ka
/
ansible-role-postfix
1
0
複製 0
程式碼 問題 0 合併請求 0 版本發佈 0 Wiki 活動
22 提交
1 分支
85KB
目錄樹: 7b86e0deb3
ansible-role-postfix/templates/main.cf.j2

78 line
2.6KB
原始文件 Blame 歷史記錄 

  1. # See /usr/share/postfix/main.cf.dist for a commented, more complete version

  2. 

  3. 

  4. # Debian specific:  Specifying a file name will cause the first

  5. # line of that file to be used as the name.  The Debian default

  6. # is /etc/mailname.

  7. #myorigin = /etc/mailname

  8. 

  9. smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)

  10. biff = no

  11. 

  12. # appending .domain is the MUA's job.

  13. append_dot_mydomain = no

  14. 

  15. # Uncomment the next line to generate "delayed mail" warnings

  16. #delay_warning_time = 4h

  17. 

  18. readme_directory = no

  19. 

  20. # See http://www.postfix.org/COMPATIBILITY_README.html -- default to 2 on

  21. # fresh installs.

  22. compatibility_level = 2

  23. 

  24. # TLS parameters

  25. smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem

  26. smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key

  27. smtpd_use_tls=yes

  28. smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache

  29. smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache

  30. 

  31. # See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for

  32. # information on enabling SSL in the smtp client.

  33. 

  34. myhostname = tg-infra-dev-mail-1

  35. alias_maps = hash:/etc/aliases

  36. alias_database = hash:/etc/aliases

  37. mydestination = $myhostname, tg-infra-dev-mail-1, localhost.localdomain, , localhost

  38. relayhost =

  39. mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128

  40. mailbox_size_limit = 0

  41. recipient_delimiter = +

  42. inet_interfaces = all

  43. inet_protocols = all

  44. 

  45. # some rules from http://www.postfix.org/SMTPD_ACCESS_README.html

  46. smtpd_client_restrictions = permit_mynetworks, reject

  47. smtpd_helo_restrictions = reject_unknown_helo_hostname

  48. smtpd_sender_restrictions = reject_unknown_sender_domain

  49. smtpd_data_restrictions = reject_unauth_pipelining

  50. 

  51. smtpd_recipient_restrictions =

  52.   permit_mynetworks,

  53.   permit_sasl_authenticated,

  54.   reject_rbl_client zen.spamhaus.org,

  55.   reject_rhsbl_reverse_client dbl.spamhaus.org,

  56.   reject_rhsbl_helo dbl.spamhaus.org,

  57.   reject_rhsbl_sender dbl.spamhaus.org

  58. 

  59. smtpd_relay_restrictions =

  60.   permit_mynetworks,

  61.   permit_sasl_authenticated,

  62.   defer_unauth_destination

  63. 

  64. virtual_mailbox_domains = proxy:mysql:/etc/postfix/sql/mysql_virtual_domains_maps.cf

  65. virtual_alias_maps =

  66.    proxy:mysql:/etc/postfix/sql/mysql_virtual_alias_maps.cf,

  67.    proxy:mysql:/etc/postfix/sql/mysql_virtual_alias_domain_maps.cf,

  68.    proxy:mysql:/etc/postfix/sql/mysql_virtual_alias_domain_catchall_maps.cf

  69. virtual_mailbox_maps =

  70.    proxy:mysql:/etc/postfix/sql/mysql_virtual_mailbox_maps.cf,

  71.    proxy:mysql:/etc/postfix/sql/mysql_virtual_alias_domain_mailbox_maps.cf

  72. 

  73. # use dovecot lmtp for mail transport

  74. virtual_transport = lmtp:unix:private/dovecot-lmtp

  75. 

  76. smtpd_sasl_type = dovecot

  77. smtpd_sasl_path = private/auth