Differences
This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
postfix:optimized-configuration [2009/03/30 19:00] greebo |
postfix:optimized-configuration [2013/09/12 15:40] (current) zagi |
||
---|---|---|---|
Line 1: | Line 1: | ||
**main.cf** | **main.cf** | ||
< | < | ||
- | soft_bounce = yes | + | #soft_bounce = yes |
smtpd_banner = $myhostname ESMTP (NO UCE)(NO UBE) http:// | smtpd_banner = $myhostname ESMTP (NO UCE)(NO UBE) http:// | ||
biff = no | biff = no | ||
Line 9: | Line 9: | ||
# Uncomment the next line to generate " | # Uncomment the next line to generate " | ||
- | delay_warning_time = 3h | + | #delay_warning_time = 3h |
readme_directory = no | readme_directory = no | ||
- | # | + | html_directory = no |
myorigin = $myhostname | myorigin = $myhostname | ||
Line 29: | Line 29: | ||
alias_database = hash:/ | alias_database = hash:/ | ||
+ | sender_canonical_maps = hash:/ | ||
+ | recipient_canonical_maps = hash:/ | ||
allow_percent_hack = no | allow_percent_hack = no | ||
Line 44: | Line 46: | ||
< | < | ||
# TLS parameters | # TLS parameters | ||
- | tls_random_source | + | smtp_tls_security_level=may |
- | smtpd_tls_cert_file=/ | + | #obsoletes smtp_use_tls smtp_enforce_tls |
- | smtpd_tls_key_file=/ | + | smtp_tls_note_starttls_offer=yes |
+ | |||
+ | smtp_tls_CApath | ||
+ | |||
+ | smtpd_tls_security_level=may | ||
+ | # | ||
+ | |||
+ | smtp_tls_cert_file=/ | ||
+ | smtp_tls_key_file=/ | ||
+ | |||
+ | smtpd_tls_cert_file=/ | ||
+ | smtpd_tls_key_file=/ | ||
+ | |||
+ | # debuging tls | ||
+ | smtp_tls_loglevel = 0 | ||
+ | smtpd_tls_loglevel = 0 | ||
+ | |||
+ | smtpd_tls_auth_only=yes | ||
+ | smtpd_tls_received_header=yes | ||
smtpd_tls_session_cache_database = btree: | smtpd_tls_session_cache_database = btree: | ||
smtp_tls_session_cache_database = btree: | smtp_tls_session_cache_database = btree: | ||
- | ### | + | tls_random_source |
- | smtp_tls_security_level = may | + | |
- | smtpd_tls_security_level = may | + | |
+ | ### | ||
### | ### | ||
### | ### | ||
- | |||
- | # debuging tls | ||
- | # smtpd_tls_loglevel = 3 | ||
- | |||
- | # | ||
smtp_tls_note_starttls_offer = yes | smtp_tls_note_starttls_offer = yes | ||
Line 72: | Line 87: | ||
smtpd_sasl_exceptions_networks = $mynetworks | smtpd_sasl_exceptions_networks = $mynetworks | ||
- | smtpd_tls_auth_only = yes | + | |
- | smtpd_tls_received_header | + | smtpd_sasl_authenticated_header |
</ | </ | ||
Line 84: | Line 99: | ||
recipient_delimiter = + | recipient_delimiter = + | ||
inet_interfaces = all | inet_interfaces = all | ||
- | inet_protocols = ipv4 | + | inet_protocols = all |
smtpd_restriction_classes = permissive, rblcheck, greylisting, | smtpd_restriction_classes = permissive, rblcheck, greylisting, | ||
Line 108: | Line 123: | ||
check_policyd_weight = | check_policyd_weight = | ||
+ | check_client_access hash:/ | ||
check_recipient_access hash:/ | check_recipient_access hash:/ | ||
check_policy_service inet: | check_policy_service inet: | ||
Line 123: | Line 139: | ||
smtpd_helo_restrictions = | smtpd_helo_restrictions = | ||
+ | check_client_access hash:/ | ||
hash:/ | hash:/ | ||
+ | permit_sasl_authenticated | ||
+ | permit_mynetworks | ||
+ | warn_if_reject reject_invalid_hostname | ||
+ | warn_if_reject reject_non_fqdn_hostname | ||
+ | warn_if_reject reject_unknown_hostname | ||
smtpd_etrn_restrictions= | smtpd_etrn_restrictions= | ||
Line 129: | Line 151: | ||
reject | reject | ||
- | smtpd_sender_restrictions = | + | # |
+ | |||
+ | #smtpd_sender_restrictions = reject_sender_login_mismatch | ||
smtpd_recipient_restrictions = | smtpd_recipient_restrictions = | ||
Line 155: | Line 179: | ||
content_filter = smtp-amavis: | content_filter = smtp-amavis: | ||
- | lmtp_send_xforward_command = yes | + | #already in master.cf: |
- | smtp_send_xforward_command = yes | + | #lmtp_send_xforward_command = yes |
+ | #smtp_send_xforward_command = yes | ||
hash_queue_depth = 1 | hash_queue_depth = 1 | ||
Line 163: | Line 188: | ||
address_verify_sender = postar | address_verify_sender = postar | ||
address_verify_map = btree: | address_verify_map = btree: | ||
+ | |||
home_mailbox = Maildir/ | home_mailbox = Maildir/ | ||
Line 245: | Line 271: | ||
**/ | **/ | ||
- | 0.0.0.0/8 | + | < |
- | 1.0.0.0/ | + | # http://www.cymru.com/ |
- | 2.0.0.0/ | + | 0.0.0.0/ |
- | 5.0.0.0/ | + | 5.0.0.0/ |
- | 10.0.0.0/ | + | 10.0.0.0/ |
- | 14.0.0.0/ | + | 14.0.0.0/ |
- | 23.0.0.0/ | + | 23.0.0.0/ |
- | | + | 31.0.0.0/ |
- | | + | 36.0.0.0/7 |
- | 36.0.0.0/8 | + | 39.0.0.0/ |
- | | + | 42.0.0.0/ |
- | | + | 49.0.0.0/ |
- | 42.0.0.0/ | + | 100.0.0.0/6 REJECT IP address of MX host is a bogus address |
- | | + | 104.0.0.0/7 REJECT IP address of MX host is a bogus address |
- | | + | 106.0.0.0/ |
- | | + | 127.0.0.0/ |
- | | + | 169.254.0.0/ |
- | | + | 172.16.0.0/ |
- | 102.0.0.0/ | + | 176.0.0.0/7 REJECT IP address of MX host is a bogus address |
- | 103.0.0.0/ | + | 179.0.0.0/ |
- | | + | 181.0.0.0/ |
- | | + | 185.0.0.0/ |
- | | + | 192.0.2.0/ |
- | | + | 192.168.0.0/ |
- | 108.0.0.0/ | + | 198.18.0.0/ |
- | 109.0.0.0/ | + | 198.51.100.0/24 REJECT IP address of MX host is a bogus address |
- | 110.0.0.0/ | + | 203.0.113.0/24 |
- | 111.0.0.0/ | + | 223.0.0.0/8 REJECT IP address of MX host is a bogus address |
- | | + | 224.0.0.0/3 REJECT IP address of MX host is a bogus address |
- | 169.254.0.0/ | + | </ |
- | 172.16.0.0/ | + | |
- | | + | |
- | | + | |
- | | + | |
- | 178.0.0.0/ | + | |
- | | + | |
- | | + | |
- | | + | |
- | | + | |
- | 183.0.0.0/ | + | |
- | 184.0.0.0/ | + | |
- | | + | |
- | 192.0.2.0/ | + | |
- | 192.168.0.0/ | + | |
- | | + | |
- | | + | |
- | 223.0.0.0/8 REJECT IP address of MX host is a bogus address | + | |
- | 224.0.0.0/3 REJECT IP address of MX host is a bogus address | + | |
- | 240.0.0.0/12 | + | |
- | 255.0.0.0/8 REJECT IP address of MX host is a bogus address | + | |
**/ | **/ | ||
# borken_tls_smtp_host | # borken_tls_smtp_host | ||
193.189.160.1 | 193.189.160.1 | ||
+ | |||
+ | **/ | ||
+ | username@mydomain | ||
+ | |||
+ | |||
+ | **/ | ||
+ | 127.0.0.1 | ||
+ | localhost | ||
+ | host.domain.tld | ||
+ | |||
+ | |||
+ | **/ | ||
+ | submission inet n | ||
+ | -o smtpd_tls_security_level=encrypt\\ | ||
+ | -o smtpd_sasl_auth_enable=yes\\ | ||
+ | -o smtpd_client_restrictions=permit_sasl_authenticated, | ||
+ | -o milter_macro_daemon_name=ORIGINATING\\ | ||
+ | ** -o syslog_name=postfix-submission**\\ | ||
+ | smtps | ||
+ | -o smtpd_tls_wrappermode=yes\\ | ||
+ | -o smtpd_sasl_auth_enable=yes\\ | ||
+ | -o smtpd_client_restrictions=permit_sasl_authenticated, | ||
+ | -o milter_macro_daemon_name=ORIGINATING\\ | ||
+ | |||
+ |