« Postfix sample » : différence entre les versions

De Linux Server Wiki
Aller à la navigation Aller à la recherche
Aucun résumé des modifications
Aucun résumé des modifications
 
(4 versions intermédiaires par le même utilisateur non affichées)
Ligne 1 : Ligne 1 :
[[Category:serveur]]
[[Category:debian]]
<pre>
<pre>
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no
biff = no
Ligne 9 : Ligne 10 :
smtpd_tls_key_file=/etc/postfix/ssl/postfix.key
smtpd_tls_key_file=/etc/postfix/ssl/postfix.key
smtpd_tls_CAfile=/etc/postfix/ssl/ca_chain.pem
smtpd_tls_CAfile=/etc/postfix/ssl/ca_chain.pem
smtpd_tls_loglevel = 1
smtpd_tls_security_level=may
smtp_tls_CAfile=/etc/postfix/ssl/ca_chain.pem
smtp_tls_CAfile=/etc/postfix/ssl/ca_chain.pem
smtpd_tls_security_level=may
smtp_tls_security_level=may
smtp_tls_security_level=may
smtpd_tls_loglevel = 1
smtp_tls_loglevel = 1
smtp_tls_loglevel = 1
#poodle fix
smtpd_tls_protocols = !SSLv2, !SSLv3


smtp_tls_policy_maps = hash:/etc/postfix/tls_policy
smtp_tls_policy_maps = hash:/etc/postfix/tls_policy


mydomain = celestis.csnu.org
mydomain = celestis.csnu.org
append_dot_mydomain = yes
append_dot_mydomain = no
myhostname = celestis.csnu.org
myhostname = celestis.csnu.org
myorigin = /etc/mailname
myorigin = /etc/mailname
Ligne 27 : Ligne 25 :


relayhost =
relayhost =
smtp_sasl_password_maps =
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128


Ligne 34 : Ligne 30 :
relay_recipient_maps =
relay_recipient_maps =


#inet_interfaces = 127.0.0.1, [::1], 88.190.225.214, [ipv6]
inet_interfaces = all
#inet_protocols = all
inet_protocols = all
inet_interfaces = 127.0.0.1, 88.190.225.214
inet_protocols = ipv4


alias_maps = proxy:hash:/etc/aliases
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases


smtpd_sasl_auth_enable = no
smtpd_sasl_auth_enable = no
smtpd_sasl_local_domain = $myhostname   
smtpd_sasl_local_domain = $myhostname   
smtpd_sender_restrictions =
smtpd_sender_restrictions =
   reject_unknown_sender_domain,
   reject_unknown_sender_domain,
   reject_non_fqdn_sender
   reject_non_fqdn_sender
smtpd_recipient_restrictions =
smtpd_recipient_restrictions =
   permit_inet_interfaces,
   permit_inet_interfaces,
Ligne 56 : Ligne 49 :
   reject_non_fqdn_recipient,
   reject_non_fqdn_recipient,
   reject_unauth_destination
   reject_unauth_destination
smtpd_client_restrictions =
smtpd_client_restrictions =
   permit_inet_interfaces,
   permit_inet_interfaces,
Ligne 63 : Ligne 54 :
   permit_sasl_authenticated,
   permit_sasl_authenticated,
   reject_unauth_pipelining
   reject_unauth_pipelining
smtpd_helo_restrictions =
smtpd_helo_restrictions =
   permit_inet_interfaces,
   permit_inet_interfaces,
Ligne 71 : Ligne 61 :
   reject_non_fqdn_helo_hostname,
   reject_non_fqdn_helo_hostname,
   reject_unknown_helo_hostname
   reject_unknown_helo_hostname
smtpd_data_restrictions =
smtpd_data_restrictions =
   permit_inet_interfaces,
   permit_inet_interfaces,

Dernière version du 19 mai 2017 à 17:57

smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no
disable_vrfy_command = yes
smtpd_helo_required = yes

smtpd_tls_cert_file=/etc/postfix/ssl/postfix.pem
smtpd_tls_key_file=/etc/postfix/ssl/postfix.key
smtpd_tls_CAfile=/etc/postfix/ssl/ca_chain.pem
smtpd_tls_loglevel = 1
smtpd_tls_security_level=may
smtp_tls_CAfile=/etc/postfix/ssl/ca_chain.pem
smtp_tls_security_level=may
smtp_tls_loglevel = 1

smtp_tls_policy_maps = hash:/etc/postfix/tls_policy

mydomain = celestis.csnu.org
append_dot_mydomain = no
myhostname = celestis.csnu.org
myorigin = /etc/mailname
mydestination = celestis.csnu.org, localhost.localdomain, localhost

relayhost =
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128

relay_domains =
relay_recipient_maps =

inet_interfaces = all
inet_protocols = all

alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases

smtpd_sasl_auth_enable = no
smtpd_sasl_local_domain = $myhostname   
smtpd_sender_restrictions =
  reject_unknown_sender_domain,
  reject_non_fqdn_sender
smtpd_recipient_restrictions =
  permit_inet_interfaces,
  permit_mynetworks,
  permit_sasl_authenticated,
  reject_non_fqdn_hostname,
  reject_non_fqdn_sender,
  reject_non_fqdn_recipient,
  reject_unauth_destination
smtpd_client_restrictions =
  permit_inet_interfaces,
  permit_mynetworks,
  permit_sasl_authenticated,
  reject_unauth_pipelining
smtpd_helo_restrictions =
  permit_inet_interfaces,
  permit_mynetworks,
  permit_sasl_authenticated,
  reject_invalid_helo_hostname,
  reject_non_fqdn_helo_hostname,
  reject_unknown_helo_hostname
smtpd_data_restrictions =
  permit_inet_interfaces,
  permit_mynetworks,
  permit_sasl_authenticated,
  reject_unauth_pipelining