Administrace komentářů

#main.cf

compatibility_level = 2  
queue_directory = /var/spool/postfix  
command_directory = /usr/bin  
daemon_directory = /usr/lib/postfix/bin 
data_directory = /var/lib/postfix 
mail_owner = postfix 
myhostname = XXX.XXX.net 
mydomain = XXX.net  
myorigin = $mydomain 
smtp_generic_maps = hash:/etc/postfix/mk_sender_generic_map  
inet_interfaces = all  
mydestination = $myhostname, localhost.$mydomain, localhost  
unknown_local_recipient_reject_code = 550 
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 172.17.30.4 
alias_maps = hash:/etc/postfix/aliases  
alias_database = $alias_maps  
debug_peer_level = 1 
#debug_peer_list = 172.17.30.4 
debugger_command = 
<> PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin  
<> ddd $daemon_directory/$process_name $process_id & sleep 5 
sendmail_path = /usr/bin/sendmail 
newaliases_path = /usr/bin/newaliases 
mailq_path = /usr/bin/mailq 
setgid_group = postdrop  
html_directory = no  
manpage_directory = /usr/share/man  
sample_directory = /etc/postfix 
readme_directory = /usr/share/doc/postfix 
inet_protocols = ipv4  
meta_directory = /etc/postfix 
shlib_directory = /usr/lib/postfix  
  
smtpd_tls_cert_file=/etc/letsencrypt/live/XXX.XXX.net/fullchain.pem  
smtpd_tls_key_file=/etc/letsencrypt/live/XXX.XXX.net/privkey.pem 
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache 
  
smtpd_tls_exclude_ciphers = aNULL, eNULL, EXPORT, DES, RC4, MD5, PSK, aECDH, EDH-DSS-DES-CBC3-SHA, EDH-RSA-DES-CBC3-SHA, KRB5-DES, CBC3-SHA  
smtpd_tls_dh1024_param_file = ${config_directory}/mk_dhparams.pem 
  
smtp_tls_security_level = encrypt 
smtp_tls_ciphers = high # or "export" to "medium" or "low" 
smtp_tls_protocols = !SSLv2, !SSLv3 
smtp_tls_policy_maps = hash:/etc/postfix/mk_smtp_tls_policy  
  
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache 
smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt 

smtp_sender_dependent_authentication = yes  
sender_dependent_relayhost_maps = hash:/etc/postfix/mk_sender_relayhost_map 
smtp_sasl_auth_enable = yes 
sender_dependent_relayhost_maps = hash:/etc/postfix/mk_sender_relayhost_map 
smtp_sasl_password_maps = hash:/etc/postfix/mk_sasl_passwd 

smtp_sasl_security_options = noanonymous  
smtpd_peername_lookup = no 

# master.cf

# ==========================================================================  
# service type  private unpriv  chroot  wakeup  maxproc command + args  
# (yes) (yes) (no)  (never) (100)  
# ==========================================================================  
#smtp  inet  n - n - - smtpd 
#smtp  inet  n - n - 1 postscreen 
#smtpd pass  - - n - - smtpd 
#dnsblog unix  - - n - 0 dnsblog 
#tlsproxy  unix  - - n - 0 tlsproxy 
submission inet n - n - - smtpd  
  -o smtpd_tls_security_level=encrypt 
  -o smtpd_sasl_auth_enable=yes 
  -o smtpd_tls_auth_only=yes  
  -o smtpd_sasl_type=dovecot  
  -o smtpd_sasl_path=private/auth 
  -o smtpd_sasl_security_options=noanonymous  
  -o smtpd_sasl_local_domain=$myhostname  
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject  
  -o smtpd_recipient_restrictions=reject_non_fqdn_recipient,reject_unknown_recipient_domain,permit_sasl_authenticated,reject 

smtpd_peername_lookup = no