OpenPKG Specs / annotate

postfix/postfix.txt@58360ee9c913 (annotated)

postfix/postfix.txt

Mon, 20 Apr 2009 20:16:01 +0200

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Mon, 20 Apr 2009 20:16:01 +0200
changeset 181
58360ee9c913
parent 179
6539a982f682
child 190
35b9f699911a
permissions
-rw-r--r--

Add missing files to runtime configuration and adjust buildconf.

michael@146 1 <file name="Makefile">
michael@146 2 ##
michael@146 3 ## @l_prefix@/etc/postfix/Makefile -- maintainance procedures
michael@146 4 ##
michael@146 5
michael@146 6 # path configuration
michael@146 7 PREFIX = @l_prefix@
michael@146 8 SBINDIR = $(PREFIX)/sbin
michael@146 9 ETCDIR = $(PREFIX)/etc
michael@146 10
michael@146 11 # program configuration
michael@146 12 RC = $(ETCDIR)/rc
michael@146 13 POSTALIAS = $(SBINDIR)/postalias
michael@146 14 POSTMAP = $(SBINDIR)/postmap
michael@146 15 POSTFIX = $(SBINDIR)/postfix
michael@146 16
michael@146 17 # table filename configuration
michael@146 18 T_ACCESS = access
michael@146 19 T_CANONICAL = canonical
michael@146 20 T_GENERIC = generic
michael@146 21 T_VIRTUAL = virtual
michael@146 22 T_RELOCATED = relocated
michael@146 23 T_TRANSPORT = transport
michael@146 24 T_ALIASES = aliases
michael@179 25 T_CLIENTS = clients
michael@179 26 T_SENDERS = senders
michael@181 27 T_CLICRT = clicrt
michael@146 28
michael@146 29 # dependency tracking
michael@146 30 TIMESTAMP = .up-to-date
michael@146 31 DEPENDENCIES = Makefile master.cf main.cf $(TABLES)
michael@146 32
michael@146 33 # managed tables:
michael@146 34 # - use extension ".db" for hash tables ("hash")
michael@146 35 # - use no extension for regex tables ("pcre")
michael@146 36 TABLES = \
michael@146 37 $(T_ACCESS).db \
michael@146 38 $(T_CANONICAL).db \
michael@146 39 $(T_GENERIC).db \
michael@146 40 $(T_VIRTUAL).db \
michael@146 41 $(T_RELOCATED).db \
michael@146 42 $(T_TRANSPORT).db \
michael@179 43 $(T_ALIASES).db \
michael@179 44 $(T_CLIENTS).db \
michael@179 45 $(T_SENDERS).db \
michael@181 46 $(T_CLICRT).db
michael@146 47
michael@146 48 # default target
michael@146 49 all: $(TABLES) $(TIMESTAMP)
michael@146 50
michael@146 51 # implicit checking and reloading
michael@146 52 $(TIMESTAMP): $(DEPENDENCIES)
michael@146 53 $(POSTFIX) check
michael@146 54 $(POSTFIX) reload >/dev/null 2>&1 || true
michael@146 55 touch $(TIMESTAMP) && chmod 600 $(TIMESTAMP)
michael@146 56
michael@146 57 # explicit checking
michael@146 58 check:
michael@146 59 $(POSTFIX) check
michael@146 60
michael@146 61 # hash table update targets
michael@146 62 $(T_ACCESS).db: $(T_ACCESS) $(MAKEFILE)
michael@146 63 $(POSTMAP) hash:$(T_ACCESS)
michael@146 64 $(T_CANONICAL).db: $(T_CANONICAL) $(MAKEFILE)
michael@146 65 $(POSTMAP) hash:$(T_CANONICAL)
michael@146 66 $(T_GENERIC).db: $(T_GENERIC) $(MAKEFILE)
michael@146 67 $(POSTMAP) hash:$(T_GENERIC)
michael@146 68 $(T_VIRTUAL).db: $(T_VIRTUAL) $(MAKEFILE)
michael@146 69 $(POSTMAP) hash:$(T_VIRTUAL)
michael@146 70 $(T_RELOCATED).db: $(T_RELOCATED) $(MAKEFILE)
michael@146 71 $(POSTMAP) hash:$(T_RELOCATED)
michael@146 72 $(T_TRANSPORT).db: $(T_TRANSPORT) $(MAKEFILE)
michael@146 73 $(POSTMAP) hash:$(T_TRANSPORT)
michael@146 74 $(T_ALIASES).db: $(T_ALIASES) $(MAKEFILE)
michael@146 75 $(POSTALIAS) hash:$(T_ALIASES)
michael@179 76 $(T_CLIENTS).db: $(T_CLIENTS) $(MAKEFILE)
michael@179 77 $(POSTMAP) hash:$(T_CLIENTS)
michael@179 78 $(T_SENDERS).db: $(T_SENDERS) $(MAKEFILE)
michael@179 79 $(POSTMAP) hash:$(T_SENDERS)
michael@181 80 $(T_CLICRT).db: $(T_CLICRT) $(MAKEFILE)
michael@181 81 $(POSTMAP) hash:$(T_CLICRT)
michael@146 82
michael@146 83 # cleanup target
michael@146 84 clean:
michael@146 85 -rm -f $(TABLES)
michael@146 86 -rm -f $(TIMESTAMP)
michael@146 87
michael@146 88 # process management
michael@146 89 start:
michael@146 90 $(RC) postfix start
michael@146 91 reload:
michael@146 92 $(RC) postfix reload
michael@146 93 stop:
michael@146 94 $(RC) postfix stop
michael@146 95
michael@146 96 </file>
michael@146 97 <file name="master.cf">
michael@146 98 ##
michael@146 99 ## @l_prefix@/etc/postfix/master.cf -- Postfix master process table
michael@146 100 ##
michael@146 101 # ==========================================================================
michael@146 102 # service type private unpriv chroot wakeup maxproc command + args
michael@146 103 # (yes) (yes) (yes) (never) (100)
michael@146 104 # ==========================================================================
michael@146 105 smtp inet n - n - - smtpd
michael@146 106 #628 inet n - n - - qmqpd
michael@146 107 pickup fifo n - n 60 1 pickup
michael@146 108 cleanup unix n - n - 0 cleanup
michael@146 109 qmgr fifo n - n 300 1 qmgr
michael@146 110 tlsmgr unix - - n 1000? 1 tlsmgr
michael@146 111 rewrite unix - - n - - trivial-rewrite
michael@146 112 bounce unix - - n - 0 bounce
michael@146 113 defer unix - - n - 0 bounce
michael@146 114 trace unix - - n - 0 bounce
michael@146 115 verify unix - - n - 1 verify
michael@146 116 flush unix n - n 1000? 0 flush
michael@146 117 proxymap unix - - n - - proxymap
michael@146 118 proxywrite unix - - n - - proxymap
michael@146 119 smtp unix - - n - - smtp
michael@146 120 relay unix - - n - - smtp -o fallback_relay=
michael@146 121 showq unix n - n - - showq
michael@146 122 error unix - - n - - error
michael@146 123 retry unix - - n - - error
michael@146 124 local unix - n n - - local
michael@146 125 virtual unix - n n - - virtual
michael@146 126 lmtp unix - - n - - lmtp
michael@146 127 anvil unix - - n - 1 anvil
michael@146 128 scache unix - - n - 1 scache
michael@146 129 #maildrop unix - n n - - pipe flags=DRhu user=@l_nusr@ argv=@l_prefix@/bin/maildrop -d ${recipient}
michael@146 130 #cyrus unix - n n - - pipe user=@l_nusr@ argv=@l_prefix@/bin/cyrdeliver -e -r ${sender} -m ${extension} ${user}
michael@179 131 #dovecot unix - n n - - pipe flags=DR user=opmi-r argv=/opmi/libexec/dovecot/deliver -f ${sender} -d ${user} -n -m ${extension}
michael@146 132 #uucp unix - n n - - pipe flags=Fqhu user=@l_nusr@ argv=@l_prefix@/bin/uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
michael@146 133 #ifmail unix - n n - - pipe flags=F user=@l_nusr@ argv=@l_prefix@/bin/ifmail -r $nexthop ($recipient)
michael@146 134 #bsmtp unix - n n - - pipe flags=Fq. user=@l_nusr@ argv=@l_prefix@/bin/bsmtp -f $sender $nexthop $recipient
michael@146 135 </file>
michael@146 136 <file name="main.cf">
michael@146 137 ##
michael@146 138 ## @l_prefix@/etc/postfix/main.cf -- Postfix main configuration
michael@146 139 ##
michael@146 140 ## Run "@l_prefix@/sbin/postconf -n" to see all parameters overriding
michael@146 141 ## defaults, run "@l_prefix@/sbin/postconf -d" to see all possible
michael@146 142 ## parameters and their defaults and read the following manual
michael@146 143 ## pages for description of each parameter: bounce(8), cleanup(8),
michael@146 144 ## defer(8), error(8), flush(8), lmtp(8), local(8), master(8),
michael@146 145 ## pickup(8), pipe(8), qmgr(8), showq(8), smtp(8), smtpd(8), spawn(8),
michael@146 146 ## trivial-rewrite(8).
michael@146 147 ##
michael@146 148
michael@146 149 # users
michael@146 150 mail_owner = @l_musr@
michael@146 151 setgid_group = @l_rgrp@
michael@146 152 default_privs = @l_nusr@
michael@146 153
michael@146 154 # local host
michael@146 155 myhostname = mail.example.com
michael@146 156 mydomain = example.com
michael@146 157 myorigin = $myhostname
michael@146 158
michael@146 159 # smtp daemon
michael@146 160 #smtpd_banner = $myhostname ESMTP $mail_name
michael@146 161 inet_interfaces = 127.0.0.1
michael@146 162
michael@146 163 # smtp client
michael@146 164 smtp_bind_address = 127.0.0.1
michael@146 165
michael@146 166 # relaying
michael@146 167 mynetworks = 127.0.0.0/8
michael@146 168 #mydestination = $myhostname, localhost.$mydomain
michael@146 169 #relay_domains = $mydestination,
michael@146 170 # hash:@l_prefix@/etc/postfix/access
michael@181 171 #relay_clientcerts = hash:@l_prefix@/etc//postfix/clicrt
michael@146 172 #smtpd_recipient_restrictions = permit_mynetworks,
michael@146 173 # check_client_access hash:@l_prefix@/etc/postfix/access,
michael@146 174 # reject_unauth_destination
michael@146 175
michael@146 176 # maps
michael@146 177 #canonical_maps = hash:@l_prefix@/etc/postfix/canonical
michael@146 178 #smtp_generic_maps = hash:@l_prefix@/etc/postfix/generic
michael@146 179 #virtual_alias_maps = hash:@l_prefix@/etc/postfix/virtual
michael@146 180 #relocated_maps = hash:@l_prefix@/etc/postfix/relocated
michael@146 181 #transport_maps = hash:@l_prefix@/etc/postfix/transport
michael@146 182 alias_maps = hash:@l_prefix@/etc/postfix/aliases
michael@146 183 alias_database = hash:@l_prefix@/etc/postfix/aliases
michael@146 184
michael@146 185 # local delivery
michael@146 186 #local_recipient_maps = proxy:unix:passwd.byname $alias_maps
michael@146 187 recipient_delimiter = +
michael@146 188 mailbox_command = @l_prefix@/bin/procmail -a "$EXTENSION"
michael@146 189
michael@146 190 </file>
michael@146 191 <file name="access">
michael@146 192 ##
michael@146 193 ## @l_prefix@/etc/postfix/access -- access control for relaying
michael@146 194 ##
michael@146 195 ## Searched for both the client (hostname, parent domains, IP address,
michael@146 196 ## networks obtained by stripping least significant octets from IP
michael@146 197 ## address) and destination address (resolved destination address,
michael@146 198 ## parent domain, or localpart@) in order to allow relaying. Rejects
michael@146 199 ## the request if the result is REJECT or "[45]XX text". Permits the
michael@146 200 ## request if the result is OK or RELAY or all-numerical.
michael@146 201 ##
michael@146 202
michael@146 203 # Syntax (see access(5)):
michael@146 204 # | user@domain action
michael@146 205 # | domain action
michael@146 206 # | user@ action
michael@146 207 # | net.work.addr.ess action
michael@146 208 # | net.work.addr action
michael@146 209 # | net.work action
michael@146 210 # | net action
michael@146 211 # where "action" is one of:
michael@146 212 # "[45]NN text", "REJECT", "OK", "restriction..."
michael@146 213 #
michael@146 214 # Examples:
michael@146 215 # | mail.example.com OK
michael@146 216 # | example.com REJECT
michael@146 217 # | 192.168.0.1 OK
michael@146 218 # | 192.168 REJECT
michael@146 219 # | postmaster@ OK
michael@146 220
michael@146 221 </file>
michael@146 222 <file name="virtual">
michael@146 223 ##
michael@146 224 ## @l_prefix@/etc/postfix/virtual -- virtual address translation
michael@146 225 ##
michael@146 226 ## Searched for virtual addresses user@domain, user and @domain
michael@146 227 ## (in this order). It redirect mail for all recipients, local or
michael@146 228 ## remote. The mapping affects only envelope recipients.
michael@146 229 ##
michael@146 230
michael@146 231 # Syntax (see virtual(5)):
michael@146 232 # | user@domain address, address, ...
michael@146 233 # | user address, address, ...
michael@146 234 # | @domain address, address, ...
michael@146 235 #
michael@146 236 # Examples:
michael@146 237 # | @example.com john@example.com
michael@146 238 # | postmaster@example.com postmaster
michael@146 239 # | john@example1.com john1
michael@146 240 # | john@example2.com john2
michael@146 241
michael@146 242 </file>
michael@146 243 <file name="aliases">
michael@146 244 ##
michael@146 245 ## @l_prefix@/etc/postfix/aliases -- local mailbox aliases
michael@146 246 ##
michael@146 247 ## Searched for virtual addresses user@domain, user and @domain
michael@146 248 ## (in this order). It redirect mail for all recipients, local or
michael@146 249 ## remote. The mapping affects only envelope recipients.
michael@146 250 ##
michael@146 251
michael@146 252 # Syntax (see aliases(5)):
michael@146 253 # | name: value, value, ...
michael@146 254 # where value is one of:
michael@146 255 # "address", "/file/name", "|command", ":include:/file/name"
michael@146 256 #
michael@146 257 # Examples:
michael@146 258 # | john.doe: john, doe
michael@146 259 # | robot: |/path/to/robot
michael@146 260 # | archive: /path/to/archive
michael@146 261 # | users: :include:/path/to/users.list
michael@146 262 # | owner-users: john.doe
michael@146 263
michael@146 264 # standard mail targets
michael@146 265 nobody: /dev/null
michael@146 266 MAILER-DAEMON: postmaster
michael@146 267
michael@146 268 # mailbox names for common services, roles and functions
michael@146 269 # (see RFC2142 for more details and expanded list of names)
michael@146 270 postmaster: root
michael@146 271 hostmaster: root
michael@146 272 security: root
michael@146 273 abuse: root
michael@146 274
michael@146 275 # save unprivileged user storage of careless admins
michael@146 276 root: /dev/null
michael@146 277
michael@146 278 </file>
michael@146 279 <file name="canonical">
michael@146 280 ##
michael@146 281 ## @l_prefix@/etc/postfix/canonical -- address canonification on mail receiving
michael@146 282 ##
michael@146 283 ## Searched for canonical addresses for user@domain, user and @domain
michael@146 284 ## (in this order).
michael@146 285 ##
michael@146 286
michael@146 287 # Syntax (see canonical(5)):
michael@146 288 # | user@domain address
michael@146 289 # | user address
michael@146 290 # | @domain address
michael@146 291 #
michael@146 292 # Examples:
michael@146 293 # | postmaster@mail.example.com postmaster@example.com
michael@146 294 # | john John.Doe
michael@146 295 # | @example.com @example.com
michael@146 296
michael@146 297 </file>
michael@146 298 <file name="relocated">
michael@146 299 ##
michael@146 300 ## @l_prefix@/etc/postfix/relocated -- relocate obsolete addresses
michael@146 301 ##
michael@146 302 ## Searched for relocated addresses user@domain, user and @domain
michael@146 303 ## (in this order). It bounces mail for all recipients.
michael@146 304 ##
michael@146 305
michael@146 306 # Syntax (see relocated(5)):
michael@146 307 # | user@domain address
michael@146 308 # | user address
michael@146 309 # | @domain address
michael@146 310 #
michael@146 311 # Examples:
michael@146 312 # | john@invalid john@example.com
michael@146 313 # | john john@example.com
michael@146 314 # | @invalid john@example.com
michael@146 315
michael@146 316 </file>
michael@146 317 <file name="generic">
michael@146 318 ##
michael@146 319 ## @l_prefix@/etc/postfix/generic -- address canonification on mail sending
michael@146 320 ##
michael@146 321 ## Searched for canonical addresses for user@domain, user and @domain
michael@146 322 ## (in this order).
michael@146 323 ##
michael@146 324
michael@146 325 # Syntax (see generic(5)):
michael@146 326 # | user@domain address
michael@146 327 # | user address
michael@146 328 # | @domain address
michael@146 329 #
michael@146 330 # Examples:
michael@146 331 # | postmaster@mail.example.com postmaster@example.com
michael@146 332 # | john John.Doe
michael@146 333 # | @example.com @example.com
michael@146 334
michael@146 335 </file>
michael@146 336 <file name="transport">
michael@146 337 ##
michael@146 338 ## @l_prefix@/etc/postfix/transport -- transport selection
michael@146 339 ##
michael@146 340 ## Searched for domain and .domain (in this order). It selects the
michael@146 341 ## specified transport facility for delivery.
michael@146 342 ##
michael@146 343
michael@146 344 # Syntax (see transport(5)):
michael@146 345 # | domain transport:nexthop
michael@146 346 # | .domain transport:nexthop
michael@146 347 #
michael@146 348 # Examples:
michael@146 349 # | me.example.com local:
michael@146 350 # | you.example.com smtp:mail.example.com:2525
michael@146 351 # | example.com smtp:mail.example.com
michael@146 352 # | .example.com smtp:mail.example.com
michael@146 353
michael@146 354 </file>
michael@181 355 <file name="clients">
michael@179 356 ##
michael@181 357 ## @l_prefix@/etc/postfix/clients -- control for relaying clients
michael@181 358 ##
michael@181 359 ## Searched for both the client (hostname, parent domains, IP address,
michael@181 360 ## networks obtained by stripping least significant octets from IP
michael@181 361 ## address) and destination address (resolved destination address,
michael@181 362 ## parent domain, or localpart@) in order to allow relaying. Rejects
michael@181 363 ## the request if the result is REJECT or "[45]XX text". Permits the
michael@181 364 ## request if the result is OK or RELAY or all-numerical.
michael@181 365 ##
michael@181 366
michael@181 367 # Syntax (see postmap(5)):
michael@181 368 # | user@domain action
michael@181 369 # | domain action
michael@181 370 # | user@ action
michael@181 371 # | net.work.addr.ess action
michael@181 372 # | net.work.addr action
michael@181 373 # | net.work action
michael@181 374 # | net action
michael@181 375 # where "action" is one of:
michael@181 376 # "[45]NN text", "REJECT", "OK", "restriction..."
michael@181 377 #
michael@181 378 # Examples:
michael@181 379 # | mail.example.com OK
michael@181 380 # | example.com REJECT
michael@181 381 # | 192.168.0.1 OK
michael@181 382 # | 192.168 REJECT
michael@181 383 # | postmaster@ OK
michael@181 384
michael@181 385 </file>
michael@181 386 <file name="senders">
michael@181 387 ##
michael@181 388 ## @l_prefix@/etc/postfix/senders -- control for relaying senders
michael@181 389 ##
michael@181 390 ## Searched for both the client (hostname, parent domains, IP address,
michael@181 391 ## networks obtained by stripping least significant octets from IP
michael@181 392 ## address) and destination address (resolved destination address,
michael@181 393 ## parent domain, or localpart@) in order to allow relaying. Rejects
michael@181 394 ## the request if the result is REJECT or "[45]XX text". Permits the
michael@181 395 ## request if the result is OK or RELAY or all-numerical.
michael@181 396 ##
michael@181 397
michael@181 398 # Syntax (see access(5)):
michael@181 399 # | user@domain action
michael@181 400 # | domain action
michael@181 401 # | user@ action
michael@181 402 # | net.work.addr.ess action
michael@181 403 # | net.work.addr action
michael@181 404 # | net.work action
michael@181 405 # | net action
michael@181 406 # where "action" is one of:
michael@181 407 # "[45]NN text", "REJECT", "OK", "restriction..."
michael@181 408 #
michael@181 409 # Examples:
michael@181 410 # | mail.example.com OK
michael@181 411 # | example.com REJECT
michael@181 412 # | 192.168.0.1 OK
michael@181 413 # | 192.168 REJECT
michael@181 414 # | postmaster@ OK
michael@181 415
michael@181 416 </file>
michael@181 417 <file name="clicrt">
michael@181 418 ##
michael@181 419 ## @l_prefix@/etc/postfix/clicrt -- user identity verification
michael@179 420 ##
michael@179 421 ## Searched for user names matching TLS certificate fingerprints
michael@179 422 ## when a client responding to the MTA's client certificate request
michael@179 423 ## presents a valid (signed from proper CA) certificate.
michael@179 424 ##
michael@179 425 ## To find such fingerprints given a valid client certificate:
michael@179 426 ## @l_prefix@/bin/openssl x509 -noout -fingerprint -sha1 -in certfile.pem
michael@179 427 ##
michael@179 428
michael@181 429 # Syntax (fingerprint according to smtpd_tls_fingerprint_digest):
michael@181 430 # | fingerprint arbitrary-value
michael@181 431 #
michael@179 432 # Examples:
michael@181 433 # | B8:B8:A8:AE:B8:2A:2B:74:EC:43:FF:4F:B2:B2:AC:1E:B4:CE:26:1D user1
michael@181 434 # | 18:81:F5:22:18:BA:EB:15:FF:40:30:00:EA:C0:B4:2E:EC:AE:86:8E user2
michael@179 435
michael@179 436 </file>

Mercurial Repository: OpenPKG Specs

Europalab SCM Repository Server

mercurial