User:Paul/sandbox/Sample master.cf

WARNING: This article is in a user sandbox, indicating it is a rough draft, and as such, is likely incomplete, contains buggy and insecure configurations, and is subject to substantial and frequent changes.

# # # smtp     inet  n       -       -       -       -       smtpd submission inet n      -       -       -       -       smtpd -o syslog_name=postfix/submission -o smtpd_tls_security_level=encrypt -o smtpd_sasl_auth_enable=yes -o smtpd_enforce_tls=yes -o smtpd_client_restrictions=permit_sasl_authenticated,reject_unauth_destination,reject -o smtpd_sasl_tls_security_options=noanonymous smtps    inet  n       -       -       -       -       smtpd -o syslog_name=postfix/smtps -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes -o smtpd_tls_auth_only=yes -o smtpd_client_restrictions=permit_sasl_authenticated,reject_unauth_destination,reject -o smtpd_sasl_security_options=noanonymous,noplaintext -o smtpd_sasl_tls_security_options=noanonymous pickup   fifo  n       -       -       60      1       pickup -o content_filter= -o receive_override_options=no_header_body_checks cleanup  unix  n       -       -       -       0       cleanup qmgr     fifo  n       -       n       300     1       qmgr tlsmgr   unix  -       -       -       1000? 1      tlsmgr rewrite  unix  -       -       -       -       -       trivial-rewrite bounce   unix  -       -       -       -       0       bounce defer    unix  -       -       -       -       0       bounce trace    unix  -       -       -       -       0       bounce verify   unix  -       -       -       -       1       verify flush    unix  n       -       -       1000? 0      flush proxymap unix  -       -       n       -       -       proxymap proxywrite unix -      -       n       -       1       proxymap smtp     unix  -       -       -       -       -       smtp relay    unix  -       -       -       -       -       smtp showq    unix  n       -       -       -       -       showq error    unix  -       -       -       -       -       error retry    unix  -       -       -       -       -       error discard  unix  -       -       -       -       -       discard local    unix  -       n       n       -       -       local virtual  unix  -       n       n       -       -       virtual lmtp     unix  -       -       -       -       -       lmtp anvil    unix  -       -       -       -       1       anvil scache   unix  -       -       -       -       1       scache # # # # maildrop unix  -       n       n       -       -       pipe flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient} # # # # # # # # # # # # uucp     unix  -       n       n       -       -       pipe flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) # # ifmail   unix  -       n       n       -       -       pipe flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) bsmtp    unix  -       n       n       -       -       pipe flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient scalemail-backend unix -       n       n       -       2       pipe flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension} mailman  unix  -       n       n       -       -       pipe flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py  ${nexthop} ${user} dovecot     unix   -        n      n       -       -   pipe flags=DRhu user=vmail:mail argv=/usr/lib/dovecot/dovecot-lda -d $(recipient) policyd-spf unix  -       n       n       -       0       spawn user=policyd-spf argv=/usr/bin/policyd-spf
 * 1) Postfix master process configuration file.  For details on the format
 * 2) of the file, see the master(5) manual page (command: "man 5 master").
 * 1) Do not forget to execute "postfix reload" after editing this file.
 * 1) service type  private unpriv  chroot  wakeup  maxproc command + args
 * 2)               (yes)   (yes)   (yes)   (never) (100)
 * 1)               (yes)   (yes)   (yes)   (never) (100)
 * 1) SMTP on port 25, unencrypted.
 * 1) smtp     inet  n       -       -       -       1       postscreen
 * 2) smtpd    pass  -       -       -       -       -       smtpd
 * 3) dnsblog  unix  -       -       -       -       0       dnsblog
 * 4) tlsproxy unix  -       -       -       -       0       tlsproxy
 * 1) SMTP with TLS on port 587.
 * 1) SMTP over SSL on port 465.
 * 1) 628      inet  n       -       -       -       -       qmqpd
 * 1) qmgr    fifo  n       -       n       300     1       oqmgr
 * 1)       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
 * 1) Interfaces to non-Postfix software. Be sure to examine the manual
 * 2) pages of the non-Postfix software to find out what options it wants.
 * 1) pages of the non-Postfix software to find out what options it wants.
 * 1) Many of the following services use the Postfix pipe(8) delivery
 * 2) agent.  See the pipe(8) man page for information about ${recipient}
 * 3) and other message envelope options.
 * 1) maildrop. See the Postfix MAILDROP_README file for details.
 * 2) Also specify in main.cf: maildrop_destination_recipient_limit=1
 * 1) Recent Cyrus versions can use the existing "lmtp" master.cf entry.
 * 1) Specify in cyrus.conf:
 * 2)   lmtp    cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4
 * 1) Specify in main.cf one or more of the following:
 * 2)  mailbox_transport = lmtp:inet:localhost
 * 3)  virtual_transport = lmtp:inet:localhost
 * 1) Cyrus 2.1.5 (Amos Gouaux)
 * 2) Also specify in main.cf: cyrus_destination_recipient_limit=1
 * 1) cyrus    unix  -       n       n       -       -       pipe
 * 2)  user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}
 * 1) Old example of delivery via Cyrus.
 * 1) Old example of delivery via Cyrus.
 * 1) old-cyrus unix -       n       n       -       -       pipe
 * 2)  flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user}
 * 1) See the Postfix UUCP_README file for configuration details.
 * 1) Other external delivery methods.
 * 1) The next two entries integrate with Amavis for anti-virus/spam checks.
 * 2) amavis     unix    -       -       -       -       3       smtp
 * 3)  -o smtp_data_done_timeout=1200
 * 4)  -o smtp_send_xforward_command=yes
 * 5)  -o disable_dns_lookups=yes
 * 6)  -o max_use=20
 * 7) 127.0.0.1:10025 inet   n       -       -       -       -       smtpd
 * 8)  -o content_filter=
 * 9)  -o local_recipient_maps=
 * 10)  -o relay_recipient_maps=
 * 11)  -o smtpd_restriction_classes=
 * 12)  -o smtpd_delay_reject=no
 * 13)  -o smtpd_client_restrictions=permit_mynetworks,reject
 * 14)  -o smtpd_helo_restrictions=
 * 15)  -o smtpd_sender_restrictions=
 * 16)  -o smtpd_recipient_restrictions=permit_mynetworks,reject
 * 17)  -o smtpd_data_restrictions=reject_unauth_pipelining
 * 18)  -o smtpd_end_of_data_restrictions=
 * 19)  -o mynetworks=127.0.0.0/8
 * 20)  -o smtpd_error_sleep_time=0
 * 21)  -o smtpd_soft_error_limit=1001
 * 22)  -o smtpd_hard_error_limit=1000
 * 23)  -o smtpd_client_connection_count_limit=0
 * 24)  -o smtpd_client_connection_rate_limit=0
 * 25)  -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks
 * 1) Integration with Dovecot - hand mail over to it for local delivery, and
 * 2) run the process under the vmail user and mail group.
 * 1) SPF