Forum Debian Users Gang

#command_directory = /usr/sbin
mail_owner = postfix
mydomain = dred.blogdns.net
myhostname = dred

myorigin = dred.blogdns.net
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases

mydestination = dred.blogdns.net, $mydomain, $myhostname, localhost, localhost.localdomain,

mynetworks = 127.0.0.1/8 192.168.1.1/32
inet_interfaces = all
inet_protocols = ipv4

home_mailbox = Maildir/
mail_spool_directory = /home/

smtpd_banner = ESMTP on $myhostname !

mailbox_size_limit = 10
recipient_delimiter = +

biff = no
append_dot_mydomain = no
relayhost =

#AUTH SMTP
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth

smtpd_sasl_auth_enable = yes
smtpd_sasl2_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
smtpd_sasl_local_domain = myhostname

smtpd_recipient_restrictions =
    permit_mynetworks,
 permit_sasl_authenticated,
    reject_unauth_destination,
    reject_unknown_recipient_domain,
    reject_non_fqdn_recipient

smtpd_client_restrictions =
    permit_sasl_authenticated,
    reject_unknown_client,
    reject_rbl_client dul.dnsbl.sorbs.net,
    reject_rbl_client list.dsbl.org,
    reject_rbl_client sbl.spamhaus.org,
    reject_rbl_client cbl.abuseat.org

smtpd_sender_restrictions =
    permit_sasl_authenticated,
    reject_unknown_sender_domain,
    reject_non_fqdn_sender,
    reject_unknown_address
mailbox_command = procmail -a "$EXTENSION"
#TLS
smtpd_tls_auth_only = yes
smtp_use_tls = yes
smtpd_use_tls = yes
smtp_tls_note_starttls_offer = yes
smtpd_tls_key_file = /etc/postfix/ssl/mail.pem
smtpd_tls_cert_file = /etc/postfix/ssl/mail.pem
smtpd_tls_CAfile = /etc/postfix/ssl/mail.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache
tls_random_source = dev:/dev/urandom