docker-mailserver/target/postfix/master.cf

#
# Postfix master process configuration file.  For details on the format
# of the file, see the master(5) manual page (command: "man 5 master" or
# on-line: http://www.postfix.org/master.5.html).
#
# Do not forget to execute "postfix reload" after editing this file.
#
# ==========================================================================
# service type  private unpriv  chroot  wakeup  maxproc command + args
#               (yes)   (yes)   (no)   (never) (100)
# ==========================================================================

smtp       inet n       -       n       -       1       postscreen
smtpd      pass -       -       n       -       -       smtpd
tlsproxy   unix -       -       n       -       0       tlsproxy
dnsblog    unix -       -       n       -       0       dnsblog
submission inet n       -       n       -       -       smtpd
  -o syslog_name=postfix/submission
  -o smtpd_tls_security_level=encrypt
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_sasl_type=dovecot
  -o smtpd_sasl_path=private/auth
  -o smtpd_reject_unlisted_recipient=no
  -o smtpd_sasl_authenticated_header=yes
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
  -o smtpd_relay_restrictions=permit_sasl_authenticated,reject
  -o milter_macro_daemon_name=ORIGINATING
  -o cleanup_service_name=sender-cleanup

smtps     inet  n       -       n       -       -       smtpd
  -o syslog_name=postfix/smtps
  -o smtpd_tls_wrappermode=yes
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_sasl_type=dovecot
  -o smtpd_sasl_path=private/auth
  -o smtpd_reject_unlisted_recipient=no
  -o smtpd_sasl_authenticated_header=yes
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
  -o smtpd_relay_restrictions=permit_sasl_authenticated,reject
  -o milter_macro_daemon_name=ORIGINATING
  -o cleanup_service_name=sender-cleanup

pickup    fifo  n       -       y       60      1       pickup
  -o content_filter=
  -o receive_override_options=no_header_body_checks

cleanup   unix  n       -       y       -       0       cleanup
qmgr      unix  n       -       n       300     1       qmgr
tlsmgr    unix  -       -       y       1000?   1       tlsmgr
rewrite   unix  -       -       y       -       -       trivial-rewrite
bounce    unix  -       -       y       -       0       bounce
defer     unix  -       -       y       -       0       bounce
trace     unix  -       -       y       -       0       bounce
verify    unix  -       -       y       -       1       verify
flush     unix  n       -       y       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
proxywrite unix -       -       n       -       1       proxymap
smtp      unix  -       -       y       -       -       smtp
relay     unix  -       -       y       -       -       smtp
showq     unix  n       -       y       -       -       showq
error     unix  -       -       y       -       -       error
retry     unix  -       -       y       -       -       error
discard   unix  -       -       y       -       -       discard
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       n       -       -       lmtp
anvil     unix  -       -       y       -       1       anvil
scache    unix  -       -       y       -       1       scache

sender-cleanup unix n   -       -       -       0       cleanup
  -o syslog_name=postfix/sender-cleanup
  -o header_checks=pcre:/etc/postfix/maps/sender_header_filter.pcre

#
# SPF configuration
#
policyd-spf  unix  -       n       n       -       0       spawn
    user=policyd-spf argv=/usr/bin/policyd-spf

#
# Amavis configuration
#

smtp-amavis     unix    -       -       n       -       2       smtp
  -o syslog_name=postfix/$service_name
  -o smtp_data_done_timeout=1200
  -o smtp_send_xforward_command=yes
  -o disable_dns_lookups=yes
  -o max_use=20
  -o smtp_tls_security_level=none
  -o smtp_tls_wrappermode=no

127.0.0.1:10025 inet    n       -       n       -       -       smtpd
  -o syslog_name=postfix/smtpd-amavis
  -o content_filter=
  -o local_recipient_maps=
  -o relay_recipient_maps=
  -o smtpd_restriction_classes=
  -o smtpd_delay_reject=no
  -o smtpd_client_restrictions=permit_mynetworks,reject
  -o smtpd_helo_restrictions=
  -o smtpd_sender_restrictions=
  -o smtpd_recipient_restrictions=permit_mynetworks,reject
  -o smtpd_data_restrictions=reject_unauth_pipelining
  -o smtpd_end_of_data_restrictions=
  -o mynetworks=127.0.0.0/8
  -o smtpd_error_sleep_time=0
  -o smtpd_soft_error_limit=1001
  -o smtpd_hard_error_limit=1000
  -o smtpd_client_connection_count_limit=0
  -o smtpd_client_connection_rate_limit=0
  -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks,no_milters
  -o smtp_tls_security_level=none
Added default postfix configuration files 2015-03-31 15:27:54 +00:00			`#`
			`# Postfix master process configuration file. For details on the format`
			`# of the file, see the master(5) manual page (command: "man 5 master" or`
			`# on-line: http://www.postfix.org/master.5.html).`
			`#`
			`# Do not forget to execute "postfix reload" after editing this file.`
			`#`
			`# ==========================================================================`
			`# service type private unpriv chroot wakeup maxproc command + args`
This should fix most of 2.3 issues reported in #545 & #586 (#612) * Fixes most of 2.3 issues reported in #545 & 586 2017-05-22 07:28:32 +00:00			`# (yes) (yes) (no) (never) (100)`
Added default postfix configuration files 2015-03-31 15:27:54 +00:00			`# ==========================================================================`
Fixed deprecated configuration about TLS 2015-03-31 20:21:56 +00:00
formatting files according to standard (#1619) * added EditorConfig linting * adding `eclint` as Travis script target * re-adjusted .pem files to have a newline 2020-09-24 12:54:21 +00:00			`smtp inet n - n - 1 postscreen`
			`smtpd pass - - n - - smtpd`
			`tlsproxy unix - - n - 0 tlsproxy`
			`dnsblog unix - - n - 0 dnsblog`
Added default postfix configuration files 2015-03-31 15:27:54 +00:00			`submission inet n - n - - smtpd`
			`-o syslog_name=postfix/submission`
			`-o smtpd_tls_security_level=encrypt`
			`-o smtpd_sasl_auth_enable=yes`
Dovecot based version of the mailserver. Courier and Cyrus Sasl have been removed and substituted with Dovecot which now handle authentication for Postfix, Imap and Pop3, with support for SSL. This allow the use of several encryption schemes for the password as well as a single user db. OpenDKIM keys can now be provided at the startup and will be used instead of generating new ones (so that you don't have to change your DNS configuration). This version builds correctly on Docker but no integration tests have been reworked to accommodate Dovecot instead of Courier and Cyrus Sasl. As such at present no automatic tests can be executed. 2016-04-07 12:20:51 +00:00			`-o smtpd_sasl_type=dovecot`
			`-o smtpd_sasl_path=private/auth`
Added default postfix configuration files 2015-03-31 15:27:54 +00:00			`-o smtpd_reject_unlisted_recipient=no`
			`-o smtpd_sasl_authenticated_header=yes`
			`-o smtpd_client_restrictions=permit_sasl_authenticated,reject`
			`-o smtpd_relay_restrictions=permit_sasl_authenticated,reject`
			`-o milter_macro_daemon_name=ORIGINATING`
Improve the privacy of the client by removing sensitive details 2017-08-09 21:19:00 +00:00			`-o cleanup_service_name=sender-cleanup`
Listen also on the ssl port 465 for clients (#709) 2017-09-07 16:08:25 +00:00
			`smtps inet n - n - - smtpd`
			`-o syslog_name=postfix/smtps`
			`-o smtpd_tls_wrappermode=yes`
			`-o smtpd_sasl_auth_enable=yes`
			`-o smtpd_sasl_type=dovecot`
			`-o smtpd_sasl_path=private/auth`
			`-o smtpd_reject_unlisted_recipient=no`
			`-o smtpd_sasl_authenticated_header=yes`
			`-o smtpd_client_restrictions=permit_sasl_authenticated,reject`
			`-o smtpd_relay_restrictions=permit_sasl_authenticated,reject`
			`-o milter_macro_daemon_name=ORIGINATING`
Improve the privacy of the client by removing sensitive details 2017-08-09 21:19:00 +00:00			`-o cleanup_service_name=sender-cleanup`
Listen also on the ssl port 465 for clients (#709) 2017-09-07 16:08:25 +00:00
This should fix most of 2.3 issues reported in #545 & #586 (#612) * Fixes most of 2.3 issues reported in #545 & 586 2017-05-22 07:28:32 +00:00			`pickup fifo n - y 60 1 pickup`
Added default postfix configuration files 2015-03-31 15:27:54 +00:00			`-o content_filter=`
			`-o receive_override_options=no_header_body_checks`

This should fix most of 2.3 issues reported in #545 & #586 (#612) * Fixes most of 2.3 issues reported in #545 & 586 2017-05-22 07:28:32 +00:00			`cleanup unix n - y - 0 cleanup`
Added default postfix configuration files 2015-03-31 15:27:54 +00:00			`qmgr unix n - n 300 1 qmgr`
This should fix most of 2.3 issues reported in #545 & #586 (#612) * Fixes most of 2.3 issues reported in #545 & 586 2017-05-22 07:28:32 +00:00			`tlsmgr unix - - y 1000? 1 tlsmgr`
			`rewrite unix - - y - - trivial-rewrite`
			`bounce unix - - y - 0 bounce`
			`defer unix - - y - 0 bounce`
			`trace unix - - y - 0 bounce`
			`verify unix - - y - 1 verify`
			`flush unix n - y 1000? 0 flush`
Added default postfix configuration files 2015-03-31 15:27:54 +00:00			`proxymap unix - - n - - proxymap`
			`proxywrite unix - - n - 1 proxymap`
This should fix most of 2.3 issues reported in #545 & #586 (#612) * Fixes most of 2.3 issues reported in #545 & 586 2017-05-22 07:28:32 +00:00			`smtp unix - - y - - smtp`
			`relay unix - - y - - smtp`
			`showq unix n - y - - showq`
			`error unix - - y - - error`
			`retry unix - - y - - error`
			`discard unix - - y - - discard`
Added default postfix configuration files 2015-03-31 15:27:54 +00:00			`local unix - n n - - local`
			`virtual unix - n n - - virtual`
make Postfix -> Dovecot delivery over LMTP (was LDA) (#305) (#360) 2016-10-24 13:03:08 +00:00			`lmtp unix - - n - - lmtp`
This should fix most of 2.3 issues reported in #545 & #586 (#612) * Fixes most of 2.3 issues reported in #545 & 586 2017-05-22 07:28:32 +00:00			`anvil unix - - y - 1 anvil`
			`scache unix - - y - 1 scache`
Fixed deprecated configuration about TLS 2015-03-31 20:21:56 +00:00
Improve the privacy of the client by removing sensitive details 2017-08-09 21:19:00 +00:00			`sender-cleanup unix n - - - 0 cleanup`
			`-o syslog_name=postfix/sender-cleanup`
			`-o header_checks=pcre:/etc/postfix/maps/sender_header_filter.pcre`
Added default postfix configuration files 2015-03-31 15:27:54 +00:00
Fixes #451 - add incoming mail SPF policy checks (#543) 2017-03-14 16:21:17 +00:00			`#`
			`# SPF configuration`
			`#`
			`policyd-spf unix - n n - 0 spawn`
			`user=policyd-spf argv=/usr/bin/policyd-spf`
Added default postfix configuration files 2015-03-31 15:27:54 +00:00
			`#`
Implement basic sieve support using Dovecot. The dovecot-sieve plugin is installed and configured to apply sieve as soon as a .dovecot.sieve file is encountered in the virtual user's home directory (that is /var/mail/${domain}/${username}/.dovecot.sieve). Transport has been changed in the postfix configuration to use Dovecot LDA (see http://wiki.dovecot.org/LDA/Postfix) to actually enable sieve filtering. Tests have been added. 2016-04-28 06:57:50 +00:00			`# Amavis configuration`
Added default postfix configuration files 2015-03-31 15:27:54 +00:00			`#`

This should fix most of 2.3 issues reported in #545 & #586 (#612) * Fixes most of 2.3 issues reported in #545 & 586 2017-05-22 07:28:32 +00:00			`smtp-amavis unix - - n - 2 smtp`
fix: Opt-out of implicit TLS for Amavis SMTP client transport (#2607) Presently relay-host support modifies `main.cf` settings directly. This adjusts the default transport (`smtp`) which other transports in `master.cf` inherit from. When configuring for implicit TLS to a `relay-host` this would set `main.cf:smtp_tls_wrappermode = yes` and affect the transport `master.cf:smtp-amavis` which does not set an override like it does for `smtp_tls_security_level`. This causes Amavis to fail working which the default transport relies on due to `main.cf:content_filter`. Easy fix, by explicitly adding the override `smtp_tls_wrappermode=no`.`no` is default in `main.cf` so inheriting this setting hasn't been a problem in the past for other relay-hosts using StartTLS. 2022-06-05 00:04:16 +00:00			`-o syslog_name=postfix/$service_name`
Added default postfix configuration files 2015-03-31 15:27:54 +00:00			`-o smtp_data_done_timeout=1200`
			`-o smtp_send_xforward_command=yes`
			`-o disable_dns_lookups=yes`
			`-o max_use=20`
Set smtp_tls_security_level for smtp-amavis in master.cf This way you can set smtp_tls_security_level = encrypt in main.cf and amavis would still work. 2016-02-20 02:14:04 +00:00			`-o smtp_tls_security_level=none`
fix: Opt-out of implicit TLS for Amavis SMTP client transport (#2607) Presently relay-host support modifies `main.cf` settings directly. This adjusts the default transport (`smtp`) which other transports in `master.cf` inherit from. When configuring for implicit TLS to a `relay-host` this would set `main.cf:smtp_tls_wrappermode = yes` and affect the transport `master.cf:smtp-amavis` which does not set an override like it does for `smtp_tls_security_level`. This causes Amavis to fail working which the default transport relies on due to `main.cf:content_filter`. Easy fix, by explicitly adding the override `smtp_tls_wrappermode=no`.`no` is default in `main.cf` so inheriting this setting hasn't been a problem in the past for other relay-hosts using StartTLS. 2022-06-05 00:04:16 +00:00			`-o smtp_tls_wrappermode=no`
Added default postfix configuration files 2015-03-31 15:27:54 +00:00
Fix for #44 and #47, also enabling plain and login mechs. 2016-01-12 00:02:47 +00:00			`127.0.0.1:10025 inet n - n - - smtpd`
fix: Opt-out of implicit TLS for Amavis SMTP client transport (#2607) Presently relay-host support modifies `main.cf` settings directly. This adjusts the default transport (`smtp`) which other transports in `master.cf` inherit from. When configuring for implicit TLS to a `relay-host` this would set `main.cf:smtp_tls_wrappermode = yes` and affect the transport `master.cf:smtp-amavis` which does not set an override like it does for `smtp_tls_security_level`. This causes Amavis to fail working which the default transport relies on due to `main.cf:content_filter`. Easy fix, by explicitly adding the override `smtp_tls_wrappermode=no`.`no` is default in `main.cf` so inheriting this setting hasn't been a problem in the past for other relay-hosts using StartTLS. 2022-06-05 00:04:16 +00:00			`-o syslog_name=postfix/smtpd-amavis`
Added default postfix configuration files 2015-03-31 15:27:54 +00:00			`-o content_filter=`
			`-o local_recipient_maps=`
			`-o relay_recipient_maps=`
			`-o smtpd_restriction_classes=`
			`-o smtpd_delay_reject=no`
			`-o smtpd_client_restrictions=permit_mynetworks,reject`
			`-o smtpd_helo_restrictions=`
			`-o smtpd_sender_restrictions=`
			`-o smtpd_recipient_restrictions=permit_mynetworks,reject`
			`-o smtpd_data_restrictions=reject_unauth_pipelining`
			`-o smtpd_end_of_data_restrictions=`
			`-o mynetworks=127.0.0.0/8`
			`-o smtpd_error_sleep_time=0`
			`-o smtpd_soft_error_limit=1001`
			`-o smtpd_hard_error_limit=1000`
			`-o smtpd_client_connection_count_limit=0`
			`-o smtpd_client_connection_rate_limit=0`
improve OpenDKIM and OpenDMARC milters integration (#361) 2016-10-25 06:57:08 +00:00			`-o receive_override_options=no_header_body_checks,no_unknown_recipient_checks,no_milters`
Set smtp_tls_security_level for smtp-amavis in master.cf This way you can set smtp_tls_security_level = encrypt in main.cf and amavis would still work. 2016-02-20 02:14:04 +00:00			`-o smtp_tls_security_level=none`