1compatibility_level = 2
2smtputf8_enable = no
3
4# Configure your domain and accounts
5#mydomain=sample.com
6#FQDN from gethostname
7#myhostname =
8mydomain=localdomain
9mydestination = $myhostname, localhost.localdomain localhost
10mynetworks = 127.0.0.1/8
11inet_interfaces = 127.0.0.1
12
13virtual_mailbox_domains = sample.com, other.net
14virtual_mailbox_maps = hash:/etc/postfix/virtual
15virtual_alias_maps = hash:/etc/postfix/virtual_alias
16
17alias_maps = hash:/etc/aliases
18
19# You'll start with the following lines for maildir storage
20virtual_mailbox_base = /var/spool/vmail
21virtual_uid_maps = static:`grep vmail /etc/passwd | cut -d ":" -f 3`
22virtual_gid_maps = static:`grep vmail /etc/passwd | cut -d ":" -f 4`
23
24
25# You'll start with the following lines for IMAP storage
26#virtual_transport = lmtp:unix:/var/lib/cyrus/socket/lmtp
27
28
29# General stuff here again
30#config_directory = /etc/postfix
31sample_directory = /etc/postfix
32queue_directory = /var/spool/postfix
33mail_spool_directory = /var/spool/mail
34readme_directory = no
35command_directory = /usr/sbin
36daemon_directory = @LIBEXECDIR@/postfix
37mail_owner = postfix
38setgid_group = postdrop
39unknown_local_recipient_reject_code = 450
40mynetworks_style = host
41debug_peer_level = 2
42sendmail_path = /usr/sbin/sendmail
43newaliases_path = /usr/bin/newaliases
44mailq_path = /usr/bin/mailq
45
46smtpd_data_restrictions =
47        permit_mynetworks,
48        reject_unauth_pipelining,
49        permit
50
51smtpd_client_restrictions =
52        permit_mynetworks,
53        # reject_unknown_client, # This can cause a lot of false rejects.
54        reject_invalid_hostname,
55        reject_rbl_client list.dsbl.org,
56        reject_rbl_client sbl.spamhaus.org,
57        reject_rbl_client cbl.abuseat.org,
58        reject_rbl_client dul.dnsbl.sorbs.net,
59        permit
60
61smtpd_helo_required = yes
62smtpd_helo_restrictions =
63        permit_mynetworks,
64        reject_unauth_pipelining,
65        # reject_non_fqdn_hostname, # This can cause a lot of false rejects.
66        # reject_unknown_hostname, # This can cause a lot of false rejects.
67        reject_invalid_hostname,
68        permit
69
70smtpd_sender_restrictions =
71        permit_mynetworks,
72        reject_non_fqdn_sender,
73        # check_sender_access hash:/etc/postfix/access_domains,
74        reject_unknown_sender_domain,
75        permit
76
77smtpd_recipient_restrictions =
78        permit_mynetworks,
79        permit_sasl_authenticated,
80        reject_unauth_destination,
81
82        # check_recipient_access pcre:/etc/postfix/recipient_checks.pcre,
83        # check_helo_access pcre:/etc/postfix/helo_checks.pcre,
84
85        # check_client_access hash:/etc/postfix/maps/access_client,
86        # check_client_access hash:/etc/postfix/maps/exceptions_client,
87        # check_helo_access hash:/etc/postfix/maps/access_helo,
88        # check_helo_access hash:/etc/postfix/maps/verify_helo,
89        # check_sender_access hash:/etc/postfix/maps/access_sender,
90        # check_sender_access hash:/etc/postfix/maps/verify_sender,
91        # check_recipient_access hash:/etc/postfix/maps/access_recipient,
92
93        # reject_multi_recipient_bounce,
94        reject_non_fqdn_recipient,
95        reject_unknown_recipient_domain,
96        # reject_unlisted_recipient,
97        #check_policy_service unix:private/policy,
98
99        # check_sender_access hash:/etc/postfix/maps/no_verify_sender,
100        # check_sender_access hash:/etc/postfix/access_domains,
101        # reject_unverified_sender,
102        # reject_unverified_recipient
103        check_recipient_access hash:/etc/postfix/internal_recipient
104
105disable_vrfy_command = yes
106