
  520. relay_clientcerts =
  521. relay_delivery_slot_cost = $default_delivery_slot_cost
  522. relay_delivery_slot_discount = $default_delivery_slot_discount
  523. relay_delivery_slot_loan = $default_delivery_slot_loan
  524. relay_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  525. relay_destination_concurrency_limit = $default_destination_concurrency_limit
  526. relay_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  527. relay_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  528. relay_destination_rate_delay = $default_destination_rate_delay
  529. relay_destination_recipient_limit = $default_destination_recipient_limit
  530. relay_domains = proxy:mysql:/etc/postfix/sql/mysql_virtual_mxdomain_maps.cf
  531. relay_domains_reject_code = 554
  532. relay_extra_recipient_limit = $default_extra_recipient_limit
  533. relay_initial_destination_concurrency = $initial_destination_concurrency
  534. relay_minimum_delivery_slots = $default_minimum_delivery_slots
  535. relay_recipient_limit = $default_recipient_limit
  536. relay_recipient_maps = proxy:mysql:/etc/postfix/sql/mysql_relay_recipient_maps.cf
  537. relay_recipient_refill_delay = $default_recipient_refill_delay
  538. relay_recipient_refill_limit = $default_recipient_refill_limit
  539. relay_transport = relay
  540. relayhost =
  541. relocated_maps =
  542. remote_header_rewrite_domain =
  543. require_home_directory = no
  544. reset_owner_alias = no
  545. resolve_dequoted_address = yes
  546. resolve_null_domain = no
  547. resolve_numeric_domain = no
  548. retry_delivery_slot_cost = $default_delivery_slot_cost
  549. retry_delivery_slot_discount = $default_delivery_slot_discount
  550. retry_delivery_slot_loan = $default_delivery_slot_loan
  551. retry_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  552. retry_destination_concurrency_limit = $default_destination_concurrency_limit
  553. retry_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  554. retry_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  555. retry_destination_rate_delay = $default_destination_rate_delay
  556. retry_destination_recipient_limit = $default_destination_recipient_limit
  557. retry_extra_recipient_limit = $default_extra_recipient_limit
  558. retry_initial_destination_concurrency = $initial_destination_concurrency
  559. retry_minimum_delivery_slots = $default_minimum_delivery_slots
  560. retry_recipient_limit = $default_recipient_limit
  561. retry_recipient_refill_delay = $default_recipient_refill_delay
  562. retry_recipient_refill_limit = $default_recipient_refill_limit
  563. rewrite_service_name = rewrite
  564. sample_directory = /usr/share/doc/postfix/examples
  565. scalemail-backend_delivery_slot_cost = $default_delivery_slot_cost
  566. scalemail-backend_delivery_slot_discount = $default_delivery_slot_discount
  567. scalemail-backend_delivery_slot_loan = $default_delivery_slot_loan
  568. scalemail-backend_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  569. scalemail-backend_destination_concurrency_limit = $default_destination_concurrency_limit
  570. scalemail-backend_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  571. scalemail-backend_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  572. scalemail-backend_destination_rate_delay = $default_destination_rate_delay
  573. scalemail-backend_destination_recipient_limit = $default_destination_recipient_limit
  574. scalemail-backend_extra_recipient_limit = $default_extra_recipient_limit
  575. scalemail-backend_initial_destination_concurrency = $initial_destination_concurrency
  576. scalemail-backend_minimum_delivery_slots = $default_minimum_delivery_slots
  577. scalemail-backend_recipient_limit = $default_recipient_limit
  578. scalemail-backend_recipient_refill_delay = $default_recipient_refill_delay
  579. scalemail-backend_recipient_refill_limit = $default_recipient_refill_limit
  580. scalemail-backend_time_limit = $command_time_limit
  581. send_cyrus_sasl_authzid = no
  582. sender_bcc_maps =
  583. sender_canonical_classes = envelope_sender, header_sender
  584. sender_canonical_maps =
  585. sender_dependent_default_transport_maps = proxy:mysql:/etc/postfix/sql/mysql_tls_enforce_out_policy.cf
  586. sender_dependent_relayhost_maps =
  587. sendmail_fix_line_endings = always
  588. sendmail_path = /usr/sbin/sendmail
  589. service_throttle_time = 60s
  590. setgid_group = postdrop
  591. show_user_unknown_table_name = yes
  592. showq_service_name = showq
  593. smtp_address_preference = any
  594. smtp_always_send_ehlo = yes
  595. smtp_bind_address =
  596. smtp_bind_address6 =
  597. smtp_body_checks =
  598. smtp_cname_overrides_servername = no
  599. smtp_connect_timeout = 30s
  600. smtp_connection_cache_destinations =
  601. smtp_connection_cache_on_demand = yes
  602. smtp_connection_cache_time_limit = 2s
  603. smtp_connection_reuse_count_limit = 0
  604. smtp_connection_reuse_time_limit = 300s
  605. smtp_data_done_timeout = 600s
  606. smtp_data_init_timeout = 120s
  607. smtp_data_xfer_timeout = 180s
  608. smtp_defer_if_no_mx_address_found = no
  609. smtp_delivery_slot_cost = $default_delivery_slot_cost
  610. smtp_delivery_slot_discount = $default_delivery_slot_discount
  611. smtp_delivery_slot_loan = $default_delivery_slot_loan
  612. smtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  613. smtp_destination_concurrency_limit = $default_destination_concurrency_limit
  614. smtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  615. smtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  616. smtp_destination_rate_delay = $default_destination_rate_delay
  617. smtp_destination_recipient_limit = $default_destination_recipient_limit
  618. smtp_discard_ehlo_keyword_address_maps =
  619. smtp_discard_ehlo_keywords =
  620. smtp_dns_resolver_options =
  621. smtp_dns_support_level =
  622. smtp_enforce_tls = no
  623. smtp_enforced_tls_delivery_slot_cost = $default_delivery_slot_cost
  624. smtp_enforced_tls_delivery_slot_discount = $default_delivery_slot_discount
  625. smtp_enforced_tls_delivery_slot_loan = $default_delivery_slot_loan
  626. smtp_enforced_tls_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  627. smtp_enforced_tls_destination_concurrency_limit = $default_destination_concurrency_limit
  628. smtp_enforced_tls_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  629. smtp_enforced_tls_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  630. smtp_enforced_tls_destination_rate_delay = $default_destination_rate_delay
  631. smtp_enforced_tls_destination_recipient_limit = $default_destination_recipient_limit
  632. smtp_enforced_tls_extra_recipient_limit = $default_extra_recipient_limit
  633. smtp_enforced_tls_initial_destination_concurrency = $initial_destination_concurrency
  634. smtp_enforced_tls_minimum_delivery_slots = $default_minimum_delivery_slots
  635. smtp_enforced_tls_recipient_limit = $default_recipient_limit
  636. smtp_enforced_tls_recipient_refill_delay = $default_recipient_refill_delay
  637. smtp_enforced_tls_recipient_refill_limit = $default_recipient_refill_limit
  638. smtp_extra_recipient_limit = $default_extra_recipient_limit
  639. smtp_fallback_relay = $fallback_relay
  640. smtp_generic_maps =
  641. smtp_header_checks = pcre:/etc/postfix/mailcow_anonymize_headers.pcre
  642. smtp_helo_name = $myhostname
  643. smtp_helo_timeout = 300s
  644. smtp_host_lookup = dns
  645. smtp_initial_destination_concurrency = $initial_destination_concurrency
  646. smtp_line_length_limit = 998
  647. smtp_mail_timeout = 300s
  648. smtp_mime_header_checks =
  649. smtp_minimum_delivery_slots = $default_minimum_delivery_slots
  650. smtp_mx_address_limit = 5
  651. smtp_mx_session_limit = 2
  652. smtp_nested_header_checks =
  653. smtp_never_send_ehlo = no
  654. smtp_per_record_deadline = no
  655. smtp_pix_workaround_delay_time = 10s
  656. smtp_pix_workaround_maps =
  657. smtp_pix_workaround_threshold_time = 500s
  658. smtp_pix_workarounds = disable_esmtp,delay_dotcrlf
  659. smtp_quit_timeout = 300s
  660. smtp_quote_rfc821_envelope = yes
  661. smtp_randomize_addresses = yes
  662. smtp_rcpt_timeout = 300s
  663. smtp_recipient_limit = $default_recipient_limit
  664. smtp_recipient_refill_delay = $default_recipient_refill_delay
  665. smtp_recipient_refill_limit = $default_recipient_refill_limit
  666. smtp_reply_filter =
  667. smtp_rset_timeout = 20s
  668. smtp_sasl_auth_cache_name =
  669. smtp_sasl_auth_cache_time = 90d
  670. smtp_sasl_auth_enable = no
  671. smtp_sasl_auth_soft_bounce = yes
  672. smtp_sasl_mechanism_filter =
  673. smtp_sasl_password_maps =
  674. smtp_sasl_path =
  675. smtp_sasl_security_options = noplaintext, noanonymous
  676. smtp_sasl_tls_security_options = $smtp_sasl_security_options
  677. smtp_sasl_tls_verified_security_options = $smtp_sasl_tls_security_options
  678. smtp_sasl_type = cyrus
  679. smtp_send_dummy_mail_auth = no
  680. smtp_send_xforward_command = no
  681. smtp_sender_dependent_authentication = no
  682. smtp_skip_5xx_greeting = yes
  683. smtp_skip_quit_response = yes
  684. smtp_starttls_timeout = 300s
  685. smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt
  686. smtp_tls_CApath =
  687. smtp_tls_block_early_mail_reply = no
  688. smtp_tls_cert_file = /etc/ssl/mail/mail.crt
  689. smtp_tls_ciphers = export
  690. smtp_tls_dcert_file =
  691. smtp_tls_dkey_file = $smtp_tls_dcert_file
  692. smtp_tls_eccert_file =
  693. smtp_tls_eckey_file = $smtp_tls_eccert_file
  694. smtp_tls_enforce_peername = yes
  695. smtp_tls_exclude_ciphers =
  696. smtp_tls_fingerprint_cert_match =
  697. smtp_tls_fingerprint_digest = md5
  698. smtp_tls_force_insecure_host_tlsa_lookup = no
  699. smtp_tls_key_file = /etc/ssl/mail/mail.key
  700. smtp_tls_loglevel = 1
  701. smtp_tls_mandatory_ciphers = medium
  702. smtp_tls_mandatory_exclude_ciphers =
  703. smtp_tls_mandatory_protocols = !SSLv2
  704. smtp_tls_note_starttls_offer = no
  705. smtp_tls_per_site =
  706. smtp_tls_policy_maps =
  707. smtp_tls_protocols = !SSLv2
  708. smtp_tls_scert_verifydepth = 9
  709. smtp_tls_secure_cert_match = nexthop, dot-nexthop
  710. smtp_tls_security_level = may
  711. smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
  712. smtp_tls_session_cache_timeout = 3600s
  713. smtp_tls_trust_anchor_file =
  714. smtp_tls_verify_cert_match = hostname
  715. smtp_use_tls = no
  716. smtp_xforward_timeout = 300s
  717. smtpd_authorized_verp_clients = $authorized_verp_clients
  718. smtpd_authorized_xclient_hosts =
  719. smtpd_authorized_xforward_hosts =
  720. smtpd_banner = $myhostname
  721. smtpd_client_connection_count_limit = 50
  722. smtpd_client_connection_rate_limit = 0
  723. smtpd_client_event_limit_exceptions = ${smtpd_client_connection_limit_exceptions:$mynetworks}
  724. smtpd_client_message_rate_limit = 0
  725. smtpd_client_new_tls_session_rate_limit = 0
  726. smtpd_client_port_logging = no
  727. smtpd_client_recipient_rate_limit = 0
  728. smtpd_client_restrictions =
  729. smtpd_command_filter =
  730. smtpd_data_restrictions = reject_unauth_pipelining, permit
  731. smtpd_delay_open_until_valid_rcpt = yes
  732. smtpd_delay_reject = yes
  733. smtpd_discard_ehlo_keyword_address_maps =
  734. smtpd_discard_ehlo_keywords =
  735. smtpd_end_of_data_restrictions =
  736. smtpd_enforce_tls = no
  737. smtpd_error_sleep_time = 10s
  738. smtpd_etrn_restrictions =
  739. smtpd_expansion_filter = \t\40!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~
  740. smtpd_forbidden_commands = CONNECT GET POST
  741. smtpd_hard_error_limit = ${stress?1}${stress:5}
  742. smtpd_helo_required = yes
  743. smtpd_helo_restrictions =
  744. smtpd_history_flush_threshold = 100
  745. smtpd_junk_command_limit = ${stress?1}${stress:100}
  746. smtpd_log_access_permit_actions =
  747. smtpd_milters =
  748. smtpd_noop_commands =
  749. smtpd_null_access_lookup_key = <>
  750. smtpd_peername_lookup = yes
  751. smtpd_per_record_deadline = ${stress?yes}${stress:no}
  752. smtpd_policy_service_max_idle = 300s
  753. smtpd_policy_service_max_ttl = 1000s
  754. smtpd_policy_service_timeout = 100s
  755. smtpd_proxy_ehlo = $myhostname
  756. smtpd_proxy_filter =
  757. smtpd_proxy_options =
  758. smtpd_proxy_timeout = 600s
  759. smtpd_recipient_limit = 1000
  760. smtpd_recipient_overshoot_limit = 1000
  761. smtpd_recipient_restrictions = check_recipient_access proxy:mysql:/etc/postfix/sql/mysql_tls_enforce_in_policy.cf permit_sasl_authenticated, permit_mynetworks, reject_invalid_helo_hostname, reject_unknown_reverse_client_hostname, reject_unauth_destination
  762. smtpd_reject_footer =
  763. smtpd_reject_unlisted_recipient = yes
  764. smtpd_reject_unlisted_sender = no
  765. smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, defer_unauth_destination
  766. smtpd_restriction_classes = greylist
  767. smtpd_sasl_auth_enable = yes
  768. smtpd_sasl_authenticated_header = yes
  769. smtpd_sasl_exceptions_networks =
  770. smtpd_sasl_local_domain =
  771. smtpd_sasl_path = private/auth_dovecot
  772. smtpd_sasl_security_options = noanonymous
  773. smtpd_sasl_service = smtp
  774. smtpd_sasl_tls_security_options = $smtpd_sasl_security_options
  775. smtpd_sasl_type = dovecot
  776. smtpd_sender_login_maps = proxy:mysql:/etc/postfix/sql/mysql_virtual_sender_acl.cf
  777. smtpd_sender_restrictions = reject_authenticated_sender_login_mismatch, permit_mynetworks, reject_sender_login_mismatch, permit_sasl_authenticated, reject_unlisted_sender, reject_unknown_sender_domain
  778. smtpd_service_name = smtpd
  779. smtpd_soft_error_limit = 3
  780. smtpd_starttls_timeout = ${stress?10}${stress:300}s
  781. smtpd_timeout = ${stress?10}${stress:300}s
  782. smtpd_tls_CAfile =
  783. smtpd_tls_CApath =
  784. smtpd_tls_always_issue_session_ids = yes
  785. smtpd_tls_ask_ccert = no
  786. smtpd_tls_auth_only = yes
  787. smtpd_tls_ccert_verifydepth = 9
  788. smtpd_tls_cert_file = /etc/ssl/mail/mail.crt
  789. smtpd_tls_ciphers = export
  790. smtpd_tls_dcert_file =
  791. smtpd_tls_dh1024_param_file = /etc/ssl/mail/dhparams.pem
  792. smtpd_tls_dh512_param_file =
  793. smtpd_tls_dkey_file = $smtpd_tls_dcert_file
  794. smtpd_tls_eccert_file =
  795. smtpd_tls_eckey_file = $smtpd_tls_eccert_file
  796. smtpd_tls_eecdh_grade = strong
  797. smtpd_tls_exclude_ciphers = ECDHE-RSA-RC4-SHA
  798. smtpd_tls_fingerprint_digest = md5
  799. smtpd_tls_key_file = /etc/ssl/mail/mail.key
  800. smtpd_tls_loglevel = 1
  801. smtpd_tls_mandatory_ciphers = high
  802. smtpd_tls_mandatory_exclude_ciphers = ECDHE-RSA-RC4-SHA
  803. smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
  804. smtpd_tls_protocols = !SSLv2, !SSLv3
  805. smtpd_tls_received_header = no
  806. smtpd_tls_req_ccert = no
  807. smtpd_tls_security_level = may
  808. smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
  809. smtpd_tls_session_cache_timeout = 3600s
  810. smtpd_tls_wrappermode = no
  811. smtpd_upstream_proxy_protocol =
  812. smtpd_upstream_proxy_timeout = 5s
  813. smtpd_use_tls = no
  814. soft_bounce = no
  815. stale_lock_time = 500s
  816. stress =
  817. strict_7bit_headers = no
  818. strict_8bitmime = no
  819. strict_8bitmime_body = no
  820. strict_mailbox_ownership = yes
  821. strict_mime_encoding_domain = no
  822. strict_rfc821_envelopes = no
  823. sun_mailtool_compatibility = no
  824. swap_bangpath = yes
  825. syslog_facility = mail
  826. syslog_name = ${multi_instance_name:postfix}${multi_instance_name?$multi_instance_name}
  827. tcp_windowsize = 0
  828. tls_append_default_CA = no
  829. tls_daemon_random_bytes = 32
  830. tls_dane_digest_agility = on
  831. tls_dane_digests = sha512 sha256
  832. tls_dane_trust_anchor_digest_enable = yes
  833. tls_disable_workarounds =
  834. tls_eecdh_strong_curve = prime256v1
  835. tls_eecdh_ultra_curve = secp384r1
  836. tls_export_cipherlist = aNULL:-aNULL:ALL:+RC4:@STRENGTH
  837. tls_high_cipherlist = EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA
  838. tls_legacy_public_key_fingerprints = no
  839. tls_low_cipherlist = aNULL:-aNULL:ALL:!EXPORT:+RC4:@STRENGTH
  840. tls_medium_cipherlist = aNULL:-aNULL:ALL:!EXPORT:!LOW:+RC4:@STRENGTH
  841. tls_null_cipherlist = eNULL:!aNULL
  842. tls_preempt_cipherlist = no
  843. tls_random_bytes = 32
  844. tls_random_exchange_name = ${data_directory}/prng_exch
  845. tls_random_prng_update_period = 3600s
  846. tls_random_reseed_period = 3600s
  847. tls_random_source = dev:/dev/urandom
  848. tls_ssl_options =
  849. tls_wildcard_matches_multiple_labels = yes
  850. tlsmgr_service_name = tlsmgr
  851. tlsproxy_enforce_tls = $smtpd_enforce_tls
  852. tlsproxy_service_name = tlsproxy
  853. tlsproxy_tls_CAfile = $smtpd_tls_CAfile
  854. tlsproxy_tls_CApath = $smtpd_tls_CApath
  855. tlsproxy_tls_always_issue_session_ids = $smtpd_tls_always_issue_session_ids
  856. tlsproxy_tls_ask_ccert = $smtpd_tls_ask_ccert
  857. tlsproxy_tls_ccert_verifydepth = $smtpd_tls_ccert_verifydepth
  858. tlsproxy_tls_cert_file = $smtpd_tls_cert_file
  859. tlsproxy_tls_ciphers = $smtpd_tls_ciphers
  860. tlsproxy_tls_dcert_file = $smtpd_tls_dcert_file
  861. tlsproxy_tls_dh1024_param_file = $smtpd_tls_dh1024_param_file
  862. tlsproxy_tls_dh512_param_file = $smtpd_tls_dh512_param_file
  863. tlsproxy_tls_dkey_file = $smtpd_tls_dkey_file
  864. tlsproxy_tls_eccert_file = $smtpd_tls_eccert_file
  865. tlsproxy_tls_eckey_file = $smtpd_tls_eckey_file
  866. tlsproxy_tls_eecdh_grade = $smtpd_tls_eecdh_grade
  867. tlsproxy_tls_exclude_ciphers = $smtpd_tls_exclude_ciphers
  868. tlsproxy_tls_fingerprint_digest = $smtpd_tls_fingerprint_digest
  869. tlsproxy_tls_key_file = $smtpd_tls_key_file
  870. tlsproxy_tls_loglevel = $smtpd_tls_loglevel
  871. tlsproxy_tls_mandatory_ciphers = $smtpd_tls_mandatory_ciphers
  872. tlsproxy_tls_mandatory_exclude_ciphers = $smtpd_tls_mandatory_exclude_ciphers
  873. tlsproxy_tls_mandatory_protocols = $smtpd_tls_mandatory_protocols
  874. tlsproxy_tls_protocols = $smtpd_tls_protocols
  875. tlsproxy_tls_req_ccert = $smtpd_tls_req_ccert
  876. tlsproxy_tls_security_level = $smtpd_tls_security_level
  877. tlsproxy_use_tls = $smtpd_use_tls
  878. tlsproxy_watchdog_timeout = 10s
  879. trace_service_name = trace
  880. transport_maps =
  881. transport_retry_time = 60s
  882. trigger_timeout = 10s
  883. undisclosed_recipients_header =
  884. unknown_address_reject_code = 450
  885. unknown_address_tempfail_action = $reject_tempfail_action
  886. unknown_client_reject_code = 450
  887. unknown_helo_hostname_tempfail_action = $reject_tempfail_action
  888. unknown_hostname_reject_code = 450
  889. unknown_local_recipient_reject_code = 550
  890. unknown_relay_recipient_reject_code = 550
  891. unknown_virtual_alias_reject_code = 550
  892. unknown_virtual_mailbox_reject_code = 550
  893. unverified_recipient_defer_code = 450
  894. unverified_recipient_reject_code = 450
  895. unverified_recipient_reject_reason =
  896. unverified_recipient_tempfail_action = $reject_tempfail_action
  897. unverified_sender_defer_code = 450
  898. unverified_sender_reject_code = 450
  899. unverified_sender_reject_reason =
  900. unverified_sender_tempfail_action = $reject_tempfail_action
  901. uucp_delivery_slot_cost = $default_delivery_slot_cost
  902. uucp_delivery_slot_discount = $default_delivery_slot_discount
  903. uucp_delivery_slot_loan = $default_delivery_slot_loan
  904. uucp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  905. uucp_destination_concurrency_limit = $default_destination_concurrency_limit
  906. uucp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  907. uucp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  908. uucp_destination_rate_delay = $default_destination_rate_delay
  909. uucp_destination_recipient_limit = $default_destination_recipient_limit
  910. uucp_extra_recipient_limit = $default_extra_recipient_limit
  911. uucp_initial_destination_concurrency = $initial_destination_concurrency
  912. uucp_minimum_delivery_slots = $default_minimum_delivery_slots
  913. uucp_recipient_limit = $default_recipient_limit
  914. uucp_recipient_refill_delay = $default_recipient_refill_delay
  915. uucp_recipient_refill_limit = $default_recipient_refill_limit
  916. uucp_time_limit = $command_time_limit
  917. verp_delimiter_filter = -=+
  918. virtual_alias_domains = $virtual_alias_maps
  919. virtual_alias_expansion_limit = 1000
  920. virtual_alias_maps = proxy:mysql:/etc/postfix/sql/mysql_virtual_alias_maps.cf, proxy:mysql:/etc/postfix/sql/mysql_virtual_spamalias_maps.cf, proxy:mysql:/etc/postfix/sql/mysql_virtual_alias_domain_maps.cf, proxy:mysql:/etc/postfix/sql/mysql_virtual_alias_domain_catchall_maps.cf
  921. virtual_alias_recursion_limit = 1000
  922. virtual_delivery_slot_cost = $default_delivery_slot_cost
  923. virtual_delivery_slot_discount = $default_delivery_slot_discount
  924. virtual_delivery_slot_loan = $default_delivery_slot_loan
  925. virtual_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  926. virtual_destination_concurrency_limit = $default_destination_concurrency_limit
  927. virtual_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  928. virtual_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  929. virtual_destination_rate_delay = $default_destination_rate_delay
  930. virtual_destination_recipient_limit = $default_destination_recipient_limit
  931. virtual_extra_recipient_limit = $default_extra_recipient_limit
  932. virtual_gid_maps = static:5000
  933. virtual_initial_destination_concurrency = $initial_destination_concurrency
  934. virtual_mailbox_base = /var/vmail/
  935. virtual_mailbox_domains = proxy:mysql:/etc/postfix/sql/mysql_virtual_domains_maps.cf
  936. virtual_mailbox_limit = 51200000
  937. virtual_mailbox_lock = fcntl, dotlock
  938. virtual_mailbox_maps = proxy:mysql:/etc/postfix/sql/mysql_virtual_mailbox_maps.cf, proxy:mysql:/etc/postfix/sql/mysql_virtual_alias_domain_mailbox_maps.cf
  939. virtual_minimum_delivery_slots = $default_minimum_delivery_slots
  940. virtual_minimum_uid = 104
  941. virtual_recipient_limit = $default_recipient_limit
  942. virtual_recipient_refill_delay = $default_recipient_refill_delay
  943. virtual_recipient_refill_limit = $default_recipient_refill_limit
  944. virtual_transport = lmtp:unix:private/dovecot-lmtp
  945. virtual_uid_maps = static:5000
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!