| 1 |
# Please be sure to read the /usr/share/doc/postfix/README.MDK file |
| 2 |
# to learn about differences from stock postfix to Mandriva package. |
| 3 |
# This file contains only the parameters changed from a default install |
| 4 |
# see /etc/postfix/main.cf.dist for a commented, fuller version of this file. |
| 5 |
|
| 6 |
|
| 7 |
# These are changed by postfix install script |
| 8 |
readme_directory = /usr/share/doc/postfix/README_FILES |
| 9 |
html_directory = /usr/share/doc/postfix/html |
| 10 |
sendmail_path = /usr/sbin/sendmail.postfix |
| 11 |
setgid_group = postdrop |
| 12 |
command_directory = /usr/sbin |
| 13 |
manpage_directory = /usr/share/man |
| 14 |
daemon_directory = <%= lib_dir %>/postfix/ |
| 15 |
data_directory = /var/lib/postfix |
| 16 |
newaliases_path = /usr/bin/newaliases |
| 17 |
mailq_path = /usr/bin/mailq |
| 18 |
queue_directory = /var/spool/postfix |
| 19 |
mail_owner = postfix |
| 20 |
|
| 21 |
# User configurable parameters |
| 22 |
|
| 23 |
<% if all_tags.include?('postfix::simple_relay') %> |
| 24 |
inet_interfaces = localhost |
| 25 |
<% else %> |
| 26 |
inet_interfaces = all |
| 27 |
<% end %> |
| 28 |
|
| 29 |
inet_protocols = all |
| 30 |
mynetworks_style = host |
| 31 |
myhostname = <%= fqdn %> |
| 32 |
mydomain = <%= domain %> |
| 33 |
mydestination = <%= fqdn %> |
| 34 |
myorigin = $mydomain |
| 35 |
<%- if all_tags.include?('postfix::secondary_smtp') -%> |
| 36 |
relay_domains = <%= domain %>, ml.<%= domain %> |
| 37 |
<%- end -%> |
| 38 |
|
| 39 |
mydestination = <%= fqdn %> |
| 40 |
<%- if classes.include?('sympa::server') -%> |
| 41 |
ml.<%= domain %> |
| 42 |
<%- end -%> |
| 43 |
|
| 44 |
<%- if all_tags.include?('postfix::primary_smtp') -%> |
| 45 |
|
| 46 |
virtual_mailbox_domains = <%= domain %>, |
| 47 |
group.<%= domain %> |
| 48 |
|
| 49 |
# postfix complain if not set |
| 50 |
# Mar 22 23:51:20 alamut postfix/virtual[22952]: fatal: bad string length 0 < 1: virtual_mailbox_base = |
| 51 |
virtual_mailbox_base = /var/lib/mail |
| 52 |
|
| 53 |
# local_recipient_maps is disabled, as we need to route all |
| 54 |
# non local email to ryu as long as mageia ml are hosted |
| 55 |
# there. Hence the use of fallback_transport , but this is |
| 56 |
# taken in account only of local_recipient_maps is empty |
| 57 |
local_recipient_maps = |
| 58 |
# route ml to ryu ( ml being mageia-*@mageia ) |
| 59 |
fallback_transport_maps = regexp:/etc/postfix/transport_regexp |
| 60 |
|
| 61 |
# needed by sympa to handle bounce, according to the doc |
| 62 |
recipient_delimiter = + |
| 63 |
|
| 64 |
|
| 65 |
alias_maps = hash:/etc/postfix/aliases |
| 66 |
|
| 67 |
virtual_alias_maps = ldap:/etc/postfix/ldap_aliases.conf |
| 68 |
ldap:/etc/postfix/group_aliases.conf |
| 69 |
hash:/etc/postfix/virtual_aliases |
| 70 |
<%- if classes.include?('sympa::server') -%> |
| 71 |
regexp:/etc/postfix/sympa_aliases |
| 72 |
<%- end -%> |
| 73 |
<%- end -%> |
| 74 |
|
| 75 |
|
| 76 |
<%- if all_tags.include?('postfix::smtp_server') -%> |
| 77 |
transport_maps = regexp:/etc/postfix/transport_regexp |
| 78 |
content_filter = smtp-filter:[127.0.0.1]:10025 |
| 79 |
<%- end -%> |
| 80 |
|
| 81 |
<%- if classes.include?('sympa::server') -%> |
| 82 |
sympa_destination_recipient_limit = 1 |
| 83 |
sympabounce_destination_recipient_limit = 1 |
| 84 |
<%- end -%> |
| 85 |
|
| 86 |
#delay_warning_time = 4h |
| 87 |
smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) (Mandriva Linux) |
| 88 |
unknown_local_recipient_reject_code = 450 |
| 89 |
smtp-filter_destination_concurrency_limit = 2 |
| 90 |
lmtp-filter_destination_concurrency_limit = 2 |
| 91 |
# disabled for the time being, as the certificate do not exist |
| 92 |
# FIXME create the cert in puppet |
| 93 |
smtpd_use_tls = no |
| 94 |
#smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem |
| 95 |
#smtpd_tls_key_file = /etc/pki/tls/private/postfix.pem |
| 96 |
#smtpd_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt |
| 97 |
|
| 98 |
<%- if all_tags.include?('postfix::smtp_server') -%> |
| 99 |
smtpd_etrn_restrictions = reject |
| 100 |
|
| 101 |
smtpd_helo_required = yes |
| 102 |
|
| 103 |
smtpd_data_restrictions = permit_mynetworks |
| 104 |
reject_unauth_pipelining |
| 105 |
reject_multi_recipient_bounce |
| 106 |
|
| 107 |
smtpd_recipient_restrictions = reject_non_fqdn_recipient |
| 108 |
reject_non_fqdn_sender |
| 109 |
# not done yet, not sure if we need to offer this kind of service |
| 110 |
# permit_sasl_authenticated |
| 111 |
permit_mynetworks |
| 112 |
reject_unauth_destination |
| 113 |
reject_non_fqdn_helo_hostname |
| 114 |
reject_unknown_sender_domain |
| 115 |
reject_unknown_client |
| 116 |
<%- if classes.include?('postgrey') -%> |
| 117 |
check_policy_service unix:extern/postgrey/socket |
| 118 |
<%- end -%> |
| 119 |
<%- end -%> |
| 120 |
|
Parent Directory
| 
Revision Log