This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
hannibal:postfix_with_users_in_files [2013/11/04 21:41] Luc Nieland |
hannibal:postfix_with_users_in_files [2013/12/18 12:45] (current) Luc Nieland |
||
---|---|---|---|
Line 1: | Line 1: | ||
- | + | verplaatst | |
- | =====MTA (mail transfer agent)===== | + | |
- | + | ||
- | Below a configuration for an MTA with the config and user-info in files on the system. | + | |
- | + | ||
- | For a configuration with the user-info stored in LDAP see: | + | |
- | + | ||
- | This system is only the MTA itself, it routes the e-mail to one or more mailstores on separate machines. Cyrus, Dovecot, Zarafa, pick your choice. | + | |
- | + | ||
- | + | ||
- | To service an RBL yourself, see: [[https://hannibal.solstice.nl/hannibalwiki/hannibal:rbl]] | + | |
- | + | ||
- | + | ||
- | ====Installation==== | + | |
- | + | ||
- | apt-get install postfix postfix-doc sasl2-bin libsasl2-modules | + | |
- | + | ||
- | + | ||
- | + | ||
- | Extra stuff: | + | |
- | apt-get install postgrey | + | |
- | apt-get install postfix-policyd-spf-python | + | |
- | + | ||
- | + | ||
- | + | ||
- | + | ||
- | ====Configuration==== | + | |
- | + | ||
- | /etc/postfix/main.cf | + | |
- | <code> | + | |
- | smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) | + | |
- | biff = no | + | |
- | append_dot_mydomain = no | + | |
- | smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem | + | |
- | smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key | + | |
- | ... | + | |
- | + | ||
- | + | ||
- | smtpd_recipient_restrictions = | + | |
- | permit_mynetworks, | + | |
- | permit_sasl_authenticated, | + | |
- | check_helo_access hash:/etc/postfix/whitelist, | + | |
- | reject_unauth_destination, | + | |
- | check_policy_service unix:private/policy-spf, | + | |
- | reject_rbl_client cbl.abuseat.org, | + | |
- | reject_rbl_client zen.spamhaus.org, | + | |
- | reject_rbl_client bl.spamcop.net, | + | |
- | check_policy_service inet:127.0.0.1:10023 | + | |
- | + | ||
- | policy-spf_time_limit=3600s | + | |
- | + | ||
- | </code> | + | |
- | + | ||
- | + | ||
- | + | ||
- | /etc/postfix/virtual | + | |
- | <code> | + | |
- | ... | + | |
- | </code> | + | |
- | + | ||
- | + | ||
- | + | ||
- | /etc/postfix/transport | + | |
- | <code> | + | |
- | ... | + | |
- | </code> | + | |
- | + | ||
- | + | ||
- | + | ||
- | + |