Forum Debian Users Gang

smtpd_banner = domena.tld ESMTP Exim4
biff = no

myorigin = domena.tld
myhostname = mail.domena.tld
mydomain = domena.tld
mydestination = localhost, lists.domena.tld
mynetworks_style = host
mynetworks = 127.0.0.1/32
inet_interfaces = all
inet_protocols = all


recipient_delimiter = +
home_mailbox = .maildir/

soft_bounce = yes

#Limity:
anvil_rate_time_unit = 20s
local_destination_concurrency_limit = 3
default_destination_concurrency_limit = 10
smtpd_client_connection_count_limit = 3
smtpd_client_recipient_rate_limit = 10
smtpd_client_message_rate_limit = 10
smtpd_hard_error_limit = 2
smtpd_soft_error_limit = 2
smtpd_error_sleep_time = 10
smtpd_recipient_limit = 5

# smtpd_restriction_classes = greylist
# greylist = check_policy_service unix:filtry/postgrey.sock

#Sasl Auth Dovecot
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_sasl_authenticated_header = yes
broken_sasl_auth_clients = yes

smtp_use_tls=yes
smtp_tls_security_level = may
smtp_tls_mandatory_ciphers = high
smtp_tls_protocols = !SSLv2
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/smtpsaslmaps
smtp_sasl_mechanism_filter = plain,login,cram-md5,digest-md5 
smtp_sasl_security_options = noanonymous,noplaintext
smtp_sasl_tls_security_options = noanonymous
smtp_send_xforward_command = yes
smtp_tls_block_early_mail_reply = yes

transport_maps = hash:/etc/postfix/transport
relayhost = smtp.gmail.com:587
# relayhost =

#SSL
smtpd_use_tls = yes
#  smtpd_tls_security_level = may
smtpd_tls_security_level = encrypt
smtpd_tls_auth_only = yes
smtp_tls_note_starttls_offer = yes
smtpd_tls_mandatory_ciphers = high
smtpd_tls_mandatory_protocols = !SSLv3, !SSLv2
smtpd_tls_mandatory_exclude_ciphers = aNULL, MD5
smtpd_tls_key_file = /etc/ssl/postfix/postfix.key
smtpd_tls_cert_file = /etc/ssl/postfix/postfix.crt
smtpd_tls_CAfile = /etc/ssl/postfix/postfixCA.crt
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom

strict_rfc821_envelopes = yes
smtpd_helo_required             = yes
#disable_vrfy_command            = yes
unknown_hostname_reject_code  =   550
non_fqdn_reject_code            = 550
invalid_hostname_reject_code    = 550

# smtpd_milters = unix:filtry/opendkim.sock
# non_smtpd_milters = unix:filtry/clamav-milter.sock,unix:filtry/dkimsign.sock
non_smtpd_milters = unix:filtry/dkimsign.sock


header_checks = pcre:/etc/postfix/header_checks

smtpd_relay_restrictions =    

#             #   permit_sasl_authenticated,
            #    reject_unauth_destination,
              #  reject_unknown_sender_domain,


smtpd_helo_restrictions = reject_unauth_pipelining,
                 # check_helo_access hash:/etc/postfix/helo-checks,
                # check_helo_access pcre:/etc/postfix/helo-checks.pcre,
                          reject_invalid_hostname, 
                          reject_unknown_sender_domain,
                          permit,                    




smtpd_recipient_restrictions =  permit_sasl_authenticated,
                                reject_unlisted_recipient,
                                check_recipient_access hash:/etc/postfix/recipient_acces
                              # check_helo_mx_access cidr:/etc/postfix/mx_access.cidr,
                              # check_sender_mx_access cidr:/etc/postfix/mx_access.cidr,
                                reject_non_fqdn_recipient,
                                reject_unknown_client_hostname,
                                reject_unknown_reverse_client_hostname,
                                reject_unknown_sender_domain,
                                reject_unknown_recipient_domain,
                              # reject_unverified_sender,
                                reject_invalid_helo_hostname,
                                reject_unauth_pipelining,
                                check_recipient_access hash:/etc/postfix/recipient_acces
                                reject_unauth_destination,
                                check_sender_access hash:/etc/postfix/sender_checks_my,
                                check_policy_service unix:private/spfperl,
                                check_policy_service unix:filtry/postgrey.sock, 
                              # check_policy_service inet:127.0.0.1:10030,
                              #  check_client_access regexp:/etc/postfix/check_client_fqdn,
                                permit,

smtpd_data_restrictions =  reject_unauth_pipelining,
                           reject_multi_recipient_bounce,
                           permit,

mime_header_checks = regexp:/etc/postfix/mime_header_checks

smtpd_sender_restrictions = 
                reject_sender_login_mismatch,
                  reject_unknown_sender_domain,
                   reject_non_fqdn_sender,
                reject_unknown_address,
        #         check_policy_service unix:private/spfperl,
                 permit,

                           
smtpd_sender_login_maps = mysql:/etc/postfix/mysql/mysql-sender-maps.cf                    
                           


# dovecot_destination_recipient_limit = 1
mailman_destination_recipient_limit = 1
vacation_destination_recipient_limit = 1
spamassassin_destination_recipient_limit = 1

alias_maps = 
            hash:/etc/mail/aliases
            # hash:/var/lib/mailman/data/aliases


#allow_mail_to_commands =             
#relocated_maps = mysql:/etc/postfix/mysql/mysql-relocated.cf

local_transport = lmtp:unix:private/dovecot-lmtp
# local_transport = dovecot

local_recipient_maps =  
#### $alias_maps, $relay_recipient_maps,$virtual_alias_maps, $virtual_mailbox_maps

luser_relay = jacek@domena.tld


relay_domains =lists.domena.tld
#relay_recipient_maps = hash:/var/lib/mailman/data/aliases

# virtual_transport = unix:dovecot
virtual_transport = lmtp:unix:private/dovecot-lmtp

virtual_mailbox_base = /home/domains
virtual_minimum_uid = 89
virtual_gid_maps = static:89

virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql/mysql_virtual_domains_maps.cf

virtual_mailbox_maps =
   proxy:mysql:/etc/postfix/mysql/mysql_virtual_mailbox_maps.cf,
   proxy:mysql:/etc/postfix/mysql/mysql_virtual_alias_domain_mailbox_maps.cf

virtual_alias_maps =
   proxy:mysql:/etc/postfix/mysql/mysql_virtual_alias_maps.cf,
   proxy:mysql:/etc/postfix/mysql/mysql_virtual_alias_domain_maps.cf,
   proxy:mysql:/etc/postfix/mysql/mysql_virtual_alias_domain_catchall_maps.cf
   hash:/etc/postfix/virtual



# Additional for quota support
# virtual_create_maildirsize = yes
# virtual_mailbox_extended = yes
virtual_mailbox_limit_maps = mysql:/etc/postfix/mysql/mysql_virtual_mailbox_limit_maps.cf
virtual_mailbox_limit_override = yes
virtual_maildir_limit_message = Sorry, the user's maildir has overdrawn his diskspace quota, please try again later.
virtual_overquota_bounce = yes
                     
virtual_uid_maps = static:89

notify_classes = bounce, 2bounce, delay, policy, protocol, resource, software