Modified Postfix

Discussion in 'Server Operation' started by m u r, Dec 29, 2006.

  1. m u r

    m u r Member

    I have modified my /etc/postfix/main.cf file to prevent spam. Could someone glance over it to make sure I'm not blocking anyone I shouldn't or any suggestions? Thanks.
    Code:
    readme_directory = /usr/share/doc/packages/postfix/README_FILES
    biff = no
    mail_spool_directory = /var/mail
    canonical_maps = hash:/etc/postfix/canonical
    #virtual_maps = hash:/etc/postfix/virtual
    relocated_maps = hash:/etc/postfix/relocated
    transport_maps = hash:/etc/postfix/transport
    sender_canonical_maps = hash:/etc/postfix/sender_canonical
    masquerade_exceptions = root
    masquerade_classes = envelope_sender, header_sender, header_recipient
    myhostname = ******.$mydomain
    program_directory = /usr/lib/postfix
    inet_interfaces = all
    masquerade_domains = 
    #mydestination = $myhostname, localhost.$mydomain
    defer_transports = 
    disable_dns_lookups = no
    relayhost = 
    mailbox_command = 
    mailbox_transport = 
    smtpd_sender_restrictions = hash:/etc/postfix/access
    smtpd_sender_restrictions = reject_unknown_address, reject_unknown_address
    smtpd_client_restrictions = 
    smtpd_client_restrictions = hash:/etc/postfix/access, reject_maps_rbl
    smtpd_client_restrictions = permit_mynetworks, reject_unknown_client 
    smtpd_helo_required = yes
    smtpd_delay_reject = yes
    smtpd_helo_restrictions = permit_mynetworks, check_helo_access hash:/etc/postfix/access, reject_invalid_hostname, permit
    strict_rfc821_envelopes = no
    smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,check_relay_domains
    smtp_sasl_auth_enable = no
    smtpd_sasl_auth_enable = yes
    smtpd_use_tls = yes
    smtp_use_tls = yes
    alias_maps = hash:/etc/aliases
    mailbox_size_limit = 0
    message_size_limit = 10240000
    mydomain = rwhm.net
    smtpd_sasl_local_domain = 
    smtpd_sasl_security_options = noanonymous
    broken_sasl_auth_clients = yes
    smtpd_tls_auth_only = no
    smtp_tls_note_starttls_offer = yes
    smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
    smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
    smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
    smtpd_tls_loglevel = 1
    smtpd_tls_received_header = yes
    smtpd_tls_session_cache_timeout = 3600s
    tls_random_source = dev:/dev/urandom
    home_mailbox = Maildir/
    
    virtual_maps = hash:/etc/postfix/virtusertable
    
    mydestination = /etc/postfix/local-host-names
     
  2. falko

    falko Super Moderator Howtoforge Staff

    I think it's looking ok (but I don't guarantee it... ;) ).
     

Share This Page