1 # Postfix Configuration options
2 # Used by alternc.install with postconf
3 # WARNING: this script is not used directly by postfix! it is parse by alternc.install
4 home_mailbox = Maildir/
5 smtpd_banner = $myhostname ESMTP
6 header_checks = regexp:/etc/postfix/header_checks
7 body_checks = regexp:/etc/postfix/body_checks
8 local_destination_concurrency_limit = 8
9 # nb of parallel delivery to the same destination
10 default_destination_concurrency_limit = 3
11 # nb of recipients per delivery
12 default_destination_recipient_limit = 6
13 # max number of recipients per message
14 smtpd_recipient_limit = 500
15 # limit connections to local server to 50 per 5m period
16 anvil_rate_time_unit = 5m
17 smtpd_client_connection_rate_limit=50
18 # do not fallback on the second mx when mail is greylisted
19 # (this solves a bug in postfix which fallback to
20 # alternate MX after receiving 4XX SMTP replies introduced
21 # in "[Incompat 20031223]")
22 smtp_mx_session_limit = 1
25 smtpd_tls_dcert_file = /etc/ssl/certs/alternc-postfix.pem
26 smtpd_tls_dkey_file = /etc/ssl/private/alternc-postfix.key
27 smtpd_tls_key_file = $smtpd_tls_dkey_file
28 smtpd_tls_cert_file = $smtpd_tls_dcert_file
29 smtp_tls_dcert_file = $smtpd_tls_dcert_file
30 smtp_tls_dkey_file = $smtpd_tls_dkey_file
31 smtp_tls_cert_file = $smtpd_tls_dcert_file
32 smtp_tls_key_file = $smtpd_tls_dkey_file
33 smtpd_tls_CApath = /etc/ssl/certs/
34 smtp_tls_CApath = $smtpd_tls_CApath
35 smtpd_tls_loglevel = 0
36 smtpd_tls_received_header = yes
37 smtpd_tls_session_cache_timeout = 3600s
38 smtpd_tls_auth_only = no
40 smtp_tls_security_level = may
41 smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
42 smtpd_tls_protocols = TLSv1, TLSv1.1, TLSv1.2
43 smtp_tls_protocols = TLSv1, TLSv1.1, TLSv1.2
44 smtpd_tls_exclude_ciphers = aNULL, DES, 3DES, MD5, DES+MD5, RC4
45 smtp_tls_exclude_ciphers = aNULL, DES, 3DES, MD5, DES+MD5, RC4
46 tls_preempt_cipherlist = yes
47 smtpd_tls_mandatory_ciphers = high
48 smtp_tls_mandatory_ciphers = high
49 smtpd_tls_ciphers = high
50 smtp_tls_ciphers = high
52 smtpd_sasl_auth_enable = yes
53 smtpd_sasl_local_domain = postfix
54 smtpd_sasl_security_options = noanonymous
55 broken_sasl_auth_clients = yes
56 smtpd_sasl_type=dovecot
57 smtpd_sasl_path=private/auth
58 smtpd_sasl_auth_enable=yes
60 alias_maps = hash:/etc/aliases
61 alias_database = hash:/etc/aliases
62 virtual_alias_maps = proxy:mysql:/etc/postfix/myalias.cf,proxy:mysql:/etc/postfix/mymail2mail.cf
63 virtual_alias_domains =
64 virtual_mailbox_domains = proxy:mysql:/etc/postfix/mydomain.cf
65 virtual_mailbox_maps = proxy:mysql:/etc/postfix/myvirtual.cf
66 virtual_mailbox_base = %%ALTERNC_MAIL%%
67 virtual_minimum_uid = 2000
68 virtual_gid_maps = proxy:mysql:/etc/postfix/mygid.cf
69 virtual_uid_maps = proxy:mysql:/etc/postfix/mygid.cf
70 relay_recipient_maps = $virtual_alias_maps
71 relay_domains = proxy:mysql:/etc/postfix/myrelay-domain.cf
72 transport_maps = proxy:mysql:/etc/postfix/mytransport.cf
73 dovecot_destination_recipient_limit = 1
74 mailman_destination_recipient_limit = 1
75 smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_invalid_hostname, reject_non_fqdn_hostname, reject_non_fqdn_sender, reject_rbl_client zen.spamhaus.org, reject_non_fqdn_recipient, reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_unauth_pipelining, reject_unlisted_recipient, reject_unauth_destination
77 milter_default_action = accept
79 smtpd_milters = inet:127.0.0.1:8891
80 non_smtpd_milters = inet:127.0.0.1:8891
81 message_size_limit = 100000000
82 virtual_mailbox_limit = 0
83 mailbox_size_limit = 0
84 enable_original_recipient = no
1.9.1