|
@@ -11,7 +11,7 @@ address_verify_map = btree:$data_directory/verify_cache
|
11
|
11
|
address_verify_negative_cache = yes
|
12
|
12
|
address_verify_negative_expire_time = 3d
|
13
|
13
|
address_verify_negative_refresh_time = 3h
|
14
|
|
-address_verify_poll_count = ${stress?1}${stress:3}
|
|
14
|
+address_verify_poll_count = ${stress?{1}:{3}}
|
15
|
15
|
address_verify_poll_delay = 3s
|
16
|
16
|
address_verify_positive_expire_time = 31d
|
17
|
17
|
address_verify_positive_refresh_time = 7d
|
|
@@ -35,7 +35,7 @@ always_bcc =
|
35
|
35
|
anvil_rate_time_unit = 60s
|
36
|
36
|
anvil_status_update_time = 600s
|
37
|
37
|
append_at_myorigin = yes
|
38
|
|
-append_dot_mydomain = yes
|
|
38
|
+append_dot_mydomain = ${{$compatibility_level} < {1} ? {yes} : {no}}
|
39
|
39
|
application_event_drain_time = 100s
|
40
|
40
|
authorized_flush_users = static:anyone
|
41
|
41
|
authorized_mailq_users = static:anyone
|
|
@@ -59,6 +59,8 @@ cleanup_service_name = cleanup
|
59
|
59
|
command_execution_directory =
|
60
|
60
|
command_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
|
61
|
61
|
command_time_limit = 1000s
|
|
62
|
+compatibility_level = 0
|
|
63
|
+confirm_delay_cleared = no
|
62
|
64
|
connection_cache_protocol_timeout = 5s
|
63
|
65
|
connection_cache_service_name = scache
|
64
|
66
|
connection_cache_status_update_time = 600s
|
|
@@ -73,6 +75,7 @@ debugger_command =
|
73
|
75
|
default_delivery_slot_cost = 5
|
74
|
76
|
default_delivery_slot_discount = 50
|
75
|
77
|
default_delivery_slot_loan = 3
|
|
78
|
+default_delivery_status_filter =
|
76
|
79
|
default_destination_concurrency_failed_cohort_limit = 1
|
77
|
80
|
default_destination_concurrency_limit = 20
|
78
|
81
|
default_destination_concurrency_negative_feedback = 1
|
|
@@ -169,6 +172,7 @@ ipc_ttl = 1000s
|
169
|
172
|
line_length_limit = 2048
|
170
|
173
|
lmdb_map_size = 16777216
|
171
|
174
|
lmtp_address_preference = any
|
|
175
|
+lmtp_address_verify_target = rcpt
|
172
|
176
|
lmtp_assume_final = no
|
173
|
177
|
lmtp_bind_address =
|
174
|
178
|
lmtp_bind_address6 =
|
|
@@ -187,6 +191,7 @@ lmtp_defer_if_no_mx_address_found = no
|
187
|
191
|
lmtp_delivery_slot_cost = $default_delivery_slot_cost
|
188
|
192
|
lmtp_delivery_slot_discount = $default_delivery_slot_discount
|
189
|
193
|
lmtp_delivery_slot_loan = $default_delivery_slot_loan
|
|
194
|
+lmtp_delivery_status_filter = $default_delivery_status_filter
|
190
|
195
|
lmtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
|
191
|
196
|
lmtp_destination_concurrency_limit = $default_destination_concurrency_limit
|
192
|
197
|
lmtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
|
|
@@ -195,6 +200,7 @@ lmtp_destination_rate_delay = $default_destination_rate_delay
|
195
|
200
|
lmtp_destination_recipient_limit = $default_destination_recipient_limit
|
196
|
201
|
lmtp_discard_lhlo_keyword_address_maps =
|
197
|
202
|
lmtp_discard_lhlo_keywords =
|
|
203
|
+lmtp_dns_reply_filter =
|
198
|
204
|
lmtp_dns_resolver_options =
|
199
|
205
|
lmtp_dns_support_level =
|
200
|
206
|
lmtp_enforce_tls = no
|
|
@@ -274,12 +280,14 @@ lmtp_tls_session_cache_database =
|
274
|
280
|
lmtp_tls_session_cache_timeout = 3600s
|
275
|
281
|
lmtp_tls_trust_anchor_file =
|
276
|
282
|
lmtp_tls_verify_cert_match = hostname
|
|
283
|
+lmtp_tls_wrappermode = no
|
277
|
284
|
lmtp_use_tls = no
|
278
|
285
|
lmtp_xforward_timeout = 300s
|
279
|
286
|
local_command_shell =
|
280
|
287
|
local_delivery_slot_cost = $default_delivery_slot_cost
|
281
|
288
|
local_delivery_slot_discount = $default_delivery_slot_discount
|
282
|
289
|
local_delivery_slot_loan = $default_delivery_slot_loan
|
|
290
|
+local_delivery_status_filter = $default_delivery_status_filter
|
283
|
291
|
local_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
|
284
|
292
|
local_destination_concurrency_limit = 2
|
285
|
293
|
local_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
|
|
@@ -298,8 +306,8 @@ local_transport = local:$myhostname
|
298
|
306
|
luser_relay =
|
299
|
307
|
mail_name = Postfix
|
300
|
308
|
mail_owner = postfix
|
301
|
|
-mail_release_date = 20140507
|
302
|
|
-mail_version = 2.11.1
|
|
309
|
+mail_release_date = 20150208
|
|
310
|
+mail_version = 3.0.0
|
303
|
311
|
mailbox_command =
|
304
|
312
|
mailbox_command_maps =
|
305
|
313
|
mailbox_delivery_lock = fcntl, dotlock
|
|
@@ -316,6 +324,7 @@ max_idle = 100s
|
316
|
324
|
max_use = 100
|
317
|
325
|
maximal_backoff_time = 4000s
|
318
|
326
|
maximal_queue_lifetime = 5d
|
|
327
|
+message_drop_headers = bcc, content-length, resent-bcc, return-path
|
319
|
328
|
message_reject_characters =
|
320
|
329
|
message_size_limit = 10240000
|
321
|
330
|
message_strip_characters =
|
|
@@ -346,7 +355,6 @@ multi_instance_name =
|
346
|
355
|
multi_instance_wrapper =
|
347
|
356
|
multi_recipient_bounce_reject_code = 550
|
348
|
357
|
mydestination = $myhostname, localhost.$mydomain, localhost
|
349
|
|
-mynetworks_style = subnet
|
350
|
358
|
myorigin = $myhostname
|
351
|
359
|
nested_header_checks = $header_checks
|
352
|
360
|
non_fqdn_reject_code = 504
|
|
@@ -356,6 +364,7 @@ owner_request_special = yes
|
356
|
364
|
parent_domain_matches_subdomains = debug_peer_list,fast_flush_domains,mynetworks,permit_mx_backup_networks,qmqpd_authorized_clients,relay_domains,smtpd_access_maps
|
357
|
365
|
permit_mx_backup_networks =
|
358
|
366
|
pickup_service_name = pickup
|
|
367
|
+pipe_delivery_status_filter = $default_delivery_status_filter
|
359
|
368
|
plaintext_reject_code = 450
|
360
|
369
|
postmulti_control_commands = reload flush
|
361
|
370
|
postmulti_start_commands = start
|
|
@@ -371,7 +380,7 @@ postscreen_cache_retention_time = 7d
|
371
|
380
|
postscreen_client_connection_count_limit = $smtpd_client_connection_count_limit
|
372
|
381
|
postscreen_command_count_limit = 20
|
373
|
382
|
postscreen_command_filter =
|
374
|
|
-postscreen_command_time_limit = ${stress?10}${stress:300}s
|
|
383
|
+postscreen_command_time_limit = ${stress?{10}:{300}}s
|
375
|
384
|
postscreen_disable_vrfy_command = $disable_vrfy_command
|
376
|
385
|
postscreen_discard_ehlo_keyword_address_maps = $smtpd_discard_ehlo_keyword_address_maps
|
377
|
386
|
postscreen_discard_ehlo_keywords = $smtpd_discard_ehlo_keywords
|
|
@@ -379,6 +388,7 @@ postscreen_dnsbl_action = ignore
|
379
|
388
|
postscreen_dnsbl_reply_map =
|
380
|
389
|
postscreen_dnsbl_sites =
|
381
|
390
|
postscreen_dnsbl_threshold = 1
|
|
391
|
+postscreen_dnsbl_timeout = 10s
|
382
|
392
|
postscreen_dnsbl_ttl = 1h
|
383
|
393
|
postscreen_dnsbl_whitelist_threshold = 0
|
384
|
394
|
postscreen_enforce_tls = $smtpd_enforce_tls
|
|
@@ -387,7 +397,7 @@ postscreen_forbidden_commands = $smtpd_forbidden_commands
|
387
|
397
|
postscreen_greet_action = ignore
|
388
|
398
|
postscreen_greet_banner = $smtpd_banner
|
389
|
399
|
postscreen_greet_ttl = 1d
|
390
|
|
-postscreen_greet_wait = ${stress?2}${stress:6}s
|
|
400
|
+postscreen_greet_wait = ${stress?{2}:{6}}s
|
391
|
401
|
postscreen_helo_required = $smtpd_helo_required
|
392
|
402
|
postscreen_non_smtp_command_action = drop
|
393
|
403
|
postscreen_non_smtp_command_enable = no
|
|
@@ -405,12 +415,12 @@ postscreen_use_tls = $smtpd_use_tls
|
405
|
415
|
postscreen_watchdog_timeout = 10s
|
406
|
416
|
postscreen_whitelist_interfaces = static:all
|
407
|
417
|
prepend_delivered_header = command, file, forward
|
408
|
|
-process_id = 6537
|
|
418
|
+process_id = 25939
|
409
|
419
|
process_id_directory = pid
|
410
|
420
|
process_name = postconf
|
411
|
421
|
propagate_unmatched_extensions = canonical, virtual
|
412
|
422
|
proxy_interfaces =
|
413
|
|
-proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $smtpd_sender_login_maps $sender_bcc_maps $recipient_bcc_maps $smtp_generic_maps $lmtp_generic_maps $alias_maps
|
|
423
|
+proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $smtpd_sender_login_maps $sender_bcc_maps $recipient_bcc_maps $smtp_generic_maps $lmtp_generic_maps $alias_maps $smtpd_client_restrictions $smtpd_helo_restrictions $smtpd_sender_restrictions $smtpd_relay_restrictions $smtpd_recipient_restrictions
|
414
|
424
|
proxy_write_maps = $smtp_sasl_auth_cache_name $lmtp_sasl_auth_cache_name $address_verify_map $postscreen_cache_map
|
415
|
425
|
proxymap_service_name = proxymap
|
416
|
426
|
proxywrite_service_name = proxywrite
|
|
@@ -447,7 +457,7 @@ relay_destination_concurrency_negative_feedback = $default_destination_concurren
|
447
|
457
|
relay_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
|
448
|
458
|
relay_destination_rate_delay = $default_destination_rate_delay
|
449
|
459
|
relay_destination_recipient_limit = $default_destination_recipient_limit
|
450
|
|
-relay_domains = $mydestination
|
|
460
|
+relay_domains = ${{$compatibility_level} < {2} ? {$mydestination} : {}}
|
451
|
461
|
relay_domains_reject_code = 554
|
452
|
462
|
relay_extra_recipient_limit = $default_extra_recipient_limit
|
453
|
463
|
relay_initial_destination_concurrency = $initial_destination_concurrency
|
|
@@ -493,6 +503,7 @@ setgid_group = postdrop
|
493
|
503
|
show_user_unknown_table_name = yes
|
494
|
504
|
showq_service_name = showq
|
495
|
505
|
smtp_address_preference = any
|
|
506
|
+smtp_address_verify_target = rcpt
|
496
|
507
|
smtp_always_send_ehlo = yes
|
497
|
508
|
smtp_bind_address =
|
498
|
509
|
smtp_bind_address6 =
|
|
@@ -511,6 +522,7 @@ smtp_defer_if_no_mx_address_found = no
|
511
|
522
|
smtp_delivery_slot_cost = $default_delivery_slot_cost
|
512
|
523
|
smtp_delivery_slot_discount = $default_delivery_slot_discount
|
513
|
524
|
smtp_delivery_slot_loan = $default_delivery_slot_loan
|
|
525
|
+smtp_delivery_status_filter = $default_delivery_status_filter
|
514
|
526
|
smtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
|
515
|
527
|
smtp_destination_concurrency_limit = $default_destination_concurrency_limit
|
516
|
528
|
smtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
|
|
@@ -519,6 +531,7 @@ smtp_destination_rate_delay = $default_destination_rate_delay
|
519
|
531
|
smtp_destination_recipient_limit = $default_destination_recipient_limit
|
520
|
532
|
smtp_discard_ehlo_keyword_address_maps =
|
521
|
533
|
smtp_discard_ehlo_keywords =
|
|
534
|
+smtp_dns_reply_filter =
|
522
|
535
|
smtp_dns_resolver_options =
|
523
|
536
|
smtp_dns_support_level =
|
524
|
537
|
smtp_enforce_tls = no
|
|
@@ -599,6 +612,7 @@ smtp_tls_session_cache_database =
|
599
|
612
|
smtp_tls_session_cache_timeout = 3600s
|
600
|
613
|
smtp_tls_trust_anchor_file =
|
601
|
614
|
smtp_tls_verify_cert_match = hostname
|
|
615
|
+smtp_tls_wrappermode = no
|
602
|
616
|
smtp_use_tls = no
|
603
|
617
|
smtp_xforward_timeout = 300s
|
604
|
618
|
smtpd_authorized_verp_clients = $authorized_verp_clients
|
|
@@ -619,26 +633,31 @@ smtpd_delay_open_until_valid_rcpt = yes
|
619
|
633
|
smtpd_delay_reject = yes
|
620
|
634
|
smtpd_discard_ehlo_keyword_address_maps =
|
621
|
635
|
smtpd_discard_ehlo_keywords =
|
|
636
|
+smtpd_dns_reply_filter =
|
622
|
637
|
smtpd_end_of_data_restrictions =
|
623
|
638
|
smtpd_enforce_tls = no
|
624
|
639
|
smtpd_error_sleep_time = 1s
|
625
|
640
|
smtpd_etrn_restrictions =
|
626
|
641
|
smtpd_expansion_filter = \t\40!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~
|
627
|
642
|
smtpd_forbidden_commands = CONNECT GET POST
|
628
|
|
-smtpd_hard_error_limit = ${stress?1}${stress:20}
|
|
643
|
+smtpd_hard_error_limit = ${stress?{1}:{20}}
|
629
|
644
|
smtpd_helo_required = no
|
630
|
645
|
smtpd_helo_restrictions =
|
631
|
646
|
smtpd_history_flush_threshold = 100
|
632
|
|
-smtpd_junk_command_limit = ${stress?1}${stress:100}
|
|
647
|
+smtpd_junk_command_limit = ${stress?{1}:{100}}
|
633
|
648
|
smtpd_log_access_permit_actions =
|
634
|
649
|
smtpd_milters =
|
635
|
650
|
smtpd_noop_commands =
|
636
|
651
|
smtpd_null_access_lookup_key = <>
|
637
|
652
|
smtpd_peername_lookup = yes
|
638
|
|
-smtpd_per_record_deadline = ${stress?yes}${stress:no}
|
|
653
|
+smtpd_per_record_deadline = ${stress?{yes}:{no}}
|
|
654
|
+smtpd_policy_service_default_action = 451 4.3.5 Server configuration problem
|
639
|
655
|
smtpd_policy_service_max_idle = 300s
|
640
|
656
|
smtpd_policy_service_max_ttl = 1000s
|
|
657
|
+smtpd_policy_service_request_limit = 0
|
|
658
|
+smtpd_policy_service_retry_delay = 1s
|
641
|
659
|
smtpd_policy_service_timeout = 100s
|
|
660
|
+smtpd_policy_service_try_limit = 2
|
642
|
661
|
smtpd_proxy_ehlo = $myhostname
|
643
|
662
|
smtpd_proxy_filter =
|
644
|
663
|
smtpd_proxy_options =
|
|
@@ -664,8 +683,8 @@ smtpd_sender_login_maps =
|
664
|
683
|
smtpd_sender_restrictions =
|
665
|
684
|
smtpd_service_name = smtpd
|
666
|
685
|
smtpd_soft_error_limit = 10
|
667
|
|
-smtpd_starttls_timeout = ${stress?10}${stress:300}s
|
668
|
|
-smtpd_timeout = ${stress?10}${stress:300}s
|
|
686
|
+smtpd_starttls_timeout = ${stress?{10}:{300}}s
|
|
687
|
+smtpd_timeout = ${stress?{10}:{300}}s
|
669
|
688
|
smtpd_tls_CAfile =
|
670
|
689
|
smtpd_tls_CApath =
|
671
|
690
|
smtpd_tls_always_issue_session_ids = yes
|
|
@@ -698,6 +717,7 @@ smtpd_tls_wrappermode = no
|
698
|
717
|
smtpd_upstream_proxy_protocol =
|
699
|
718
|
smtpd_upstream_proxy_timeout = 5s
|
700
|
719
|
smtpd_use_tls = no
|
|
720
|
+smtputf8_autodetect_classes = sendmail, verify
|
701
|
721
|
soft_bounce = no
|
702
|
722
|
stale_lock_time = 500s
|
703
|
723
|
stress =
|
|
@@ -707,10 +727,11 @@ strict_8bitmime_body = no
|
707
|
727
|
strict_mailbox_ownership = yes
|
708
|
728
|
strict_mime_encoding_domain = no
|
709
|
729
|
strict_rfc821_envelopes = no
|
|
730
|
+strict_smtputf8 = no
|
710
|
731
|
sun_mailtool_compatibility = no
|
711
|
732
|
swap_bangpath = yes
|
712
|
733
|
syslog_facility = mail
|
713
|
|
-syslog_name = ${multi_instance_name:postfix}${multi_instance_name?$multi_instance_name}
|
|
734
|
+syslog_name = ${multi_instance_name?{$multi_instance_name}:{postfix}}
|
714
|
735
|
tcp_windowsize = 0
|
715
|
736
|
tls_append_default_CA = no
|
716
|
737
|
tls_daemon_random_bytes = 32
|
|
@@ -720,11 +741,11 @@ tls_dane_trust_anchor_digest_enable = yes
|
720
|
741
|
tls_disable_workarounds =
|
721
|
742
|
tls_eecdh_strong_curve = prime256v1
|
722
|
743
|
tls_eecdh_ultra_curve = secp384r1
|
723
|
|
-tls_export_cipherlist = ALL:+RC4:@STRENGTH
|
724
|
|
-tls_high_cipherlist = ALL:!EXPORT:!LOW:!MEDIUM:+RC4:@STRENGTH
|
|
744
|
+tls_export_cipherlist = aNULL:-aNULL:ALL:+RC4:@STRENGTH
|
|
745
|
+tls_high_cipherlist = aNULL:-aNULL:ALL:!EXPORT:!LOW:!MEDIUM:+RC4:@STRENGTH
|
725
|
746
|
tls_legacy_public_key_fingerprints = no
|
726
|
|
-tls_low_cipherlist = ALL:!EXPORT:+RC4:@STRENGTH
|
727
|
|
-tls_medium_cipherlist = ALL:!EXPORT:!LOW:+RC4:@STRENGTH
|
|
747
|
+tls_low_cipherlist = aNULL:-aNULL:ALL:!EXPORT:+RC4:@STRENGTH
|
|
748
|
+tls_medium_cipherlist = aNULL:-aNULL:ALL:!EXPORT:!LOW:+RC4:@STRENGTH
|
728
|
749
|
tls_null_cipherlist = eNULL:!aNULL
|
729
|
750
|
tls_preempt_cipherlist = no
|
730
|
751
|
tls_random_bytes = 32
|
|
@@ -732,6 +753,7 @@ tls_random_exchange_name = ${data_directory}/prng_exch
|
732
|
753
|
tls_random_prng_update_period = 3600s
|
733
|
754
|
tls_random_reseed_period = 3600s
|
734
|
755
|
tls_random_source = dev:/dev/urandom
|
|
756
|
+tls_session_ticket_cipher = aes-128-cbc
|
735
|
757
|
tls_ssl_options =
|
736
|
758
|
tls_wildcard_matches_multiple_labels = yes
|
737
|
759
|
tlsmgr_service_name = tlsmgr
|
|
@@ -786,6 +808,7 @@ unverified_sender_reject_code = 450
|
786
|
808
|
unverified_sender_reject_reason =
|
787
|
809
|
unverified_sender_tempfail_action = $reject_tempfail_action
|
788
|
810
|
verp_delimiter_filter = -=+
|
|
811
|
+virtual_alias_address_length_limit = 1000
|
789
|
812
|
virtual_alias_domains = $virtual_alias_maps
|
790
|
813
|
virtual_alias_expansion_limit = 1000
|
791
|
814
|
virtual_alias_maps = $virtual_maps
|
|
@@ -793,6 +816,7 @@ virtual_alias_recursion_limit = 1000
|
793
|
816
|
virtual_delivery_slot_cost = $default_delivery_slot_cost
|
794
|
817
|
virtual_delivery_slot_discount = $default_delivery_slot_discount
|
795
|
818
|
virtual_delivery_slot_loan = $default_delivery_slot_loan
|
|
819
|
+virtual_delivery_status_filter = $default_delivery_status_filter
|
796
|
820
|
virtual_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
|
797
|
821
|
virtual_destination_concurrency_limit = $default_destination_concurrency_limit
|
798
|
822
|
virtual_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
|