Forum Debian Users Gang

base_dir = /var/run/dovecot/
protocols = pop3 pop3s imap imaps
listen = *
disable_plaintext_auth = no
shutdown_clients = yes

#logi
log_path=/var/log/dovecot.log
info_log_path = /var/log/mail.log
log_timestamp = "%Y-%m-%d %H:%M:%S "
syslog_facility = mail

login_process_size = 64
login_greeting = Welcome. I’m ready ...
login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c
login_log_format = %$: %s

login_chroot = no
login_user = dovecot
login_process_per_connection = yes
login_processes_count = 3
login_max_processes_count = 128

mail_location = maildir:~/Maildir 

#SSL
#ssl_disable = no
ssl = yes
#ssl_cert_file = /etc/postfix/ssl/mail.pem
#ssl_key_file = /etc/postfix/ssl/mail.key
ssl_cert_file = /etc/ssl/certs/mail.pem
ssl_key_file = /etc/ssl/private/mail.key

verbose_ssl = yes
mail_access_groups = postfix

protocol imap {
}





protocol pop3 {
pop3_uidl_format = %08Xu%08Xv
} 
protocol lda {
    postmaster_address = postmaster@test.com
    }
auth_verbose = yes
auth_debug = yes



#auth default {
#    mechanisms = plain login
#
#    passdb pam {
#    }
#
#    userdb passwd {
#    }
#
#    user = root
#
#    socket listen {
#            client {
#             path = /var/spool/postfix/private/auth
#              mode = 0660
#              user = postfix
#              group = postfix
#            }
#      }
#}

auth default {
    mechanisms = plain login
    
    passdb pam {
    }
    userdb passwd {
    }
    user = root
    socket listen {
        client {
        path = /var/spool/postfix/private/auth
        mode = 0660
        user = postfix
        group = postfix
        }
    } 
}




dict {
}
plugin {
}

command_directory = /usr/sbin
mail_owner = postfix
mydomain = szczepaniak.nl
myhostname = mail.szczepaniak.nl
myorigin = /etc/mailname
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
mydestination = $mydomain, $myhostname, localhost, localhost.localdomain, mail.szczepaniak.nl
mynetworks = 127.0.0.0/8
inet_interfaces = all
inet_protocols = ipv4
home_mailbox = Maildir/
mail_spool_directory = /home/
smtpd_banner = ESMTP on $myhostname ! 
mailbox_size_limit = 0
recipient_delimiter = +
biff = no
append_dot_mydomain = no
relayhost =
policy-spf_time_limit = 3600
#AUTH SMTP
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_auth_enable = yes
smtpd_sasl2_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
#smtpd_sasl_local_domain = $myhostname
smtpd_sasl_local_domain = $mydomain

#SPAM
#smtpd_recipient_restrictions =
#            check_policy_service unix:private/policy-spf

smtpd_relay_restrictions =
#    permit_mynetworks,
#    permit_sasl_authenticated,
#    reject_unauth_destination,
#    reject_unknown_recipient_domain,
#    reject_non_fqdn_recipient
#
#smtpd_recipient_restrictions =
            reject_invalid_hostname,
            reject_unknown_recipient_domain,
            reject_unauth_pipelining,
            permit_mynetworks,
            permit_sasl_authenticated,
            reject_unauth_destination,
            reject_rbl_client multi.uribl.com,
            reject_rbl_client dsn.rfc-ignorant.org,
            reject_rbl_client dul.dnsbl.sorbs.net,
            reject_rbl_client list.dsbl.org,
            reject_rbl_client sbl-xbl.spamhaus.org,
            reject_rbl_client bl.spamcop.net,
            reject_rbl_client dnsbl.sorbs.net,
            reject_rbl_client cbl.abuseat.org,
            reject_rbl_client ix.dnsbl.manitu.net,
            reject_rbl_client combined.rbl.msrbl.net,
            reject_rbl_client rabl.nuclearelephant.com,
            check_policy_service unix:private/policy-spf
            permit

smtpd_client_restrictions =
    permit_sasl_authenticated,
    #reject_unknown_client,
    reject_rbl_client dul.dnsbl.sorbs.net,
    reject_rbl_client list.dsbl.org,
    reject_rbl_client sbl.spamhaus.org,
    reject_rbl_client cbl.abuseat.org

smtpd_sender_restrictions =
    permit_sasl_authenticated,
    reject_unknown_sender_domain,
    reject_non_fqdn_sender,
    reject_unknown_address

#TLS
#smtpd_tls_auth_only = yes
smtpd_tls_auth_only = no
#DODANE DO SECURE
#smtpd_tls_security_level = encrypt
smtpd_tls_security_level = may
smtpd_tls_wrappermode = no 
smtpd_tls_cert_file=/etc/ssl/certs/mail.pem 
smtpd_tls_key_file=/etc/ssl/private/mail.key
# mail.crt lub mail.pem - w zależności od tego, który certyfikat posiadamy
smtp_use_tls = yes
smtpd_use_tls = yes
smtp_tls_note_starttls_offer = yes
smtpd_tls_key_file = /etc/postfix/ssl/mail.pem
smtpd_tls_cert_file = /etc/postfix/ssl/mail.pem
smtpd_tls_CAfile = /etc/postfix/ssl/mail.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache
tls_random_source = dev:/dev/urandom