# General
mail_owner = postfix
setgid_group = postdrop
delay_warning_time = 4
smtp_address_preference = ipv4
# Directories
html_directory = no
command_directory = /usr/sbin
daemon_directory = /usr/libexec/postfix
queue_directory = /var/spool/postfix
sendmail_path = /usr/sbin/sendmail.postfix
newaliases_path = /usr/bin/newaliases.postfix
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
# Networking
inet_interfaces = all
mydomain = ΤΟDOMAINTOUSERVER
myhostname = ΤΟDOMAINTOUSERVER
mynetworks = $config_directory/mynetworks
mydestination = $myhostname, localhost.$mydomain, localhost
relay_domains = mysql:/etc/postfix/mysql-relay_domains_maps.cf
# Aliases
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
transport_maps = hash:/etc/postfix/transport
# Virtual Mailboxes from MySQL
virtual_mailbox_domains = mysql:/etc/postfix/mysql-virtual_domains_maps.cf
virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual_mailbox_maps.cf
virtual_alias_maps = mysql:/etc/postfix/mysql-virtual_alias_maps.cf, hash:/etc/postfix/discard_aliases
virtual_uid_maps = mysql:/etc/postfix/mysql-virtual_mailbox_uid_maps.cf
virtual_gid_maps = mysql:/etc/postfix/mysql-virtual_mailbox_gid_maps.cf
virtual_mailbox_base = /var/vmail
virtual_transport = lmtp:unix:private/dovecot-lmtp
virtual_alias_domains =
dovecot_destination_recipient_limit = 1
# SASL Authentication
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_sasl_local_domain = $myhostname
broken_sasl_auth_clients = yes
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
# TLS
smtp_use_tls = yes
smtpd_use_tls = yes
smtpd_tls_security_level = may
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom
smtp_tls_session_cache_database = btree:$data_directory/smtp_tls_session_cache
smtpd_tls_key_file = /etc/pki/tls/private/hostname.key
smtpd_tls_cert_file = /etc/pki/tls/certs/hostname.bundle
# Restrictions
smtpd_client_restrictions =
smtpd_helo_restrictions =
smtpd_sender_restrictions = check_sender_access hash:/etc/postfix/sender_whitelist, check_sender_access hash:/etc/postfix/sender_blacklist
smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_rbl_client zen.spamhaus.org, reject_rbl_client bl.spamcop.net
smtpd_helo_required = yes
disable_vrfy_command = yes
smtpd_data_restrictions = reject_unauth_pipelining
unknown_local_recipient_reject_code = 550
# Limits
message_size_limit = 20480000
mailbox_size_limit = 2048000000
anvil_rate_time_unit = 3600s
smtpd_client_message_rate_limit = 500
# Milter (π.χ. spamassassin/clamav)
smtpd_milters = inet:127.0.0.1:8891
non_smtpd_milters = $smtpd_milters
milter_default_action = accept
milter_protocol = 2
# Debugging
debug_peer_level = 2
debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
xxgdb $daemon_directory/$process_name $process_id & sleep 5
Σε όλα τα virtual hosts μπαίνει το 127.0.0.1 γιατί χρησιμοποιεί socket. Με localhost προκαλεί fails.
Φτιάχνουμε και ένα αρχείο discard_aliases προαιρετικά για τα mails του root. Να μην μας πρήζει αν δεν υπάρχει δηλαδή.
root@ΣΕΡΒΕΡΝΑΜΕ discard
admin@ΣΕΡΒΕΡΝΑΜΕ discard