Кому не сложно, зацените конфиг пжста. Буду рад любым пожеланиям!
Код: Выделить всё
biff = no
append_dot_mydomain = no
readme_directory = no
# Укажем откуда брать алиасы и пользователей.
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
virtual_alias_maps = hash:/etc/postfix/virtual ldap:/etc/postfix/ldap-aliases.cf
smtpd_sender_login_maps = ldap:/etc/postfix/ldap-aliases.cf
# Сетевые настройки
mydomain = domain.spb.ru
myhostname = post
myorigin = $mydomain
mydestination = $myhostname, localhost, localhost.$myhostname, localhost.$mydomain, $mydomain
relayhost =
mynetworks = 127.0.0.0/8, 192.168.0.0/23
smtp_helo_name=$myhostname
smtpd_banner = $myhostname ESMTP True Mail Server
inet_protocols = ipv4
inet_interfaces = all
# Прикручиваем SASL авторизазацию через dovecot
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth-client
smtpd_sasl_auth_enable = yes
#smtpd_sasl_security_options = noanonymous, mutual_auth, noactive, nodictionary
smtpd_sasl_exceptions_networks=$mynetworks
# Почту будет раскладывать тоже dovecot
mailbox_transport = dovecot
mailbox_command = /usr/lib/dovecot/deliver
dovecot_destination_recipient_limit = 1
virtual_transport = dovecot
# Настройки ящиков
mailbox_size_limit = 1024000000
message_size_limit = 10240000
virtual_mailbox_base = /mail/mailboxes
recipient_delimiter = +
# Ограничения
smtpd_client_restrictions = permit_mynetworks,
permit_sasl_authenticated,
check_client_access ldap:/etc/postfix/ldap-aliases.cf
sleep 5,
reject_unknown_client_hostname,
reject_unauth_pipelining,
reject_rbl_client blackholes.mail-abuse.org,
reject_rbl_client dialups.mail-abuse.org,
reject_rbl_client relays.ordb.org,
reject_rbl_client dul.ru,
reject_rbl_client opm.blitzed.org,
reject_rbl_client list.dsbl.org,
reject_rbl_client sbl.spamhaus.org,
reject_rbl_client sbl-xbl.spamhaus.org,
reject_rbl_client zen.spamhaus.org,
reject_rbl_client cbl.abuseat.org,
reject_rbl_client dul.dnsbl.sorbs.net,
reject_rbl_client dnsbl.njabl.org,
reject_rbl_client dynablock.njabl.org,
reject_rbl_client bl.spamcop.net,
reject_rbl_client bl.csma.biz,
reject_rbl_client dnsbl.sorbs.net,
reject_rbl_client smtp.dnsbl.sorbs.net,
reject_rbl_client relays.ordb.org,
reject_rbl_client relays.mail-abuse.com,
reject_rbl_client dialups.mail-abuse.com,
reject_rbl_client combined.njabl.org
smtpd_recipient_restrictions = permit_mynetworks,
permit_sasl_authenticated,
reject_unauth_destination,
reject_unlisted_recipient,
reject_unknown_recipient_domain,
reject_non_fqdn_recipient,
reject_unverified_recipient
smtpd_sender_restrictions = permit_mynetworks,
reject_unknown_sender_domain,
reject_unlisted_sender,
reject_unverified_sender,
reject_non_fqdn_sender
smtpd_helo_restrictions = permit_mynetworks,
permit_sasl_authenticated,
reject_invalid_helo_hostname,
reject_unknown_helo_hostname,
reject_non_fqdn_helo_hostname
smtpd_data_restrictions = permit_mynetworks,
reject_multi_recipient_bounce,
reject_unauth_pipelining
smtpd_etrn_restrictions = permit_mynetworks,
reject
strict_rfc821_envelopes = yes
smtpd_reject_unlisted_sender = yes
smtpd_reject_unlisted_recipient=yes
disable_vrfy_command = yes
show_user_unknown_table_name = no
smtpd_helo_required = yes
smtp_always_send_ehlo = yes
smtp_never_send_ehlo=no
smtpd_delay_reject=no
address_verify_sender= <>
address_verify_negative_cache=yes
address_verify_poll_count=1
address_verify_positive_expire_time=31d
address_verify_positive_refresh_time=7d
address_verife_negative_expire_time=3d
address_verify_negative_refresh_time=2h
allow_untrusted_routing=no
resolve_null_domain=no
resolve_numeric_domain=no
smtpd_recipient_limit=100
smtp_quote_rfc821_envelope=yes
smtpd_soft_error_limit = 2
smtpd_error_sleep_time = ${stress?0}${stress:10s}
smtpd_hard_error_limit = ${stress?3}${stress:20}
smtpd_timeout = ${stress?30}${stress:300}
# Таймауты по RFC 2821
smtpd_timeout=5m
smtpd_starttls_timeout=5m
smtp_mail_timeout=5m
smtp_rcpt_timeout=5m
smtp_data_init_timeout=2m
smtp_data_xfer_timeout=3m
smtp_data_done_timeout=10m
maximal_queue_lifetime=4d
bounce_queue_lifetime=4d
queue_run_delay=30m
minimal_backoff_time=3h
maximal_backoff_time=5h
# Прикручиваем антивирь
content_filter = scan:127.0.0.1:10025
receive_override_options = no_address_mappings
