# General smtpd_banner = $myhostname ESMTP RedXen Mail. DO NOT MESS WITH US OR WE WILL CUT YOUR BALLS OFF! inet_interfaces = all inet_protocols = all myorigin = mailtest.redxen.eu myhostname = mail.$myorigin mydomain = $myorigin mydestination = mail.$myorigin, $myorigin mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 relayhost = relay_domains = $mydestination alias_maps = proxy:pgsql:/etc/postfix/redxen/pgsql-aliases.cf local_recipient_maps = proxy:pgsql:/etc/postfix/redxen/pgsql-users.cf $alias_maps biff = no append_dot_mydomain = no delay_warning_time = 1h readme_directory = no compatibility_level = 2 mailbox_size_limit = 0 recipient_delimiter = + notify_classes = resource, software, bounce # SMTP TLS smtp_tls_CApath = /etc/ssl/certs smtp_tls_security_level = may smtpd_use_tls = yes smtpd_tls_cert_file = /etc/ssl/redxen/letsencrypt/chain.crt smtpd_tls_key_file = /etc/ssl/redxen/letsencrypt/private.key smtpd_tls_security_level = may smtpd_tls_protocols = !SSLv2, !SSLv3 # Restrictions smtpd_sender_restrictions = reject_unknown_sender_domain smtpd_relay_restrictions = permit_sasl_authenticated, reject_unauth_destination smtpd_recipient_restrictions = permit_sasl_authenticated, reject_non_fqdn_recipient, reject_unknown_recipient_domain, reject_unknown_reverse_client_hostname, reject_rbl_client sbl.spamhaus.org, reject_rbl_client xbl.spamhaus.org, reject_rhsbl_client dbl.spamhaus.org, reject_rhsbl_reverse_client dbl.spamhaus.org, reject_rhsbl_sender dbl.spamhaus.org smtpd_helo_restrictions = reject_rhsbl_helo dbl.spamhaus.org # Dovecot LMTP mailbox_transport = lmtp:unix:/run/dovecot/lmtp # OpenDKIM & RSpamD #milter_default_action = tempfail #milter_protocol = 6 #smtpd_milters = local:/run/opendkim/opendkim.sock inet:127.0.0.1:11332 #non_smtpd_milters = local:/run/opendkim/opendkim.sock inet:127.0.0.1:11332 #internal_mail_filter_classes = bounce, notify