Guest User

Untitled

a guest
Jul 19th, 2020
99
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 46.42 KB | None | 0 0
  1. 2bounce_notice_recipient = postmaster
  2. access_map_defer_code = 450
  3. access_map_reject_code = 554
  4. address_verify_cache_cleanup_interval = 12h
  5. address_verify_default_transport = $default_transport
  6. address_verify_local_transport = $local_transport
  7. address_verify_map = btree:$data_directory/verify_cache
  8. address_verify_negative_cache = yes
  9. address_verify_negative_expire_time = 3d
  10. address_verify_negative_refresh_time = 3h
  11. address_verify_pending_request_limit = 5000
  12. address_verify_poll_count = ${stress?{1}:{3}}
  13. address_verify_poll_delay = 3s
  14. address_verify_positive_expire_time = 31d
  15. address_verify_positive_refresh_time = 7d
  16. address_verify_relay_transport = $relay_transport
  17. address_verify_relayhost = $relayhost
  18. address_verify_sender = $double_bounce_sender
  19. address_verify_sender_dependent_default_transport_maps = $sender_dependent_default_transport_maps
  20. address_verify_sender_dependent_relayhost_maps = $sender_dependent_relayhost_maps
  21. address_verify_sender_ttl = 0s
  22. address_verify_service_name = verify
  23. address_verify_transport_maps = $transport_maps
  24. address_verify_virtual_transport = $virtual_transport
  25. alias_database = hash:/etc/aliases
  26. alias_maps = hash:/etc/aliases, nis:mail.aliases
  27. allow_mail_to_commands = alias, forward
  28. allow_mail_to_files = alias, forward
  29. allow_min_user = no
  30. allow_percent_hack = no
  31. allow_untrusted_routing = no
  32. alternate_config_directories =
  33. always_add_missing_headers = no
  34. always_bcc =
  35. anvil_rate_time_unit = 60s
  36. anvil_status_update_time = 600s
  37. append_at_myorigin = yes
  38. append_dot_mydomain = ${{$compatibility_level} < {1} ? {yes} : {no}}
  39. application_event_drain_time = 100s
  40. authorized_flush_users = static:anyone
  41. authorized_mailq_users = static:anyone
  42. authorized_submit_users = static:anyone
  43. backwards_bounce_logfile_compatibility = yes
  44. berkeley_db_create_buffer_size = 16777216
  45. berkeley_db_read_buffer_size = 131072
  46. best_mx_transport =
  47. biff = no
  48. body_checks =
  49. body_checks_size_limit = 51200
  50. bounce_notice_recipient = postmaster
  51. bounce_queue_lifetime = 5d
  52. bounce_service_name = bounce
  53. bounce_size_limit = 50000
  54. bounce_template_file =
  55. broken_sasl_auth_clients = no
  56. bsmtp_delivery_slot_cost = $default_delivery_slot_cost
  57. bsmtp_delivery_slot_discount = $default_delivery_slot_discount
  58. bsmtp_delivery_slot_loan = $default_delivery_slot_loan
  59. bsmtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  60. bsmtp_destination_concurrency_limit = $default_destination_concurrency_limit
  61. bsmtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  62. bsmtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  63. bsmtp_destination_rate_delay = $default_destination_rate_delay
  64. bsmtp_destination_recipient_limit = $default_destination_recipient_limit
  65. bsmtp_extra_recipient_limit = $default_extra_recipient_limit
  66. bsmtp_initial_destination_concurrency = $initial_destination_concurrency
  67. bsmtp_minimum_delivery_slots = $default_minimum_delivery_slots
  68. bsmtp_recipient_limit = $default_recipient_limit
  69. bsmtp_recipient_refill_delay = $default_recipient_refill_delay
  70. bsmtp_recipient_refill_limit = $default_recipient_refill_limit
  71. bsmtp_time_limit = $command_time_limit
  72. bsmtp_transport_rate_delay = $default_transport_rate_delay
  73. canonical_classes = envelope_sender, envelope_recipient, header_sender, header_recipient
  74. canonical_maps =
  75. cleanup_service_name = cleanup
  76. command_directory = /usr/sbin
  77. command_execution_directory =
  78. command_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
  79. command_time_limit = 1000s
  80. compatibility_level = 2
  81. config_directory = /etc/postfix
  82. confirm_delay_cleared = no
  83. connection_cache_protocol_timeout = 5s
  84. connection_cache_service_name = scache
  85. connection_cache_status_update_time = 600s
  86. connection_cache_ttl_limit = 2s
  87. content_filter =
  88. cyrus_sasl_config_path =
  89. daemon_directory = /usr/lib/postfix/sbin
  90. daemon_table_open_error_is_fatal = no
  91. daemon_timeout = 18000s
  92. data_directory = /var/lib/postfix
  93. debug_peer_level = 2
  94. debug_peer_list =
  95. debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd $daemon_directory/$process_name $process_id & sleep 5
  96. default_database_type = hash
  97. default_delivery_slot_cost = 5
  98. default_delivery_slot_discount = 50
  99. default_delivery_slot_loan = 3
  100. default_delivery_status_filter =
  101. default_destination_concurrency_failed_cohort_limit = 1
  102. default_destination_concurrency_limit = 20
  103. default_destination_concurrency_negative_feedback = 1
  104. default_destination_concurrency_positive_feedback = 1
  105. default_destination_rate_delay = 0s
  106. default_destination_recipient_limit = 50
  107. default_extra_recipient_limit = 1000
  108. default_filter_nexthop =
  109. default_minimum_delivery_slots = 3
  110. default_privs = nobody
  111. default_process_limit = 100
  112. default_rbl_reply = $rbl_code Service unavailable; $rbl_class [$rbl_what] blocked using $rbl_domain${rbl_reason?; $rbl_reason}
  113. default_recipient_limit = 20000
  114. default_recipient_refill_delay = 5s
  115. default_recipient_refill_limit = 100
  116. default_transport = smtp
  117. default_transport_rate_delay = 0s
  118. default_verp_delimiters = +=
  119. defer_code = 450
  120. defer_service_name = defer
  121. defer_transports =
  122. delay_logging_resolution_limit = 2
  123. delay_notice_recipient = postmaster
  124. delay_warning_time = 0h
  125. deliver_lock_attempts = 20
  126. deliver_lock_delay = 1s
  127. destination_concurrency_feedback_debug = no
  128. detect_8bit_encoding_header = yes
  129. disable_dns_lookups = no
  130. disable_mime_input_processing = no
  131. disable_mime_output_conversion = no
  132. disable_verp_bounces = no
  133. disable_vrfy_command = yes
  134. dns_ncache_ttl_fix_enable = no
  135. dnsblog_reply_delay = 0s
  136. dnsblog_service_name = dnsblog
  137. dont_remove = 0
  138. double_bounce_sender = double-bounce
  139. dovecot_delivery_slot_cost = $default_delivery_slot_cost
  140. dovecot_delivery_slot_discount = $default_delivery_slot_discount
  141. dovecot_delivery_slot_loan = $default_delivery_slot_loan
  142. dovecot_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  143. dovecot_destination_concurrency_limit = $default_destination_concurrency_limit
  144. dovecot_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  145. dovecot_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  146. dovecot_destination_rate_delay = $default_destination_rate_delay
  147. dovecot_destination_recipient_limit = 1
  148. dovecot_extra_recipient_limit = $default_extra_recipient_limit
  149. dovecot_initial_destination_concurrency = $initial_destination_concurrency
  150. dovecot_minimum_delivery_slots = $default_minimum_delivery_slots
  151. dovecot_recipient_limit = $default_recipient_limit
  152. dovecot_recipient_refill_delay = $default_recipient_refill_delay
  153. dovecot_recipient_refill_limit = $default_recipient_refill_limit
  154. dovecot_time_limit = $command_time_limit
  155. dovecot_transport_rate_delay = $default_transport_rate_delay
  156. duplicate_filter_limit = 1000
  157. empty_address_default_transport_maps_lookup_key = <>
  158. empty_address_recipient = MAILER-DAEMON
  159. empty_address_relayhost_maps_lookup_key = <>
  160. enable_idna2003_compatibility = no
  161. enable_long_queue_ids = yes
  162. enable_original_recipient = no
  163. error_delivery_slot_cost = $default_delivery_slot_cost
  164. error_delivery_slot_discount = $default_delivery_slot_discount
  165. error_delivery_slot_loan = $default_delivery_slot_loan
  166. error_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  167. error_destination_concurrency_limit = $default_destination_concurrency_limit
  168. error_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  169. error_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  170. error_destination_rate_delay = $default_destination_rate_delay
  171. error_destination_recipient_limit = $default_destination_recipient_limit
  172. error_extra_recipient_limit = $default_extra_recipient_limit
  173. error_initial_destination_concurrency = $initial_destination_concurrency
  174. error_minimum_delivery_slots = $default_minimum_delivery_slots
  175. error_notice_recipient = postmaster
  176. error_recipient_limit = $default_recipient_limit
  177. error_recipient_refill_delay = $default_recipient_refill_delay
  178. error_recipient_refill_limit = $default_recipient_refill_limit
  179. error_service_name = error
  180. error_transport_rate_delay = $default_transport_rate_delay
  181. execution_directory_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
  182. expand_owner_alias = no
  183. export_environment = TZ MAIL_CONFIG LANG
  184. fallback_transport =
  185. fallback_transport_maps =
  186. fast_flush_domains = $relay_domains
  187. fast_flush_purge_time = 7d
  188. fast_flush_refresh_time = 12h
  189. fault_injection_code = 0
  190. flush_service_name = flush
  191. fork_attempts = 5
  192. fork_delay = 1s
  193. forward_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
  194. forward_path = $home/.forward${recipient_delimiter}${extension}, $home/.forward
  195. frozen_delivered_to = yes
  196. hash_queue_depth = 1
  197. hash_queue_names = deferred, defer
  198. header_address_token_limit = 10240
  199. header_checks =
  200. header_from_format = standard
  201. header_size_limit = 102400
  202. helpful_warnings = yes
  203. home_mailbox =
  204. hopcount_limit = 50
  205. html_directory = /usr/share/doc/postfix/html
  206. ifmail_delivery_slot_cost = $default_delivery_slot_cost
  207. ifmail_delivery_slot_discount = $default_delivery_slot_discount
  208. ifmail_delivery_slot_loan = $default_delivery_slot_loan
  209. ifmail_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  210. ifmail_destination_concurrency_limit = $default_destination_concurrency_limit
  211. ifmail_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  212. ifmail_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  213. ifmail_destination_rate_delay = $default_destination_rate_delay
  214. ifmail_destination_recipient_limit = $default_destination_recipient_limit
  215. ifmail_extra_recipient_limit = $default_extra_recipient_limit
  216. ifmail_initial_destination_concurrency = $initial_destination_concurrency
  217. ifmail_minimum_delivery_slots = $default_minimum_delivery_slots
  218. ifmail_recipient_limit = $default_recipient_limit
  219. ifmail_recipient_refill_delay = $default_recipient_refill_delay
  220. ifmail_recipient_refill_limit = $default_recipient_refill_limit
  221. ifmail_time_limit = $command_time_limit
  222. ifmail_transport_rate_delay = $default_transport_rate_delay
  223. ignore_mx_lookup_error = no
  224. import_environment = MAIL_CONFIG MAIL_DEBUG MAIL_LOGTAG TZ XAUTHORITY DISPLAY LANG=C POSTLOG_SERVICE POSTLOG_HOSTNAME
  225. in_flow_delay = 1s
  226. inet_interfaces = all
  227. inet_protocols = all
  228. initial_destination_concurrency = 5
  229. internal_mail_filter_classes =
  230. invalid_hostname_reject_code = 501
  231. ipc_idle = 5s
  232. ipc_timeout = 3600s
  233. ipc_ttl = 1000s
  234. line_length_limit = 2048
  235. lmdb_map_size = 16777216
  236. lmtp_address_preference = any
  237. lmtp_address_verify_target = rcpt
  238. lmtp_assume_final = no
  239. lmtp_balance_inet_protocols = yes
  240. lmtp_bind_address =
  241. lmtp_bind_address6 =
  242. lmtp_body_checks =
  243. lmtp_cname_overrides_servername = no
  244. lmtp_connect_timeout = 0s
  245. lmtp_connection_cache_destinations =
  246. lmtp_connection_cache_on_demand = yes
  247. lmtp_connection_cache_time_limit = 2s
  248. lmtp_connection_reuse_count_limit = 0
  249. lmtp_connection_reuse_time_limit = 300s
  250. lmtp_data_done_timeout = 600s
  251. lmtp_data_init_timeout = 120s
  252. lmtp_data_xfer_timeout = 180s
  253. lmtp_defer_if_no_mx_address_found = no
  254. lmtp_delivery_slot_cost = $default_delivery_slot_cost
  255. lmtp_delivery_slot_discount = $default_delivery_slot_discount
  256. lmtp_delivery_slot_loan = $default_delivery_slot_loan
  257. lmtp_delivery_status_filter = $default_delivery_status_filter
  258. lmtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  259. lmtp_destination_concurrency_limit = $default_destination_concurrency_limit
  260. lmtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  261. lmtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  262. lmtp_destination_rate_delay = $default_destination_rate_delay
  263. lmtp_destination_recipient_limit = $default_destination_recipient_limit
  264. lmtp_discard_lhlo_keyword_address_maps =
  265. lmtp_discard_lhlo_keywords =
  266. lmtp_dns_reply_filter =
  267. lmtp_dns_resolver_options =
  268. lmtp_dns_support_level =
  269. lmtp_enforce_tls = no
  270. lmtp_extra_recipient_limit = $default_extra_recipient_limit
  271. lmtp_fallback_relay =
  272. lmtp_generic_maps =
  273. lmtp_header_checks =
  274. lmtp_host_lookup = dns
  275. lmtp_initial_destination_concurrency = $initial_destination_concurrency
  276. lmtp_lhlo_name = $myhostname
  277. lmtp_lhlo_timeout = 300s
  278. lmtp_line_length_limit = 998
  279. lmtp_mail_timeout = 300s
  280. lmtp_mime_header_checks =
  281. lmtp_minimum_delivery_slots = $default_minimum_delivery_slots
  282. lmtp_mx_address_limit = 5
  283. lmtp_mx_session_limit = 2
  284. lmtp_nested_header_checks =
  285. lmtp_per_record_deadline = no
  286. lmtp_pix_workaround_delay_time = 10s
  287. lmtp_pix_workaround_maps =
  288. lmtp_pix_workaround_threshold_time = 500s
  289. lmtp_pix_workarounds = disable_esmtp,delay_dotcrlf
  290. lmtp_quit_timeout = 300s
  291. lmtp_quote_rfc821_envelope = yes
  292. lmtp_randomize_addresses = yes
  293. lmtp_rcpt_timeout = 300s
  294. lmtp_recipient_limit = $default_recipient_limit
  295. lmtp_recipient_refill_delay = $default_recipient_refill_delay
  296. lmtp_recipient_refill_limit = $default_recipient_refill_limit
  297. lmtp_reply_filter =
  298. lmtp_rset_timeout = 20s
  299. lmtp_sasl_auth_cache_name =
  300. lmtp_sasl_auth_cache_time = 90d
  301. lmtp_sasl_auth_enable = no
  302. lmtp_sasl_auth_soft_bounce = yes
  303. lmtp_sasl_mechanism_filter =
  304. lmtp_sasl_password_maps =
  305. lmtp_sasl_path =
  306. lmtp_sasl_security_options = noplaintext, noanonymous
  307. lmtp_sasl_tls_security_options = $lmtp_sasl_security_options
  308. lmtp_sasl_tls_verified_security_options = $lmtp_sasl_tls_security_options
  309. lmtp_sasl_type = cyrus
  310. lmtp_send_dummy_mail_auth = no
  311. lmtp_send_xforward_command = no
  312. lmtp_sender_dependent_authentication = no
  313. lmtp_skip_5xx_greeting = yes
  314. lmtp_skip_quit_response = no
  315. lmtp_starttls_timeout = 300s
  316. lmtp_tcp_port = 24
  317. lmtp_tls_CAfile =
  318. lmtp_tls_CApath =
  319. lmtp_tls_block_early_mail_reply = no
  320. lmtp_tls_cert_file =
  321. lmtp_tls_chain_files =
  322. lmtp_tls_ciphers = medium
  323. lmtp_tls_connection_reuse = no
  324. lmtp_tls_dcert_file =
  325. lmtp_tls_dkey_file = $lmtp_tls_dcert_file
  326. lmtp_tls_eccert_file =
  327. lmtp_tls_eckey_file = $lmtp_tls_eccert_file
  328. lmtp_tls_enforce_peername = yes
  329. lmtp_tls_exclude_ciphers =
  330. lmtp_tls_fingerprint_cert_match =
  331. lmtp_tls_fingerprint_digest = md5
  332. lmtp_tls_force_insecure_host_tlsa_lookup = no
  333. lmtp_tls_key_file = $lmtp_tls_cert_file
  334. lmtp_tls_loglevel = 0
  335. lmtp_tls_mandatory_ciphers = medium
  336. lmtp_tls_mandatory_exclude_ciphers =
  337. lmtp_tls_mandatory_protocols = !SSLv2 !SSLv3
  338. lmtp_tls_note_starttls_offer = no
  339. lmtp_tls_per_site =
  340. lmtp_tls_policy_maps =
  341. lmtp_tls_protocols = !SSLv2 !SSLv3
  342. lmtp_tls_scert_verifydepth = 9
  343. lmtp_tls_secure_cert_match = nexthop
  344. lmtp_tls_security_level =
  345. lmtp_tls_servername =
  346. lmtp_tls_session_cache_database =
  347. lmtp_tls_session_cache_timeout = 3600s
  348. lmtp_tls_trust_anchor_file =
  349. lmtp_tls_verify_cert_match = hostname
  350. lmtp_tls_wrappermode = no
  351. lmtp_transport_rate_delay = $default_transport_rate_delay
  352. lmtp_use_tls = no
  353. lmtp_xforward_timeout = 300s
  354. local_command_shell =
  355. local_delivery_slot_cost = $default_delivery_slot_cost
  356. local_delivery_slot_discount = $default_delivery_slot_discount
  357. local_delivery_slot_loan = $default_delivery_slot_loan
  358. local_delivery_status_filter = $default_delivery_status_filter
  359. local_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  360. local_destination_concurrency_limit = 2
  361. local_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  362. local_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  363. local_destination_rate_delay = $default_destination_rate_delay
  364. local_destination_recipient_limit = 1
  365. local_extra_recipient_limit = $default_extra_recipient_limit
  366. local_header_rewrite_clients = permit_inet_interfaces
  367. local_initial_destination_concurrency = $initial_destination_concurrency
  368. local_minimum_delivery_slots = $default_minimum_delivery_slots
  369. local_recipient_limit = $default_recipient_limit
  370. local_recipient_maps = proxy:unix:passwd.byname $alias_maps
  371. local_recipient_refill_delay = $default_recipient_refill_delay
  372. local_recipient_refill_limit = $default_recipient_refill_limit
  373. local_transport = local:$myhostname
  374. local_transport_rate_delay = $default_transport_rate_delay
  375. luser_relay =
  376. mail_name = Postfix
  377. mail_owner = postfix
  378. mail_release_date = 20200312
  379. mail_spool_directory = /var/mail
  380. mail_version = 3.4.10
  381. mailbox_command =
  382. mailbox_command_maps =
  383. mailbox_delivery_lock = fcntl, dotlock
  384. mailbox_size_limit = 51200000
  385. mailbox_transport =
  386. mailbox_transport_maps =
  387. maildrop_delivery_slot_cost = $default_delivery_slot_cost
  388. maildrop_delivery_slot_discount = $default_delivery_slot_discount
  389. maildrop_delivery_slot_loan = $default_delivery_slot_loan
  390. maildrop_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  391. maildrop_destination_concurrency_limit = $default_destination_concurrency_limit
  392. maildrop_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  393. maildrop_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  394. maildrop_destination_rate_delay = $default_destination_rate_delay
  395. maildrop_destination_recipient_limit = $default_destination_recipient_limit
  396. maildrop_extra_recipient_limit = $default_extra_recipient_limit
  397. maildrop_initial_destination_concurrency = $initial_destination_concurrency
  398. maildrop_minimum_delivery_slots = $default_minimum_delivery_slots
  399. maildrop_recipient_limit = $default_recipient_limit
  400. maildrop_recipient_refill_delay = $default_recipient_refill_delay
  401. maildrop_recipient_refill_limit = $default_recipient_refill_limit
  402. maildrop_time_limit = $command_time_limit
  403. maildrop_transport_rate_delay = $default_transport_rate_delay
  404. maillog_file =
  405. maillog_file_compressor = gzip
  406. maillog_file_prefixes = /var, /dev/stdout
  407. maillog_file_rotate_suffix = %Y%M%d-%H%M%S
  408. mailman_delivery_slot_cost = $default_delivery_slot_cost
  409. mailman_delivery_slot_discount = $default_delivery_slot_discount
  410. mailman_delivery_slot_loan = $default_delivery_slot_loan
  411. mailman_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  412. mailman_destination_concurrency_limit = $default_destination_concurrency_limit
  413. mailman_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  414. mailman_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  415. mailman_destination_rate_delay = $default_destination_rate_delay
  416. mailman_destination_recipient_limit = $default_destination_recipient_limit
  417. mailman_extra_recipient_limit = $default_extra_recipient_limit
  418. mailman_initial_destination_concurrency = $initial_destination_concurrency
  419. mailman_minimum_delivery_slots = $default_minimum_delivery_slots
  420. mailman_recipient_limit = $default_recipient_limit
  421. mailman_recipient_refill_delay = $default_recipient_refill_delay
  422. mailman_recipient_refill_limit = $default_recipient_refill_limit
  423. mailman_time_limit = $command_time_limit
  424. mailman_transport_rate_delay = $default_transport_rate_delay
  425. mailq_path = /usr/bin/mailq
  426. manpage_directory = /usr/share/man
  427. maps_rbl_domains =
  428. maps_rbl_reject_code = 554
  429. masquerade_classes = envelope_sender, header_sender, header_recipient
  430. masquerade_domains =
  431. masquerade_exceptions =
  432. master_service_disable =
  433. max_idle = 100s
  434. max_use = 100
  435. maximal_backoff_time = 4000s
  436. maximal_queue_lifetime = 5d
  437. message_drop_headers = bcc, content-length, resent-bcc, return-path
  438. message_reject_characters =
  439. message_size_limit = 15728640
  440. message_strip_characters =
  441. meta_directory = /etc/postfix
  442. milter_command_timeout = 30s
  443. milter_connect_macros = j {daemon_name} {daemon_addr} v
  444. milter_connect_timeout = 30s
  445. milter_content_timeout = 300s
  446. milter_data_macros = i
  447. milter_default_action = tempfail
  448. milter_end_of_data_macros = i
  449. milter_end_of_header_macros = i
  450. milter_header_checks =
  451. milter_helo_macros = {tls_version} {cipher} {cipher_bits} {cert_subject} {cert_issuer}
  452. milter_macro_daemon_name = $myhostname
  453. milter_macro_defaults =
  454. milter_macro_v = $mail_name $mail_version
  455. milter_mail_macros = i {auth_type} {auth_authen} {auth_author} {mail_addr} {mail_host} {mail_mailer}
  456. milter_protocol = 6
  457. milter_rcpt_macros = i {rcpt_addr} {rcpt_host} {rcpt_mailer}
  458. milter_unknown_command_macros =
  459. mime_boundary_length_limit = 2048
  460. mime_header_checks = $header_checks
  461. mime_nesting_limit = 100
  462. minimal_backoff_time = 300s
  463. multi_instance_directories =
  464. multi_instance_enable = no
  465. multi_instance_group =
  466. multi_instance_name =
  467. multi_instance_wrapper =
  468. multi_recipient_bounce_reject_code = 550
  469. mydestination = $myhostname, localhost, localhost.localdomain
  470. mydomain = mail.intern.bdevgw.de
  471. myhostname = bgrsld-mail0.intern.bdevgw.de
  472. mynetworks = 127.0.0.1 [::1]
  473. mynetworks_style = ${{$compatibility_level} < {2} ? {subnet} : {host}}
  474. myorigin = $mydomain
  475. nested_header_checks = $header_checks
  476. newaliases_path = /usr/bin/newaliases
  477. non_fqdn_reject_code = 504
  478. non_smtpd_milters =
  479. notify_classes = resource, software
  480. openssl_path = openssl
  481. owner_request_special = yes
  482. parent_domain_matches_subdomains = debug_peer_list,fast_flush_domains,mynetworks,permit_mx_backup_networks,qmqpd_authorized_clients,relay_domains,smtpd_access_maps
  483. permit_mx_backup_networks =
  484. pickup_service_name = pickup
  485. pipe_delivery_status_filter = $default_delivery_status_filter
  486. plaintext_reject_code = 450
  487. postlog_service_name = postlog
  488. postlogd_watchdog_timeout = 10s
  489. postmulti_control_commands = reload flush
  490. postmulti_start_commands = start
  491. postmulti_stop_commands = stop abort drain quick-stop
  492. postscreen_access_list = permit_mynetworks cidr:/etc/postfix/postscreen_access.cidr
  493. postscreen_bare_newline_action = ignore
  494. postscreen_bare_newline_enable = no
  495. postscreen_bare_newline_ttl = 30d
  496. postscreen_blacklist_action = drop
  497. postscreen_cache_cleanup_interval = 12h
  498. postscreen_cache_map = btree:$data_directory/postscreen_cache
  499. postscreen_cache_retention_time = 7d
  500. postscreen_client_connection_count_limit = $smtpd_client_connection_count_limit
  501. postscreen_command_count_limit = 20
  502. postscreen_command_filter =
  503. postscreen_command_time_limit = ${stress?{10}:{300}}s
  504. postscreen_disable_vrfy_command = $disable_vrfy_command
  505. postscreen_discard_ehlo_keyword_address_maps = $smtpd_discard_ehlo_keyword_address_maps
  506. postscreen_discard_ehlo_keywords = $smtpd_discard_ehlo_keywords
  507. postscreen_dnsbl_action = drop
  508. postscreen_dnsbl_max_ttl = ${postscreen_dnsbl_ttl?{$postscreen_dnsbl_ttl}:{1}}h
  509. postscreen_dnsbl_min_ttl = 60s
  510. postscreen_dnsbl_reply_map = texthash:/etc/postfix/postscreen_dnsbl_reply
  511. postscreen_dnsbl_sites =
  512. postscreen_dnsbl_threshold = 2
  513. postscreen_dnsbl_timeout = 10s
  514. postscreen_dnsbl_whitelist_threshold = -2
  515. postscreen_enforce_tls = $smtpd_enforce_tls
  516. postscreen_expansion_filter = $smtpd_expansion_filter
  517. postscreen_forbidden_commands = $smtpd_forbidden_commands
  518. postscreen_greet_action = drop
  519. postscreen_greet_banner = $smtpd_banner
  520. postscreen_greet_ttl = 1d
  521. postscreen_greet_wait = ${stress?{2}:{6}}s
  522. postscreen_helo_required = $smtpd_helo_required
  523. postscreen_non_smtp_command_action = drop
  524. postscreen_non_smtp_command_enable = no
  525. postscreen_non_smtp_command_ttl = 30d
  526. postscreen_pipelining_action = enforce
  527. postscreen_pipelining_enable = no
  528. postscreen_pipelining_ttl = 30d
  529. postscreen_post_queue_limit = $default_process_limit
  530. postscreen_pre_queue_limit = $default_process_limit
  531. postscreen_reject_footer = $smtpd_reject_footer
  532. postscreen_reject_footer_maps = $smtpd_reject_footer_maps
  533. postscreen_tls_security_level = $smtpd_tls_security_level
  534. postscreen_upstream_proxy_protocol =
  535. postscreen_upstream_proxy_timeout = 5s
  536. postscreen_use_tls = $smtpd_use_tls
  537. postscreen_watchdog_timeout = 10s
  538. postscreen_whitelist_interfaces = static:all
  539. prepend_delivered_header = command, file, forward
  540. process_id = 26263
  541. process_id_directory = pid
  542. process_name = postconf
  543. propagate_unmatched_extensions = canonical, virtual
  544. proxy_interfaces =
  545. proxy_read_maps = $canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps
  546. proxy_write_maps = $smtp_sasl_auth_cache_name $lmtp_sasl_auth_cache_name $address_verify_map $postscreen_cache_map
  547. proxymap_service_name = proxymap
  548. proxywrite_service_name = proxywrite
  549. qmgr_clog_warn_time = 300s
  550. qmgr_daemon_timeout = 1000s
  551. qmgr_fudge_factor = 100
  552. qmgr_ipc_timeout = 60s
  553. qmgr_message_active_limit = 20000
  554. qmgr_message_recipient_limit = 20000
  555. qmgr_message_recipient_minimum = 10
  556. qmqpd_authorized_clients =
  557. qmqpd_client_port_logging = no
  558. qmqpd_error_delay = 1s
  559. qmqpd_timeout = 300s
  560. queue_directory = /var/spool/postfix
  561. queue_file_attribute_count_limit = 100
  562. queue_minfree = 0
  563. queue_run_delay = 300s
  564. queue_service_name = qmgr
  565. rbl_reply_maps =
  566. readme_directory = /usr/share/doc/postfix
  567. receive_override_options =
  568. recipient_bcc_maps =
  569. recipient_canonical_classes = envelope_recipient, header_recipient
  570. recipient_canonical_maps =
  571. recipient_delimiter = +
  572. reject_code = 554
  573. reject_tempfail_action = defer_if_permit
  574. relay_clientcerts =
  575. relay_delivery_slot_cost = $default_delivery_slot_cost
  576. relay_delivery_slot_discount = $default_delivery_slot_discount
  577. relay_delivery_slot_loan = $default_delivery_slot_loan
  578. relay_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  579. relay_destination_concurrency_limit = $default_destination_concurrency_limit
  580. relay_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  581. relay_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  582. relay_destination_rate_delay = $default_destination_rate_delay
  583. relay_destination_recipient_limit = $default_destination_recipient_limit
  584. relay_domains = $mydestination
  585. relay_domains_reject_code = 554
  586. relay_extra_recipient_limit = $default_extra_recipient_limit
  587. relay_initial_destination_concurrency = $initial_destination_concurrency
  588. relay_minimum_delivery_slots = $default_minimum_delivery_slots
  589. relay_recipient_limit = $default_recipient_limit
  590. relay_recipient_maps =
  591. relay_recipient_refill_delay = $default_recipient_refill_delay
  592. relay_recipient_refill_limit = $default_recipient_refill_limit
  593. relay_transport = relay
  594. relay_transport_rate_delay = $default_transport_rate_delay
  595. relayhost =
  596. relocated_maps =
  597. remote_header_rewrite_domain =
  598. require_home_directory = no
  599. reset_owner_alias = no
  600. resolve_dequoted_address = yes
  601. resolve_null_domain = no
  602. resolve_numeric_domain = no
  603. retry_delivery_slot_cost = $default_delivery_slot_cost
  604. retry_delivery_slot_discount = $default_delivery_slot_discount
  605. retry_delivery_slot_loan = $default_delivery_slot_loan
  606. retry_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  607. retry_destination_concurrency_limit = $default_destination_concurrency_limit
  608. retry_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  609. retry_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  610. retry_destination_rate_delay = $default_destination_rate_delay
  611. retry_destination_recipient_limit = $default_destination_recipient_limit
  612. retry_extra_recipient_limit = $default_extra_recipient_limit
  613. retry_initial_destination_concurrency = $initial_destination_concurrency
  614. retry_minimum_delivery_slots = $default_minimum_delivery_slots
  615. retry_recipient_limit = $default_recipient_limit
  616. retry_recipient_refill_delay = $default_recipient_refill_delay
  617. retry_recipient_refill_limit = $default_recipient_refill_limit
  618. retry_transport_rate_delay = $default_transport_rate_delay
  619. rewrite_service_name = rewrite
  620. sample_directory = /etc/postfix
  621. scalemail-backend_delivery_slot_cost = $default_delivery_slot_cost
  622. scalemail-backend_delivery_slot_discount = $default_delivery_slot_discount
  623. scalemail-backend_delivery_slot_loan = $default_delivery_slot_loan
  624. scalemail-backend_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  625. scalemail-backend_destination_concurrency_limit = $default_destination_concurrency_limit
  626. scalemail-backend_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  627. scalemail-backend_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  628. scalemail-backend_destination_rate_delay = $default_destination_rate_delay
  629. scalemail-backend_destination_recipient_limit = $default_destination_recipient_limit
  630. scalemail-backend_extra_recipient_limit = $default_extra_recipient_limit
  631. scalemail-backend_initial_destination_concurrency = $initial_destination_concurrency
  632. scalemail-backend_minimum_delivery_slots = $default_minimum_delivery_slots
  633. scalemail-backend_recipient_limit = $default_recipient_limit
  634. scalemail-backend_recipient_refill_delay = $default_recipient_refill_delay
  635. scalemail-backend_recipient_refill_limit = $default_recipient_refill_limit
  636. scalemail-backend_time_limit = $command_time_limit
  637. scalemail-backend_transport_rate_delay = $default_transport_rate_delay
  638. send_cyrus_sasl_authzid = no
  639. sender_bcc_maps =
  640. sender_canonical_classes = envelope_sender, header_sender
  641. sender_canonical_maps =
  642. sender_dependent_default_transport_maps =
  643. sender_dependent_relayhost_maps =
  644. sendmail_fix_line_endings = always
  645. sendmail_path = /usr/sbin/sendmail
  646. service_name =
  647. service_throttle_time = 60s
  648. setgid_group = postdrop
  649. shlib_directory = /usr/lib/postfix
  650. show_user_unknown_table_name = no
  651. showq_service_name = showq
  652. smtp_address_preference = any
  653. smtp_address_verify_target = rcpt
  654. smtp_always_send_ehlo = yes
  655. smtp_balance_inet_protocols = yes
  656. smtp_bind_address =
  657. smtp_bind_address6 =
  658. smtp_body_checks =
  659. smtp_cname_overrides_servername = no
  660. smtp_connect_timeout = 30s
  661. smtp_connection_cache_destinations =
  662. smtp_connection_cache_on_demand = yes
  663. smtp_connection_cache_time_limit = 2s
  664. smtp_connection_reuse_count_limit = 0
  665. smtp_connection_reuse_time_limit = 300s
  666. smtp_data_done_timeout = 600s
  667. smtp_data_init_timeout = 120s
  668. smtp_data_xfer_timeout = 180s
  669. smtp_defer_if_no_mx_address_found = no
  670. smtp_delivery_slot_cost = $default_delivery_slot_cost
  671. smtp_delivery_slot_discount = $default_delivery_slot_discount
  672. smtp_delivery_slot_loan = $default_delivery_slot_loan
  673. smtp_delivery_status_filter = $default_delivery_status_filter
  674. smtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  675. smtp_destination_concurrency_limit = $default_destination_concurrency_limit
  676. smtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  677. smtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  678. smtp_destination_rate_delay = $default_destination_rate_delay
  679. smtp_destination_recipient_limit = $default_destination_recipient_limit
  680. smtp_discard_ehlo_keyword_address_maps =
  681. smtp_discard_ehlo_keywords =
  682. smtp_dns_reply_filter =
  683. smtp_dns_resolver_options =
  684. smtp_dns_support_level =
  685. smtp_enforce_tls = no
  686. smtp_extra_recipient_limit = $default_extra_recipient_limit
  687. smtp_fallback_relay = $fallback_relay
  688. smtp_generic_maps =
  689. smtp_header_checks =
  690. smtp_helo_name = $myhostname
  691. smtp_helo_timeout = 300s
  692. smtp_host_lookup = dns
  693. smtp_initial_destination_concurrency = $initial_destination_concurrency
  694. smtp_line_length_limit = 998
  695. smtp_mail_timeout = 300s
  696. smtp_mime_header_checks =
  697. smtp_minimum_delivery_slots = $default_minimum_delivery_slots
  698. smtp_mx_address_limit = 5
  699. smtp_mx_session_limit = 2
  700. smtp_nested_header_checks =
  701. smtp_never_send_ehlo = no
  702. smtp_per_record_deadline = no
  703. smtp_pix_workaround_delay_time = 10s
  704. smtp_pix_workaround_maps =
  705. smtp_pix_workaround_threshold_time = 500s
  706. smtp_pix_workarounds = disable_esmtp,delay_dotcrlf
  707. smtp_quit_timeout = 300s
  708. smtp_quote_rfc821_envelope = yes
  709. smtp_randomize_addresses = yes
  710. smtp_rcpt_timeout = 300s
  711. smtp_recipient_limit = $default_recipient_limit
  712. smtp_recipient_refill_delay = $default_recipient_refill_delay
  713. smtp_recipient_refill_limit = $default_recipient_refill_limit
  714. smtp_reply_filter =
  715. smtp_rset_timeout = 20s
  716. smtp_sasl_auth_cache_name =
  717. smtp_sasl_auth_cache_time = 90d
  718. smtp_sasl_auth_enable = no
  719. smtp_sasl_auth_soft_bounce = yes
  720. smtp_sasl_mechanism_filter =
  721. smtp_sasl_password_maps =
  722. smtp_sasl_path =
  723. smtp_sasl_security_options = noplaintext, noanonymous
  724. smtp_sasl_tls_security_options = $smtp_sasl_security_options
  725. smtp_sasl_tls_verified_security_options = $smtp_sasl_tls_security_options
  726. smtp_sasl_type = cyrus
  727. smtp_send_dummy_mail_auth = no
  728. smtp_send_xforward_command = no
  729. smtp_sender_dependent_authentication = no
  730. smtp_skip_5xx_greeting = yes
  731. smtp_skip_quit_response = yes
  732. smtp_starttls_timeout = 300s
  733. smtp_tcp_port = smtp
  734. smtp_tls_CAfile = $smtpd_tls_CAfile
  735. smtp_tls_CApath = /etc/ssl/certs
  736. smtp_tls_block_early_mail_reply = no
  737. smtp_tls_cert_file =
  738. smtp_tls_chain_files =
  739. smtp_tls_ciphers = medium
  740. smtp_tls_connection_reuse = no
  741. smtp_tls_dane_insecure_mx_policy = dane
  742. smtp_tls_dcert_file =
  743. smtp_tls_dkey_file = $smtp_tls_dcert_file
  744. smtp_tls_eccert_file =
  745. smtp_tls_eckey_file = $smtp_tls_eccert_file
  746. smtp_tls_enforce_peername = yes
  747. smtp_tls_exclude_ciphers =
  748. smtp_tls_fingerprint_cert_match =
  749. smtp_tls_fingerprint_digest = md5
  750. smtp_tls_force_insecure_host_tlsa_lookup = no
  751. smtp_tls_key_file = $smtp_tls_cert_file
  752. smtp_tls_loglevel = 1
  753. smtp_tls_mandatory_ciphers = medium
  754. smtp_tls_mandatory_exclude_ciphers =
  755. smtp_tls_mandatory_protocols = !SSLv2 !SSLv3
  756. smtp_tls_note_starttls_offer = yes
  757. smtp_tls_per_site =
  758. smtp_tls_policy_maps =
  759. smtp_tls_protocols = !SSLv2 !SSLv3
  760. smtp_tls_scert_verifydepth = 9
  761. smtp_tls_secure_cert_match = nexthop, dot-nexthop
  762. smtp_tls_security_level = may
  763. smtp_tls_servername =
  764. smtp_tls_session_cache_database =
  765. smtp_tls_session_cache_timeout = 3600s
  766. smtp_tls_trust_anchor_file =
  767. smtp_tls_verify_cert_match = hostname
  768. smtp_tls_wrappermode = no
  769. smtp_transport_rate_delay = $default_transport_rate_delay
  770. smtp_use_tls = no
  771. smtp_xforward_timeout = 300s
  772. smtpd_authorized_verp_clients = $authorized_verp_clients
  773. smtpd_authorized_xclient_hosts =
  774. smtpd_authorized_xforward_hosts =
  775. smtpd_banner = $myhostname ESMTP $mail_name
  776. smtpd_client_auth_rate_limit = 0
  777. smtpd_client_connection_count_limit = 50
  778. smtpd_client_connection_rate_limit = 0
  779. smtpd_client_event_limit_exceptions = ${smtpd_client_connection_limit_exceptions:$mynetworks}
  780. smtpd_client_message_rate_limit = 0
  781. smtpd_client_new_tls_session_rate_limit = 0
  782. smtpd_client_port_logging = no
  783. smtpd_client_recipient_rate_limit = 0
  784. smtpd_client_restrictions =
  785. smtpd_command_filter = pcre:/etc/postfix/command_filter.pcre
  786. smtpd_data_restrictions = reject_unauth_pipelining
  787. smtpd_delay_open_until_valid_rcpt = yes
  788. smtpd_delay_reject = yes
  789. smtpd_discard_ehlo_keyword_address_maps =
  790. smtpd_discard_ehlo_keywords =
  791. smtpd_dns_reply_filter =
  792. smtpd_end_of_data_restrictions = check_policy_service inet:127.0.0.1:7777
  793. smtpd_enforce_tls = no
  794. smtpd_error_sleep_time = 1s
  795. smtpd_etrn_restrictions =
  796. smtpd_expansion_filter = \t\40!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~
  797. smtpd_forbidden_commands = CONNECT GET POST
  798. smtpd_hard_error_limit = ${stress?{1}:{20}}
  799. smtpd_helo_required = yes
  800. smtpd_helo_restrictions = permit_mynetworks permit_sasl_authenticated check_helo_access pcre:/etc/postfix/helo_access.pcre reject_non_fqdn_helo_hostname reject_unknown_helo_hostname
  801. smtpd_history_flush_threshold = 100
  802. smtpd_junk_command_limit = ${stress?{1}:{100}}
  803. smtpd_log_access_permit_actions =
  804. smtpd_milter_maps =
  805. smtpd_milters =
  806. smtpd_noop_commands =
  807. smtpd_null_access_lookup_key = <>
  808. smtpd_peername_lookup = yes
  809. smtpd_per_record_deadline = ${stress?{yes}:{no}}
  810. smtpd_policy_service_default_action = 451 4.3.5 Server configuration problem
  811. smtpd_policy_service_max_idle = 300s
  812. smtpd_policy_service_max_ttl = 1000s
  813. smtpd_policy_service_policy_context =
  814. smtpd_policy_service_request_limit = 0
  815. smtpd_policy_service_retry_delay = 1s
  816. smtpd_policy_service_timeout = 100s
  817. smtpd_policy_service_try_limit = 2
  818. smtpd_proxy_ehlo = $myhostname
  819. smtpd_proxy_filter =
  820. smtpd_proxy_options =
  821. smtpd_proxy_timeout = 100s
  822. smtpd_recipient_limit = 1000
  823. smtpd_recipient_overshoot_limit = 1000
  824. smtpd_recipient_restrictions = reject_non_fqdn_recipient reject_unlisted_recipient check_policy_service inet:127.0.0.1:7777 permit_mynetworks permit_sasl_authenticated reject_unauth_destination check_policy_service inet:127.0.0.1:12340
  825. smtpd_reject_footer =
  826. smtpd_reject_footer_maps =
  827. smtpd_reject_unlisted_recipient = yes
  828. smtpd_reject_unlisted_sender = yes
  829. smtpd_relay_restrictions = ${{$compatibility_level} < {1} ? {} : {permit_mynetworks, permit_sasl_authenticated, defer_unauth_destination}}
  830. smtpd_restriction_classes =
  831. smtpd_sasl_auth_enable = no
  832. smtpd_sasl_authenticated_header = no
  833. smtpd_sasl_exceptions_networks =
  834. smtpd_sasl_local_domain =
  835. smtpd_sasl_path = private/dovecot-auth
  836. smtpd_sasl_response_limit = 12288
  837. smtpd_sasl_security_options = noanonymous
  838. smtpd_sasl_service = smtp
  839. smtpd_sasl_tls_security_options = $smtpd_sasl_security_options
  840. smtpd_sasl_type = dovecot
  841. smtpd_sender_login_maps =
  842. smtpd_sender_restrictions = reject_non_fqdn_sender reject_unlisted_sender permit_mynetworks permit_sasl_authenticated check_sender_access pcre:/etc/postfix/sender_access.pcre reject_unknown_sender_domain
  843. smtpd_service_name = smtpd
  844. smtpd_soft_error_limit = 10
  845. smtpd_starttls_timeout = ${stress?{10}:{300}}s
  846. smtpd_timeout = ${stress?{10}:{300}}s
  847. smtpd_tls_CAfile = /etc/ssl/certs/2020.mail.intern.bdevgw.de.crt
  848. smtpd_tls_CApath = /etc/ssl/certs
  849. smtpd_tls_always_issue_session_ids = yes
  850. smtpd_tls_ask_ccert = no
  851. smtpd_tls_auth_only = no
  852. smtpd_tls_ccert_verifydepth = 9
  853. smtpd_tls_cert_file = /etc/ssl/certs/2020.mail.intern.bdevgw.de.crt
  854. smtpd_tls_chain_files =
  855. smtpd_tls_ciphers = medium
  856. smtpd_tls_dcert_file =
  857. smtpd_tls_dh1024_param_file = /etc/ssl/dh2048_param.pem
  858. smtpd_tls_dh512_param_file = /etc/ssl/dh512_param.pem
  859. smtpd_tls_dkey_file = $smtpd_tls_dcert_file
  860. smtpd_tls_eccert_file =
  861. smtpd_tls_eckey_file = $smtpd_tls_eccert_file
  862. smtpd_tls_eecdh_grade = auto
  863. smtpd_tls_exclude_ciphers = aNULL, eNULL, EXPORT, DES, RC4, MD5, PSK, aECDH, EDH-DSS-DES-CBC3-SHA, EDH-RSA-DES-CDC3-SHA, KRB5-DE5, CBC3-SHA
  864. smtpd_tls_fingerprint_digest = md5
  865. smtpd_tls_key_file = /etc/ssl/private/2020.mail.intern.bdevgw.de.key
  866. smtpd_tls_loglevel = 1
  867. smtpd_tls_mandatory_ciphers = medium
  868. smtpd_tls_mandatory_exclude_ciphers =
  869. smtpd_tls_mandatory_protocols = !SSLv2 !SSLv3
  870. smtpd_tls_protocols = !SSLv2 !SSLv3
  871. smtpd_tls_received_header = no
  872. smtpd_tls_req_ccert = no
  873. smtpd_tls_security_level = may
  874. smtpd_tls_session_cache_database =
  875. smtpd_tls_session_cache_timeout = 3600s
  876. smtpd_tls_wrappermode = no
  877. smtpd_upstream_proxy_protocol =
  878. smtpd_upstream_proxy_timeout = 5s
  879. smtpd_use_tls = no
  880. smtputf8_autodetect_classes = sendmail, verify
  881. smtputf8_enable = ${{$compatibility_level} < {1} ? {no} : {yes}}
  882. soft_bounce = no
  883. stale_lock_time = 500s
  884. stress =
  885. strict_7bit_headers = no
  886. strict_8bitmime = no
  887. strict_8bitmime_body = no
  888. strict_mailbox_ownership = yes
  889. strict_mime_encoding_domain = no
  890. strict_rfc821_envelopes = no
  891. strict_smtputf8 = no
  892. sun_mailtool_compatibility = no
  893. swap_bangpath = no
  894. syslog_facility = mail
  895. syslog_name = ${multi_instance_name?{$multi_instance_name}:{postfix}}
  896. tcp_windowsize = 0
  897. tls_append_default_CA = no
  898. tls_daemon_random_bytes = 32
  899. tls_dane_digests = sha512 sha256
  900. tls_disable_workarounds =
  901. tls_eecdh_auto_curves = X25519 X448 prime256v1 secp521r1 secp384r1
  902. tls_eecdh_strong_curve = prime256v1
  903. tls_eecdh_ultra_curve = secp384r1
  904. tls_export_cipherlist = aNULL:-aNULL:HIGH:MEDIUM:LOW:EXPORT:+RC4:@STRENGTH
  905. tls_fast_shutdown_enable = yes
  906. tls_high_cipherlist = aNULL:-aNULL:HIGH:@STRENGTH
  907. tls_legacy_public_key_fingerprints = no
  908. tls_low_cipherlist = aNULL:-aNULL:HIGH:MEDIUM:LOW:+RC4:@STRENGTH
  909. tls_medium_cipherlist = aNULL:-aNULL:HIGH:MEDIUM:+RC4:@STRENGTH
  910. tls_null_cipherlist = eNULL:!aNULL
  911. tls_preempt_cipherlist = no
  912. tls_random_bytes = 32
  913. tls_random_exchange_name = ${data_directory}/prng_exch
  914. tls_random_prng_update_period = 3600s
  915. tls_random_reseed_period = 3600s
  916. tls_random_source = dev:/dev/urandom
  917. tls_server_sni_maps =
  918. tls_session_ticket_cipher = aes-256-cbc
  919. tls_ssl_options =
  920. tls_wildcard_matches_multiple_labels = yes
  921. tlsmgr_service_name = tlsmgr
  922. tlsproxy_client_CAfile = $smtp_tls_CAfile
  923. tlsproxy_client_CApath = $smtp_tls_CApath
  924. tlsproxy_client_cert_file = $smtp_tls_cert_file
  925. tlsproxy_client_chain_files = $smtp_tls_chain_files
  926. tlsproxy_client_dcert_file = $smtp_tls_dcert_file
  927. tlsproxy_client_dkey_file = $smtp_tls_dkey_file
  928. tlsproxy_client_eccert_file = $smtp_tls_eccert_file
  929. tlsproxy_client_eckey_file = $smtp_tls_eckey_file
  930. tlsproxy_client_enforce_tls = $smtp_enforce_tls
  931. tlsproxy_client_fingerprint_digest = $smtp_tls_fingerprint_digest
  932. tlsproxy_client_key_file = $smtp_tls_key_file
  933. tlsproxy_client_level = $smtp_tls_security_level
  934. tlsproxy_client_loglevel = $smtp_tls_loglevel
  935. tlsproxy_client_loglevel_parameter = smtp_tls_loglevel
  936. tlsproxy_client_per_site = $smtp_tls_per_site
  937. tlsproxy_client_policy = $smtp_tls_policy_maps
  938. tlsproxy_client_scert_verifydepth = $smtp_tls_scert_verifydepth
  939. tlsproxy_client_use_tls = $smtp_use_tls
  940. tlsproxy_enforce_tls = $smtpd_enforce_tls
  941. tlsproxy_service_name = tlsproxy
  942. tlsproxy_tls_CAfile = $smtpd_tls_CAfile
  943. tlsproxy_tls_CApath = $smtpd_tls_CApath
  944. tlsproxy_tls_always_issue_session_ids = $smtpd_tls_always_issue_session_ids
  945. tlsproxy_tls_ask_ccert = $smtpd_tls_ask_ccert
  946. tlsproxy_tls_ccert_verifydepth = $smtpd_tls_ccert_verifydepth
  947. tlsproxy_tls_cert_file = $smtpd_tls_cert_file
  948. tlsproxy_tls_chain_files = $smtpd_tls_chain_files
  949. tlsproxy_tls_ciphers = $smtpd_tls_ciphers
  950. tlsproxy_tls_dcert_file = $smtpd_tls_dcert_file
  951. tlsproxy_tls_dh1024_param_file = $smtpd_tls_dh1024_param_file
  952. tlsproxy_tls_dh512_param_file = $smtpd_tls_dh512_param_file
  953. tlsproxy_tls_dkey_file = $smtpd_tls_dkey_file
  954. tlsproxy_tls_eccert_file = $smtpd_tls_eccert_file
  955. tlsproxy_tls_eckey_file = $smtpd_tls_eckey_file
  956. tlsproxy_tls_eecdh_grade = $smtpd_tls_eecdh_grade
  957. tlsproxy_tls_exclude_ciphers = $smtpd_tls_exclude_ciphers
  958. tlsproxy_tls_fingerprint_digest = $smtpd_tls_fingerprint_digest
  959. tlsproxy_tls_key_file = $smtpd_tls_key_file
  960. tlsproxy_tls_loglevel = $smtpd_tls_loglevel
  961. tlsproxy_tls_mandatory_ciphers = $smtpd_tls_mandatory_ciphers
  962. tlsproxy_tls_mandatory_exclude_ciphers = $smtpd_tls_mandatory_exclude_ciphers
  963. tlsproxy_tls_mandatory_protocols = $smtpd_tls_mandatory_protocols
  964. tlsproxy_tls_protocols = $smtpd_tls_protocols
  965. tlsproxy_tls_req_ccert = $smtpd_tls_req_ccert
  966. tlsproxy_tls_security_level = $smtpd_tls_security_level
  967. tlsproxy_use_tls = $smtpd_use_tls
  968. tlsproxy_watchdog_timeout = 10s
  969. trace_service_name = trace
  970. transport_maps =
  971. transport_retry_time = 60s
  972. trigger_timeout = 10s
  973. undisclosed_recipients_header =
  974. unknown_address_reject_code = 450
  975. unknown_address_tempfail_action = $reject_tempfail_action
  976. unknown_client_reject_code = 450
  977. unknown_helo_hostname_tempfail_action = $reject_tempfail_action
  978. unknown_hostname_reject_code = 450
  979. unknown_local_recipient_reject_code = 550
  980. unknown_relay_recipient_reject_code = 550
  981. unknown_virtual_alias_reject_code = 550
  982. unknown_virtual_mailbox_reject_code = 550
  983. unverified_recipient_defer_code = 450
  984. unverified_recipient_reject_code = 450
  985. unverified_recipient_reject_reason =
  986. unverified_recipient_tempfail_action = $reject_tempfail_action
  987. unverified_sender_defer_code = 450
  988. unverified_sender_reject_code = 450
  989. unverified_sender_reject_reason =
  990. unverified_sender_tempfail_action = $reject_tempfail_action
  991. uucp_delivery_slot_cost = $default_delivery_slot_cost
  992. uucp_delivery_slot_discount = $default_delivery_slot_discount
  993. uucp_delivery_slot_loan = $default_delivery_slot_loan
  994. uucp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  995. uucp_destination_concurrency_limit = $default_destination_concurrency_limit
  996. uucp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  997. uucp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  998. uucp_destination_rate_delay = $default_destination_rate_delay
  999. uucp_destination_recipient_limit = $default_destination_recipient_limit
  1000. uucp_extra_recipient_limit = $default_extra_recipient_limit
  1001. uucp_initial_destination_concurrency = $initial_destination_concurrency
  1002. uucp_minimum_delivery_slots = $default_minimum_delivery_slots
  1003. uucp_recipient_limit = $default_recipient_limit
  1004. uucp_recipient_refill_delay = $default_recipient_refill_delay
  1005. uucp_recipient_refill_limit = $default_recipient_refill_limit
  1006. uucp_time_limit = $command_time_limit
  1007. uucp_transport_rate_delay = $default_transport_rate_delay
  1008. verp_delimiter_filter = -=+
  1009. virtual_alias_address_length_limit = 1000
  1010. virtual_alias_domains =
  1011. virtual_alias_expansion_limit = 1000
  1012. virtual_alias_maps = $virtual_maps
  1013. virtual_alias_recursion_limit = 1000
  1014. virtual_delivery_slot_cost = $default_delivery_slot_cost
  1015. virtual_delivery_slot_discount = $default_delivery_slot_discount
  1016. virtual_delivery_slot_loan = $default_delivery_slot_loan
  1017. virtual_delivery_status_filter = $default_delivery_status_filter
  1018. virtual_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
  1019. virtual_destination_concurrency_limit = $default_destination_concurrency_limit
  1020. virtual_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
  1021. virtual_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
  1022. virtual_destination_rate_delay = $default_destination_rate_delay
  1023. virtual_destination_recipient_limit = $default_destination_recipient_limit
  1024. virtual_extra_recipient_limit = $default_extra_recipient_limit
  1025. virtual_gid_maps = static:2000
  1026. virtual_initial_destination_concurrency = $initial_destination_concurrency
  1027. virtual_mailbox_base = /maildata/mailbox
  1028. virtual_mailbox_domains = /maildata/vhosts
  1029. virtual_mailbox_limit = 51200000
  1030. virtual_mailbox_lock = fcntl, dotlock
  1031. virtual_mailbox_maps = hash:/maildata/vmaps
  1032. virtual_minimum_delivery_slots = $default_minimum_delivery_slots
  1033. virtual_minimum_uid = 2000
  1034. virtual_recipient_limit = $default_recipient_limit
  1035. virtual_recipient_refill_delay = $default_recipient_refill_delay
  1036. virtual_recipient_refill_limit = $default_recipient_refill_limit
  1037. virtual_transport = dovecot
  1038. virtual_transport_rate_delay = $default_transport_rate_delay
  1039. virtual_uid_maps = static:2000
Add Comment
Please, Sign In to add comment