| Andrew Geissler | 9aee500 | 2022-03-30 16:27:02 +0000 | [diff] [blame^] | 1 | compatibility_level = 3.6 |
| Brad Bishop | 316dfdd | 2018-06-25 12:45:53 -0400 | [diff] [blame] | 2 | smtputf8_enable = no |
| 3 | |
| 4 | # Configure your domain and accounts |
| 5 | #mydomain=sample.com |
| 6 | #FQDN from gethostname |
| 7 | #myhostname = |
| 8 | mydomain=localdomain |
| 9 | mydestination = $myhostname, localhost.localdomain localhost |
| 10 | mynetworks = 127.0.0.1/8 |
| 11 | inet_interfaces = 127.0.0.1 |
| 12 | |
| 13 | virtual_mailbox_domains = sample.com, other.net |
| 14 | virtual_mailbox_maps = hash:/etc/postfix/virtual |
| 15 | virtual_alias_maps = hash:/etc/postfix/virtual_alias |
| 16 | |
| 17 | alias_maps = hash:/etc/aliases |
| 18 | |
| 19 | # You'll start with the following lines for maildir storage |
| 20 | virtual_mailbox_base = /var/spool/vmail |
| 21 | virtual_uid_maps = static:`grep vmail /etc/passwd | cut -d ":" -f 3` |
| 22 | virtual_gid_maps = static:`grep vmail /etc/passwd | cut -d ":" -f 4` |
| 23 | |
| 24 | |
| 25 | # You'll start with the following lines for IMAP storage |
| 26 | #virtual_transport = lmtp:unix:/var/lib/cyrus/socket/lmtp |
| 27 | |
| 28 | |
| 29 | # General stuff here again |
| 30 | #config_directory = /etc/postfix |
| 31 | sample_directory = /etc/postfix |
| 32 | queue_directory = /var/spool/postfix |
| 33 | mail_spool_directory = /var/spool/mail |
| 34 | readme_directory = no |
| 35 | command_directory = /usr/sbin |
| 36 | daemon_directory = @LIBEXECDIR@/postfix |
| 37 | mail_owner = postfix |
| 38 | setgid_group = postdrop |
| 39 | unknown_local_recipient_reject_code = 450 |
| 40 | mynetworks_style = host |
| 41 | debug_peer_level = 2 |
| 42 | sendmail_path = /usr/sbin/sendmail |
| 43 | newaliases_path = /usr/bin/newaliases |
| 44 | mailq_path = /usr/bin/mailq |
| 45 | |
| 46 | smtpd_data_restrictions = |
| 47 | permit_mynetworks, |
| 48 | reject_unauth_pipelining, |
| 49 | permit |
| 50 | |
| 51 | smtpd_client_restrictions = |
| 52 | permit_mynetworks, |
| 53 | # reject_unknown_client, # This can cause a lot of false rejects. |
| 54 | reject_invalid_hostname, |
| 55 | reject_rbl_client list.dsbl.org, |
| 56 | reject_rbl_client sbl.spamhaus.org, |
| 57 | reject_rbl_client cbl.abuseat.org, |
| 58 | reject_rbl_client dul.dnsbl.sorbs.net, |
| 59 | permit |
| 60 | |
| 61 | smtpd_helo_required = yes |
| 62 | smtpd_helo_restrictions = |
| 63 | permit_mynetworks, |
| 64 | reject_unauth_pipelining, |
| 65 | # reject_non_fqdn_hostname, # This can cause a lot of false rejects. |
| 66 | # reject_unknown_hostname, # This can cause a lot of false rejects. |
| 67 | reject_invalid_hostname, |
| 68 | permit |
| 69 | |
| 70 | smtpd_sender_restrictions = |
| 71 | permit_mynetworks, |
| 72 | reject_non_fqdn_sender, |
| 73 | # check_sender_access hash:/etc/postfix/access_domains, |
| 74 | reject_unknown_sender_domain, |
| 75 | permit |
| 76 | |
| 77 | smtpd_recipient_restrictions = |
| 78 | permit_mynetworks, |
| 79 | permit_sasl_authenticated, |
| 80 | reject_unauth_destination, |
| 81 | |
| 82 | # check_recipient_access pcre:/etc/postfix/recipient_checks.pcre, |
| 83 | # check_helo_access pcre:/etc/postfix/helo_checks.pcre, |
| 84 | |
| 85 | # check_client_access hash:/etc/postfix/maps/access_client, |
| 86 | # check_client_access hash:/etc/postfix/maps/exceptions_client, |
| 87 | # check_helo_access hash:/etc/postfix/maps/access_helo, |
| 88 | # check_helo_access hash:/etc/postfix/maps/verify_helo, |
| 89 | # check_sender_access hash:/etc/postfix/maps/access_sender, |
| 90 | # check_sender_access hash:/etc/postfix/maps/verify_sender, |
| 91 | # check_recipient_access hash:/etc/postfix/maps/access_recipient, |
| 92 | |
| 93 | # reject_multi_recipient_bounce, |
| 94 | reject_non_fqdn_recipient, |
| 95 | reject_unknown_recipient_domain, |
| 96 | # reject_unlisted_recipient, |
| 97 | #check_policy_service unix:private/policy, |
| 98 | |
| 99 | # check_sender_access hash:/etc/postfix/maps/no_verify_sender, |
| 100 | # check_sender_access hash:/etc/postfix/access_domains, |
| 101 | # reject_unverified_sender, |
| 102 | # reject_unverified_recipient |
| 103 | check_recipient_access hash:/etc/postfix/internal_recipient |
| 104 | |
| 105 | disable_vrfy_command = yes |