Administrace komentářů

# core
# program_directory = /usr/lib/postfix
command_directory = /usr/sbin
daemon_directory = /usr/lib/postfix
mail_owner = postfix
# soft_bounce = yes
# debug_peer_list = domain.tld
# debug_peer_level = 2
message_size_limit = 20240000
biff = no

milter_default_action = accept
milter_protocol = 2
smtpd_milters = inet:localhost:8891
non_smtpd_milters = inet:localhost:8891

# local
myhostname = server10.xxx.net
mydomain = xxx.net
myorigin = $myhostname
mynetworks = 127.0.0.0/24, x.x.x.x/28, x.x.x.x/24
mydestination = $myhostname localhost localhost.$mydomain localhost.localdomain
alias_maps = hash:/etc/aliases
local_recipient_maps = proxy:unix:passwd.byname $alias_maps
local_transport = local
enable_original_recipient = no
# home-mailbox = Maildir/

# virtual
virtual_mailbox_base = /var/vmail
virtual_mailbox_domains = mysql:/etc/postfix/maps/mysql_virtual_domains_maps.cf
virtual_mailbox_maps = mysql:/etc/postfix/maps/mysql_virtual_mailbox_maps.cf
virtual_alias_maps = mysql:/etc/postfix/maps/mysql_virtual_alias_maps.cf mysql:/etc/postfix/maps/mysql_virtual_mailbox_maps.cf
virtual_uid_maps = static:2000
virtual_gid_maps = static:2000

virtual_minimum_uid = 2000
virtual_transport = maildrop
# virtual_uid_maps = mysql:/etc/postfix/maps/mysql_virtual_uid.cf
# virtual_gid_maps = mysql:/etc/postfix/maps/mysql_virtual_gid.cf
maildrop_destination_recipient_limit = 1
maildrop_destination_concurrency_limit = 2
mailbox_command = /usr/bin/maildrop -d ${USER}


# backup-mx relay maps
relay_domains = proxy:mysql:/etc/postfix/maps/mysql_relay_domains_maps.cf
relay_transport = relay

# transport maps
transport_maps = hash:/etc/postfix/transport

# relocated maps
# relocated_maps = mysql:/etc/postfix/maps/mysql_virtual_relocated_maps.cf

# quota support
# virtual_mailbox_limit = 51200000
# virtual_create_maildirsize = yes
# virtual_mailbox_extended = yes
# virtual_mailbox_limit_maps = mysql:/etc/postfix/maps/mysql_virtual_mailbox_limit_maps.cf
# virtual_mailbox_limit_override = yes
# virtual_maildir_limit_message = Sorry, the user's maildir has overdrawn his diskspace quota, please try again later.
# virtual_overquota_bounce = yes

# what do we / dont we allow

smtpd_helo_required = yes
disable_vrfy_command = yes
strict_rfc821_envelopes = no

smtpd_recipient_restrictions =
    permit_mynetworks,
    permit_sasl_authenticated,
    reject_non_fqdn_helo_hostname,
    reject_unknown_helo_hostname,
    reject_unknown_reverse_client_hostname,
    reject_unauth_pipelining,
    reject_invalid_hostname,
    reject_non_fqdn_sender,
    reject_unknown_sender_domain,
    reject_unknown_recipient_domain,
    reject_unauth_destination,
#    reject_unknown_recipient_domain,
    reject_rbl_client zen.spamhaus.org,
    reject_non_fqdn_recipient,
#   check_policy_service inet:127.0.0.1:10023
#   reject_unverified_recipient

#  reject_unlisted_recipient
# reject_rbl_client relays.ordb.org,
# reject_rbl_client opm.blitzed.org,
# reject_rbl_client list.dsbl.org,
# reject_rbl_client sbl.spamhaus.org,
# reject_rbl_client cbl.abuseat.org,
# reject_rbl_client dul.dnsbl.sorbs.net

smtpd_sender_restrictions = 
		permit_sasl_authenticated,
		permit_mynetworks,
		reject_unknown_sender_domain, 
#		reject_unknown_hostname

			      
smtpd_data_restrictions =
    reject_unauth_pipelining,
    reject_multi_recipient_bounce,
    permit
			      
# SMTP AUTH (SASL)
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = 
smtpd_sasl_security_options = noanonymous
# Be nice to brokenware like Outlook Express:
broken_sasl_auth_clients = yes
			      
# Enable TLS encryption
smtpd_use_tls = yes
			      
# The location of the SSL certificate
smtpd_tls_cert_file = /etc/postfix/smtpd.cert
			      
# The location of the SSL private key
smtpd_tls_key_file = /etc/postfix/smtpd.key
			      
# Send all email through Amavis
# content_filter = smtp-amavis:[127.0.0.1]:10024