firewall: Resurrect port forwardings with different external ports.

[people/teissler/ipfire-2.x.git] / config / postfix / main.cf

diff --git a/config/postfix/main.cf b/config/postfix/main.cf
index 10d3727aad8b13eef96233276ab784410205ad7b..a3d7c321b13fe58cc765f67ee29cd0dd49da5d08 100644 (file)
--- a/config/postfix/main.cf
+++ b/config/postfix/main.cf
@@ -4,24 +4,29 @@
 queue_directory = /var/spool/postfix
 command_directory = /usr/sbin
 daemon_directory = /usr/lib/postfix
+manpage_directory = /usr/share/man
+sample_directory = /etc/postfix
+html_directory = no
+readme_directory = no
+
+sendmail_path = /usr/sbin/sendmail
+newaliases_path = /usr/bin/newaliases
+mailq_path = /usr/bin/mailq
+
 mail_owner = postfix
-#myhostname = host.domain.tld
-#mydomain = domain.tld
-#myorigin = $myhostname
-#myorigin = $mydomain
+setgid_group = postdrop
+
+myhostname = ipfire.localdomain
+myorigin = $myhostname
+
 inet_interfaces = all
 #proxy_interfaces =
-mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, mysql:/etc/postfix/mysql-mydestination.cf
-#local_recipient_maps = unix:passwd.byname $alias_maps
-#local_recipient_maps = proxy:unix:passwd.byname $alias_maps
-#local_recipient_maps =
+mydestination = $myhostname, localhost, mysql:/etc/postfix/mysql-mydestination.cf
 unknown_local_recipient_reject_code = 550
-#ynetworks_style = class
-#mynetworks_style = subnet
-#mynetworks_style = host
-#mynetworks = 168.100.189.0/28, 127.0.0.0/8
-#mynetworks = $config_directory/mynetworks
-#mynetworks = hash:/etc/postfix/network_table
+
+mynetworks_style = host
+mynetworks = 127.0.0.0/8
+
 #relay_domains = $mydestination
 #relayhost = $mydomain
 #relayhost = [gateway.my.domain]
@@ -32,32 +37,47 @@ unknown_local_recipient_reject_code = 550
 #in_flow_delay = 1s
 alias_maps = hash:/etc/aliases
 alias_database = hash:/etc/aliases
-#recipient_delimiter = +
-#home_mailbox = Mailbox
-#home_mailbox = Maildir/
-#mail_spool_directory = /var/mail
-#mail_spool_directory = /var/spool/mail
-#mailbox_command = /some/where/procmail
-#mailbox_command = /some/where/procmail -a "$EXTENSION"
-mailbox_transport = procmail
-#fallback_transport = lmtp:unix:/file/name
-#fallback_transport = cyrus
-#fallback_transport =
-#luser_relay = $user@other.host
-#luser_relay = $local@other.host
-#luser_relay = admin+$local
-#header_checks = regexp:/etc/postfix/header_checks
+recipient_delimiter = +
+
+mailbox_transport = cyrus
+cyrus_destination_recipient_limit=1
+
+header_checks = regexp:/etc/postfix/header_checks
 #fast_flush_domains = $relay_domains
+
 smtpd_banner = $myhostname ESMTP $mail_name ($mail_version)
 #local_destination_concurrency_limit = 2
 #default_destination_concurrency_limit = 20
-sendmail_path = /usr/sbin/sendmail
-newaliases_path = /usr/bin/newaliases
-mailq_path = /usr/bin/mailq
-setgid_group = postdrop
-html_directory = no
-manpage_directory = /usr/share/man
-sample_directory = /etc/postfix
-readme_directory = no
-virtual_alias_maps = hash:/etc/postfix/virtual, mysql:/etc/postfix/mysql-virtual.cf
-sender_canonical_maps = hash:/etc/postfix/canonical, mysql:/etc/postfix/mysql-canonical.cf
\ No newline at end of file
+
+virtual_alias_maps = mysql:/etc/postfix/mysql-virtual.cf
+sender_canonical_maps = mysql:/etc/postfix/mysql-canonical.cf
+
+smtpd_sasl_type = cyrus
+smtpd_sasl_auth_enable = yes
+smtpd_sasl_security_options = noanonymous
+smtpd_sasl_local_domain = $myhostname
+broken_sasl_auth_clients = yes
+
+#smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
+
+#content_filter=amavis:[127.0.0.1]:10024
+
+smtpd_helo_required = yes
+mime_header_checks=pcre:/etc/postfix/body_checks
+smtpd_recipient_restrictions =
+            reject_invalid_hostname,
+            #reject_non_fqdn_hostname,
+            reject_non_fqdn_sender,
+            reject_non_fqdn_recipient,
+            reject_unknown_sender_domain,
+            reject_unknown_recipient_domain,
+            reject_unauth_pipelining,
+            permit_mynetworks,
+            permit_sasl_authenticated,
+            reject_unauth_destination,
+            reject_rbl_client zombie.dnsbl.sorbs.net,
+            reject_rbl_client opm.blitzed.org,
+            reject_rbl_client list.dsbl.org,
+            reject_rbl_client sbl.spamhaus.org,
+            permit
+