# Please be sure to read the /usr/share/doc/postfix/README.MDK file # to learn about differences from stock postfix to Mandriva package. # This file contains only the parameters changed from a default install # see /etc/postfix/main.cf.dist for a commented, fuller version of this file. # These are changed by postfix install script readme_directory = /usr/share/doc/postfix/README_FILES html_directory = /usr/share/doc/postfix/html sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop command_directory = /usr/sbin manpage_directory = /usr/share/man daemon_directory = <%= lib_dir %>/postfix/ data_directory = /var/lib/postfix newaliases_path = /usr/bin/newaliases mailq_path = /usr/bin/mailq queue_directory = /var/spool/postfix mail_owner = postfix # User configurable parameters <% if all_tags.include?('postfix::simple_relay') %> inet_interfaces = localhost <% else %> inet_interfaces = all <% end %> inet_protocols = all mynetworks_style = host myhostname = <%= fqdn %> mydomain = <%= domain %> mydestination = <%= fqdn %> myorigin = $mydomain <%- if all_tags.include?('postfix::secondary_smtp') -%> relay_domains = <%= domain %>, ml.<%= domain %> <%- end -%> mydestination = <%= fqdn %> <%- if all_tags.include?('postfix::primary_smtp') -%> <%= domain %>, alias_maps = hash:/etc/postfix/aliases # uncomment if we want to enable ldap based alias # and create the file #ldap:/etc/postfix/ldap_aliases.conf <%- end -%> <%- if all_tags.include?('postfix::smtp_server') -%> transport_maps = regexp:/etc/postfix/transport_regexp content_filter = smtp-filter:[127.0.0.1]:10025 <%- end -%> <%- if classes.include?('sympa::server') -%> sympa_destination_recipient_limit = 1 sympabounce_destination_recipient_limit = 1 <%- end -%> #delay_warning_time = 4h smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) (Mandriva Linux) unknown_local_recipient_reject_code = 450 smtp-filter_destination_concurrency_limit = 2 lmtp-filter_destination_concurrency_limit = 2 # disabled for the time being, as the certificate do not exist # FIXME create the cert in puppet smtpd_use_tls = no #smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem #smtpd_tls_key_file = /etc/pki/tls/private/postfix.pem #smtpd_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt <%- if all_tags.include?('postfix::smtp_server') -%> smtpd_etrn_restrictions = reject smtpd_helo_required = yes smtpd_data_restrictions = reject_unauth_pipelining reject_multi_recipient_bounce smtpd_recipient_restrictions = reject_non_fqdn_recipient reject_non_fqdn_sender # not done yet, not sure if we need to offer this kind of service # permit_sasl_authenticated permit_mynetworks reject_unauth_destination reject_non_fqdn_helo_hostname reject_unknown_sender_domain reject_unknown_client <%- if classes.include?('postgrey') -%> check_policy_service unix:extern/postgrey/socket <%- end -%> <%- end -%>