HannibalWiki

Below a configuration for an MTA with the config and user-info in files on the system.

For a configuration with the user-info stored in LDAP see:

This system is only the MTA itself, it routes the e-mail to one or more mailstores on separate machines. Cyrus, Dovecot, Zarafa, pick your choice.

To service an RBL yourself, see: https://hannibal.solstice.nl/hannibalwiki/hannibal:rbl

apt-get install  postfix postfix-doc sasl2-bin libsasl2-modules

Extra stuff:

apt-get install  postgrey
apt-get install  postfix-policyd-spf-python

/etc/postfix/main.cf

smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no
append_dot_mydomain = no
smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key
...


smtpd_recipient_restrictions =
   permit_mynetworks,
   permit_sasl_authenticated,
   check_helo_access hash:/etc/postfix/whitelist,
   reject_unauth_destination,
   check_policy_service unix:private/policy-spf,
   reject_rbl_client zen.spamhaus.org,
   reject_rbl_client cbl.abuseat.org,
   reject_rbl_client reject_rbl_client zen.spamhaus.org,
   reject_rbl_client bl.spamcop.net,
   check_policy_service inet:127.0.0.1:10023

policy-spf_time_limit=3600s

/etc/postfix/virtual

...

/etc/postfix/transport

...