73 lines
3.6 KiB
CFEngine3
73 lines
3.6 KiB
CFEngine3
# ==========================================================================
|
|
# service type private unpriv chroot wakeup maxproc command + args
|
|
# (yes) (yes) (no) (never) (100)
|
|
# ==========================================================================
|
|
|
|
###
|
|
### Postscreen-Service: Prüft eingehende SMTP-Verbindungen auf Spam-Server
|
|
###
|
|
smtp inet n - n - 1 postscreen
|
|
-o smtpd_sasl_auth_enable=no
|
|
###
|
|
### SMTP-Daemon hinter Postscreen: Schleift E-Mails zur Filterung durch Amavis
|
|
###
|
|
smtpd pass - - n - - smtpd
|
|
-o smtpd_sasl_auth_enable=no
|
|
###
|
|
### dnsblog führt DNS-Abfragen für Blocklists durch
|
|
###
|
|
dnsblog unix - - n - 0 dnsblog
|
|
###
|
|
### tlsproxy gibt Postscreen TLS support
|
|
###
|
|
tlsproxy unix - - n - 0 tlsproxy
|
|
###
|
|
### Submission-Zugang für Clients: Für Mailclients gelten andere Regeln, als für andere Mailserver (siehe smtpd_ in main.cf)
|
|
###
|
|
submission inet n - n - - smtpd
|
|
-o syslog_name=postfix/submission
|
|
-o smtpd_tls_security_level=encrypt
|
|
-o smtpd_sasl_auth_enable=yes
|
|
-o smtpd_sasl_type=dovecot
|
|
-o smtpd_sasl_path=private/auth
|
|
-o smtpd_sasl_security_options=noanonymous
|
|
## -o smtpd_client_restrictions=permit_mynetworks,permit_sasl_authenticated,reject
|
|
## -o smtpd_sender_restrictions=permit_mynetworks,reject_non_fqdn_sender,reject_sender_login_mismatch,permit_sasl_authenticated,reject
|
|
## -o smtpd_relay_restrictions=reject_non_fqdn_recipient,reject_unknown_recipient_domain,permit_mynetworks,permit_sasl_authenticated,reject
|
|
-o smtpd_client_restrictions=$mua_client_restrictions
|
|
-o smtpd_sender_restrictions=$mua_sender_restrictions
|
|
-o smtpd_relay_restrictions=$mua_relay_restrictions
|
|
-o smtpd_sender_login_maps=mysql:/etc/postfix/mysql_sender_login_maps.cf
|
|
-o smtpd_helo_required=no
|
|
-o smtpd_helo_restrictions=
|
|
-o milter_macro_daemon_name=ORIGINATING
|
|
-o cleanup_service_name=submission-header-cleanup
|
|
###
|
|
### Weitere wichtige Dienste für den Serverbetrieb
|
|
###
|
|
pickup unix n - n 60 1 pickup
|
|
cleanup unix n - n - 0 cleanup
|
|
qmgr unix n - n 300 1 qmgr
|
|
tlsmgr unix - - n 1000? 1 tlsmgr
|
|
rewrite unix - - n - - trivial-rewrite
|
|
bounce unix - - n - 0 bounce
|
|
defer unix - - n - 0 bounce
|
|
trace unix - - n - 0 bounce
|
|
verify unix - - n - 1 verify
|
|
flush unix n - n 1000? 0 flush
|
|
proxymap unix - - n - - proxymap
|
|
proxywrite unix - - n - 1 proxymap
|
|
smtp unix - - n - - smtp
|
|
relay unix - - n - - smtp
|
|
showq unix n - n - - showq
|
|
error unix - - n - - error
|
|
retry unix - - n - - error
|
|
discard unix - - n - - discard
|
|
local unix - n n - - local
|
|
virtual unix - n n - - virtual
|
|
lmtp unix - - n - - lmtp
|
|
anvil unix - - n - 1 anvil
|
|
scache unix - - n - 1 scache
|
|
submission-header-cleanup unix n - n - 0 cleanup
|
|
-o header_checks=regexp:/etc/postfix/submission_header_cleanup
|