# see /usr/share/postfix/main.cf.dist for a commented, fuller
# version of this file.

# Do not change these directory settings - they are critical to Postfix
# operation.
command_directory                  = /usr/sbin
daemon_directory                   = /usr/lib/postfix
program_directory                  = /usr/lib/postfix

sample_directory                   = /usr/share/doc/postfix/examples
readme_directory                   = /usr/share/doc/postfix
manpage_directory                  = /usr/share/man

# appending .domain is the MUA's job.
append_dot_mydomain                = no

# Uncomment the next line to generate delayed mail warnings
#delay_warning_time = 4h

#smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
# AI: MTA und System sind uninteressant
smtpd_banner                       = $myhostname ESMTP Mailserver IN-Chemnitz e.V.
setgid_group                       = postdrop
biff                               = no


# appending .domain is the MUA's job.
myhostname                         = easy2.in-chemnitz.de
myorigin                           = /etc/mailname

# erst einmal nur relay
#mydestination                     = easy.in-chemnitz.de, in-chemnitz.de, localhost, .in-chemnitz.de
#relay_domains                     = $mydestination, /etc/postfix/domains

mydestination                      = localhost, ronsc.de, easy2.in-chemnitz.de, easy.in-chemnitz.de, in-chemnitz.de, .in-chemnitz.de
relay_domains                      = mydestination, /etc/postfix/domains

relayhost                          =
mynetworks                         = 127.0.0.0/8 10.55.0.0/16

mailbox_command                    = procmail -a "$EXTENSION"
mailbox_size_limit                 = 0
recipient_delimiter                = +
mailbox_transport                  = lmtp:unix:/var/run/cyrus/socket/lmtp
#cyrus

#mailbox_transport = lmtp:unix:/var/run/cyrus/socket/lmtp

mydomain                           = in-chemnitz.de
myorigin                           = in-chemnitz.de
inet_interfaces                    = all
#easy.in-chemnitz.de easy.ronsc.de

alias_maps                         = hash:/etc/aliases,hash:/etc/postfix/mailman_alias
#erst einmal alles MXsen
transport_maps                     = hash:/etc/postfix/transport
canonical_maps                     = hash:/etc/postfix/canonical
sender_canonical_maps              = hash:/etc/postfix/sender_canonical
virtual_maps                       = hash:/etc/postfix/virtual,hash:/etc/postfix/mailman_virtual
#virtual_mailbox_maps               = regexp:/etc/postfix/virtual_mailbox


header_checks                      = regexp:/etc/postfix/header_checks.regexp
body_checks                        = regexp:/etc/postfix/body_checks.regexp
smtpd_client_restrictions          = permit_sasl_authenticated,
                                     permit_mynetworks,
                                     reject_rbl_client sbl-xbl.spamhaus.org,
                                     reject_rbl_client relays.ordb.org,
                                     reject_rbl_client dsn.rfc-ignorant.org,
                                     #reject_unknown_client,
                                     hash:/etc/postfix/access
                                     #tag_rbl_client relays.ordb.org
                                     #reject_unknown_client

smtpd_sender_restrictions          = permit_mynetworks,
                                     permit_sasl_authenticated,
                                     reject_non_fqdn_sender,
                                     reject_unknown_sender_domain,
                                     hash:/etc/postfix/access
                                     #reject_unknown_sender_domain,
                                     #reject_non_fqdn_sender
smtpd_delay_reject = no
smtpd_recipient_restrictions       = permit_sasl_authenticated,
                                     permit_mynetworks,
                                     reject_non_fqdn_recipient,
                                     reject_unauth_destination,
                                     reject_unknown_recipient_domain,
                                     check_policy_service inet:mail.in-chemnitz.de:2525,
                                     check_recipient_access hash:/etc/postfix/recipient_access ,
                                     check_recipient_access regexp:/etc/postfix/recipient_access.regexp ,
                                     reject_unauth_destination





smtpd_use_tls                      = yes
smtpd_tls_key_file                 = /etc/ssl/private/cyrus-2006-02-13.key
smtpd_tls_cert_file                = /etc/ssl/private/cyrus-2006-02-13.crt
smtpd_tls_CAfile                   = /etc/ssl/private/ca.crt

smtpd_tls_loglevel                 = 1
smtpd_tls_received_header          = yes
smtpd_tls_session_cache_timeout    = 3600s
tls_random_source                  = dev:/dev/urandom

smtpd_sasl_auth_enable             = yes
smtpd_sasl_security_options        = noanonymous
smtpd_sasl_local_domain            = 
broken_sasl_auth_clients           = yes
smtpd_sasl_authenticated_header    = yes

content_filter                     = smtp-amavis:[127.0.0.1]:10024


default_rbl_reply                  = $rbl_code Service unavailable; $rbl_class [$rbl_what] blocked using $rbl_domain${rbl_reason?; $rbl_reason} - see http://$rbl_domain.

# vim:et:ts=35:sw=5