master.cf 4.7 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798
  1. smtp inet n - n - 1 postscreen
  2. smtpd pass - - n - - smtpd
  3. -o smtpd_helo_restrictions=permit_mynetworks,reject_non_fqdn_helo_hostname
  4. smtps inet n - n - - smtpd
  5. -o smtpd_tls_wrappermode=yes
  6. -o smtpd_client_restrictions=permit_mynetworks,permit_sasl_authenticated,reject
  7. -o tls_preempt_cipherlist=yes
  8. submission inet n - n - - smtpd
  9. -o smtpd_client_restrictions=permit_mynetworks,permit_sasl_authenticated,reject
  10. -o smtpd_enforce_tls=yes
  11. -o smtpd_tls_security_level=encrypt
  12. -o tls_preempt_cipherlist=yes
  13. 588 inet n - n - - smtpd
  14. -o smtpd_client_restrictions=permit_mynetworks,permit_sasl_authenticated,reject
  15. -o smtpd_tls_auth_only=no
  16. -o smtpd_sender_restrictions=check_sasl_access,regexp:/opt/postfix/conf/allow_mailcow_local.regexp,reject_authenticated_sender_login_mismatch,permit_mynetworks,permit_sasl_authenticated,reject_unlisted_sender,reject_unknown_sender_domain
  17. 590 inet n - n - - smtpd
  18. -o smtpd_client_restrictions=permit_mynetworks,reject
  19. -o smtpd_tls_auth_only=no
  20. -o smtpd_milters=
  21. -o non_smtpd_milters=
  22. smtp_enforced_tls unix - - n - - smtp
  23. -o smtp_tls_security_level=encrypt
  24. -o syslog_name=enforced-tls-smtp
  25. -o smtp_delivery_status_filter=pcre:/opt/postfix/conf/smtp_dsn_filter
  26. tlsproxy unix - - n - 0 tlsproxy
  27. dnsblog unix - - n - 0 dnsblog
  28. pickup fifo n - n 60 1 pickup
  29. cleanup unix n - n - 0 cleanup
  30. qmgr fifo n - n 300 1 qmgr
  31. tlsmgr unix - - n 1000? 1 tlsmgr
  32. rewrite unix - - n - - trivial-rewrite
  33. bounce unix - - n - 0 bounce
  34. defer unix - - n - 0 bounce
  35. trace unix - - n - 0 bounce
  36. verify unix - - n - 1 verify
  37. flush unix n - n 1000? 0 flush
  38. proxymap unix - - n - - proxymap
  39. proxywrite unix - - n - 1 proxymap
  40. smtp unix - - n - - smtp
  41. relay unix - - n - - smtp
  42. showq unix n - n - - showq
  43. error unix - - n - - error
  44. retry unix - - n - - error
  45. discard unix - - n - - discard
  46. local unix - n n - - local
  47. virtual unix - n n - - virtual
  48. lmtp unix - - n - - lmtp
  49. anvil unix - - n - 1 anvil
  50. scache unix - - n - 1 scache
  51. maildrop unix - n n - - pipe flags=DRhu
  52. user=vmail argv=/usr/bin/maildrop -d ${recipient}
  53. # start zeyple
  54. zeyple unix - n n - - pipe
  55. user=zeyple argv=/usr/local/bin/zeyple.py ${recipient}
  56. 127.0.0.1:10026 inet n - n - 10 smtpd
  57. -o content_filter=
  58. -o receive_override_options=no_unknown_recipient_checks,no_header_body_checks,no_milters
  59. -o smtpd_helo_restrictions=
  60. -o smtpd_client_restrictions=
  61. -o smtpd_sender_restrictions=
  62. -o smtpd_recipient_restrictions=permit_mynetworks,reject
  63. -o mynetworks=127.0.0.0/8
  64. -o smtpd_authorized_xforward_hosts=127.0.0.0/8
  65. # end zeyple
  66. # start whitelist_fwd
  67. 127.0.0.1:10027 inet n n n - 0 spawn user=nobody argv=/usr/local/bin/whitelist_forwardinghosts.sh
  68. # end whitelist_fwd
  69. # start watchdog-specific
  70. 589 inet n - n - - smtpd
  71. -o smtpd_client_restrictions=permit_mynetworks,reject
  72. -o syslog_name=watchdog
  73. -o syslog_facility=local7
  74. -o smtpd_milters=
  75. -o cleanup_service_name=watchdog_cleanup
  76. -o non_smtpd_milters=
  77. watchdog_cleanup unix n - n - 0 cleanup
  78. -o syslog_name=watchdog
  79. -o syslog_facility=local7
  80. -o queue_service_name=watchdog_qmgr
  81. watchdog_qmgr fifo n - n 300 1 qmgr
  82. -o syslog_facility=local7
  83. -o syslog_name=watchdog
  84. -o rewrite_service_name=watchdog_rewrite
  85. watchdog_rewrite unix - - n - - trivial-rewrite
  86. -o syslog_facility=local7
  87. -o syslog_name=watchdog
  88. -o local_transport=watchdog_discard
  89. watchdog_discard unix - - n - - discard
  90. -o syslog_facility=local7
  91. -o syslog_name=watchdog
  92. # end watchdog-specific