From 619ca21f1101853c3aa307040be96424372b176a Mon Sep 17 00:00:00 2001 From: jmrothst Date: Sun, 14 Nov 2021 16:03:46 +0000 Subject: [PATCH 01/47] Initial commit --- .gitignore | 94 ++++++++++++++++++++++++++++++ LICENSE | 163 +++++++++++++++++++++++++++++++++++++++++++++++++++++ README.md | 2 + 3 files changed, 259 insertions(+) create mode 100644 .gitignore create mode 100644 LICENSE create mode 100644 README.md diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..b7ba4ab --- /dev/null +++ b/.gitignore @@ -0,0 +1,94 @@ +# ---> Linux +*~ + +# temporary files which can be created if a process still has a handle open of a deleted file +.fuse_hidden* + +# KDE directory preferences +.directory + +# Linux trash folder which might appear on any partition or disk +.Trash-* + +# .nfs files are created when an open file is removed but is still being accessed +.nfs* + +# ---> Windows +# Windows thumbnail cache files +Thumbs.db +ehthumbs.db +ehthumbs_vista.db + +# Dump file +*.stackdump + +# Folder config file +[Dd]esktop.ini + +# Recycle Bin used on file shares +$RECYCLE.BIN/ + +# Windows Installer files +*.cab +*.msi +*.msix +*.msm +*.msp + +# Windows shortcuts +*.lnk + +# ---> macOS +# General +.DS_Store +.AppleDouble +.LSOverride + +# Icon must end with two \r +Icon + +# Thumbnails +._* + +# Files that might appear in the root of a volume +.DocumentRevisions-V100 +.fseventsd +.Spotlight-V100 +.TemporaryItems +.Trashes +.VolumeIcon.icns +.com.apple.timemachine.donotpresent + +# Directories potentially created on remote AFP share +.AppleDB +.AppleDesktop +Network Trash Folder +Temporary Items +.apdisk + +# ---> Vim +# Swap +[._]*.s[a-v][a-z] +[._]*.sw[a-p] +[._]s[a-rt-v][a-z] +[._]ss[a-gi-z] +[._]sw[a-p] + +# Session +Session.vim + +# Temporary +.netrwhist +*~ +# Auto-generated tag files +tags +# Persistent undo +[._]*.un~ + +# ---> VisualStudioCode +.vscode/* +!.vscode/settings.json +!.vscode/tasks.json +!.vscode/launch.json +!.vscode/extensions.json + diff --git a/LICENSE b/LICENSE new file mode 100644 index 0000000..1344add --- /dev/null +++ b/LICENSE @@ -0,0 +1,163 @@ +GNU LESSER GENERAL PUBLIC LICENSE + +Version 3, 29 June 2007 + +Copyright (C) 2007 Free Software Foundation, Inc. + +Everyone is permitted to copy and distribute verbatim copies of this license +document, but changing it is not allowed. + +This version of the GNU Lesser General Public License incorporates the terms +and conditions of version 3 of the GNU General Public License, supplemented +by the additional permissions listed below. + + 0. Additional Definitions. + + + +As used herein, "this License" refers to version 3 of the GNU Lesser General +Public License, and the "GNU GPL" refers to version 3 of the GNU General Public +License. + + + +"The Library" refers to a covered work governed by this License, other than +an Application or a Combined Work as defined below. + + + +An "Application" is any work that makes use of an interface provided by the +Library, but which is not otherwise based on the Library. Defining a subclass +of a class defined by the Library is deemed a mode of using an interface provided +by the Library. + + + +A "Combined Work" is a work produced by combining or linking an Application +with the Library. The particular version of the Library with which the Combined +Work was made is also called the "Linked Version". + + + +The "Minimal Corresponding Source" for a Combined Work means the Corresponding +Source for the Combined Work, excluding any source code for portions of the +Combined Work that, considered in isolation, are based on the Application, +and not on the Linked Version. + + + +The "Corresponding Application Code" for a Combined Work means the object +code and/or source code for the Application, including any data and utility +programs needed for reproducing the Combined Work from the Application, but +excluding the System Libraries of the Combined Work. + + 1. Exception to Section 3 of the GNU GPL. + +You may convey a covered work under sections 3 and 4 of this License without +being bound by section 3 of the GNU GPL. + + 2. Conveying Modified Versions. + +If you modify a copy of the Library, and, in your modifications, a facility +refers to a function or data to be supplied by an Application that uses the +facility (other than as an argument passed when the facility is invoked), +then you may convey a copy of the modified version: + +a) under this License, provided that you make a good faith effort to ensure +that, in the event an Application does not supply the function or data, the +facility still operates, and performs whatever part of its purpose remains +meaningful, or + +b) under the GNU GPL, with none of the additional permissions of this License +applicable to that copy. + + 3. Object Code Incorporating Material from Library Header Files. + +The object code form of an Application may incorporate material from a header +file that is part of the Library. You may convey such object code under terms +of your choice, provided that, if the incorporated material is not limited +to numerical parameters, data structure layouts and accessors, or small macros, +inline functions and templates (ten or fewer lines in length), you do both +of the following: + +a) Give prominent notice with each copy of the object code that the Library +is used in it and that the Library and its use are covered by this License. + +b) Accompany the object code with a copy of the GNU GPL and this license document. + + 4. Combined Works. + +You may convey a Combined Work under terms of your choice that, taken together, +effectively do not restrict modification of the portions of the Library contained +in the Combined Work and reverse engineering for debugging such modifications, +if you also do each of the following: + +a) Give prominent notice with each copy of the Combined Work that the Library +is used in it and that the Library and its use are covered by this License. + +b) Accompany the Combined Work with a copy of the GNU GPL and this license +document. + +c) For a Combined Work that displays copyright notices during execution, include +the copyright notice for the Library among these notices, as well as a reference +directing the user to the copies of the GNU GPL and this license document. + + d) Do one of the following: + +0) Convey the Minimal Corresponding Source under the terms of this License, +and the Corresponding Application Code in a form suitable for, and under terms +that permit, the user to recombine or relink the Application with a modified +version of the Linked Version to produce a modified Combined Work, in the +manner specified by section 6 of the GNU GPL for conveying Corresponding Source. + +1) Use a suitable shared library mechanism for linking with the Library. A +suitable mechanism is one that (a) uses at run time a copy of the Library +already present on the user's computer system, and (b) will operate properly +with a modified version of the Library that is interface-compatible with the +Linked Version. + +e) Provide Installation Information, but only if you would otherwise be required +to provide such information under section 6 of the GNU GPL, and only to the +extent that such information is necessary to install and execute a modified +version of the Combined Work produced by recombining or relinking the Application +with a modified version of the Linked Version. (If you use option 4d0, the +Installation Information must accompany the Minimal Corresponding Source and +Corresponding Application Code. If you use option 4d1, you must provide the +Installation Information in the manner specified by section 6 of the GNU GPL +for conveying Corresponding Source.) + + 5. Combined Libraries. + +You may place library facilities that are a work based on the Library side +by side in a single library together with other library facilities that are +not Applications and are not covered by this License, and convey such a combined +library under terms of your choice, if you do both of the following: + +a) Accompany the combined library with a copy of the same work based on the +Library, uncombined with any other library facilities, conveyed under the +terms of this License. + +b) Give prominent notice with the combined library that part of it is a work +based on the Library, and explaining where to find the accompanying uncombined +form of the same work. + + 6. Revised Versions of the GNU Lesser General Public License. + +The Free Software Foundation may publish revised and/or new versions of the +GNU Lesser General Public License from time to time. Such new versions will +be similar in spirit to the present version, but may differ in detail to address +new problems or concerns. + +Each version is given a distinguishing version number. If the Library as you +received it specifies that a certain numbered version of the GNU Lesser General +Public License "or any later version" applies to it, you have the option of +following the terms and conditions either of that published version or of +any later version published by the Free Software Foundation. If the Library +as you received it does not specify a version number of the GNU Lesser General +Public License, you may choose any version of the GNU Lesser General Public +License ever published by the Free Software Foundation. + +If the Library as you received it specifies that a proxy can decide whether +future versions of the GNU Lesser General Public License shall apply, that +proxy's public statement of acceptance of any version is permanent authorization +for you to choose that version for the Library. diff --git a/README.md b/README.md new file mode 100644 index 0000000..ed2fa96 --- /dev/null +++ b/README.md @@ -0,0 +1,2 @@ +# ensure_postfix + From d2346d4a65a890f5d06147cc50f5dd06bade5296 Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sun, 14 Nov 2021 10:19:15 -0600 Subject: [PATCH 02/47] Blank role --- .travis.yml | 29 ++++++++++++++++++++++++++ README.md | 38 ++++++++++++++++++++++++++++++++- defaults/main.yml | 2 ++ handlers/main.yml | 2 ++ meta/main.yml | 53 +++++++++++++++++++++++++++++++++++++++++++++++ tasks/main.yml | 2 ++ tests/inventory | 2 ++ tests/test.yml | 5 +++++ vars/main.yml | 2 ++ 9 files changed, 134 insertions(+), 1 deletion(-) create mode 100644 .travis.yml create mode 100644 defaults/main.yml create mode 100644 handlers/main.yml create mode 100644 meta/main.yml create mode 100644 tasks/main.yml create mode 100644 tests/inventory create mode 100644 tests/test.yml create mode 100644 vars/main.yml diff --git a/.travis.yml b/.travis.yml new file mode 100644 index 0000000..36bbf62 --- /dev/null +++ b/.travis.yml @@ -0,0 +1,29 @@ +--- +language: python +python: "2.7" + +# Use the new container infrastructure +sudo: false + +# Install ansible +addons: + apt: + packages: + - python-pip + +install: + # Install ansible + - pip install ansible + + # Check ansible version + - ansible --version + + # Create ansible.cfg with correct roles_path + - printf '[defaults]\nroles_path=../' >ansible.cfg + +script: + # Basic role syntax check + - ansible-playbook tests/test.yml -i tests/inventory --syntax-check + +notifications: + webhooks: https://galaxy.ansible.com/api/v1/notifications/ \ No newline at end of file diff --git a/README.md b/README.md index ed2fa96..225dd44 100644 --- a/README.md +++ b/README.md @@ -1,2 +1,38 @@ -# ensure_postfix +Role Name +========= +A brief description of the role goes here. + +Requirements +------------ + +Any pre-requisites that may not be covered by Ansible itself or the role should be mentioned here. For instance, if the role uses the EC2 module, it may be a good idea to mention in this section that the boto package is required. + +Role Variables +-------------- + +A description of the settable variables for this role should go here, including any variables that are in defaults/main.yml, vars/main.yml, and any variables that can/should be set via parameters to the role. Any variables that are read from other roles and/or the global scope (ie. hostvars, group vars, etc.) should be mentioned here as well. + +Dependencies +------------ + +A list of other roles hosted on Galaxy should go here, plus any details in regards to parameters that may need to be set for other roles, or variables that are used from other roles. + +Example Playbook +---------------- + +Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too: + + - hosts: servers + roles: + - { role: username.rolename, x: 42 } + +License +------- + +BSD + +Author Information +------------------ + +An optional section for the role authors to include contact information, or a website (HTML is not allowed). diff --git a/defaults/main.yml b/defaults/main.yml new file mode 100644 index 0000000..261b45b --- /dev/null +++ b/defaults/main.yml @@ -0,0 +1,2 @@ +--- +# defaults file for ensure_postfix \ No newline at end of file diff --git a/handlers/main.yml b/handlers/main.yml new file mode 100644 index 0000000..53dd825 --- /dev/null +++ b/handlers/main.yml @@ -0,0 +1,2 @@ +--- +# handlers file for ensure_postfix \ No newline at end of file diff --git a/meta/main.yml b/meta/main.yml new file mode 100644 index 0000000..227ad9c --- /dev/null +++ b/meta/main.yml @@ -0,0 +1,53 @@ +galaxy_info: + author: your name + description: your role description + company: your company (optional) + + # If the issue tracker for your role is not on github, uncomment the + # next line and provide a value + # issue_tracker_url: http://example.com/issue/tracker + + # Choose a valid license ID from https://spdx.org - some suggested licenses: + # - BSD-3-Clause (default) + # - MIT + # - GPL-2.0-or-later + # - GPL-3.0-only + # - Apache-2.0 + # - CC-BY-4.0 + license: license (GPL-2.0-or-later, MIT, etc) + + min_ansible_version: 2.9 + + # If this a Container Enabled role, provide the minimum Ansible Container version. + # min_ansible_container_version: + + # + # Provide a list of supported platforms, and for each platform a list of versions. + # If you don't wish to enumerate all versions for a particular platform, use 'all'. + # To view available platforms and versions (or releases), visit: + # https://galaxy.ansible.com/api/v1/platforms/ + # + # platforms: + # - name: Fedora + # versions: + # - all + # - 25 + # - name: SomePlatform + # versions: + # - all + # - 1.0 + # - 7 + # - 99.99 + + galaxy_tags: [] + # List tags for your role here, one per line. A tag is a keyword that describes + # and categorizes the role. Users find roles by searching for tags. Be sure to + # remove the '[]' above, if you add tags to this list. + # + # NOTE: A tag is limited to a single word comprised of alphanumeric characters. + # Maximum 20 tags per role. + +dependencies: [] + # List your role dependencies here, one per line. Be sure to remove the '[]' above, + # if you add dependencies to this list. + \ No newline at end of file diff --git a/tasks/main.yml b/tasks/main.yml new file mode 100644 index 0000000..649b962 --- /dev/null +++ b/tasks/main.yml @@ -0,0 +1,2 @@ +--- +# tasks file for ensure_postfix \ No newline at end of file diff --git a/tests/inventory b/tests/inventory new file mode 100644 index 0000000..878877b --- /dev/null +++ b/tests/inventory @@ -0,0 +1,2 @@ +localhost + diff --git a/tests/test.yml b/tests/test.yml new file mode 100644 index 0000000..26c57ca --- /dev/null +++ b/tests/test.yml @@ -0,0 +1,5 @@ +--- +- hosts: localhost + remote_user: root + roles: + - ensure_postfix \ No newline at end of file diff --git a/vars/main.yml b/vars/main.yml new file mode 100644 index 0000000..9409913 --- /dev/null +++ b/vars/main.yml @@ -0,0 +1,2 @@ +--- +# vars file for ensure_postfix \ No newline at end of file From bba5e273aeefc6bc4d1b894f7e526252fd0d1702 Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sun, 14 Nov 2021 11:33:05 -0600 Subject: [PATCH 03/47] Role shell --- handlers/main.yml | 27 ++++++++- tasks/main.yml | 149 +++++++++++++++++++++++++++++++++++++++++++++- 2 files changed, 174 insertions(+), 2 deletions(-) diff --git a/handlers/main.yml b/handlers/main.yml index 53dd825..7063426 100644 --- a/handlers/main.yml +++ b/handlers/main.yml @@ -1,2 +1,27 @@ --- -# handlers file for ensure_postfix \ No newline at end of file +# handlers file for ensure_postfix +- name: 'ensure_postfix.package_facts' + ansible.builtin.package_facts: +- name: 'ensure_postfix.service_facts' + ansible.builtin.service_facts: +- name: 'ensure_postfix.service_reload' + when: + - ansible_system == 'Linux' + - ansible_service_mgr == 'systemd' + - ensure_postfix is defined + ansible.builtin.systemd: + daemon_reload: 'yes' +- name: 'ensure_postfix.services' + when: + - ansible_system == 'Linux' + - ensure_postfix is defined + - ensure_postfix.service_list is defined + - ensure_postfix.service_list is iterable + - item.state == 'started' + ansible.builtin.service: + enabled: '{{ item.enabled }}' + name: '{{ item.name }}' + state: 'restarted' + loop: '{{ ensure_postfix.service_list }}' + loop_control: + label: '{{ item.name }} will be restarted' diff --git a/tasks/main.yml b/tasks/main.yml index 649b962..54dda11 100644 --- a/tasks/main.yml +++ b/tasks/main.yml @@ -1,2 +1,149 @@ --- -# tasks file for ensure_postfix \ No newline at end of file +# tasks file for ensure_postfix +- name: 'include variables' + when: + - ansible_system == 'Linux' + include_vars: + file: '{{ lookup("first_found", findme ) }}' + name: 'ensure_postfix' + vars: + findme: + files: + - '{{ ansible_distribution }}-{{ ansible_distribution_major_version }}-{{ ansible_architecture }}.yml' + - '{{ ansible_distribution }}-{{ ansible_distribution_major_version }}-default.yml' + - '{{ ansible_distribution }}-default.yml' + - '{{ ansible_os_family }}-{{ ansible_distribution_major_version }}-{{ ansible_architecture }}.yml' + - '{{ ansible_os_family }}-{{ ansible_distribution_major_version }}-default.yml' + - '{{ ansible_os_family }}-default.yml' + - 'default.yml' + paths: + - '../vars/' + errors: 'ignore' +- name: 'package discovery' + when: + - ansible_system == 'Linux' + - packages is not defined + ansible.builtin.package_facts: +- name: 'service discovery' + when: + - ansible_system == 'Linux' + - services is not defined + ansible.builtin.service_facts: +- name: 'ensure sysctl' + when: + - ansible_system == 'Linux' + - ensure_postfix is defined + - ensure_postfix.sysctl_list is defined + - ensure_postfix.sysctl_list is iterable + ansible.posix.sysctl: + name: '{{ item.name }}' + reload: '{{ item.reload | default(omit) }}' + state: '{{ item.state }}' + sysctl_file: '{{ item.sysctl_file | default(omit) }}' + sysctl_set: '{{ item.sysctl_set | default(omit) }}' + value: '{{ item.value | default(omit) }}' + loop: '{{ ensure_postfix.sysctl_list }}' + loop_control: + label: '{{ item.name }} will be {{ item.value }}' +- name: 'ensure packages' + when: + - ansible_system == 'Linux' + - ensure_postfix is defined + - ensure_postfix.package_list is defined + - ensure_postfix.package_list is iterable + - packages[item.name] is not defined + ansible.builtin.package: + name: '{{ item.name }}' + state: '{{ item.state }}' + loop: '{{ ensure_postfix.package_list }}' + loop_control: + label: '{{ item.name }} will be {{ item.state }}' + notify: + - 'ensure_postfix.package_facts' + - 'ensure_postfix.service_facts' +- name: 'ensure seboolean' + when: + - ansible_system == 'Linux' + - ensure_postfix is defined + - ensure_postfix.seboolean_list is defined + - ensure_postfix.seboolean_list is iterable + ansible.posix.seboolean: + name: '{{ item.name }}' + persistent: '{{ item.persistent }}' + state: '{{ item.state }}' + loop: '{{ ensure_postfix.seboolean_list }}' + loop_control: + label: '{{ item.name }} will be {{ item.state }}' +- name: 'find certificates' + when: + - ansible_system == 'Linux' + - ensure_postfix is defined + - ensure_postfix.template_list is defined + - ensure_postfix.template_list is iterable + ansible.builtin.find: + file_type: 'file' + paths: + - '/etc/httpd/md/domains/' + patterns: + - 'pubcert.pem' + - 'privkey.pem' + recurse: 'yes' + register: 'certificates' +- name: 'ensure configurations' + when: + - ansible_system == 'Linux' + - ensure_postfix is defined + - ensure_postfix.template_list is defined + - ensure_postfix.template_list is iterable + ansible.builtin.template: + backup: 'no' + dest: '{{ item.dest }}' + group: '{{ item.group | default(omit) }}' + mode: '{{ item.mode | default(omit) }}' + owner: '{{ item.owner | default(omit) }}' + selevel: '{{ iteml.selevel | default(omit) }}' + serole: '{{ item.serole | default(omit) }}' + setype: '{{ item.setype | default(omit) }}' + seuser: '{{ item.seuser | default(omit) }}' + src: '{{ item.src }}' + loop: '{{ ensure_postfix.template_list }}' + loop_control: + label: '{{ item.dest }} will be ensured' + notify: + - 'ensure_postfix.package_facts' + - 'ensure_postfix.service_facts' + - 'ensure_postfix.service_reload' + - 'ensure_postfix.services' +- name: 'ensure firewall' + when: + - ansible_system == 'Linux' + - packages["firewalld"] is defined + - packages["python3-firewall"] is defined + - ensure_postfix is defined + - ensure_postfix.firewall_list is defined + - ensure_postfix.firewall_list is iterable + ansible.posix.firewalld: + permanent: '{{ item.permanent }}' + service: '{{ item.service }}' + state: '{{ item.state }}' + loop: '{{ ensure_postfix.firewall_list }}' + loop_control: + label: '{{ item.service }} will be {{ item.state }}' +- name: 'ensure services' + when: + - ansible_system == 'Linux' + - ensure_postfix is defined + - ensure_postfix.service_list is defined + - ensure_postfix.service_list is iterable + ansible.builtin.service: + enabled: '{{ item.enabled }}' + name: '{{ item.name }}' + state: '{{ item.state }}' + loop: '{{ ensure_postfix.service_list }}' + loop_control: + label: '{{ item.name }} will be {{ item.state }}' + notify: + - 'ensure_postfix.package_facts' + - 'ensure_postfix.service_facts' +- name: 'flush handlers' + meta: 'flush_handlers' From 36767edf9064eeccc83f669128f8278311fd43d8 Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sun, 14 Nov 2021 11:36:01 -0600 Subject: [PATCH 04/47] default vars --- vars/default.yml | 2 ++ 1 file changed, 2 insertions(+) create mode 100644 vars/default.yml diff --git a/vars/default.yml b/vars/default.yml new file mode 100644 index 0000000..9409913 --- /dev/null +++ b/vars/default.yml @@ -0,0 +1,2 @@ +--- +# vars file for ensure_postfix \ No newline at end of file From 8b2c86621bbb7a0d93574e41fdc90b0341e4a12b Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sun, 14 Nov 2021 11:46:42 -0600 Subject: [PATCH 05/47] Package deploy --- vars/Fedora-35-default.yml | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 vars/Fedora-35-default.yml diff --git a/vars/Fedora-35-default.yml b/vars/Fedora-35-default.yml new file mode 100644 index 0000000..ef6f0d2 --- /dev/null +++ b/vars/Fedora-35-default.yml @@ -0,0 +1,21 @@ +--- +# vars file for ensure_postfix +package_list: + - name: 'postfix' + state: 'present' + - name: 'postfix-ldap' + state: 'present' + - name: 'postfix-mysql' + state: 'present' + - name: 'postfix-pcre' + state: 'present' +firewall_list: + - permanent: 'yes' + service: 'smtp' + state: 'enabled' + - permanent: 'yes' + service: 'smtps' + state: 'enabled' + - permanent: 'yes' + service: 'smtp-submission' + state: 'enabled' From 4277d871a3f3caa411241df2be07ea104c679977 Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sun, 14 Nov 2021 14:01:54 -0600 Subject: [PATCH 06/47] Add OpenDMARC, OpenDKIM, and postfix service --- vars/Fedora-35-default.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/vars/Fedora-35-default.yml b/vars/Fedora-35-default.yml index ef6f0d2..b20d9b6 100644 --- a/vars/Fedora-35-default.yml +++ b/vars/Fedora-35-default.yml @@ -1,6 +1,12 @@ --- # vars file for ensure_postfix package_list: + - name: 'opendkim' + state: 'present' + - name: 'opendkim-tools' + state: 'present' + - name: 'opendmarc' + state: 'present' - name: 'postfix' state: 'present' - name: 'postfix-ldap' @@ -19,3 +25,7 @@ firewall_list: - permanent: 'yes' service: 'smtp-submission' state: 'enabled' +service_list: + - enabled: 'yes' + name: 'postfix.service' + state: 'started' From 259dde90c159d4f4ce38d98566a25ce0e8e50adc Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sun, 14 Nov 2021 15:05:38 -0600 Subject: [PATCH 07/47] Base configuration --- templates/Fedora/35/etc/opendkim.conf | 133 ++++ templates/Fedora/35/etc/opendkim/KeyTable | 6 + templates/Fedora/35/etc/opendkim/SigningTable | 25 + templates/Fedora/35/etc/opendkim/TrustedHosts | 9 + templates/Fedora/35/etc/opendmarc.conf | 439 +++++++++++ templates/Fedora/35/etc/postfix/access | 484 ++++++++++++ templates/Fedora/35/etc/postfix/canonical | 307 ++++++++ .../Fedora/35/etc/postfix/dynamicmaps.cf | 1 + .../35/etc/postfix/dynamicmaps.cf.d/ldap | 1 + .../35/etc/postfix/dynamicmaps.cf.d/mysql | 1 + .../35/etc/postfix/dynamicmaps.cf.d/pcre | 1 + templates/Fedora/35/etc/postfix/generic | 250 ++++++ templates/Fedora/35/etc/postfix/header_checks | 549 +++++++++++++ templates/Fedora/35/etc/postfix/main.cf | 738 ++++++++++++++++++ templates/Fedora/35/etc/postfix/main.cf.proto | 736 +++++++++++++++++ templates/Fedora/35/etc/postfix/master.cf | 137 ++++ .../Fedora/35/etc/postfix/master.cf.proto | 137 ++++ templates/Fedora/35/etc/postfix/postfix-files | 432 ++++++++++ .../35/etc/postfix/postfix-files.d/ldap | 3 + .../35/etc/postfix/postfix-files.d/mysql | 3 + .../35/etc/postfix/postfix-files.d/pcre | 3 + templates/Fedora/35/etc/postfix/relocated | 176 +++++ templates/Fedora/35/etc/postfix/transport | 317 ++++++++ templates/Fedora/35/etc/postfix/virtual | 324 ++++++++ vars/Fedora-35-default.yml | 49 ++ 25 files changed, 5261 insertions(+) create mode 100644 templates/Fedora/35/etc/opendkim.conf create mode 100644 templates/Fedora/35/etc/opendkim/KeyTable create mode 100644 templates/Fedora/35/etc/opendkim/SigningTable create mode 100644 templates/Fedora/35/etc/opendkim/TrustedHosts create mode 100644 templates/Fedora/35/etc/opendmarc.conf create mode 100644 templates/Fedora/35/etc/postfix/access create mode 100644 templates/Fedora/35/etc/postfix/canonical create mode 100644 templates/Fedora/35/etc/postfix/dynamicmaps.cf create mode 100644 templates/Fedora/35/etc/postfix/dynamicmaps.cf.d/ldap create mode 100644 templates/Fedora/35/etc/postfix/dynamicmaps.cf.d/mysql create mode 100644 templates/Fedora/35/etc/postfix/dynamicmaps.cf.d/pcre create mode 100644 templates/Fedora/35/etc/postfix/generic create mode 100644 templates/Fedora/35/etc/postfix/header_checks create mode 100644 templates/Fedora/35/etc/postfix/main.cf create mode 100644 templates/Fedora/35/etc/postfix/main.cf.proto create mode 100644 templates/Fedora/35/etc/postfix/master.cf create mode 100644 templates/Fedora/35/etc/postfix/master.cf.proto create mode 100644 templates/Fedora/35/etc/postfix/postfix-files create mode 100644 templates/Fedora/35/etc/postfix/postfix-files.d/ldap create mode 100644 templates/Fedora/35/etc/postfix/postfix-files.d/mysql create mode 100644 templates/Fedora/35/etc/postfix/postfix-files.d/pcre create mode 100644 templates/Fedora/35/etc/postfix/relocated create mode 100644 templates/Fedora/35/etc/postfix/transport create mode 100644 templates/Fedora/35/etc/postfix/virtual diff --git a/templates/Fedora/35/etc/opendkim.conf b/templates/Fedora/35/etc/opendkim.conf new file mode 100644 index 0000000..5933b4e --- /dev/null +++ b/templates/Fedora/35/etc/opendkim.conf @@ -0,0 +1,133 @@ +## BASIC OPENDKIM CONFIGURATION FILE +## See opendkim.conf(5) or /usr/share/doc/opendkim/opendkim.conf.sample for more + +## BEFORE running OpenDKIM you must: + +## - make your MTA (Postfix, Sendmail, etc.) aware of OpenDKIM +## - generate keys for your domain (if signing) +## - edit your DNS records to publish your public keys (if signing) + +## See /usr/share/doc/opendkim/INSTALL for detailed instructions. + +## DEPRECATED CONFIGURATION OPTIONS +## +## The following configuration options are no longer valid. They should be +## removed from your existing configuration file to prevent potential issues. +## Failure to do so may result in opendkim being unable to start. +## +## Removed in 2.10.0: +## AddAllSignatureResults +## ADSPAction +## ADSPNoSuchDomain +## BogusPolicy +## DisableADSP +## LDAPSoftStart +## LocalADSP +## NoDiscardableMailTo +## On-PolicyError +## SendADSPReports +## UnprotectedPolicy + +## CONFIGURATION OPTIONS + +## Specifies the path to the process ID file. +PidFile /run/opendkim/opendkim.pid + +## Selects operating modes. Valid modes are s (sign) and v (verify). Default is v. +## Must be changed to s (sign only) or sv (sign and verify) in order to sign outgoing +## messages. +Mode v + +## Log activity to the system log. +Syslog yes + +## Log additional entries indicating successful signing or verification of messages. +SyslogSuccess yes + +## If logging is enabled, include detailed logging about why or why not a message was +## signed or verified. This causes an increase in the amount of log data generated +## for each message, so set this to No (or comment it out) if it gets too noisy. +LogWhy yes + +## Attempt to become the specified user before starting operations. +UserID opendkim:opendkim + +## Create a socket through which your MTA can communicate. +Socket inet:8891@localhost + +## Required to use local socket with MTAs that access the socket as a non- +## privileged user (e.g. Postfix) +Umask 002 + +## This specifies a text file in which to store DKIM transaction statistics. +## OpenDKIM must be manually compiled with --enable-stats to enable this feature. +# Statistics /var/spool/opendkim/stats.dat + +## Specifies whether or not the filter should generate report mail back +## to senders when verification fails and an address for such a purpose +## is provided. See opendkim.conf(5) for details. +SendReports yes + +## Specifies the sending address to be used on From: headers of outgoing +## failure reports. By default, the e-mail address of the user executing +## the filter is used (executing_user@hostname). +# ReportAddress "Example.com Postmaster" + +## Add a DKIM-Filter header field to messages passing through this filter +## to identify messages it has processed. +SoftwareHeader yes + +## SIGNING OPTIONS + +## Selects the canonicalization method(s) to be used when signing messages. +Canonicalization relaxed/relaxed + +## Domain(s) whose mail should be signed by this filter. Mail from other domains will +## be verified rather than being signed. Uncomment and use your domain name. +## This parameter is not required if a SigningTable is in use. +# Domain example.com + +## Defines the name of the selector to be used when signing messages. +Selector default + +## Specifies the minimum number of key bits for acceptable keys and signatures. +MinimumKeyBits 1024 + +## Gives the location of a private key to be used for signing ALL messages. This +## directive is ignored if KeyTable is enabled. +KeyFile /etc/opendkim/keys/default.private + +## Gives the location of a file mapping key names to signing keys. In simple terms, +## this tells OpenDKIM where to find your keys. If present, overrides any KeyFile +## directive in the configuration file. Requires SigningTable be enabled. +# KeyTable /etc/opendkim/KeyTable + +## Defines a table used to select one or more signatures to apply to a message based +## on the address found in the From: header field. In simple terms, this tells +## OpenDKIM how to use your keys. Requires KeyTable be enabled. +# SigningTable refile:/etc/opendkim/SigningTable + +## Identifies a set of "external" hosts that may send mail through the server as one +## of the signing domains without credentials as such. +# ExternalIgnoreList refile:/etc/opendkim/TrustedHosts + +## Identifies a set "internal" hosts whose mail should be signed rather than verified. +# InternalHosts refile:/etc/opendkim/TrustedHosts + +## Contains a list of IP addresses, CIDR blocks, hostnames or domain names +## whose mail should be neither signed nor verified by this filter. See man +## page for file format. +# PeerList X.X.X.X + +## Always oversign From (sign using actual From and a null From to prevent +## malicious signatures header fields (From and/or others) between the signer +## and the verifier. From is oversigned by default in the Fedora package +## because it is often the identity key used by reputation systems and thus +## somewhat security sensitive. +OversignHeaders From + +## Instructs the DKIM library to maintain its own local cache of keys and +## policies retrieved from DNS, rather than relying on the nameserver for +## caching service. Useful if the nameserver being used by the filter is +## not local. +# QueryCache yes diff --git a/templates/Fedora/35/etc/opendkim/KeyTable b/templates/Fedora/35/etc/opendkim/KeyTable new file mode 100644 index 0000000..e804d68 --- /dev/null +++ b/templates/Fedora/35/etc/opendkim/KeyTable @@ -0,0 +1,6 @@ +# OPENDKIM KEY TABLE +# To use this file, uncomment the #KeyTable option in /etc/opendkim.conf, +# then uncomment the following line and replace example.com with your domain +# name, then restart OpenDKIM. Additional keys may be added on separate lines. + +#default._domainkey.example.com example.com:default:/etc/opendkim/keys/default.private diff --git a/templates/Fedora/35/etc/opendkim/SigningTable b/templates/Fedora/35/etc/opendkim/SigningTable new file mode 100644 index 0000000..e8161a1 --- /dev/null +++ b/templates/Fedora/35/etc/opendkim/SigningTable @@ -0,0 +1,25 @@ +# OPENDKIM SIGNING TABLE +# This table controls how to apply one or more signatures to outgoing messages based +# on the address found in the From: header field. In simple terms, this tells +# OpenDKIM "how" to apply your keys. + +# To use this file, uncomment the SigningTable option in /etc/opendkim.conf, +# then uncomment one of the usage examples below and replace example.com with your +# domain name, then restart OpenDKIM. + +# WILDCARD EXAMPLE +# Enables signing for any address on the listed domain(s), but will work only if +# "refile:/etc/opendkim/SigningTable" is included in /etc/opendkim.conf. +# Create additional lines for additional domains. + +#*@example.com default._domainkey.example.com + +# NON-WILDCARD EXAMPLE +# If "file:" (instead of "refile:") is specified in /etc/opendkim.conf, then +# wildcards will not work. Instead, full user@host is checked first, then simply host, +# then user@.domain (with all superdomains checked in sequence, so "foo.example.com" +# would first check "user@foo.example.com", then "user@.example.com", then "user@.com"), +# then .domain, then user@*, and finally *. See the opendkim.conf(5) man page under +# "SigningTable" for more details. + +#example.com default._domainkey.example.com diff --git a/templates/Fedora/35/etc/opendkim/TrustedHosts b/templates/Fedora/35/etc/opendkim/TrustedHosts new file mode 100644 index 0000000..7a086d4 --- /dev/null +++ b/templates/Fedora/35/etc/opendkim/TrustedHosts @@ -0,0 +1,9 @@ +# OPENDKIM TRUSTED HOSTS +# To use this file, uncomment the #ExternalIgnoreList and/or the #InternalHosts +# option in /etc/opendkim.conf then restart OpenDKIM. Additional hosts +# may be added on separate lines (IP addresses, hostnames, or CIDR ranges). +# The localhost IP (127.0.0.1) should always be the first entry in this file. +127.0.0.1 +::1 +#host.example.com +#192.168.1.0/24 diff --git a/templates/Fedora/35/etc/opendmarc.conf b/templates/Fedora/35/etc/opendmarc.conf new file mode 100644 index 0000000..4835938 --- /dev/null +++ b/templates/Fedora/35/etc/opendmarc.conf @@ -0,0 +1,439 @@ +## opendmarc.conf -- configuration file for OpenDMARC filter +## +## Copyright (c) 2012-2015, 2018, 2021, The Trusted Domain Project. +## All rights reserved. + +## DEPRECATED CONFIGURATION OPTIONS +## +## The following configuration options are no longer valid. They should be +## removed from your existing configuration file to prevent potential issues. +## Failure to do so may result in opendmarc being unable to start. +## +## Renamed in 1.3.0: +## ForensicReports became FailureReports +## ForensicReportsBcc became FailureReportsBcc +## ForensicReportsOnNone became FailureReportsOnNone +## ForensicReportsSentBy became FailureReportsSentBy + +## CONFIGURATION OPTIONS + +## AuthservID (string) +## defaults to MTA name +## +## Sets the "authserv-id" to use when generating the Authentication-Results: +## header field after verifying a message. If the string "HOSTNAME" is +## provided, the name of the host running the filter (as returned by the +## gethostname(3) function) will be used. +# +# AuthservID name + +## AuthservIDWithJobID { true | false } +## default "false" +## +## If "true", requests that the authserv-id portion of the added +## Authentication-Results header fields contain the job ID of the message +## being evaluated. +# +# AuthservIDWithJobID false + +## AutoRestart { true | false } +## default "false" +## +## Automatically re-start on failures. Use with caution; if the filter fails +## instantly after it starts, this can cause a tight fork(2) loop. +# +# AutoRestart false + +## AutoRestartCount n +## default 0 +## +## Sets the maximum automatic restart count. After this number of automatic +## restarts, the filter will give up and terminate. A value of 0 implies no +## limit. +# +# AutoRestartCount 0 + +## AutoRestartRate n/t[u] +## default (no limit) +## +## Sets the maximum automatic restart rate. If the filter begins restarting +## faster than the rate defined here, it will give up and terminate. This +## is a string of the form n/t[u] where n is an integer limiting the count +## of restarts in the given interval and t[u] defines the time interval +## through which the rate is calculated; t is an integer and u defines the +## units thus represented ("s" or "S" for seconds, the default; "m" or "M" +## for minutes; "h" or "H" for hours; "d" or "D" for days). For example, a +## value of "10/1h" limits the restarts to 10 in one hour. There is no +## default, meaning restart rate is not limited. +# +# AutoRestartRate n/t[u] + +## Background { true | false } +## default "true" +## +## Causes opendmarc to fork and exits immediately, leaving the service +## running in the background. +# +# Background true + +## BaseDirectory (string) +## default (none) +## +## If set, instructs the filter to change to the specified directory using +## chdir(2) before doing anything else. This means any files referenced +## elsewhere in the configuration file can be specified relative to this +## directory. It's also useful for arranging that any crash dumps will be +## saved to a specific location. +# +# BaseDirectory /var/run/opendmarc + +## ChangeRootDirectory (string) +## default (none) +## +## Requests that the operating system change the effective root directory of +## the process to the one specified here prior to beginning execution. +## chroot(2) requires superuser access. A warning will be generated if +## UserID is not also set. +# +# ChangeRootDirectory /var/chroot/opendmarc + +## CopyFailuresTo (string) +## default (none) +## +## Requests addition of the specified email address to the envelope of +## any message that fails the DMARC evaluation. +# +# CopyFailuresTo postmaster@localhost + +## DomainWhitelist (string) +## default (none) +## +## A brief list of whitelisted domains for which ARC signature headers are +## trusted as determined by evaluating entries in the "arc.chain" field found +## in a locally generated Authentication-Results header. +## +## This list will be concatenated with DomainWhitelistFile (if provided). +## +# +# DomainWhitelist example.com + +## DomainWhitelistFile path +## default (none) +## +## A comprehensive list of whitelisted domains for which ARC signature headers +## are trusted as determined by evaluating entries in the "arc.chain" field +## found in a locally generated Authentication-Results header. +## +## This list will be concatenated with DomainWhitelist (if provided). +## +# +# DomainWhitelistFile /etc/opendmarc/whitelist.domains + +## DomainWhitelistSize +## default 3000 +## +## The maximum number of entries in the DomainWhitelist including both entries +## in the DomainWhitelist configuration parameter (above) and entries in the +## DomainWhitelistFile. This number will be increased by approximately 20% to +## increase the efficiency of the hashing algorithm. +## +# +# DomainWhitelistSize 3000 + +## DNSTimeout (integer) +## default 5 +## +## Sets the DNS timeout in seconds. A value of 0 causes an infinite wait. +## (NOT YET IMPLEMENTED) +# +# DNSTimeout 5 + +## EnableCoredumps { true | false } +## default "false" +## +## On systems that have such support, make an explicit request to the kernel +## to dump cores when the filter crashes for some reason. Some modern UNIX +## systems suppress core dumps during crashes for security reasons if the +## user ID has changed during the lifetime of the process. Currently only +## supported on Linux. +# +# EnableCoreDumps false + +## FailureReports { true | false } +## default "false" +## +## Enables generation of failure reports when the DMARC test fails and the +## purported sender of the message has requested such reports. Reports are +## formatted per RFC6591. +# +# FailureReports false + +## FailureReportsBcc (string) +## default (none) +## +## When failure reports are enabled and one is to be generated, always +## send one to the address(es) specified here. If a failure report is +## requested by the domain owner, the address(es) are added in a Bcc: field. +## If no request is made, they address(es) are used in a To: field. There +## is no default. +# +# FailureReportsBcc postmaster@example.coom + +## FailureReportsOnNone { true | false } +## default "false" +## +## Supplements the "FailureReports" setting by generating reports for +## domains that advertise "none" policies. By default, reports are only +## generated (when enabled) for sending domains advertising a "quarantine" +## or "reject" policy. +# +# FailureReportsOnNone false + +## FailureReportsSentBy string +## default "USER@HOSTNAME" +## +## Specifies the email address to use in the From: field of failure +## reports generated by the filter. The default is to use the userid of +## the user running the filter and the local hostname to construct an +## email address. "postmaster" is used in place of the userid if a name +## could not be determined. +# +# FailureReportsSentBy USER@HOSTNAME + +## HistoryFile path +## default (none) +## +## If set, specifies the location of a text file to which records are written +## that can be used to generate DMARC aggregate reports. Records are groups +## of rows containing information about a single received message, and +## include all relevant information needed to generate a DMARC aggregate +## report. It is expected that this will not be used in its raw form, but +## rather periodically imported into a relational database from which the +## aggregate reports can be extracted by a tool such as opendmarc-import(8). +# +# HistoryFile /var/spool/opendmarc/opendmarc.dat + +## HoldQuarantinedMessages { true | false } +## default "false" +## +## If set, the milter will signal to the mta that messages with +## p=quarantine, which fail dmarc authentication, should be held in +## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. +## If false, messsages will be accepted and passed along with the +## regular mail flow, and the quarantine will be left up to downstream +## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, +## including the Authentication-Results header added by OpenDMARC +# +# HoldQuarantinedMessages false + +## IgnoreAuthenticatedClients { true | false } +## default "false" +## +## If set, causes mail from authenticated clients (i.e., those that used +## SMTP AUTH) to be ignored by the filter. +# +# IgnoreAuthenticatedClients false + +## HoldQuarantinedMessages { true | false } +## default "false" +## +## If set, the milter will signal to the mta that messages with +## p=quarantine, which fail dmarc authentication, should be held in +## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. +## If false, messsages will be accepted and passed along with the +## regular mail flow, and the quarantine will be left up to downstream +## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, +## including the Authentication-Results header added by OpenDMARC +# +# HoldQuarantinedMessages false + + +## IgnoreHosts path +## default (internal) +## +## Specifies the path to a file that contains a list of hostnames, IP +## addresses, and/or CIDR expressions identifying hosts whose SMTP +## connections are to be ignored by the filter. If not specified, defaults +## to "127.0.0.1" only. +# +# IgnoreHosts /etc/opendmarc/ignore.hosts + +## IgnoreMailFrom domain[,...] +## default (none) +## +## Gives a list of domain names whose mail (based on the From: domain) is to +## be ignored by the filter. The list should be comma-separated. Matching +## against this list is case-insensitive. The default is an empty list, +## meaning no mail is ignored. +# +# IgnoreMailFrom example.com + +## MilterDebug (integer) +## default 0 +## +## Sets the debug level to be requested from the milter library. +# +# MilterDebug 0 + +## PidFile path +## default (none) +## +## Specifies the path to a file that should be created at process start +## containing the process ID. +# +# PidFile /var/run/opendmarc.pid + +## PublicSuffixList path +## default (none) +## +## Specifies the path to a file that contains top-level domains (TLDs) that +## will be used to compute the Organizational Domain for a given domain name, +## as described in the DMARC specification. If not provided, the filter will +## not be able to determine the Organizational Domain and only the presented +## domain will be evaluated. This file should be periodically updated. +## One location to retrieve the file from is https://publicsuffix.org/list/ +# +# PublicSuffixList path + +## RecordAllMessages { true | false } +## default "false" +## +## If set and "HistoryFile" is in use, all received messages are recorded +## to the history file. If not set (the default), only messages for which +## the From: domain published a DMARC record will be recorded in the +## history file. +# +# RecordAllMessages false + +## RejectFailures { true | false } +## default "false" +## +## If set, messages will be rejected if they fail the DMARC evaluation, or +## temp-failed if evaluation could not be completed. By default, no message +## will be rejected or temp-failed regardless of the outcome of the DMARC +## evaluation of the message. Instead, an Authentication-Results header +## field will be added. +# +# RejectFailures false + +## RejectMultiValueFrom { true | false } +## default "false" +## +## If set, messages with multiple addresses in the From: field of the message +## will be rejected unless all domains in the field are the same. They will +## otherwise be ignored by the filter (the default). +# +# RejectMultiValueFrom false + +## ReportCommand string +## default "/usr/sbin/sendmail -t" +## +## Indicates the shell command to which failure reports should be passed for +## delivery when "FailureReports" is enabled. +# +# ReportCommand /usr/sbin/sendmail -t + +## RequiredHeaders { true | false } +## default "false" +## +## If set, the filter will ensure the header of the message conforms to the +## basic header field count restrictions laid out in RFC5322, Section 3.6. +## Messages failing this test are rejected without further processing. A +## From: field from which no domain name could be extracted will also be +## rejected. +# +# RequiredHeaders false + +## Socket socketspec +## default (none) +## +## Specifies the socket that should be established by the filter to receive +## connections from sendmail(8) in order to provide service. socketspec is +## in one of two forms: local:path, which creates a UNIX domain socket at +## the specified path, or inet:port[@host] or inet6:port[@host] which creates +## a TCP socket on the specified port for the appropriate protocol family. +## If the host is not given as either a hostname or an IP address, the +## socket will be listening on all interfaces. This option is mandatory +## either in the configuration file or on the command line. If an IP +## address is used, it must be enclosed in square brackets. +# +Socket inet:8893@localhost + +## SoftwareHeader { true | false } +## default "false" +## +## Causes the filter to add a "DMARC-Filter" header field indicating the +## presence of this filter in the path of the message from injection to +## delivery. The product's name, version, and the job ID are included in +## the header field's contents. +# +SoftwareHeader true + +## SPFIgnoreResults { true | false } +## default "false" +## +## Causes the filter to ignore any SPF results in the header of the +## message. This is useful if you want the filter to perform SPF checks +## itself, or because you don't trust the arriving header. +# +SPFIgnoreResults true + +## SPFSelfValidate { true | false } +## default false +## +## Enable internal spf checking with --with-spf +## To use libspf2 instead: --with-spf --with-spf2-include=path --with-spf2-lib=path +## +## Causes the filter to perform a fallback SPF check itself when +## it can find no SPF results in the message header. If SPFIgnoreResults +## is also set, it never looks for SPF results in headers and +## always performs the SPF check itself when this is set. +# +SPFSelfValidate true + +## Syslog { true | false } +## default "false" +## +## Log via calls to syslog(3) any interesting activity. +# +Syslog true + +## SyslogFacility facility-name +## default "mail" +## +## Log via calls to syslog(3) using the named facility. The facility names +## are the same as the ones allowed in syslog.conf(5). +# +# SyslogFacility mail + +## TrustedAuthservIDs string +## default HOSTNAME +## +## Specifies one or more "authserv-id" values to trust as relaying true +## upstream DKIM and SPF results. The default is to use the name of +## the MTA processing the message. To specify a list, separate each entry +## with a comma. The key word "HOSTNAME" will be replaced by the name of +## the host running the filter as reported by the gethostname(3) function. +# +# TrustedAuthservIDs HOSTNAME + +## UMask mask +## default (none) +## +## Requests a specific permissions mask to be used for file creation. This +## only really applies to creation of the socket when Socket specifies a +## UNIX domain socket, and to the HistoryFile and PidFile (if any); temporary +## files are normally created by the mkstemp(3) function that enforces a +## specific file mode on creation regardless of the process umask. See +## umask(2) for more information. +# +UMask 007 + +## UserID user[:group] +## default (none) +## +## Attempts to become the specified userid before starting operations. +## The process will be assigned all of the groups and primary group ID of +## the named userid unless an alternate group is specified. +# +UserID opendmarc:mail diff --git a/templates/Fedora/35/etc/postfix/access b/templates/Fedora/35/etc/postfix/access new file mode 100644 index 0000000..257339b --- /dev/null +++ b/templates/Fedora/35/etc/postfix/access @@ -0,0 +1,484 @@ +# ACCESS(5) ACCESS(5) +# +# NAME +# access - Postfix SMTP server access table +# +# SYNOPSIS +# postmap /etc/postfix/access +# +# postmap -q "string" /etc/postfix/access +# +# postmap -q - /etc/postfix/access as the lookup key for such addresses. The value is +# specified with the smtpd_null_access_lookup_key parameter +# in the Postfix main.cf file. +# +# EMAIL ADDRESS EXTENSION +# When a mail address localpart contains the optional recip- +# ient delimiter (e.g., user+foo@domain), the lookup order +# becomes: user+foo@domain, user@domain, domain, user+foo@, +# and user@. +# +# HOST NAME/ADDRESS PATTERNS +# With lookups from indexed files such as DB or DBM, or from +# networked tables such as NIS, LDAP or SQL, the following +# lookup patterns are examined in the order as listed: +# +# domain.tld +# Matches domain.tld. +# +# The pattern domain.tld also matches subdomains, but +# only when the string smtpd_access_maps is listed in +# the Postfix parent_domain_matches_subdomains con- +# figuration setting. +# +# .domain.tld +# Matches subdomains of domain.tld, but only when the +# string smtpd_access_maps is not listed in the Post- +# fix parent_domain_matches_subdomains configuration +# setting. +# +# net.work.addr.ess +# +# net.work.addr +# +# net.work +# +# net Matches a remote IPv4 host address or network +# address range. Specify one to four decimal octets +# separated by ".". Do not specify "[]" , "/", lead- +# ing zeros, or hexadecimal forms. +# +# Network ranges are matched by repeatedly truncating +# the last ".octet" from a remote IPv4 host address +# string, until a match is found in the access table, +# or until further truncation is not possible. +# +# NOTE: use the cidr lookup table type to specify +# network/netmask patterns. See cidr_table(5) for +# details. +# +# net:work:addr:ess +# +# net:work:addr +# +# net:work +# +# net Matches a remote IPv6 host address or network +# address range. Specify three to eight hexadecimal +# octet pairs separated by ":", using the compressed +# form "::" for a sequence of zero-valued octet +# pairs. Do not specify "[]", "/", leading zeros, or +# non-compressed forms. +# +# A network range is matched by repeatedly truncating +# the last ":octetpair" from the compressed-form +# remote IPv6 host address string, until a match is +# found in the access table, or until further trunca- +# tion is not possible. +# +# NOTE: use the cidr lookup table type to specify +# network/netmask patterns. See cidr_table(5) for +# details. +# +# IPv6 support is available in Postfix 2.2 and later. +# +# ACCEPT ACTIONS +# OK Accept the address etc. that matches the pattern. +# +# all-numerical +# An all-numerical result is treated as OK. This for- +# mat is generated by address-based relay authoriza- +# tion schemes such as pop-before-smtp. +# +# For other accept actions, see "OTHER ACTIONS" below. +# +# REJECT ACTIONS +# Postfix version 2.3 and later support enhanced status +# codes as defined in RFC 3463. When no code is specified +# at the beginning of the text below, Postfix inserts a +# default enhanced status code of "5.7.1" in the case of +# reject actions, and "4.7.1" in the case of defer actions. +# See "ENHANCED STATUS CODES" below. +# +# 4NN text +# +# 5NN text +# Reject the address etc. that matches the pattern, +# and respond with the numerical three-digit code and +# text. 4NN means "try again later", while 5NN means +# "do not try again". +# +# The following responses have special meaning for +# the Postfix SMTP server: +# +# 421 text (Postfix 2.3 and later) +# +# 521 text (Postfix 2.6 and later) +# After responding with the numerical +# three-digit code and text, disconnect imme- +# diately from the SMTP client. This frees up +# SMTP server resources so that they can be +# made available to another SMTP client. +# +# Note: The "521" response should be used only +# with botnets and other malware where inter- +# operability is of no concern. The "send 521 +# and disconnect" behavior is NOT defined in +# the SMTP standard. +# +# REJECT optional text... +# Reject the address etc. that matches the pattern. +# Reply with "$access_map_reject_code optional +# text..." when the optional text is specified, oth- +# erwise reply with a generic error response message. +# +# DEFER optional text... +# Reject the address etc. that matches the pattern. +# Reply with "$access_map_defer_code optional +# text..." when the optional text is specified, oth- +# erwise reply with a generic error response message. +# +# This feature is available in Postfix 2.6 and later. +# +# DEFER_IF_REJECT optional text... +# Defer the request if some later restriction would +# result in a REJECT action. Reply with +# "$access_map_defer_code 4.7.1 optional text..." +# when the optional text is specified, otherwise +# reply with a generic error response message. +# +# Prior to Postfix 2.6, the SMTP reply code is 450. +# +# This feature is available in Postfix 2.1 and later. +# +# DEFER_IF_PERMIT optional text... +# Defer the request if some later restriction would +# result in a an explicit or implicit PERMIT action. +# Reply with "$access_map_defer_code 4.7.1 optional +# text..." when the optional text is specified, oth- +# erwise reply with a generic error response message. +# +# Prior to Postfix 2.6, the SMTP reply code is 450. +# +# This feature is available in Postfix 2.1 and later. +# +# For other reject actions, see "OTHER ACTIONS" below. +# +# OTHER ACTIONS +# restriction... +# Apply the named UCE restriction(s) (permit, reject, +# reject_unauth_destination, and so on). +# +# BCC user@domain +# Send one copy of the message to the specified +# recipient. +# +# If multiple BCC actions are specified within the +# same SMTP MAIL transaction, with Postfix 3.0 only +# the last action will be used. +# +# This feature is available in Postfix 3.0 and later. +# +# DISCARD optional text... +# Claim successful delivery and silently discard the +# message. Log the optional text if specified, oth- +# erwise log a generic message. +# +# Note: this action currently affects all recipients +# of the message. To discard only one recipient +# without discarding the entire message, use the +# transport(5) table to direct mail to the discard(8) +# service. +# +# This feature is available in Postfix 2.0 and later. +# +# DUNNO Pretend that the lookup key was not found. This +# prevents Postfix from trying substrings of the +# lookup key (such as a subdomain name, or a network +# address subnetwork). +# +# This feature is available in Postfix 2.0 and later. +# +# FILTER transport:destination +# After the message is queued, send the entire mes- +# sage through the specified external content filter. +# The transport name specifies the first field of a +# mail delivery agent definition in master.cf; the +# syntax of the next-hop destination is described in +# the manual page of the corresponding delivery +# agent. More information about external content +# filters is in the Postfix FILTER_README file. +# +# Note 1: do not use $number regular expression sub- +# stitutions for transport or destination unless you +# know that the information has a trusted origin. +# +# Note 2: this action overrides the main.cf con- +# tent_filter setting, and affects all recipients of +# the message. In the case that multiple FILTER +# actions fire, only the last one is executed. +# +# Note 3: the purpose of the FILTER command is to +# override message routing. To override the recipi- +# ent's transport but not the next-hop destination, +# specify an empty filter destination (Postfix 2.7 +# and later), or specify a transport:destination that +# delivers through a different Postfix instance +# (Postfix 2.6 and earlier). Other options are using +# the recipient-dependent transport_maps or the sen- +# der-dependent sender_dependent_default_transport- +# _maps features. +# +# This feature is available in Postfix 2.0 and later. +# +# HOLD optional text... +# Place the message on the hold queue, where it will +# sit until someone either deletes it or releases it +# for delivery. Log the optional text if specified, +# otherwise log a generic message. +# +# Mail that is placed on hold can be examined with +# the postcat(1) command, and can be destroyed or +# released with the postsuper(1) command. +# +# Note: use "postsuper -r" to release mail that was +# kept on hold for a significant fraction of $maxi- +# mal_queue_lifetime or $bounce_queue_lifetime, or +# longer. Use "postsuper -H" only for mail that will +# not expire within a few delivery attempts. +# +# Note: this action currently affects all recipients +# of the message. +# +# This feature is available in Postfix 2.0 and later. +# +# PREPEND headername: headervalue +# Prepend the specified message header to the mes- +# sage. When more than one PREPEND action executes, +# the first prepended header appears before the sec- +# ond etc. prepended header. +# +# Note: this action must execute before the message +# content is received; it cannot execute in the con- +# text of smtpd_end_of_data_restrictions. +# +# This feature is available in Postfix 2.1 and later. +# +# REDIRECT user@domain +# After the message is queued, send the message to +# the specified address instead of the intended +# recipient(s). When multiple REDIRECT actions fire, +# only the last one takes effect. +# +# Note: this action overrides the FILTER action, and +# currently overrides all recipients of the message. +# +# This feature is available in Postfix 2.1 and later. +# +# INFO optional text... +# Log an informational record with the optional text, +# together with client information and if available, +# with helo, sender, recipient and protocol informa- +# tion. +# +# This feature is available in Postfix 3.0 and later. +# +# WARN optional text... +# Log a warning with the optional text, together with +# client information and if available, with helo, +# sender, recipient and protocol information. +# +# This feature is available in Postfix 2.1 and later. +# +# ENHANCED STATUS CODES +# Postfix version 2.3 and later support enhanced status +# codes as defined in RFC 3463. When an enhanced status +# code is specified in an access table, it is subject to +# modification. The following transformations are needed +# when the same access table is used for client, helo, +# sender, or recipient access restrictions; they happen +# regardless of whether Postfix replies to a MAIL FROM, RCPT +# TO or other SMTP command. +# +# o When a sender address matches a REJECT action, the +# Postfix SMTP server will transform a recipient DSN +# status (e.g., 4.1.1-4.1.6) into the corresponding +# sender DSN status, and vice versa. +# +# o When non-address information matches a REJECT +# action (such as the HELO command argument or the +# client hostname/address), the Postfix SMTP server +# will transform a sender or recipient DSN status +# into a generic non-address DSN status (e.g., +# 4.0.0). +# +# REGULAR EXPRESSION TABLES +# This section describes how the table lookups change when +# the table is given in the form of regular expressions. For +# a description of regular expression lookup table syntax, +# see regexp_table(5) or pcre_table(5). +# +# Each pattern is a regular expression that is applied to +# the entire string being looked up. Depending on the appli- +# cation, that string is an entire client hostname, an +# entire client IP address, or an entire mail address. Thus, +# no parent domain or parent network search is done, +# user@domain mail addresses are not broken up into their +# user@ and domain constituent parts, nor is user+foo broken +# up into user and foo. +# +# Patterns are applied in the order as specified in the ta- +# ble, until a pattern is found that matches the search +# string. +# +# Actions are the same as with indexed file lookups, with +# the additional feature that parenthesized substrings from +# the pattern can be interpolated as $1, $2 and so on. +# +# TCP-BASED TABLES +# This section describes how the table lookups change when +# lookups are directed to a TCP-based server. For a descrip- +# tion of the TCP client/server lookup protocol, see tcp_ta- +# ble(5). This feature is not available up to and including +# Postfix version 2.4. +# +# Each lookup operation uses the entire query string once. +# Depending on the application, that string is an entire +# client hostname, an entire client IP address, or an entire +# mail address. Thus, no parent domain or parent network +# search is done, user@domain mail addresses are not broken +# up into their user@ and domain constituent parts, nor is +# user+foo broken up into user and foo. +# +# Actions are the same as with indexed file lookups. +# +# EXAMPLE +# The following example uses an indexed file, so that the +# order of table entries does not matter. The example per- +# mits access by the client at address 1.2.3.4 but rejects +# all other clients in 1.2.3.0/24. Instead of hash lookup +# tables, some systems use dbm. Use the command "postconf +# -m" to find out what lookup tables Postfix supports on +# your system. +# +# /etc/postfix/main.cf: +# smtpd_client_restrictions = +# check_client_access hash:/etc/postfix/access +# +# /etc/postfix/access: +# 1.2.3 REJECT +# 1.2.3.4 OK +# +# Execute the command "postmap /etc/postfix/access" after +# editing the file. +# +# BUGS +# The table format does not understand quoting conventions. +# +# SEE ALSO +# postmap(1), Postfix lookup table manager +# smtpd(8), SMTP server +# postconf(5), configuration parameters +# transport(5), transport:nexthop syntax +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# SMTPD_ACCESS_README, built-in SMTP server access control +# DATABASE_README, Postfix lookup table overview +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# ACCESS(5) diff --git a/templates/Fedora/35/etc/postfix/canonical b/templates/Fedora/35/etc/postfix/canonical new file mode 100644 index 0000000..9881f4e --- /dev/null +++ b/templates/Fedora/35/etc/postfix/canonical @@ -0,0 +1,307 @@ +# CANONICAL(5) CANONICAL(5) +# +# NAME +# canonical - Postfix canonical table format +# +# SYNOPSIS +# postmap /etc/postfix/canonical +# +# postmap -q "string" /etc/postfix/canonical +# +# postmap -q - /etc/postfix/canonical $/ +# REJECT IFRAME vulnerability exploit +# +# SEE ALSO +# cleanup(8), canonicalize and enqueue Postfix message +# pcre_table(5), format of PCRE lookup tables +# regexp_table(5), format of POSIX regular expression tables +# postconf(1), Postfix configuration utility +# postmap(1), Postfix lookup table management +# postsuper(1), Postfix janitor +# postcat(1), show Postfix queue file contents +# RFC 2045, base64 and quoted-printable encoding rules +# RFC 2047, message header encoding for non-ASCII text +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# DATABASE_README, Postfix lookup table overview +# CONTENT_INSPECTION_README, Postfix content inspection overview +# BUILTIN_FILTER_README, Postfix built-in content inspection +# BACKSCATTER_README, blocking returned forged mail +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# HEADER_CHECKS(5) diff --git a/templates/Fedora/35/etc/postfix/main.cf b/templates/Fedora/35/etc/postfix/main.cf new file mode 100644 index 0000000..bd0aea8 --- /dev/null +++ b/templates/Fedora/35/etc/postfix/main.cf @@ -0,0 +1,738 @@ +# Global Postfix configuration file. This file lists only a subset +# of all parameters. For the syntax, and for a complete parameter +# list, see the postconf(5) manual page (command: "man 5 postconf"). +# +# For common configuration examples, see BASIC_CONFIGURATION_README +# and STANDARD_CONFIGURATION_README. To find these documents, use +# the command "postconf html_directory readme_directory", or go to +# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. +# +# For best results, change no more than 2-3 parameters at a time, +# and test if Postfix still works after every change. + +# COMPATIBILITY +# +# The compatibility_level determines what default settings Postfix +# will use for main.cf and master.cf settings. These defaults will +# change over time. +# +# To avoid breaking things, Postfix will use backwards-compatible +# default settings and log where it uses those old backwards-compatible +# default settings, until the system administrator has determined +# if any backwards-compatible default settings need to be made +# permanent in main.cf or master.cf. +# +# When this review is complete, update the compatibility_level setting +# below as recommended in the RELEASE_NOTES file. +# +# The level below is what should be used with new (not upgrade) installs. +# +compatibility_level = 3.6 + +# SOFT BOUNCE +# +# The soft_bounce parameter provides a limited safety net for +# testing. When soft_bounce is enabled, mail will remain queued that +# would otherwise bounce. This parameter disables locally-generated +# bounces, and prevents the SMTP server from rejecting mail permanently +# (by changing 5xx replies into 4xx replies). However, soft_bounce +# is no cure for address rewriting mistakes or mail routing mistakes. +# +#soft_bounce = no + +# LOCAL PATHNAME INFORMATION +# +# The queue_directory specifies the location of the Postfix queue. +# This is also the root directory of Postfix daemons that run chrooted. +# See the files in examples/chroot-setup for setting up Postfix chroot +# environments on different UNIX systems. +# +queue_directory = /var/spool/postfix + +# The command_directory parameter specifies the location of all +# postXXX commands. +# +command_directory = /usr/sbin + +# The daemon_directory parameter specifies the location of all Postfix +# daemon programs (i.e. programs listed in the master.cf file). This +# directory must be owned by root. +# +daemon_directory = /usr/libexec/postfix + +# The data_directory parameter specifies the location of Postfix-writable +# data files (caches, random numbers). This directory must be owned +# by the mail_owner account (see below). +# +data_directory = /var/lib/postfix + +# QUEUE AND PROCESS OWNERSHIP +# +# The mail_owner parameter specifies the owner of the Postfix queue +# and of most Postfix daemon processes. Specify the name of a user +# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS +# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In +# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED +# USER. +# +mail_owner = postfix + +# The default_privs parameter specifies the default rights used by +# the local delivery agent for delivery to external file or command. +# These rights are used in the absence of a recipient user context. +# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. +# +#default_privs = nobody + +# INTERNET HOST AND DOMAIN NAMES +# +# The myhostname parameter specifies the internet hostname of this +# mail system. The default is to use the fully-qualified domain name +# from gethostname(). $myhostname is used as a default value for many +# other configuration parameters. +# +#myhostname = host.domain.tld +#myhostname = virtual.domain.tld + +# The mydomain parameter specifies the local internet domain name. +# The default is to use $myhostname minus the first component. +# $mydomain is used as a default value for many other configuration +# parameters. +# +#mydomain = domain.tld + +# SENDING MAIL +# +# The myorigin parameter specifies the domain that locally-posted +# mail appears to come from. The default is to append $myhostname, +# which is fine for small sites. If you run a domain with multiple +# machines, you should (1) change this to $mydomain and (2) set up +# a domain-wide alias database that aliases each user to +# user@that.users.mailhost. +# +# For the sake of consistency between sender and recipient addresses, +# myorigin also specifies the default domain name that is appended +# to recipient addresses that have no @domain part. +# +#myorigin = $myhostname +#myorigin = $mydomain + +# RECEIVING MAIL + +# The inet_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on. By default, +# the software claims all active interfaces on the machine. The +# parameter also controls delivery of mail to user@[ip.address]. +# +# See also the proxy_interfaces parameter, for network addresses that +# are forwarded to us via a proxy or network address translator. +# +# Note: you need to stop/start Postfix when this parameter changes. +# +#inet_interfaces = all +#inet_interfaces = $myhostname +#inet_interfaces = $myhostname, localhost +inet_interfaces = localhost + +# Enable IPv4, and IPv6 if supported +inet_protocols = all + +# The proxy_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on by way of a +# proxy or network address translation unit. This setting extends +# the address list specified with the inet_interfaces parameter. +# +# You must specify your proxy/NAT addresses when your system is a +# backup MX host for other domains, otherwise mail delivery loops +# will happen when the primary MX host is down. +# +#proxy_interfaces = +#proxy_interfaces = 1.2.3.4 + +# The mydestination parameter specifies the list of domains that this +# machine considers itself the final destination for. +# +# These domains are routed to the delivery agent specified with the +# local_transport parameter setting. By default, that is the UNIX +# compatible delivery agent that lookups all recipients in /etc/passwd +# and /etc/aliases or their equivalent. +# +# The default is $myhostname + localhost.$mydomain + localhost. On +# a mail domain gateway, you should also include $mydomain. +# +# Do not specify the names of virtual domains - those domains are +# specified elsewhere (see VIRTUAL_README). +# +# Do not specify the names of domains that this machine is backup MX +# host for. Specify those names via the relay_domains settings for +# the SMTP server, or use permit_mx_backup if you are lazy (see +# STANDARD_CONFIGURATION_README). +# +# The local machine is always the final destination for mail addressed +# to user@[the.net.work.address] of an interface that the mail system +# receives mail on (see the inet_interfaces parameter). +# +# Specify a list of host or domain names, /file/name or type:table +# patterns, separated by commas and/or whitespace. A /file/name +# pattern is replaced by its contents; a type:table is matched when +# a name matches a lookup key (the right-hand side is ignored). +# Continue long lines by starting the next line with whitespace. +# +# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". +# +mydestination = $myhostname, localhost.$mydomain, localhost +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, +# mail.$mydomain, www.$mydomain, ftp.$mydomain + +# REJECTING MAIL FOR UNKNOWN LOCAL USERS +# +# The local_recipient_maps parameter specifies optional lookup tables +# with all names or addresses of users that are local with respect +# to $mydestination, $inet_interfaces or $proxy_interfaces. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown local users. This parameter is defined by default. +# +# To turn off local recipient checking in the SMTP server, specify +# local_recipient_maps = (i.e. empty). +# +# The default setting assumes that you use the default Postfix local +# delivery agent for local delivery. You need to update the +# local_recipient_maps setting if: +# +# - You define $mydestination domain recipients in files other than +# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. +# For example, you define $mydestination domain recipients in +# the $virtual_mailbox_maps files. +# +# - You redefine the local delivery agent in master.cf. +# +# - You redefine the "local_transport" setting in main.cf. +# +# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" +# feature of the Postfix local delivery agent (see local(8)). +# +# Details are described in the LOCAL_RECIPIENT_README file. +# +# Beware: if the Postfix SMTP server runs chrooted, you probably have +# to access the passwd file via the proxymap service, in order to +# overcome chroot restrictions. The alternative, having a copy of +# the system passwd file in the chroot jail is just not practical. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify a bare username, an @domain.tld +# wild-card, or specify a user@domain.tld address. +# +#local_recipient_maps = unix:passwd.byname $alias_maps +#local_recipient_maps = proxy:unix:passwd.byname $alias_maps +#local_recipient_maps = + +# The unknown_local_recipient_reject_code specifies the SMTP server +# response code when a recipient domain matches $mydestination or +# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty +# and the recipient address or address local-part is not found. +# +# The default setting is 550 (reject mail) but it is safer to start +# with 450 (try again later) until you are certain that your +# local_recipient_maps settings are OK. +# +unknown_local_recipient_reject_code = 550 + +# TRUST AND RELAY CONTROL + +# The mynetworks parameter specifies the list of "trusted" SMTP +# clients that have more privileges than "strangers". +# +# In particular, "trusted" SMTP clients are allowed to relay mail +# through Postfix. See the smtpd_recipient_restrictions parameter +# in postconf(5). +# +# You can specify the list of "trusted" network addresses by hand +# or you can let Postfix do it for you (which is the default). +# +# By default (mynetworks_style = subnet), Postfix "trusts" SMTP +# clients in the same IP subnetworks as the local machine. +# On Linux, this works correctly only with interfaces specified +# with the "ifconfig" command. +# +# Specify "mynetworks_style = class" when Postfix should "trust" SMTP +# clients in the same IP class A/B/C networks as the local machine. +# Don't do this with a dialup site - it would cause Postfix to "trust" +# your entire provider's network. Instead, specify an explicit +# mynetworks list by hand, as described below. +# +# Specify "mynetworks_style = host" when Postfix should "trust" +# only the local machine. +# +#mynetworks_style = class +#mynetworks_style = subnet +#mynetworks_style = host + +# Alternatively, you can specify the mynetworks list by hand, in +# which case Postfix ignores the mynetworks_style setting. +# +# Specify an explicit list of network/netmask patterns, where the +# mask specifies the number of bits in the network part of a host +# address. +# +# You can also specify the absolute pathname of a pattern file instead +# of listing the patterns here. Specify type:table for table-based lookups +# (the value on the table right-hand side is not used). +# +#mynetworks = 168.100.3.0/28, 127.0.0.0/8 +#mynetworks = $config_directory/mynetworks +#mynetworks = hash:/etc/postfix/network_table + +# The relay_domains parameter restricts what destinations this system will +# relay mail to. See the smtpd_recipient_restrictions description in +# postconf(5) for detailed information. +# +# By default, Postfix relays mail +# - from "trusted" clients (IP address matches $mynetworks) to any destination, +# - from "untrusted" clients to destinations that match $relay_domains or +# subdomains thereof, except addresses with sender-specified routing. +# The default relay_domains value is $mydestination. +# +# In addition to the above, the Postfix SMTP server by default accepts mail +# that Postfix is final destination for: +# - destinations that match $inet_interfaces or $proxy_interfaces, +# - destinations that match $mydestination +# - destinations that match $virtual_alias_domains, +# - destinations that match $virtual_mailbox_domains. +# These destinations do not need to be listed in $relay_domains. +# +# Specify a list of hosts or domains, /file/name patterns or type:name +# lookup tables, separated by commas and/or whitespace. Continue +# long lines by starting the next line with whitespace. A file name +# is replaced by its contents; a type:name table is matched when a +# (parent) domain appears as lookup key. +# +# NOTE: Postfix will not automatically forward mail for domains that +# list this system as their primary or backup MX host. See the +# permit_mx_backup restriction description in postconf(5). +# +#relay_domains = $mydestination + +# INTERNET OR INTRANET + +# The relayhost parameter specifies the default host to send mail to +# when no entry is matched in the optional transport(5) table. When +# no relayhost is given, mail is routed directly to the destination. +# +# On an intranet, specify the organizational domain name. If your +# internal DNS uses no MX records, specify the name of the intranet +# gateway host instead. +# +# In the case of SMTP, specify a domain, host, host:port, [host]:port, +# [address] or [address]:port; the form [host] turns off MX lookups. +# +# If you're connected via UUCP, see also the default_transport parameter. +# +#relayhost = $mydomain +#relayhost = [gateway.my.domain] +#relayhost = [mailserver.isp.tld] +#relayhost = uucphost +#relayhost = [an.ip.add.ress] + +# REJECTING UNKNOWN RELAY USERS +# +# The relay_recipient_maps parameter specifies optional lookup tables +# with all addresses in the domains that match $relay_domains. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown relay users. This feature is off by default. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify an @domain.tld wild-card, or specify +# a user@domain.tld address. +# +#relay_recipient_maps = hash:/etc/postfix/relay_recipients + +# INPUT RATE CONTROL +# +# The in_flow_delay configuration parameter implements mail input +# flow control. This feature is turned on by default, although it +# still needs further development (it's disabled on SCO UNIX due +# to an SCO bug). +# +# A Postfix process will pause for $in_flow_delay seconds before +# accepting a new message, when the message arrival rate exceeds the +# message delivery rate. With the default 100 SMTP server process +# limit, this limits the mail inflow to 100 messages a second more +# than the number of messages delivered per second. +# +# Specify 0 to disable the feature. Valid delays are 0..10. +# +#in_flow_delay = 1s + +# ADDRESS REWRITING +# +# The ADDRESS_REWRITING_README document gives information about +# address masquerading or other forms of address rewriting including +# username->Firstname.Lastname mapping. + +# ADDRESS REDIRECTION (VIRTUAL DOMAIN) +# +# The VIRTUAL_README document gives information about the many forms +# of domain hosting that Postfix supports. + +# "USER HAS MOVED" BOUNCE MESSAGES +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# TRANSPORT MAP +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# ALIAS DATABASE +# +# The alias_maps parameter specifies the list of alias databases used +# by the local delivery agent. The default list is system dependent. +# +# On systems with NIS, the default is to search the local alias +# database, then the NIS alias database. See aliases(5) for syntax +# details. +# +# If you change the alias database, run "postalias /etc/aliases" (or +# wherever your system stores the mail alias file), or simply run +# "newaliases" to build the necessary DBM or DB file. +# +# It will take a minute or so before changes become visible. Use +# "postfix reload" to eliminate the delay. +# +#alias_maps = dbm:/etc/aliases +alias_maps = hash:/etc/aliases +#alias_maps = hash:/etc/aliases, nis:mail.aliases +#alias_maps = netinfo:/aliases + +# The alias_database parameter specifies the alias database(s) that +# are built with "newaliases" or "sendmail -bi". This is a separate +# configuration parameter, because alias_maps (see above) may specify +# tables that are not necessarily all under control by Postfix. +# +#alias_database = dbm:/etc/aliases +#alias_database = dbm:/etc/mail/aliases +alias_database = hash:/etc/aliases +#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases + +# ADDRESS EXTENSIONS (e.g., user+foo) +# +# The recipient_delimiter parameter specifies the separator between +# user names and address extensions (user+foo). See canonical(5), +# local(8), relocated(5) and virtual(5) for the effects this has on +# aliases, canonical, virtual, relocated and .forward file lookups. +# Basically, the software tries user+foo and .forward+foo before +# trying user and .forward. +# +#recipient_delimiter = + + +# DELIVERY TO MAILBOX +# +# The home_mailbox parameter specifies the optional pathname of a +# mailbox file relative to a user's home directory. The default +# mailbox file is /var/spool/mail/user or /var/mail/user. Specify +# "Maildir/" for qmail-style delivery (the / is required). +# +#home_mailbox = Mailbox +#home_mailbox = Maildir/ + +# The mail_spool_directory parameter specifies the directory where +# UNIX-style mailboxes are kept. The default setting depends on the +# system type. +# +#mail_spool_directory = /var/mail +#mail_spool_directory = /var/spool/mail + +# The mailbox_command parameter specifies the optional external +# command to use instead of mailbox delivery. The command is run as +# the recipient with proper HOME, SHELL and LOGNAME environment settings. +# Exception: delivery for root is done as $default_user. +# +# Other environment variables of interest: USER (recipient username), +# EXTENSION (address extension), DOMAIN (domain part of address), +# and LOCAL (the address localpart). +# +# Unlike other Postfix configuration parameters, the mailbox_command +# parameter is not subjected to $parameter substitutions. This is to +# make it easier to specify shell syntax (see example below). +# +# Avoid shell meta characters because they will force Postfix to run +# an expensive shell process. Procmail alone is expensive enough. +# +# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN +# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. +# +#mailbox_command = /some/where/procmail +#mailbox_command = /some/where/procmail -a "$EXTENSION" + +# The mailbox_transport specifies the optional transport in master.cf +# to use after processing aliases and .forward files. This parameter +# has precedence over the mailbox_command, fallback_transport and +# luser_relay parameters. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" +# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. +#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp + +# If using the cyrus-imapd IMAP server deliver local mail to the IMAP +# server using LMTP (Local Mail Transport Protocol), this is prefered +# over the older cyrus deliver program by setting the +# mailbox_transport as below: +# +# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp +# +# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via +# these settings. +# +# local_destination_recipient_limit = 300 +# local_destination_concurrency_limit = 5 +# +# Of course you should adjust these settings as appropriate for the +# capacity of the hardware you are using. The recipient limit setting +# can be used to take advantage of the single instance message store +# capability of Cyrus. The concurrency limit can be used to control +# how many simultaneous LMTP sessions will be permitted to the Cyrus +# message store. +# +# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and +# subsequent line in master.cf. +#mailbox_transport = cyrus + +# The fallback_transport specifies the optional transport in master.cf +# to use for recipients that are not found in the UNIX passwd database. +# This parameter has precedence over the luser_relay parameter. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp +#fallback_transport = + +# The luser_relay parameter specifies an optional destination address +# for unknown recipients. By default, mail for unknown@$mydestination, +# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned +# as undeliverable. +# +# The following expansions are done on luser_relay: $user (recipient +# username), $shell (recipient shell), $home (recipient home directory), +# $recipient (full recipient address), $extension (recipient address +# extension), $domain (recipient domain), $local (entire recipient +# localpart), $recipient_delimiter. Specify ${name?value} or +# ${name:value} to expand value only when $name does (does not) exist. +# +# luser_relay works only for the default Postfix local delivery agent. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must specify "local_recipient_maps =" (i.e. empty) in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#luser_relay = $user@other.host +#luser_relay = $local@other.host +#luser_relay = admin+$local + +# JUNK MAIL CONTROLS +# +# The controls listed here are only a very small subset. The file +# SMTPD_ACCESS_README provides an overview. + +# The header_checks parameter specifies an optional table with patterns +# that each logical message header is matched against, including +# headers that span multiple physical lines. +# +# By default, these patterns also apply to MIME headers and to the +# headers of attached messages. With older Postfix versions, MIME and +# attached message headers were treated as body text. +# +# For details, see "man header_checks". +# +#header_checks = regexp:/etc/postfix/header_checks + +# FAST ETRN SERVICE +# +# Postfix maintains per-destination logfiles with information about +# deferred mail, so that mail can be flushed quickly with the SMTP +# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". +# See the ETRN_README document for a detailed description. +# +# The fast_flush_domains parameter controls what destinations are +# eligible for this service. By default, they are all domains that +# this server is willing to relay mail to. +# +#fast_flush_domains = $relay_domains + +# SHOW SOFTWARE VERSION OR NOT +# +# The smtpd_banner parameter specifies the text that follows the 220 +# code in the SMTP server's greeting banner. Some people like to see +# the mail version advertised. By default, Postfix shows no version. +# +# You MUST specify $myhostname at the start of the text. That is an +# RFC requirement. Postfix itself does not care. +# +#smtpd_banner = $myhostname ESMTP $mail_name +#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) + +# PARALLEL DELIVERY TO THE SAME DESTINATION +# +# How many parallel deliveries to the same user or domain? With local +# delivery, it does not make sense to do massively parallel delivery +# to the same user, because mailbox updates must happen sequentially, +# and expensive pipelines in .forward files can cause disasters when +# too many are run at the same time. With SMTP deliveries, 10 +# simultaneous connections to the same domain could be sufficient to +# raise eyebrows. +# +# Each message delivery transport has its XXX_destination_concurrency_limit +# parameter. The default is $default_destination_concurrency_limit for +# most delivery transports. For the local delivery agent the default is 2. + +#local_destination_concurrency_limit = 2 +#default_destination_concurrency_limit = 20 + +# DEBUGGING CONTROL +# +# The debug_peer_level parameter specifies the increment in verbose +# logging level when an SMTP client or server host name or address +# matches a pattern in the debug_peer_list parameter. +# +debug_peer_level = 2 + +# The debug_peer_list parameter specifies an optional list of domain +# or network patterns, /file/name patterns or type:name tables. When +# an SMTP client or server host name or address matches a pattern, +# increase the verbose logging level by the amount specified in the +# debug_peer_level parameter. +# +#debug_peer_list = 127.0.0.1 +#debug_peer_list = some.domain + +# The debugger_command specifies the external command that is executed +# when a Postfix daemon program is run with the -D option. +# +# Use "command .. & sleep 5" so that the debugger can attach before +# the process marches on. If you use an X-based debugger, be sure to +# set up your XAUTHORITY environment variable before starting Postfix. +# +debugger_command = + PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin + ddd $daemon_directory/$process_name $process_id & sleep 5 + +# If you can't use X, use this to capture the call stack when a +# daemon crashes. The result is in a file in the configuration +# directory, and is named after the process name and the process ID. +# +# debugger_command = +# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; +# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 +# >$config_directory/$process_name.$process_id.log & sleep 5 +# +# Another possibility is to run gdb under a detached screen session. +# To attach to the screen session, su root and run "screen -r +# " where uniquely matches one of the detached +# sessions (from "screen -list"). +# +# debugger_command = +# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen +# -dmS $process_name gdb $daemon_directory/$process_name +# $process_id & sleep 1 + +# INSTALL-TIME CONFIGURATION INFORMATION +# +# The following parameters are used when installing a new Postfix version. +# +# sendmail_path: The full pathname of the Postfix sendmail command. +# This is the Sendmail-compatible mail posting interface. +# +sendmail_path = /usr/sbin/sendmail.postfix + +# newaliases_path: The full pathname of the Postfix newaliases command. +# This is the Sendmail-compatible command to build alias databases. +# +newaliases_path = /usr/bin/newaliases.postfix + +# mailq_path: The full pathname of the Postfix mailq command. This +# is the Sendmail-compatible mail queue listing command. +# +mailq_path = /usr/bin/mailq.postfix + +# setgid_group: The group for mail submission and queue management +# commands. This must be a group name with a numerical group ID that +# is not shared with other accounts, not even with the Postfix account. +# +setgid_group = postdrop + +# html_directory: The location of the Postfix HTML documentation. +# +html_directory = no + +# manpage_directory: The location of the Postfix on-line manual pages. +# +manpage_directory = /usr/share/man + +# sample_directory: The location of the Postfix sample configuration files. +# This parameter is obsolete as of Postfix 2.1. +# +sample_directory = /usr/share/doc/postfix/samples + +# readme_directory: The location of the Postfix README files. +# +readme_directory = /usr/share/doc/postfix/README_FILES + +# TLS CONFIGURATION +# +# Basic Postfix TLS configuration by default with self-signed certificate +# for inbound SMTP and also opportunistic TLS for outbound SMTP. + +# The full pathname of a file with the Postfix SMTP server RSA certificate +# in PEM format. Intermediate certificates should be included in general, +# the server certificate first, then the issuing CA(s) (bottom-up order). +# +smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem + +# The full pathname of a file with the Postfix SMTP server RSA private key +# in PEM format. The private key must be accessible without a pass-phrase, +# i.e. it must not be encrypted. +# +smtpd_tls_key_file = /etc/pki/tls/private/postfix.key + +# Announce STARTTLS support to remote SMTP clients, but do not require that +# clients use TLS encryption (opportunistic TLS inbound). +# +smtpd_tls_security_level = may + +# Directory with PEM format Certification Authority certificates that the +# Postfix SMTP client uses to verify a remote SMTP server certificate. +# +smtp_tls_CApath = /etc/pki/tls/certs + +# The full pathname of a file containing CA certificates of root CAs +# trusted to sign either remote SMTP server certificates or intermediate CA +# certificates. +# +smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt + +# Use TLS if this is supported by the remote SMTP server, otherwise use +# plaintext (opportunistic TLS outbound). +# +smtp_tls_security_level = may +meta_directory = /etc/postfix +shlib_directory = /usr/lib64/postfix diff --git a/templates/Fedora/35/etc/postfix/main.cf.proto b/templates/Fedora/35/etc/postfix/main.cf.proto new file mode 100644 index 0000000..9bef4f2 --- /dev/null +++ b/templates/Fedora/35/etc/postfix/main.cf.proto @@ -0,0 +1,736 @@ +# Global Postfix configuration file. This file lists only a subset +# of all parameters. For the syntax, and for a complete parameter +# list, see the postconf(5) manual page (command: "man 5 postconf"). +# +# For common configuration examples, see BASIC_CONFIGURATION_README +# and STANDARD_CONFIGURATION_README. To find these documents, use +# the command "postconf html_directory readme_directory", or go to +# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. +# +# For best results, change no more than 2-3 parameters at a time, +# and test if Postfix still works after every change. + +# COMPATIBILITY +# +# The compatibility_level determines what default settings Postfix +# will use for main.cf and master.cf settings. These defaults will +# change over time. +# +# To avoid breaking things, Postfix will use backwards-compatible +# default settings and log where it uses those old backwards-compatible +# default settings, until the system administrator has determined +# if any backwards-compatible default settings need to be made +# permanent in main.cf or master.cf. +# +# When this review is complete, update the compatibility_level setting +# below as recommended in the RELEASE_NOTES file. +# +# The level below is what should be used with new (not upgrade) installs. +# +compatibility_level = 3.6 + +# SOFT BOUNCE +# +# The soft_bounce parameter provides a limited safety net for +# testing. When soft_bounce is enabled, mail will remain queued that +# would otherwise bounce. This parameter disables locally-generated +# bounces, and prevents the SMTP server from rejecting mail permanently +# (by changing 5xx replies into 4xx replies). However, soft_bounce +# is no cure for address rewriting mistakes or mail routing mistakes. +# +#soft_bounce = no + +# LOCAL PATHNAME INFORMATION +# +# The queue_directory specifies the location of the Postfix queue. +# This is also the root directory of Postfix daemons that run chrooted. +# See the files in examples/chroot-setup for setting up Postfix chroot +# environments on different UNIX systems. +# +queue_directory = /var/spool/postfix + +# The command_directory parameter specifies the location of all +# postXXX commands. +# +command_directory = /usr/sbin + +# The daemon_directory parameter specifies the location of all Postfix +# daemon programs (i.e. programs listed in the master.cf file). This +# directory must be owned by root. +# +daemon_directory = /usr/libexec/postfix + +# The data_directory parameter specifies the location of Postfix-writable +# data files (caches, random numbers). This directory must be owned +# by the mail_owner account (see below). +# +data_directory = /var/lib/postfix + +# QUEUE AND PROCESS OWNERSHIP +# +# The mail_owner parameter specifies the owner of the Postfix queue +# and of most Postfix daemon processes. Specify the name of a user +# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS +# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In +# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED +# USER. +# +mail_owner = postfix + +# The default_privs parameter specifies the default rights used by +# the local delivery agent for delivery to external file or command. +# These rights are used in the absence of a recipient user context. +# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. +# +#default_privs = nobody + +# INTERNET HOST AND DOMAIN NAMES +# +# The myhostname parameter specifies the internet hostname of this +# mail system. The default is to use the fully-qualified domain name +# from gethostname(). $myhostname is used as a default value for many +# other configuration parameters. +# +#myhostname = host.domain.tld +#myhostname = virtual.domain.tld + +# The mydomain parameter specifies the local internet domain name. +# The default is to use $myhostname minus the first component. +# $mydomain is used as a default value for many other configuration +# parameters. +# +#mydomain = domain.tld + +# SENDING MAIL +# +# The myorigin parameter specifies the domain that locally-posted +# mail appears to come from. The default is to append $myhostname, +# which is fine for small sites. If you run a domain with multiple +# machines, you should (1) change this to $mydomain and (2) set up +# a domain-wide alias database that aliases each user to +# user@that.users.mailhost. +# +# For the sake of consistency between sender and recipient addresses, +# myorigin also specifies the default domain name that is appended +# to recipient addresses that have no @domain part. +# +#myorigin = $myhostname +#myorigin = $mydomain + +# RECEIVING MAIL + +# The inet_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on. By default, +# the software claims all active interfaces on the machine. The +# parameter also controls delivery of mail to user@[ip.address]. +# +# See also the proxy_interfaces parameter, for network addresses that +# are forwarded to us via a proxy or network address translator. +# +# Note: you need to stop/start Postfix when this parameter changes. +# +#inet_interfaces = all +#inet_interfaces = $myhostname +#inet_interfaces = $myhostname, localhost +inet_interfaces = localhost + +# Enable IPv4, and IPv6 if supported +inet_protocols = all + +# The proxy_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on by way of a +# proxy or network address translation unit. This setting extends +# the address list specified with the inet_interfaces parameter. +# +# You must specify your proxy/NAT addresses when your system is a +# backup MX host for other domains, otherwise mail delivery loops +# will happen when the primary MX host is down. +# +#proxy_interfaces = +#proxy_interfaces = 1.2.3.4 + +# The mydestination parameter specifies the list of domains that this +# machine considers itself the final destination for. +# +# These domains are routed to the delivery agent specified with the +# local_transport parameter setting. By default, that is the UNIX +# compatible delivery agent that lookups all recipients in /etc/passwd +# and /etc/aliases or their equivalent. +# +# The default is $myhostname + localhost.$mydomain + localhost. On +# a mail domain gateway, you should also include $mydomain. +# +# Do not specify the names of virtual domains - those domains are +# specified elsewhere (see VIRTUAL_README). +# +# Do not specify the names of domains that this machine is backup MX +# host for. Specify those names via the relay_domains settings for +# the SMTP server, or use permit_mx_backup if you are lazy (see +# STANDARD_CONFIGURATION_README). +# +# The local machine is always the final destination for mail addressed +# to user@[the.net.work.address] of an interface that the mail system +# receives mail on (see the inet_interfaces parameter). +# +# Specify a list of host or domain names, /file/name or type:table +# patterns, separated by commas and/or whitespace. A /file/name +# pattern is replaced by its contents; a type:table is matched when +# a name matches a lookup key (the right-hand side is ignored). +# Continue long lines by starting the next line with whitespace. +# +# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". +# +mydestination = $myhostname, localhost.$mydomain, localhost +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, +# mail.$mydomain, www.$mydomain, ftp.$mydomain + +# REJECTING MAIL FOR UNKNOWN LOCAL USERS +# +# The local_recipient_maps parameter specifies optional lookup tables +# with all names or addresses of users that are local with respect +# to $mydestination, $inet_interfaces or $proxy_interfaces. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown local users. This parameter is defined by default. +# +# To turn off local recipient checking in the SMTP server, specify +# local_recipient_maps = (i.e. empty). +# +# The default setting assumes that you use the default Postfix local +# delivery agent for local delivery. You need to update the +# local_recipient_maps setting if: +# +# - You define $mydestination domain recipients in files other than +# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. +# For example, you define $mydestination domain recipients in +# the $virtual_mailbox_maps files. +# +# - You redefine the local delivery agent in master.cf. +# +# - You redefine the "local_transport" setting in main.cf. +# +# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" +# feature of the Postfix local delivery agent (see local(8)). +# +# Details are described in the LOCAL_RECIPIENT_README file. +# +# Beware: if the Postfix SMTP server runs chrooted, you probably have +# to access the passwd file via the proxymap service, in order to +# overcome chroot restrictions. The alternative, having a copy of +# the system passwd file in the chroot jail is just not practical. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify a bare username, an @domain.tld +# wild-card, or specify a user@domain.tld address. +# +#local_recipient_maps = unix:passwd.byname $alias_maps +#local_recipient_maps = proxy:unix:passwd.byname $alias_maps +#local_recipient_maps = + +# The unknown_local_recipient_reject_code specifies the SMTP server +# response code when a recipient domain matches $mydestination or +# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty +# and the recipient address or address local-part is not found. +# +# The default setting is 550 (reject mail) but it is safer to start +# with 450 (try again later) until you are certain that your +# local_recipient_maps settings are OK. +# +unknown_local_recipient_reject_code = 550 + +# TRUST AND RELAY CONTROL + +# The mynetworks parameter specifies the list of "trusted" SMTP +# clients that have more privileges than "strangers". +# +# In particular, "trusted" SMTP clients are allowed to relay mail +# through Postfix. See the smtpd_recipient_restrictions parameter +# in postconf(5). +# +# You can specify the list of "trusted" network addresses by hand +# or you can let Postfix do it for you (which is the default). +# +# By default (mynetworks_style = subnet), Postfix "trusts" SMTP +# clients in the same IP subnetworks as the local machine. +# On Linux, this works correctly only with interfaces specified +# with the "ifconfig" command. +# +# Specify "mynetworks_style = class" when Postfix should "trust" SMTP +# clients in the same IP class A/B/C networks as the local machine. +# Don't do this with a dialup site - it would cause Postfix to "trust" +# your entire provider's network. Instead, specify an explicit +# mynetworks list by hand, as described below. +# +# Specify "mynetworks_style = host" when Postfix should "trust" +# only the local machine. +# +#mynetworks_style = class +#mynetworks_style = subnet +#mynetworks_style = host + +# Alternatively, you can specify the mynetworks list by hand, in +# which case Postfix ignores the mynetworks_style setting. +# +# Specify an explicit list of network/netmask patterns, where the +# mask specifies the number of bits in the network part of a host +# address. +# +# You can also specify the absolute pathname of a pattern file instead +# of listing the patterns here. Specify type:table for table-based lookups +# (the value on the table right-hand side is not used). +# +#mynetworks = 168.100.3.0/28, 127.0.0.0/8 +#mynetworks = $config_directory/mynetworks +#mynetworks = hash:/etc/postfix/network_table + +# The relay_domains parameter restricts what destinations this system will +# relay mail to. See the smtpd_recipient_restrictions description in +# postconf(5) for detailed information. +# +# By default, Postfix relays mail +# - from "trusted" clients (IP address matches $mynetworks) to any destination, +# - from "untrusted" clients to destinations that match $relay_domains or +# subdomains thereof, except addresses with sender-specified routing. +# The default relay_domains value is $mydestination. +# +# In addition to the above, the Postfix SMTP server by default accepts mail +# that Postfix is final destination for: +# - destinations that match $inet_interfaces or $proxy_interfaces, +# - destinations that match $mydestination +# - destinations that match $virtual_alias_domains, +# - destinations that match $virtual_mailbox_domains. +# These destinations do not need to be listed in $relay_domains. +# +# Specify a list of hosts or domains, /file/name patterns or type:name +# lookup tables, separated by commas and/or whitespace. Continue +# long lines by starting the next line with whitespace. A file name +# is replaced by its contents; a type:name table is matched when a +# (parent) domain appears as lookup key. +# +# NOTE: Postfix will not automatically forward mail for domains that +# list this system as their primary or backup MX host. See the +# permit_mx_backup restriction description in postconf(5). +# +#relay_domains = $mydestination + +# INTERNET OR INTRANET + +# The relayhost parameter specifies the default host to send mail to +# when no entry is matched in the optional transport(5) table. When +# no relayhost is given, mail is routed directly to the destination. +# +# On an intranet, specify the organizational domain name. If your +# internal DNS uses no MX records, specify the name of the intranet +# gateway host instead. +# +# In the case of SMTP, specify a domain, host, host:port, [host]:port, +# [address] or [address]:port; the form [host] turns off MX lookups. +# +# If you're connected via UUCP, see also the default_transport parameter. +# +#relayhost = $mydomain +#relayhost = [gateway.my.domain] +#relayhost = [mailserver.isp.tld] +#relayhost = uucphost +#relayhost = [an.ip.add.ress] + +# REJECTING UNKNOWN RELAY USERS +# +# The relay_recipient_maps parameter specifies optional lookup tables +# with all addresses in the domains that match $relay_domains. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown relay users. This feature is off by default. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify an @domain.tld wild-card, or specify +# a user@domain.tld address. +# +#relay_recipient_maps = hash:/etc/postfix/relay_recipients + +# INPUT RATE CONTROL +# +# The in_flow_delay configuration parameter implements mail input +# flow control. This feature is turned on by default, although it +# still needs further development (it's disabled on SCO UNIX due +# to an SCO bug). +# +# A Postfix process will pause for $in_flow_delay seconds before +# accepting a new message, when the message arrival rate exceeds the +# message delivery rate. With the default 100 SMTP server process +# limit, this limits the mail inflow to 100 messages a second more +# than the number of messages delivered per second. +# +# Specify 0 to disable the feature. Valid delays are 0..10. +# +#in_flow_delay = 1s + +# ADDRESS REWRITING +# +# The ADDRESS_REWRITING_README document gives information about +# address masquerading or other forms of address rewriting including +# username->Firstname.Lastname mapping. + +# ADDRESS REDIRECTION (VIRTUAL DOMAIN) +# +# The VIRTUAL_README document gives information about the many forms +# of domain hosting that Postfix supports. + +# "USER HAS MOVED" BOUNCE MESSAGES +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# TRANSPORT MAP +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# ALIAS DATABASE +# +# The alias_maps parameter specifies the list of alias databases used +# by the local delivery agent. The default list is system dependent. +# +# On systems with NIS, the default is to search the local alias +# database, then the NIS alias database. See aliases(5) for syntax +# details. +# +# If you change the alias database, run "postalias /etc/aliases" (or +# wherever your system stores the mail alias file), or simply run +# "newaliases" to build the necessary DBM or DB file. +# +# It will take a minute or so before changes become visible. Use +# "postfix reload" to eliminate the delay. +# +#alias_maps = dbm:/etc/aliases +alias_maps = hash:/etc/aliases +#alias_maps = hash:/etc/aliases, nis:mail.aliases +#alias_maps = netinfo:/aliases + +# The alias_database parameter specifies the alias database(s) that +# are built with "newaliases" or "sendmail -bi". This is a separate +# configuration parameter, because alias_maps (see above) may specify +# tables that are not necessarily all under control by Postfix. +# +#alias_database = dbm:/etc/aliases +#alias_database = dbm:/etc/mail/aliases +alias_database = hash:/etc/aliases +#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases + +# ADDRESS EXTENSIONS (e.g., user+foo) +# +# The recipient_delimiter parameter specifies the separator between +# user names and address extensions (user+foo). See canonical(5), +# local(8), relocated(5) and virtual(5) for the effects this has on +# aliases, canonical, virtual, relocated and .forward file lookups. +# Basically, the software tries user+foo and .forward+foo before +# trying user and .forward. +# +#recipient_delimiter = + + +# DELIVERY TO MAILBOX +# +# The home_mailbox parameter specifies the optional pathname of a +# mailbox file relative to a user's home directory. The default +# mailbox file is /var/spool/mail/user or /var/mail/user. Specify +# "Maildir/" for qmail-style delivery (the / is required). +# +#home_mailbox = Mailbox +#home_mailbox = Maildir/ + +# The mail_spool_directory parameter specifies the directory where +# UNIX-style mailboxes are kept. The default setting depends on the +# system type. +# +#mail_spool_directory = /var/mail +#mail_spool_directory = /var/spool/mail + +# The mailbox_command parameter specifies the optional external +# command to use instead of mailbox delivery. The command is run as +# the recipient with proper HOME, SHELL and LOGNAME environment settings. +# Exception: delivery for root is done as $default_user. +# +# Other environment variables of interest: USER (recipient username), +# EXTENSION (address extension), DOMAIN (domain part of address), +# and LOCAL (the address localpart). +# +# Unlike other Postfix configuration parameters, the mailbox_command +# parameter is not subjected to $parameter substitutions. This is to +# make it easier to specify shell syntax (see example below). +# +# Avoid shell meta characters because they will force Postfix to run +# an expensive shell process. Procmail alone is expensive enough. +# +# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN +# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. +# +#mailbox_command = /some/where/procmail +#mailbox_command = /some/where/procmail -a "$EXTENSION" + +# The mailbox_transport specifies the optional transport in master.cf +# to use after processing aliases and .forward files. This parameter +# has precedence over the mailbox_command, fallback_transport and +# luser_relay parameters. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" +# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. +#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp + +# If using the cyrus-imapd IMAP server deliver local mail to the IMAP +# server using LMTP (Local Mail Transport Protocol), this is prefered +# over the older cyrus deliver program by setting the +# mailbox_transport as below: +# +# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp +# +# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via +# these settings. +# +# local_destination_recipient_limit = 300 +# local_destination_concurrency_limit = 5 +# +# Of course you should adjust these settings as appropriate for the +# capacity of the hardware you are using. The recipient limit setting +# can be used to take advantage of the single instance message store +# capability of Cyrus. The concurrency limit can be used to control +# how many simultaneous LMTP sessions will be permitted to the Cyrus +# message store. +# +# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and +# subsequent line in master.cf. +#mailbox_transport = cyrus + +# The fallback_transport specifies the optional transport in master.cf +# to use for recipients that are not found in the UNIX passwd database. +# This parameter has precedence over the luser_relay parameter. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp +#fallback_transport = + +# The luser_relay parameter specifies an optional destination address +# for unknown recipients. By default, mail for unknown@$mydestination, +# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned +# as undeliverable. +# +# The following expansions are done on luser_relay: $user (recipient +# username), $shell (recipient shell), $home (recipient home directory), +# $recipient (full recipient address), $extension (recipient address +# extension), $domain (recipient domain), $local (entire recipient +# localpart), $recipient_delimiter. Specify ${name?value} or +# ${name:value} to expand value only when $name does (does not) exist. +# +# luser_relay works only for the default Postfix local delivery agent. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must specify "local_recipient_maps =" (i.e. empty) in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#luser_relay = $user@other.host +#luser_relay = $local@other.host +#luser_relay = admin+$local + +# JUNK MAIL CONTROLS +# +# The controls listed here are only a very small subset. The file +# SMTPD_ACCESS_README provides an overview. + +# The header_checks parameter specifies an optional table with patterns +# that each logical message header is matched against, including +# headers that span multiple physical lines. +# +# By default, these patterns also apply to MIME headers and to the +# headers of attached messages. With older Postfix versions, MIME and +# attached message headers were treated as body text. +# +# For details, see "man header_checks". +# +#header_checks = regexp:/etc/postfix/header_checks + +# FAST ETRN SERVICE +# +# Postfix maintains per-destination logfiles with information about +# deferred mail, so that mail can be flushed quickly with the SMTP +# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". +# See the ETRN_README document for a detailed description. +# +# The fast_flush_domains parameter controls what destinations are +# eligible for this service. By default, they are all domains that +# this server is willing to relay mail to. +# +#fast_flush_domains = $relay_domains + +# SHOW SOFTWARE VERSION OR NOT +# +# The smtpd_banner parameter specifies the text that follows the 220 +# code in the SMTP server's greeting banner. Some people like to see +# the mail version advertised. By default, Postfix shows no version. +# +# You MUST specify $myhostname at the start of the text. That is an +# RFC requirement. Postfix itself does not care. +# +#smtpd_banner = $myhostname ESMTP $mail_name +#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) + +# PARALLEL DELIVERY TO THE SAME DESTINATION +# +# How many parallel deliveries to the same user or domain? With local +# delivery, it does not make sense to do massively parallel delivery +# to the same user, because mailbox updates must happen sequentially, +# and expensive pipelines in .forward files can cause disasters when +# too many are run at the same time. With SMTP deliveries, 10 +# simultaneous connections to the same domain could be sufficient to +# raise eyebrows. +# +# Each message delivery transport has its XXX_destination_concurrency_limit +# parameter. The default is $default_destination_concurrency_limit for +# most delivery transports. For the local delivery agent the default is 2. + +#local_destination_concurrency_limit = 2 +#default_destination_concurrency_limit = 20 + +# DEBUGGING CONTROL +# +# The debug_peer_level parameter specifies the increment in verbose +# logging level when an SMTP client or server host name or address +# matches a pattern in the debug_peer_list parameter. +# +debug_peer_level = 2 + +# The debug_peer_list parameter specifies an optional list of domain +# or network patterns, /file/name patterns or type:name tables. When +# an SMTP client or server host name or address matches a pattern, +# increase the verbose logging level by the amount specified in the +# debug_peer_level parameter. +# +#debug_peer_list = 127.0.0.1 +#debug_peer_list = some.domain + +# The debugger_command specifies the external command that is executed +# when a Postfix daemon program is run with the -D option. +# +# Use "command .. & sleep 5" so that the debugger can attach before +# the process marches on. If you use an X-based debugger, be sure to +# set up your XAUTHORITY environment variable before starting Postfix. +# +debugger_command = + PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin + ddd $daemon_directory/$process_name $process_id & sleep 5 + +# If you can't use X, use this to capture the call stack when a +# daemon crashes. The result is in a file in the configuration +# directory, and is named after the process name and the process ID. +# +# debugger_command = +# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; +# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 +# >$config_directory/$process_name.$process_id.log & sleep 5 +# +# Another possibility is to run gdb under a detached screen session. +# To attach to the screen session, su root and run "screen -r +# " where uniquely matches one of the detached +# sessions (from "screen -list"). +# +# debugger_command = +# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen +# -dmS $process_name gdb $daemon_directory/$process_name +# $process_id & sleep 1 + +# INSTALL-TIME CONFIGURATION INFORMATION +# +# The following parameters are used when installing a new Postfix version. +# +# sendmail_path: The full pathname of the Postfix sendmail command. +# This is the Sendmail-compatible mail posting interface. +# +sendmail_path = + +# newaliases_path: The full pathname of the Postfix newaliases command. +# This is the Sendmail-compatible command to build alias databases. +# +newaliases_path = + +# mailq_path: The full pathname of the Postfix mailq command. This +# is the Sendmail-compatible mail queue listing command. +# +mailq_path = + +# setgid_group: The group for mail submission and queue management +# commands. This must be a group name with a numerical group ID that +# is not shared with other accounts, not even with the Postfix account. +# +setgid_group = + +# html_directory: The location of the Postfix HTML documentation. +# +html_directory = + +# manpage_directory: The location of the Postfix on-line manual pages. +# +manpage_directory = + +# sample_directory: The location of the Postfix sample configuration files. +# This parameter is obsolete as of Postfix 2.1. +# +sample_directory = + +# readme_directory: The location of the Postfix README files. +# +readme_directory = + +# TLS CONFIGURATION +# +# Basic Postfix TLS configuration by default with self-signed certificate +# for inbound SMTP and also opportunistic TLS for outbound SMTP. + +# The full pathname of a file with the Postfix SMTP server RSA certificate +# in PEM format. Intermediate certificates should be included in general, +# the server certificate first, then the issuing CA(s) (bottom-up order). +# +smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem + +# The full pathname of a file with the Postfix SMTP server RSA private key +# in PEM format. The private key must be accessible without a pass-phrase, +# i.e. it must not be encrypted. +# +smtpd_tls_key_file = /etc/pki/tls/private/postfix.key + +# Announce STARTTLS support to remote SMTP clients, but do not require that +# clients use TLS encryption (opportunistic TLS inbound). +# +smtpd_tls_security_level = may + +# Directory with PEM format Certification Authority certificates that the +# Postfix SMTP client uses to verify a remote SMTP server certificate. +# +smtp_tls_CApath = /etc/pki/tls/certs + +# The full pathname of a file containing CA certificates of root CAs +# trusted to sign either remote SMTP server certificates or intermediate CA +# certificates. +# +smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt + +# Use TLS if this is supported by the remote SMTP server, otherwise use +# plaintext (opportunistic TLS outbound). +# +smtp_tls_security_level = may diff --git a/templates/Fedora/35/etc/postfix/master.cf b/templates/Fedora/35/etc/postfix/master.cf new file mode 100644 index 0000000..f33d9dd --- /dev/null +++ b/templates/Fedora/35/etc/postfix/master.cf @@ -0,0 +1,137 @@ +# +# Postfix master process configuration file. For details on the format +# of the file, see the master(5) manual page (command: "man 5 master" or +# on-line: http://www.postfix.org/master.5.html). +# +# Do not forget to execute "postfix reload" after editing this file. +# +# ========================================================================== +# service type private unpriv chroot wakeup maxproc command + args +# (yes) (yes) (no) (never) (100) +# ========================================================================== +smtp inet n - n - - smtpd +#smtp inet n - n - 1 postscreen +#smtpd pass - - n - - smtpd +#dnsblog unix - - n - 0 dnsblog +#tlsproxy unix - - n - 0 tlsproxy +# Choose one: enable submission for loopback clients only, or for any client. +#127.0.0.1:submission inet n - n - - smtpd +#submission inet n - n - - smtpd +# -o syslog_name=postfix/submission +# -o smtpd_tls_security_level=encrypt +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_tls_auth_only=yes +# -o smtpd_reject_unlisted_recipient=no +# -o smtpd_client_restrictions=$mua_client_restrictions +# -o smtpd_helo_restrictions=$mua_helo_restrictions +# -o smtpd_sender_restrictions=$mua_sender_restrictions +# -o smtpd_recipient_restrictions= +# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +# Choose one: enable smtps for loopback clients only, or for any client. +#127.0.0.1:smtps inet n - n - - smtpd +#smtps inet n - n - - smtpd +# -o syslog_name=postfix/smtps +# -o smtpd_tls_wrappermode=yes +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_reject_unlisted_recipient=no +# -o smtpd_client_restrictions=$mua_client_restrictions +# -o smtpd_helo_restrictions=$mua_helo_restrictions +# -o smtpd_sender_restrictions=$mua_sender_restrictions +# -o smtpd_recipient_restrictions= +# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +#628 inet n - n - - qmqpd +pickup unix n - n 60 1 pickup +cleanup unix n - n - 0 cleanup +qmgr unix n - n 300 1 qmgr +#qmgr unix n - n 300 1 oqmgr +tlsmgr unix - - n 1000? 1 tlsmgr +rewrite unix - - n - - trivial-rewrite +bounce unix - - n - 0 bounce +defer unix - - n - 0 bounce +trace unix - - n - 0 bounce +verify unix - - n - 1 verify +flush unix n - n 1000? 0 flush +proxymap unix - - n - - proxymap +proxywrite unix - - n - 1 proxymap +smtp unix - - n - - smtp +relay unix - - n - - smtp + -o syslog_name=postfix/$service_name +# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 +showq unix n - n - - showq +error unix - - n - - error +retry unix - - n - - error +discard unix - - n - - discard +local unix - n n - - local +virtual unix - n n - - virtual +lmtp unix - - n - - lmtp +anvil unix - - n - 1 anvil +scache unix - - n - 1 scache +postlog unix-dgram n - n - 1 postlogd +# +# ==================================================================== +# Interfaces to non-Postfix software. Be sure to examine the manual +# pages of the non-Postfix software to find out what options it wants. +# +# Many of the following services use the Postfix pipe(8) delivery +# agent. See the pipe(8) man page for information about ${recipient} +# and other message envelope options. +# ==================================================================== +# +# maildrop. See the Postfix MAILDROP_README file for details. +# Also specify in main.cf: maildrop_destination_recipient_limit=1 +# +#maildrop unix - n n - - pipe +# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} +# +# ==================================================================== +# +# Recent Cyrus versions can use the existing "lmtp" master.cf entry. +# +# Specify in cyrus.conf: +# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 +# +# Specify in main.cf one or more of the following: +# mailbox_transport = lmtp:inet:localhost +# virtual_transport = lmtp:inet:localhost +# +# ==================================================================== +# +# Cyrus 2.1.5 (Amos Gouaux) +# Also specify in main.cf: cyrus_destination_recipient_limit=1 +# +#cyrus unix - n n - - pipe +# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} +# +# ==================================================================== +# +# Old example of delivery via Cyrus. +# +#old-cyrus unix - n n - - pipe +# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} +# +# ==================================================================== +# +# See the Postfix UUCP_README file for configuration details. +# +#uucp unix - n n - - pipe +# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) +# +# ==================================================================== +# +# Other external delivery methods. +# +#ifmail unix - n n - - pipe +# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) +# +#bsmtp unix - n n - - pipe +# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient +# +#scalemail-backend unix - n n - 2 pipe +# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store +# ${nexthop} ${user} ${extension} +# +#mailman unix - n n - - pipe +# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py +# ${nexthop} ${user} diff --git a/templates/Fedora/35/etc/postfix/master.cf.proto b/templates/Fedora/35/etc/postfix/master.cf.proto new file mode 100644 index 0000000..f33d9dd --- /dev/null +++ b/templates/Fedora/35/etc/postfix/master.cf.proto @@ -0,0 +1,137 @@ +# +# Postfix master process configuration file. For details on the format +# of the file, see the master(5) manual page (command: "man 5 master" or +# on-line: http://www.postfix.org/master.5.html). +# +# Do not forget to execute "postfix reload" after editing this file. +# +# ========================================================================== +# service type private unpriv chroot wakeup maxproc command + args +# (yes) (yes) (no) (never) (100) +# ========================================================================== +smtp inet n - n - - smtpd +#smtp inet n - n - 1 postscreen +#smtpd pass - - n - - smtpd +#dnsblog unix - - n - 0 dnsblog +#tlsproxy unix - - n - 0 tlsproxy +# Choose one: enable submission for loopback clients only, or for any client. +#127.0.0.1:submission inet n - n - - smtpd +#submission inet n - n - - smtpd +# -o syslog_name=postfix/submission +# -o smtpd_tls_security_level=encrypt +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_tls_auth_only=yes +# -o smtpd_reject_unlisted_recipient=no +# -o smtpd_client_restrictions=$mua_client_restrictions +# -o smtpd_helo_restrictions=$mua_helo_restrictions +# -o smtpd_sender_restrictions=$mua_sender_restrictions +# -o smtpd_recipient_restrictions= +# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +# Choose one: enable smtps for loopback clients only, or for any client. +#127.0.0.1:smtps inet n - n - - smtpd +#smtps inet n - n - - smtpd +# -o syslog_name=postfix/smtps +# -o smtpd_tls_wrappermode=yes +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_reject_unlisted_recipient=no +# -o smtpd_client_restrictions=$mua_client_restrictions +# -o smtpd_helo_restrictions=$mua_helo_restrictions +# -o smtpd_sender_restrictions=$mua_sender_restrictions +# -o smtpd_recipient_restrictions= +# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +#628 inet n - n - - qmqpd +pickup unix n - n 60 1 pickup +cleanup unix n - n - 0 cleanup +qmgr unix n - n 300 1 qmgr +#qmgr unix n - n 300 1 oqmgr +tlsmgr unix - - n 1000? 1 tlsmgr +rewrite unix - - n - - trivial-rewrite +bounce unix - - n - 0 bounce +defer unix - - n - 0 bounce +trace unix - - n - 0 bounce +verify unix - - n - 1 verify +flush unix n - n 1000? 0 flush +proxymap unix - - n - - proxymap +proxywrite unix - - n - 1 proxymap +smtp unix - - n - - smtp +relay unix - - n - - smtp + -o syslog_name=postfix/$service_name +# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 +showq unix n - n - - showq +error unix - - n - - error +retry unix - - n - - error +discard unix - - n - - discard +local unix - n n - - local +virtual unix - n n - - virtual +lmtp unix - - n - - lmtp +anvil unix - - n - 1 anvil +scache unix - - n - 1 scache +postlog unix-dgram n - n - 1 postlogd +# +# ==================================================================== +# Interfaces to non-Postfix software. Be sure to examine the manual +# pages of the non-Postfix software to find out what options it wants. +# +# Many of the following services use the Postfix pipe(8) delivery +# agent. See the pipe(8) man page for information about ${recipient} +# and other message envelope options. +# ==================================================================== +# +# maildrop. See the Postfix MAILDROP_README file for details. +# Also specify in main.cf: maildrop_destination_recipient_limit=1 +# +#maildrop unix - n n - - pipe +# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} +# +# ==================================================================== +# +# Recent Cyrus versions can use the existing "lmtp" master.cf entry. +# +# Specify in cyrus.conf: +# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 +# +# Specify in main.cf one or more of the following: +# mailbox_transport = lmtp:inet:localhost +# virtual_transport = lmtp:inet:localhost +# +# ==================================================================== +# +# Cyrus 2.1.5 (Amos Gouaux) +# Also specify in main.cf: cyrus_destination_recipient_limit=1 +# +#cyrus unix - n n - - pipe +# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} +# +# ==================================================================== +# +# Old example of delivery via Cyrus. +# +#old-cyrus unix - n n - - pipe +# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} +# +# ==================================================================== +# +# See the Postfix UUCP_README file for configuration details. +# +#uucp unix - n n - - pipe +# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) +# +# ==================================================================== +# +# Other external delivery methods. +# +#ifmail unix - n n - - pipe +# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) +# +#bsmtp unix - n n - - pipe +# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient +# +#scalemail-backend unix - n n - 2 pipe +# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store +# ${nexthop} ${user} ${extension} +# +#mailman unix - n n - - pipe +# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py +# ${nexthop} ${user} diff --git a/templates/Fedora/35/etc/postfix/postfix-files b/templates/Fedora/35/etc/postfix/postfix-files new file mode 100644 index 0000000..1eda0a3 --- /dev/null +++ b/templates/Fedora/35/etc/postfix/postfix-files @@ -0,0 +1,432 @@ +# +# Do not edit this file. +# +# This file controls the postfix-install script for installation of +# Postfix programs, configuration files and documentation, as well +# as the post-install script for setting permissions and for updating +# Postfix configuration files. See the respective manual pages within +# the script files. +# +# Do not list $command_directory or $shlib_directory in this file, +# or it will be blown away by a future Postfix uninstallation +# procedure. You would not want to lose all files in /usr/sbin or +# /usr/local/lib. +# +# Each record in this file describes one file or directory. +# Fields are separated by ":". Specify a null field as "-". +# Missing fields or separators at the end are OK. +# +# File format: +# name:type:owner:group:permission:flags +# No group means don't change group ownership. +# +# File types: +# d=directory +# f=regular file +# h=hard link (*) +# l=symbolic link (*) +# +# (*) With hard links and symbolic links, the owner field becomes the +# source pathname, while the group and permissions are ignored. +# +# File flags: +# No flag means the flag is not active. +# p=preserve existing file, do not replace (postfix-install). +# u=update owner/group/mode (post-install upgrade-permissions). +# c=create missing directory (post-install create-missing). +# r=apply owner/group recursively (post-install set/upgrade-permissions). +# o=obsolete, no longer part of Postfix +# 1=optional for non-default instance (config_dir != built-in default). +# +# Note: the "u" flag is for upgrading the permissions of existing files +# or directories after changes in Postfix architecture. For robustness +# it is a good idea to "u" all the files that have special ownership or +# permissions, so that running "make install" fixes any glitches. +# +# Note: order matters. Update shared libraries and database plugins +# before daemon/command-line programs. +$config_directory:d:root:-:755:u +$data_directory:d:$mail_owner:-:700:uc +$daemon_directory:d:root:-:755:u +$queue_directory:d:root:-:755:uc +$sample_directory:d:root:-:755:o +$readme_directory:d:root:-:755 +$html_directory:d:root:-:755 +$queue_directory/active:d:$mail_owner:-:700:ucr +$queue_directory/bounce:d:$mail_owner:-:700:ucr +$queue_directory/corrupt:d:$mail_owner:-:700:ucr +$queue_directory/defer:d:$mail_owner:-:700:ucr +$queue_directory/deferred:d:$mail_owner:-:700:ucr +$queue_directory/flush:d:$mail_owner:-:700:ucr +$queue_directory/hold:d:$mail_owner:-:700:ucr +$queue_directory/incoming:d:$mail_owner:-:700:ucr +$queue_directory/private:d:$mail_owner:-:700:uc +$queue_directory/maildrop:d:$mail_owner:$setgid_group:730:uc +$queue_directory/public:d:$mail_owner:$setgid_group:710:uc +$queue_directory/pid:d:root:-:755:uc +$queue_directory/saved:d:$mail_owner:-:700:ucr +$queue_directory/trace:d:$mail_owner:-:700:ucr +# Update shared libraries and plugins before daemon or command-line programs. +$shlib_directory/libpostfix-util.so:f:root:-:755 +$shlib_directory/libpostfix-global.so:f:root:-:755 +$shlib_directory/libpostfix-dns.so:f:root:-:755 +$shlib_directory/libpostfix-tls.so:f:root:-:755 +$shlib_directory/libpostfix-master.so:f:root:-:755 +$meta_directory/dynamicmaps.cf.d:d:root:-:755 +$meta_directory/dynamicmaps.cf:f:root:-:644 +$meta_directory/main.cf.proto:f:root:-:644 +$meta_directory/master.cf.proto:f:root:-:644 +$meta_directory/postfix-files.d:d:root:-:755 +$meta_directory/postfix-files:f:root:-:644 +$daemon_directory/anvil:f:root:-:755 +$daemon_directory/bounce:f:root:-:755 +$daemon_directory/cleanup:f:root:-:755 +$daemon_directory/discard:f:root:-:755 +$daemon_directory/dnsblog:f:root:-:755 +$daemon_directory/error:f:root:-:755 +$daemon_directory/flush:f:root:-:755 +$daemon_directory/local:f:root:-:755 +$daemon_directory/main.cf:f:root:-:644:o +$daemon_directory/master.cf:f:root:-:644:o +$daemon_directory/master:f:root:-:755 +$daemon_directory/oqmgr:f:root:-:755 +$daemon_directory/pickup:f:root:-:755 +$daemon_directory/pipe:f:root:-:755 +$daemon_directory/post-install:f:root:-:755 +# In case meta_directory == daemon_directory. +#$daemon_directory/postfix-files:f:root:-:644:o +#$daemon_directory/postfix-files.d:d:root:-:755:o +$daemon_directory/postfix-script:f:root:-:755 +$daemon_directory/postfix-tls-script:f:root:-:755 +$daemon_directory/postfix-wrapper:f:root:-:755 +$daemon_directory/postmulti-script:f:root:-:755 +$daemon_directory/postlogd:f:root:-:755 +$daemon_directory/postscreen:f:root:-:755 +$daemon_directory/proxymap:f:root:-:755 +$daemon_directory/qmgr:f:root:-:755 +$daemon_directory/qmqpd:f:root:-:755 +$daemon_directory/scache:f:root:-:755 +$daemon_directory/showq:f:root:-:755 +$daemon_directory/smtp:f:root:-:755 +$daemon_directory/smtpd:f:root:-:755 +$daemon_directory/spawn:f:root:-:755 +$daemon_directory/tlsproxy:f:root:-:755 +$daemon_directory/tlsmgr:f:root:-:755 +$daemon_directory/trivial-rewrite:f:root:-:755 +$daemon_directory/verify:f:root:-:755 +$daemon_directory/virtual:f:root:-:755 +$daemon_directory/nqmgr:h:$daemon_directory/qmgr +$daemon_directory/lmtp:h:$daemon_directory/smtp +$command_directory/postalias:f:root:-:755 +$command_directory/postcat:f:root:-:755 +$command_directory/postconf:f:root:-:755 +$command_directory/postfix:f:root:-:755 +$command_directory/postkick:f:root:-:755 +$command_directory/postlock:f:root:-:755 +$command_directory/postlog:f:root:-:755 +$command_directory/postmap:f:root:-:755 +$command_directory/postmulti:f:root:-:755 +$command_directory/postsuper:f:root:-:755 +$command_directory/postdrop:f:root:$setgid_group:2755:u +$command_directory/postqueue:f:root:$setgid_group:2755:u +$sendmail_path:f:root:-:755 +$newaliases_path:l:$sendmail_path +$mailq_path:l:$sendmail_path +$config_directory/access:f:root:-:644:p1 +$config_directory/canonical:f:root:-:644:p1 +$config_directory/cidr_table:f:root:-:644:o +$config_directory/generic:f:root:-:644:p1 +$config_directory/generics:f:root:-:644:o +$config_directory/header_checks:f:root:-:644:p1 +$config_directory/install.cf:f:root:-:644:o +$config_directory/main.cf:f:root:-:644:p +$config_directory/master.cf:f:root:-:644:p +$config_directory/pcre_table:f:root:-:644:o +$config_directory/regexp_table:f:root:-:644:o +$config_directory/relocated:f:root:-:644:p1 +$config_directory/tcp_table:f:root:-:644:o +$config_directory/transport:f:root:-:644:p1 +$config_directory/virtual:f:root:-:644:p1 +$config_directory/postfix-script:f:root:-:755:o +$config_directory/postfix-script-sgid:f:root:-:755:o +$config_directory/postfix-script-nosgid:f:root:-:755:o +$config_directory/post-install:f:root:-:755:o +$manpage_directory/man1/mailq.postfix.1.gz:f:root:-:644 +$manpage_directory/man1/newaliases.postfix.1.gz:f:root:-:644 +$manpage_directory/man1/postalias.1.gz:f:root:-:644 +$manpage_directory/man1/postcat.1.gz:f:root:-:644 +$manpage_directory/man1/postconf.1.gz:f:root:-:644 +$manpage_directory/man1/postdrop.1.gz:f:root:-:644 +$manpage_directory/man1/postfix.1.gz:f:root:-:644 +$manpage_directory/man1/postfix-tls.1.gz:f:root:-:644 +$manpage_directory/man1/postkick.1.gz:f:root:-:644 +$manpage_directory/man1/postlock.1.gz:f:root:-:644 +$manpage_directory/man1/postlog.1.gz:f:root:-:644 +$manpage_directory/man1/postmap.1.gz:f:root:-:644 +$manpage_directory/man1/postmulti.1.gz:f:root:-:644 +$manpage_directory/man1/postqueue.1.gz:f:root:-:644 +$manpage_directory/man1/postsuper.1.gz:f:root:-:644 +$manpage_directory/man1/sendmail.postfix.1.gz:f:root:-:644 +$manpage_directory/man5/access.5.gz:f:root:-:644 +$manpage_directory/man5/aliases.postfix.5.gz:f:root:-:644 +$manpage_directory/man5/body_checks.5.gz:f:root:-:644 +$manpage_directory/man5/bounce.5.gz:f:root:-:644 +$manpage_directory/man5/canonical.5.gz:f:root:-:644 +$manpage_directory/man5/cidr_table.5.gz:f:root:-:644 +$manpage_directory/man5/generics.5.gz:f:root:-:644:o +$manpage_directory/man5/generic.5.gz:f:root:-:644 +$manpage_directory/man5/header_checks.5.gz:f:root:-:644 +$manpage_directory/man5/master.5.gz:f:root:-:644 +$manpage_directory/man5/memcache_table.5.gz:f:root:-:644 +$manpage_directory/man5/socketmap_table.5.gz:f:root:-:644 +$manpage_directory/man5/nisplus_table.5.gz:f:root:-:644 +$manpage_directory/man5/postconf.5.gz:f:root:-:644 +$manpage_directory/man5/postfix-wrapper.5.gz:f:root:-:644 +$manpage_directory/man5/regexp_table.5.gz:f:root:-:644 +$manpage_directory/man5/relocated.5.gz:f:root:-:644 +$manpage_directory/man5/tcp_table.5.gz:f:root:-:644 +$manpage_directory/man5/transport.5.gz:f:root:-:644 +$manpage_directory/man5/virtual.5.gz:f:root:-:644 +$manpage_directory/man8/bounce.8.gz:f:root:-:644 +$manpage_directory/man8/cleanup.8.gz:f:root:-:644 +$manpage_directory/man8/anvil.8.gz:f:root:-:644 +$manpage_directory/man8/defer.8.gz:f:root:-:644 +$manpage_directory/man8/discard.8.gz:f:root:-:644 +$manpage_directory/man8/dnsblog.8.gz:f:root:-:644 +$manpage_directory/man8/error.8.gz:f:root:-:644 +$manpage_directory/man8/flush.8.gz:f:root:-:644 +$manpage_directory/man8/lmtp.8.gz:f:root:-:644 +$manpage_directory/man8/local.8.gz:f:root:-:644 +$manpage_directory/man8/master.8.gz:f:root:-:644 +$manpage_directory/man8/nqmgr.8.gz:f:root:-:644:o +$manpage_directory/man8/oqmgr.8.gz:f:root:-:644: +$manpage_directory/man8/pickup.8.gz:f:root:-:644 +$manpage_directory/man8/pipe.8.gz:f:root:-:644 +$manpage_directory/man8/postlogd.8.gz:f:root:-:644 +$manpage_directory/man8/postscreen.8.gz:f:root:-:644 +$manpage_directory/man8/proxymap.8.gz:f:root:-:644 +$manpage_directory/man8/qmgr.8.gz:f:root:-:644 +$manpage_directory/man8/qmqpd.8.gz:f:root:-:644 +$manpage_directory/man8/scache.8.gz:f:root:-:644 +$manpage_directory/man8/showq.8.gz:f:root:-:644 +$manpage_directory/man8/smtp.8.gz:f:root:-:644 +$manpage_directory/man8/smtpd.postfix.8.gz:f:root:-:644 +$manpage_directory/man8/spawn.8.gz:f:root:-:644 +$manpage_directory/man8/tlsproxy.8.gz:f:root:-:644 +$manpage_directory/man8/tlsmgr.8.gz:f:root:-:644 +$manpage_directory/man8/trace.8.gz:f:root:-:644 +$manpage_directory/man8/trivial-rewrite.8.gz:f:root:-:644 +$manpage_directory/man8/verify.8.gz:f:root:-:644 +$manpage_directory/man8/virtual.8.gz:f:root:-:644 +$sample_directory/sample-aliases.cf:f:root:-:644:o +$sample_directory/sample-auth.cf:f:root:-:644:o +$sample_directory/sample-canonical.cf:f:root:-:644:o +$sample_directory/sample-compatibility.cf:f:root:-:644:o +$sample_directory/sample-debug.cf:f:root:-:644:o +$sample_directory/sample-filter.cf:f:root:-:644:o +$sample_directory/sample-flush.cf:f:root:-:644:o +$sample_directory/sample-ipv6.cf:f:root:-:644:o +$sample_directory/sample-ldap.cf:f:root:-:644:o +$sample_directory/sample-lmtp.cf:f:root:-:644:o +$sample_directory/sample-local.cf:f:root:-:644:o +$sample_directory/sample-mime.cf:f:root:-:644:o +$sample_directory/sample-misc.cf:f:root:-:644:o +$sample_directory/sample-pcre-access.cf:f:root:-:644:o +$sample_directory/sample-pcre-body.cf:f:root:-:644:o +$sample_directory/sample-pcre-header.cf:f:root:-:644:o +$sample_directory/sample-pgsql-aliases.cf:f:root:-:644:o +$sample_directory/sample-qmqpd.cf:f:root:-:644:o +$sample_directory/sample-rate.cf:f:root:-:644:o +$sample_directory/sample-regexp-access.cf:f:root:-:644:o +$sample_directory/sample-regexp-body.cf:f:root:-:644:o +$sample_directory/sample-regexp-header.cf:f:root:-:644:o +$sample_directory/sample-relocated.cf:f:root:-:644:o +$sample_directory/sample-resource.cf:f:root:-:644:o +$sample_directory/sample-rewrite.cf:f:root:-:644:o +$sample_directory/sample-scheduler.cf:f:root:-:644:o +$sample_directory/sample-smtp.cf:f:root:-:644:o +$sample_directory/sample-smtpd.cf:f:root:-:644:o +$sample_directory/sample-tls.cf:f:root:-:644:o +$sample_directory/sample-transport.cf:f:root:-:644:o +$sample_directory/sample-verify.cf:f:root:-:644:o +$sample_directory/sample-virtual.cf:f:root:-:644:o +$readme_directory/AAAREADME:f:root:-:644 +$readme_directory/ADDRESS_CLASS_README:f:root:-:644 +$readme_directory/ADDRESS_REWRITING_README:f:root:-:644 +$readme_directory/ADDRESS_VERIFICATION_README:f:root:-:644 +$readme_directory/BACKSCATTER_README:f:root:-:644 +$readme_directory/BASIC_CONFIGURATION_README:f:root:-:644 +$readme_directory/BUILTIN_FILTER_README:f:root:-:644 +$readme_directory/COMPATIBILITY_README:f:root:-:644 +$readme_directory/CONNECTION_CACHE_README:f:root:-:644 +$readme_directory/CONTENT_INSPECTION_README:f:root:-:644 +$readme_directory/DATABASE_README:f:root:-:644 +$readme_directory/DB_README:f:root:-:644 +$readme_directory/DEBUG_README:f:root:-:644 +$readme_directory/DSN_README:f:root:-:644 +$readme_directory/ETRN_README:f:root:-:644 +$readme_directory/FILTER_README:f:root:-:644 +$readme_directory/FORWARD_SECRECY_README:f:root:-:644 +$readme_directory/HOSTING_README:f:root:-:644:o +$readme_directory/INSTALL:f:root:-:644 +$readme_directory/IPV6_README:f:root:-:644 +$readme_directory/LINUX_README:f:root:-:644 +$readme_directory/LOCAL_RECIPIENT_README:f:root:-:644 +$readme_directory/MACOSX_README:f:root:-:644:o +$readme_directory/MAILDROP_README:f:root:-:644 +$readme_directory/MEMCACHE_README:f:root:-:644 +$readme_directory/MILTER_README:f:root:-:644 +$readme_directory/MULTI_INSTANCE_README:f:root:-:644 +$readme_directory/NFS_README:f:root:-:644 +$readme_directory/OVERVIEW:f:root:-:644 +$readme_directory/PACKAGE_README:f:root:-:644 +$readme_directory/POSTSCREEN_README:f:root:-:644 +$readme_directory/QMQP_README:f:root:-:644:o +$readme_directory/QSHAPE_README:f:root:-:644 +$readme_directory/RELEASE_NOTES:f:root:-:644 +$readme_directory/RESTRICTION_CLASS_README:f:root:-:644 +$readme_directory/SASL_README:f:root:-:644 +$readme_directory/SCHEDULER_README:f:root:-:644 +$readme_directory/SMTPD_ACCESS_README:f:root:-:644 +$readme_directory/SMTPD_POLICY_README:f:root:-:644 +$readme_directory/SMTPD_PROXY_README:f:root:-:644 +$readme_directory/SOHO_README:f:root:-:644 +$readme_directory/STANDARD_CONFIGURATION_README:f:root:-:644 +$readme_directory/STRESS_README:f:root:-:644 +$readme_directory/TLS_LEGACY_README:f:root:-:644 +$readme_directory/TLS_README:f:root:-:644 +$readme_directory/TUNING_README:f:root:-:644 +$readme_directory/ULTRIX_README:f:root:-:644 +$readme_directory/UUCP_README:f:root:-:644 +$readme_directory/VERP_README:f:root:-:644 +$readme_directory/VIRTUAL_README:f:root:-:644 +$readme_directory/XCLIENT_README:f:root:-:644 +$readme_directory/XFORWARD_README:f:root:-:644 +$html_directory/ADDRESS_CLASS_README.html:f:root:-:644 +$html_directory/ADDRESS_REWRITING_README.html:f:root:-:644 +$html_directory/ADDRESS_VERIFICATION_README.html:f:root:-:644 +$html_directory/BACKSCATTER_README.html:f:root:-:644 +$html_directory/BASIC_CONFIGURATION_README.html:f:root:-:644 +$html_directory/BUILTIN_FILTER_README.html:f:root:-:644 +$html_directory/CDB_README.html:f:root:-:644 +$html_directory/COMPATIBILITY_README.html:f:root:-:644 +$html_directory/CONNECTION_CACHE_README.html:f:root:-:644 +$html_directory/CONTENT_INSPECTION_README.html:f:root:-:644 +$html_directory/CYRUS_README.html:f:root:-:644:o +$html_directory/DATABASE_README.html:f:root:-:644 +$html_directory/DB_README.html:f:root:-:644 +$html_directory/DEBUG_README.html:f:root:-:644 +$html_directory/DSN_README.html:f:root:-:644 +$html_directory/ETRN_README.html:f:root:-:644 +$html_directory/FILTER_README.html:f:root:-:644 +$html_directory/FORWARD_SECRECY_README.html:f:root:-:644 +$html_directory/INSTALL.html:f:root:-:644 +$html_directory/IPV6_README.html:f:root:-:644 +$html_directory/LDAP_README.html:f:root:-:644 +$html_directory/LINUX_README.html:f:root:-:644 +$html_directory/LMDB_README.html:f:root:-:644 +$html_directory/LOCAL_RECIPIENT_README.html:f:root:-:644 +$html_directory/MAILDROP_README.html:f:root:-:644 +$html_directory/MILTER_README.html:f:root:-:644 +$html_directory/MULTI_INSTANCE_README.html:f:root:-:644 +$html_directory/MYSQL_README.html:f:root:-:644 +$html_directory/SQLITE_README.html:f:root:-:644 +$html_directory/NFS_README.html:f:root:-:644 +$html_directory/OVERVIEW.html:f:root:-:644 +$html_directory/PACKAGE_README.html:f:root:-:644 +$html_directory/PCRE_README.html:f:root:-:644 +$html_directory/PGSQL_README.html:f:root:-:644 +$html_directory/POSTSCREEN_README.html:f:root:-:644 +$html_directory/QMQP_README.html:f:root:-:644:o +$html_directory/QSHAPE_README.html:f:root:-:644 +$html_directory/RESTRICTION_CLASS_README.html:f:root:-:644 +$html_directory/SASL_README.html:f:root:-:644 +$html_directory/SCHEDULER_README.html:f:root:-:644 +$html_directory/SMTPD_ACCESS_README.html:f:root:-:644 +$html_directory/SMTPD_POLICY_README.html:f:root:-:644 +$html_directory/SMTPD_PROXY_README.html:f:root:-:644 +$html_directory/SOHO_README.html:f:root:-:644 +$html_directory/STANDARD_CONFIGURATION_README.html:f:root:-:644 +$html_directory/STRESS_README.html:f:root:-:644 +$html_directory/TLS_LEGACY_README.html:f:root:-:644 +$html_directory/TLS_README.html:f:root:-:644 +$html_directory/TUNING_README.html:f:root:-:644 +$html_directory/ULTRIX_README.html:f:root:-:644:o +$html_directory/UUCP_README.html:f:root:-:644 +$html_directory/VERP_README.html:f:root:-:644 +$html_directory/VIRTUAL_README.html:f:root:-:644 +$html_directory/XCLIENT_README.html:f:root:-:644 +$html_directory/XFORWARD_README.html:f:root:-:644 +$html_directory/access.5.html:f:root:-:644 +$html_directory/aliases.5.html:f:root:-:644 +$html_directory/anvil.8.html:f:root:-:644 +$html_directory/bounce.8.html:f:root:-:644 +$html_directory/canonical.5.html:f:root:-:644 +$html_directory/cidr_table.5.html:f:root:-:644 +$html_directory/cleanup.8.html:f:root:-:644 +$html_directory/defer.8.html:h:$html_directory/bounce.8.html:-:644 +$html_directory/discard.8.html:f:root:-:644 +$html_directory/dnsblog.8.html:f:root:-:644 +$html_directory/error.8.html:f:root:-:644 +$html_directory/flush.8.html:f:root:-:644 +$html_directory/generics.5.html:f:root:-:644:o +$html_directory/generic.5.html:f:root:-:644 +$html_directory/header_checks.5.html:f:root:-:644 +$html_directory/index.html:f:root:-:644 +$html_directory/ldap_table.5.html:f:root:-:644 +$html_directory/lmtp.8.html:f:root:-:644 +$html_directory/local.8.html:f:root:-:644 +$html_directory/mailq.1.html:f:root:-:644 +$html_directory/master.5.html:f:root:-:644 +$html_directory/master.8.html:f:root:-:644 +$html_directory/memcache_table.5.html:f:root:-:644 +$html_directory/mysql_table.5.html:f:root:-:644 +$html_directory/sqlite_table.5.html:f:root:-:644 +$html_directory/nisplus_table.5.html:f:root:-:644 +$html_directory/newaliases.1.html:h:$html_directory/mailq.1.html:-:644 +$html_directory/oqmgr.8.html:f:root:-:644 +$html_directory/pcre_table.5.html:f:root:-:644 +$html_directory/pgsql_table.5.html:f:root:-:644 +$html_directory/pickup.8.html:f:root:-:644 +$html_directory/pipe.8.html:f:root:-:644 +$html_directory/postalias.1.html:f:root:-:644 +$html_directory/postcat.1.html:f:root:-:644 +$html_directory/postconf.1.html:f:root:-:644 +$html_directory/postconf.5.html:f:root:-:644 +$html_directory/postdrop.1.html:f:root:-:644 +$html_directory/postfix-logo.jpg:f:root:-:644 +$html_directory/postfix-manuals.html:f:root:-:644 +$html_directory/postfix-wrapper.5.html:f:root:-:644 +$html_directory/postfix.1.html:f:root:-:644 +$html_directory/postkick.1.html:f:root:-:644 +$html_directory/postlock.1.html:f:root:-:644 +$html_directory/postlog.1.html:f:root:-:644 +$html_directory/postmap.1.html:f:root:-:644 +$html_directory/postmulti.1.html:f:root:-:644 +$html_directory/postlogd.8.html:f:root:-:644 +$html_directory/postqueue.1.html:f:root:-:644 +$html_directory/postscreen.8.html:f:root:-:644 +$html_directory/postsuper.1.html:f:root:-:644 +$html_directory/qshape.1.html:f:root:-:644 +$html_directory/proxymap.8.html:f:root:-:644 +$html_directory/qmgr.8.html:f:root:-:644 +$html_directory/qmqp-sink.1.html:f:root:-:644 +$html_directory/qmqp-source.1.html:f:root:-:644 +$html_directory/qmqpd.8.html:f:root:-:644 +$html_directory/regexp_table.5.html:f:root:-:644 +$html_directory/relocated.5.html:f:root:-:644 +$html_directory/sendmail.1.html:h:$html_directory/mailq.1.html:-:644 +$html_directory/showq.8.html:f:root:-:644 +$html_directory/smtp-sink.1.html:f:root:-:644 +$html_directory/smtp-source.1.html:f:root:-:644 +$html_directory/smtp.8.html:h:$html_directory/lmtp.8.html:-:644 +$html_directory/smtpd.8.html:f:root:-:644 +$html_directory/spawn.8.html:f:root:-:644 +$html_directory/tlsproxy.8.html:f:root:-:644 +$html_directory/tcp_table.5.html:f:root:-:644 +$html_directory/trace.8.html:h:$html_directory/bounce.8.html:-:644 +$html_directory/transport.5.html:f:root:-:644 +$html_directory/trivial-rewrite.8.html:f:root:-:644 +$html_directory/verify.8.html:f:root:-:644 +$html_directory/virtual.5.html:f:root:-:644 +$html_directory/virtual.8.html:f:root:-:644 diff --git a/templates/Fedora/35/etc/postfix/postfix-files.d/ldap b/templates/Fedora/35/etc/postfix/postfix-files.d/ldap new file mode 100644 index 0000000..684b05d --- /dev/null +++ b/templates/Fedora/35/etc/postfix/postfix-files.d/ldap @@ -0,0 +1,3 @@ +$shlib_directory/postfix-ldap.so:f:root:-:755 +$manpage_directory/man5/ldap_table.5.gz:f:root:-:644 +$readme_directory/LDAP_README:f:root:-:644 diff --git a/templates/Fedora/35/etc/postfix/postfix-files.d/mysql b/templates/Fedora/35/etc/postfix/postfix-files.d/mysql new file mode 100644 index 0000000..8e41d61 --- /dev/null +++ b/templates/Fedora/35/etc/postfix/postfix-files.d/mysql @@ -0,0 +1,3 @@ +$shlib_directory/postfix-mysql.so:f:root:-:755 +$manpage_directory/man5/mysql_table.5.gz:f:root:-:644 +$readme_directory/MYSQL_README:f:root:-:644 diff --git a/templates/Fedora/35/etc/postfix/postfix-files.d/pcre b/templates/Fedora/35/etc/postfix/postfix-files.d/pcre new file mode 100644 index 0000000..a34fd73 --- /dev/null +++ b/templates/Fedora/35/etc/postfix/postfix-files.d/pcre @@ -0,0 +1,3 @@ +$shlib_directory/postfix-pcre.so:f:root:-:755 +$manpage_directory/man5/pcre_table.5.gz:f:root:-:644 +$readme_directory/PCRE_README:f:root:-:644 diff --git a/templates/Fedora/35/etc/postfix/relocated b/templates/Fedora/35/etc/postfix/relocated new file mode 100644 index 0000000..e50edfd --- /dev/null +++ b/templates/Fedora/35/etc/postfix/relocated @@ -0,0 +1,176 @@ +# RELOCATED(5) RELOCATED(5) +# +# NAME +# relocated - Postfix relocated table format +# +# SYNOPSIS +# postmap /etc/postfix/relocated +# +# DESCRIPTION +# The optional relocated(5) table provides the information +# that is used in "user has moved to new_location" bounce +# messages. +# +# Normally, the relocated(5) table is specified as a text +# file that serves as input to the postmap(1) command. The +# result, an indexed file in dbm or db format, is used for +# fast searching by the mail system. Execute the command +# "postmap /etc/postfix/relocated" to rebuild an indexed +# file after changing the corresponding relocated table. +# +# When the table is provided via other means such as NIS, +# LDAP or SQL, the same lookups are done as for ordinary +# indexed files. +# +# Alternatively, the table can be provided as a regu- +# lar-expression map where patterns are given as regular +# expressions, or lookups can be directed to TCP-based +# server. In those case, the lookups are done in a slightly +# different way as described below under "REGULAR EXPRESSION +# TABLES" or "TCP-BASED TABLES". +# +# Table lookups are case insensitive. +# +# CASE FOLDING +# The search string is folded to lowercase before database +# lookup. As of Postfix 2.3, the search string is not case +# folded with database types such as regexp: or pcre: whose +# lookup fields can match both upper and lower case. +# +# TABLE FORMAT +# The input format for the postmap(1) command is as follows: +# +# o An entry has one of the following form: +# +# pattern new_location +# +# Where new_location specifies contact information +# such as an email address, or perhaps a street +# address or telephone number. +# +# o Empty lines and whitespace-only lines are ignored, +# as are lines whose first non-whitespace character +# is a `#'. +# +# o A logical line starts with non-whitespace text. A +# line that starts with whitespace continues a logi- +# cal line. +# +# TABLE SEARCH ORDER +# With lookups from indexed files such as DB or DBM, or from +# networked tables such as NIS, LDAP or SQL, patterns are +# tried in the order as listed below: +# +# user@domain +# Matches user@domain. This form has precedence over +# all other forms. +# +# user Matches user@site when site is $myorigin, when site +# is listed in $mydestination, or when site is listed +# in $inet_interfaces or $proxy_interfaces. +# +# @domain +# Matches other addresses in domain. This form has +# the lowest precedence. +# +# ADDRESS EXTENSION +# When a mail address localpart contains the optional recip- +# ient delimiter (e.g., user+foo@domain), the lookup order +# becomes: user+foo@domain, user@domain, user+foo, user, and +# @domain. +# +# REGULAR EXPRESSION TABLES +# This section describes how the table lookups change when +# the table is given in the form of regular expressions or +# when lookups are directed to a TCP-based server. For a +# description of regular expression lookup table syntax, see +# regexp_table(5) or pcre_table(5). For a description of the +# TCP client/server table lookup protocol, see tcp_table(5). +# This feature is not available up to and including Postfix +# version 2.4. +# +# Each pattern is a regular expression that is applied to +# the entire address being looked up. Thus, user@domain mail +# addresses are not broken up into their user and @domain +# constituent parts, nor is user+foo broken up into user and +# foo. +# +# Patterns are applied in the order as specified in the ta- +# ble, until a pattern is found that matches the search +# string. +# +# Results are the same as with indexed file lookups, with +# the additional feature that parenthesized substrings from +# the pattern can be interpolated as $1, $2 and so on. +# +# TCP-BASED TABLES +# This section describes how the table lookups change when +# lookups are directed to a TCP-based server. For a descrip- +# tion of the TCP client/server lookup protocol, see tcp_ta- +# ble(5). This feature is not available up to and including +# Postfix version 2.4. +# +# Each lookup operation uses the entire address once. Thus, +# user@domain mail addresses are not broken up into their +# user and @domain constituent parts, nor is user+foo broken +# up into user and foo. +# +# Results are the same as with indexed file lookups. +# +# BUGS +# The table format does not understand quoting conventions. +# +# CONFIGURATION PARAMETERS +# The following main.cf parameters are especially relevant. +# The text below provides only a parameter summary. See +# postconf(5) for more details including examples. +# +# relocated_maps +# List of lookup tables for relocated users or sites. +# +# Other parameters of interest: +# +# inet_interfaces +# The network interface addresses that this system +# receives mail on. You need to stop and start Post- +# fix when this parameter changes. +# +# mydestination +# List of domains that this mail system considers +# local. +# +# myorigin +# The domain that is appended to locally-posted mail. +# +# proxy_interfaces +# Other interfaces that this machine receives mail on +# by way of a proxy agent or network address transla- +# tor. +# +# SEE ALSO +# trivial-rewrite(8), address resolver +# postmap(1), Postfix lookup table manager +# postconf(5), configuration parameters +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# DATABASE_README, Postfix lookup table overview +# ADDRESS_REWRITING_README, address rewriting guide +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# RELOCATED(5) diff --git a/templates/Fedora/35/etc/postfix/transport b/templates/Fedora/35/etc/postfix/transport new file mode 100644 index 0000000..1dcd787 --- /dev/null +++ b/templates/Fedora/35/etc/postfix/transport @@ -0,0 +1,317 @@ +# TRANSPORT(5) TRANSPORT(5) +# +# NAME +# transport - Postfix transport table format +# +# SYNOPSIS +# postmap /etc/postfix/transport +# +# postmap -q "string" /etc/postfix/transport +# +# postmap -q - /etc/postfix/transport = 3.5): +# +# example.com smtp:bar.example, foo.example +# +# This tries to deliver to bar.example before trying to +# deliver to foo.example. +# +# The error mailer can be used to bounce mail: +# +# .example.com error:mail for *.example.com is not deliverable +# +# This causes all mail for user@anything.example.com to be +# bounced. +# +# REGULAR EXPRESSION TABLES +# This section describes how the table lookups change when +# the table is given in the form of regular expressions. For +# a description of regular expression lookup table syntax, +# see regexp_table(5) or pcre_table(5). +# +# Each pattern is a regular expression that is applied to +# the entire address being looked up. Thus, +# some.domain.hierarchy is not looked up via its parent +# domains, nor is user+foo@domain looked up as user@domain. +# +# Patterns are applied in the order as specified in the ta- +# ble, until a pattern is found that matches the search +# string. +# +# The trivial-rewrite(8) server disallows regular expression +# substitution of $1 etc. in regular expression lookup +# tables, because that could open a security hole (Postfix +# version 2.3 and later). +# +# TCP-BASED TABLES +# This section describes how the table lookups change when +# lookups are directed to a TCP-based server. For a descrip- +# tion of the TCP client/server lookup protocol, see tcp_ta- +# ble(5). This feature is not available up to and including +# Postfix version 2.4. +# +# Each lookup operation uses the entire recipient address +# once. Thus, some.domain.hierarchy is not looked up via +# its parent domains, nor is user+foo@domain looked up as +# user@domain. +# +# Results are the same as with indexed file lookups. +# +# CONFIGURATION PARAMETERS +# The following main.cf parameters are especially relevant. +# The text below provides only a parameter summary. See +# postconf(5) for more details including examples. +# +# empty_address_recipient (MAILER-DAEMON) +# The recipient of mail addressed to the null +# address. +# +# parent_domain_matches_subdomains (see 'postconf -d' out- +# put) +# A list of Postfix features where the pattern "exam- +# ple.com" also matches subdomains of example.com, +# instead of requiring an explicit ".example.com" +# pattern. +# +# transport_maps (empty) +# Optional lookup tables with mappings from recipient +# address to (message delivery transport, next-hop +# destination). +# +# SEE ALSO +# trivial-rewrite(8), rewrite and resolve addresses +# master(5), master.cf file format +# postconf(5), configuration parameters +# postmap(1), Postfix lookup table manager +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# ADDRESS_REWRITING_README, address rewriting guide +# DATABASE_README, Postfix lookup table overview +# FILTER_README, external content filter +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# TRANSPORT(5) diff --git a/templates/Fedora/35/etc/postfix/virtual b/templates/Fedora/35/etc/postfix/virtual new file mode 100644 index 0000000..da9cd65 --- /dev/null +++ b/templates/Fedora/35/etc/postfix/virtual @@ -0,0 +1,324 @@ +# VIRTUAL(5) VIRTUAL(5) +# +# NAME +# virtual - Postfix virtual alias table format +# +# SYNOPSIS +# postmap /etc/postfix/virtual +# +# postmap -q "string" /etc/postfix/virtual +# +# postmap -q - /etc/postfix/virtual Date: Sun, 14 Nov 2021 15:42:18 -0600 Subject: [PATCH 08/47] Add dkim and dmarc service --- defaults/main.yml | 3 ++- templates/Fedora/35/etc/opendkim.conf | 1 + vars/Fedora-35-default.yml | 6 ++++++ 3 files changed, 9 insertions(+), 1 deletion(-) diff --git a/defaults/main.yml b/defaults/main.yml index 261b45b..92948da 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -1,2 +1,3 @@ --- -# defaults file for ensure_postfix \ No newline at end of file +# defaults file for ensure_postfix +postmaster_email: 'postmaster@example.com' diff --git a/templates/Fedora/35/etc/opendkim.conf b/templates/Fedora/35/etc/opendkim.conf index 5933b4e..7994b76 100644 --- a/templates/Fedora/35/etc/opendkim.conf +++ b/templates/Fedora/35/etc/opendkim.conf @@ -72,6 +72,7 @@ SendReports yes ## failure reports. By default, the e-mail address of the user executing ## the filter is used (executing_user@hostname). # ReportAddress "Example.com Postmaster" +ReportAddress "Postmaster" <{{ postmaster_email }}> ## Add a DKIM-Filter header field to messages passing through this filter ## to identify messages it has processed. diff --git a/vars/Fedora-35-default.yml b/vars/Fedora-35-default.yml index 1cb1006..b4d849e 100644 --- a/vars/Fedora-35-default.yml +++ b/vars/Fedora-35-default.yml @@ -26,6 +26,12 @@ firewall_list: service: 'smtp-submission' state: 'enabled' service_list: + - enabled: 'yes' + name: 'opendkim.service' + state: 'started' + - enabled: 'yes' + name: 'opendmarc.service' + state: 'started' - enabled: 'yes' name: 'postfix.service' state: 'started' From c5bcae71fdabe63c5e9f978fe9ea075bbf3f7dfd Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sun, 14 Nov 2021 15:47:49 -0600 Subject: [PATCH 09/47] OpenDMARC config --- templates/Fedora/35/etc/opendmarc.conf | 3 +++ 1 file changed, 3 insertions(+) diff --git a/templates/Fedora/35/etc/opendmarc.conf b/templates/Fedora/35/etc/opendmarc.conf index 4835938..cc1018d 100644 --- a/templates/Fedora/35/etc/opendmarc.conf +++ b/templates/Fedora/35/etc/opendmarc.conf @@ -178,6 +178,7 @@ ## is no default. # # FailureReportsBcc postmaster@example.coom +FailureReportsBcc {{ postmaster_email }} ## FailureReportsOnNone { true | false } ## default "false" @@ -199,6 +200,7 @@ ## could not be determined. # # FailureReportsSentBy USER@HOSTNAME +FailureReportsSentBy {{ postmaster_email }} ## HistoryFile path ## default (none) @@ -315,6 +317,7 @@ ## field will be added. # # RejectFailures false +RejectFailures true ## RejectMultiValueFrom { true | false } ## default "false" From 23aece35e1084f04162ef23ee0aab2f52ef45ec1 Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sun, 14 Nov 2021 16:10:05 -0600 Subject: [PATCH 10/47] OpenDKIM verify only mode config --- templates/Fedora/35/etc/opendkim.conf | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/templates/Fedora/35/etc/opendkim.conf b/templates/Fedora/35/etc/opendkim.conf index 7994b76..992e0b2 100644 --- a/templates/Fedora/35/etc/opendkim.conf +++ b/templates/Fedora/35/etc/opendkim.conf @@ -96,7 +96,7 @@ MinimumKeyBits 1024 ## Gives the location of a private key to be used for signing ALL messages. This ## directive is ignored if KeyTable is enabled. -KeyFile /etc/opendkim/keys/default.private +# KeyFile /etc/opendkim/keys/default.private ## Gives the location of a file mapping key names to signing keys. In simple terms, ## this tells OpenDKIM where to find your keys. If present, overrides any KeyFile @@ -131,4 +131,4 @@ OversignHeaders From ## policies retrieved from DNS, rather than relying on the nameserver for ## caching service. Useful if the nameserver being used by the filter is ## not local. -# QueryCache yes +QueryCache yes From a65428816e9dbb8918a20cb0041f26dcfc1abbce Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Tue, 16 Nov 2021 19:29:51 -0600 Subject: [PATCH 11/47] Postfix listening --- templates/Fedora/35/etc/postfix/main.cf | 4 ++-- templates/Fedora/35/etc/postfix/master.cf | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/templates/Fedora/35/etc/postfix/main.cf b/templates/Fedora/35/etc/postfix/main.cf index bd0aea8..7d3ea02 100644 --- a/templates/Fedora/35/etc/postfix/main.cf +++ b/templates/Fedora/35/etc/postfix/main.cf @@ -129,10 +129,10 @@ mail_owner = postfix # # Note: you need to stop/start Postfix when this parameter changes. # -#inet_interfaces = all +inet_interfaces = all #inet_interfaces = $myhostname #inet_interfaces = $myhostname, localhost -inet_interfaces = localhost +#inet_interfaces = localhost # Enable IPv4, and IPv6 if supported inet_protocols = all diff --git a/templates/Fedora/35/etc/postfix/master.cf b/templates/Fedora/35/etc/postfix/master.cf index f33d9dd..ceff140 100644 --- a/templates/Fedora/35/etc/postfix/master.cf +++ b/templates/Fedora/35/etc/postfix/master.cf @@ -16,7 +16,7 @@ smtp inet n - n - - smtpd #tlsproxy unix - - n - 0 tlsproxy # Choose one: enable submission for loopback clients only, or for any client. #127.0.0.1:submission inet n - n - - smtpd -#submission inet n - n - - smtpd +submission inet n - n - - smtpd # -o syslog_name=postfix/submission # -o smtpd_tls_security_level=encrypt # -o smtpd_sasl_auth_enable=yes @@ -30,7 +30,7 @@ smtp inet n - n - - smtpd # -o milter_macro_daemon_name=ORIGINATING # Choose one: enable smtps for loopback clients only, or for any client. #127.0.0.1:smtps inet n - n - - smtpd -#smtps inet n - n - - smtpd +smtps inet n - n - - smtpd # -o syslog_name=postfix/smtps # -o smtpd_tls_wrappermode=yes # -o smtpd_sasl_auth_enable=yes From 29bf5948f16af695ae775b7f3dbd4e23b2c6e385 Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sun, 2 Jan 2022 19:55:17 -0600 Subject: [PATCH 12/47] Enable OpenDKIM and OpenDMARC as MILTER --- templates/Fedora/35/etc/postfix/main.cf | 5 +++++ vars/Fedora-35-default.yml | 9 +++++++++ 2 files changed, 14 insertions(+) diff --git a/templates/Fedora/35/etc/postfix/main.cf b/templates/Fedora/35/etc/postfix/main.cf index 7d3ea02..cc97c04 100644 --- a/templates/Fedora/35/etc/postfix/main.cf +++ b/templates/Fedora/35/etc/postfix/main.cf @@ -736,3 +736,8 @@ smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt smtp_tls_security_level = may meta_directory = /etc/postfix shlib_directory = /usr/lib64/postfix + +{% if ensure_postfix.milter_list is defined and ensure_postfix.milter_list is iterable %} +# The MILTER Configuration +smtpd_milters = {% for milter in ensure_postfix.milter_list %}{{ milter.protocol }}:{{ milter.hostname }}:{{ milter:port }} {% endfor %} +{% endif %} diff --git a/vars/Fedora-35-default.yml b/vars/Fedora-35-default.yml index b4d849e..69de9ee 100644 --- a/vars/Fedora-35-default.yml +++ b/vars/Fedora-35-default.yml @@ -1,5 +1,14 @@ --- # vars file for ensure_postfix +milter_list: + - description: 'OpenDKIM' + hostname: 'localhost' + port: '8891' + protocol: 'inet' + - description: 'OpenDMARC' + hostname: 'localhost' + port: '8893' + protocol: 'inet' package_list: - name: 'opendkim' state: 'present' From e1a6e3fd4a9c93821fa94fcb68cc6dd43efa46ca Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sun, 2 Jan 2022 23:48:17 -0600 Subject: [PATCH 13/47] Work around Jinja2 bug? where %} and {{ need a space between --- templates/Fedora/35/etc/postfix/main.cf | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/templates/Fedora/35/etc/postfix/main.cf b/templates/Fedora/35/etc/postfix/main.cf index cc97c04..0327a04 100644 --- a/templates/Fedora/35/etc/postfix/main.cf +++ b/templates/Fedora/35/etc/postfix/main.cf @@ -738,6 +738,9 @@ meta_directory = /etc/postfix shlib_directory = /usr/lib64/postfix {% if ensure_postfix.milter_list is defined and ensure_postfix.milter_list is iterable %} -# The MILTER Configuration -smtpd_milters = {% for milter in ensure_postfix.milter_list %}{{ milter.protocol }}:{{ milter.hostname }}:{{ milter:port }} {% endfor %} +# The Milter List +{% for milter in ensure_postfix.milter_list %} +# -- {{ milter.description }} -- {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} +{% endfor %} +smtpd_milters = {% for milter in ensure_postfix.milter_list %} {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} {% endfor %} {% endif %} From 2e8186b54019b3a7a4a89621b883c9932cdc3892 Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Thu, 6 Jan 2022 21:04:46 -0600 Subject: [PATCH 14/47] Add SpamAssassin packages --- vars/Fedora-35-default.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/vars/Fedora-35-default.yml b/vars/Fedora-35-default.yml index 69de9ee..edf1298 100644 --- a/vars/Fedora-35-default.yml +++ b/vars/Fedora-35-default.yml @@ -24,6 +24,10 @@ package_list: state: 'present' - name: 'postfix-pcre' state: 'present' + - name: 'spamass-milter' + state: 'present' + - name: 'spamassassin' + state: 'present' firewall_list: - permanent: 'yes' service: 'smtp' From d3988b8431e06c4baaa34b2beff009dac013d85c Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sun, 23 Jan 2022 18:09:27 -0600 Subject: [PATCH 15/47] Enable selecting the TLS Certificate --- README.md | 4 +++- defaults/main.yml | 1 + templates/Fedora/35/etc/postfix/main.cf | 6 ++++-- .../usr/lib/systemd/system/postfix-copytls.service | 12 ++++++++++++ .../35/usr/lib/systemd/system/postfix-copytls.timer | 9 +++++++++ vars/Fedora-35-default.yml | 5 +++++ 6 files changed, 34 insertions(+), 3 deletions(-) create mode 100644 templates/Fedora/35/usr/lib/systemd/system/postfix-copytls.service create mode 100644 templates/Fedora/35/usr/lib/systemd/system/postfix-copytls.timer diff --git a/README.md b/README.md index 225dd44..d91bb75 100644 --- a/README.md +++ b/README.md @@ -11,7 +11,9 @@ Any pre-requisites that may not be covered by Ansible itself or the role should Role Variables -------------- -A description of the settable variables for this role should go here, including any variables that are in defaults/main.yml, vars/main.yml, and any variables that can/should be set via parameters to the role. Any variables that are read from other roles and/or the global scope (ie. hostvars, group vars, etc.) should be mentioned here as well. +| Variable | Default | Description | +|-|-|-| +| postfix_vhost | inventory_hostname | What mod_md certificate should be used for Postfix | Dependencies ------------ diff --git a/defaults/main.yml b/defaults/main.yml index 92948da..af38716 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -1,3 +1,4 @@ --- # defaults file for ensure_postfix postmaster_email: 'postmaster@example.com' +postfix_vhost: '{{ inventory_hostname }}' diff --git a/templates/Fedora/35/etc/postfix/main.cf b/templates/Fedora/35/etc/postfix/main.cf index 0327a04..a1bbafe 100644 --- a/templates/Fedora/35/etc/postfix/main.cf +++ b/templates/Fedora/35/etc/postfix/main.cf @@ -706,13 +706,15 @@ readme_directory = /usr/share/doc/postfix/README_FILES # in PEM format. Intermediate certificates should be included in general, # the server certificate first, then the issuing CA(s) (bottom-up order). # -smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem +# smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem +smtpd_tls_cert_file = /etc/postfix/certificates/pubcert.pem # The full pathname of a file with the Postfix SMTP server RSA private key # in PEM format. The private key must be accessible without a pass-phrase, # i.e. it must not be encrypted. # -smtpd_tls_key_file = /etc/pki/tls/private/postfix.key +# smtpd_tls_key_file = /etc/pki/tls/private/postfix.key +smtpd_tls_key_file = /etc/postfix/certificates/privkey.pem # Announce STARTTLS support to remote SMTP clients, but do not require that # clients use TLS encryption (opportunistic TLS inbound). diff --git a/templates/Fedora/35/usr/lib/systemd/system/postfix-copytls.service b/templates/Fedora/35/usr/lib/systemd/system/postfix-copytls.service new file mode 100644 index 0000000..0642613 --- /dev/null +++ b/templates/Fedora/35/usr/lib/systemd/system/postfix-copytls.service @@ -0,0 +1,12 @@ +[Unit] +Description=Copy TLS Certificates for Postfix + +[Service] +Type=oneshot +ExecStartPre=mkdir -p /etc/postfix/certificates +ExecStart=/bin/bash -lc 'cp /etc/httpd/md/domains/{{ postfix_vhost }}/*.pem /etc/postfix/certificates/' +ExecStartPost=chown -R root:root /etc/postfix/certificates + +[Install] +WantedBy=postfix.service + diff --git a/templates/Fedora/35/usr/lib/systemd/system/postfix-copytls.timer b/templates/Fedora/35/usr/lib/systemd/system/postfix-copytls.timer new file mode 100644 index 0000000..65cb658 --- /dev/null +++ b/templates/Fedora/35/usr/lib/systemd/system/postfix-copytls.timer @@ -0,0 +1,9 @@ +[Unit] +Description=Copy TLS Certificates for Postfix + +[Timer] +OnUnitActiveSec=5min + +[Install] +WantedBy=postfix.service + diff --git a/vars/Fedora-35-default.yml b/vars/Fedora-35-default.yml index edf1298..21a6a51 100644 --- a/vars/Fedora-35-default.yml +++ b/vars/Fedora-35-default.yml @@ -97,3 +97,8 @@ template_list: src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/opendkim.conf' - dest: '/etc/opendmarc.conf' src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/opendmarc.conf' + - dest: '/usr/lib/systemd/system/postfix-copytls.service' + src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/usr/lib/systemd/system/postfix-copytls.service' + - dest: '/usr/lib/systemd/system/postfix-copytls.timer' + src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/usr/lib/systemd/system/postfix-copytls.timer' + From 8acf75dc1522de93a5e1117ca8ea79f0cc46a412 Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sun, 23 Jan 2022 18:49:55 -0600 Subject: [PATCH 16/47] Make the certificates directory instead of find it --- tasks/main.yml | 14 ++++---------- 1 file changed, 4 insertions(+), 10 deletions(-) diff --git a/tasks/main.yml b/tasks/main.yml index 54dda11..5aacb79 100644 --- a/tasks/main.yml +++ b/tasks/main.yml @@ -74,21 +74,15 @@ loop: '{{ ensure_postfix.seboolean_list }}' loop_control: label: '{{ item.name }} will be {{ item.state }}' -- name: 'find certificates' +- name: 'mkdir certificates' when: - ansible_system == 'Linux' - ensure_postfix is defined - ensure_postfix.template_list is defined - ensure_postfix.template_list is iterable - ansible.builtin.find: - file_type: 'file' - paths: - - '/etc/httpd/md/domains/' - patterns: - - 'pubcert.pem' - - 'privkey.pem' - recurse: 'yes' - register: 'certificates' + ansible.builtin.file: + path: '/etc/postfix/certificates' + state: 'directory' - name: 'ensure configurations' when: - ansible_system == 'Linux' From 15d5568b32c4b8b97575df128d0f9c402b876fa8 Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sun, 30 Jan 2022 21:38:09 -0600 Subject: [PATCH 17/47] If anything changes, notify all handlers --- tasks/main.yml | 26 +++++++++++++++++--------- 1 file changed, 17 insertions(+), 9 deletions(-) diff --git a/tasks/main.yml b/tasks/main.yml index 5aacb79..e7fcf1b 100644 --- a/tasks/main.yml +++ b/tasks/main.yml @@ -45,6 +45,11 @@ loop: '{{ ensure_postfix.sysctl_list }}' loop_control: label: '{{ item.name }} will be {{ item.value }}' + notify: + - 'ensure_postfix.package_facts' + - 'ensure_postfix.service_facts' + - 'ensure_postfix.service_reload' + - 'ensure_postfix.services' - name: 'ensure packages' when: - ansible_system == 'Linux' @@ -61,6 +66,8 @@ notify: - 'ensure_postfix.package_facts' - 'ensure_postfix.service_facts' + - 'ensure_postfix.service_reload' + - 'ensure_postfix.services' - name: 'ensure seboolean' when: - ansible_system == 'Linux' @@ -74,15 +81,11 @@ loop: '{{ ensure_postfix.seboolean_list }}' loop_control: label: '{{ item.name }} will be {{ item.state }}' -- name: 'mkdir certificates' - when: - - ansible_system == 'Linux' - - ensure_postfix is defined - - ensure_postfix.template_list is defined - - ensure_postfix.template_list is iterable - ansible.builtin.file: - path: '/etc/postfix/certificates' - state: 'directory' + notify: + - 'ensure_postfix.package_facts' + - 'ensure_postfix.service_facts' + - 'ensure_postfix.service_reload' + - 'ensure_postfix.services' - name: 'ensure configurations' when: - ansible_system == 'Linux' @@ -123,6 +126,11 @@ loop: '{{ ensure_postfix.firewall_list }}' loop_control: label: '{{ item.service }} will be {{ item.state }}' + notify: + - 'ensure_postfix.package_facts' + - 'ensure_postfix.service_facts' + - 'ensure_postfix.service_reload' + - 'ensure_postfix.services' - name: 'ensure services' when: - ansible_system == 'Linux' From cb9777f21682b98399d40962cc492e017cd7cd3e Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sun, 10 Apr 2022 01:08:19 -0500 Subject: [PATCH 18/47] Ensure virtual domains go through LMTP --- templates/Fedora/35/etc/postfix/main.cf | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/templates/Fedora/35/etc/postfix/main.cf b/templates/Fedora/35/etc/postfix/main.cf index a1bbafe..445c833 100644 --- a/templates/Fedora/35/etc/postfix/main.cf +++ b/templates/Fedora/35/etc/postfix/main.cf @@ -484,6 +484,8 @@ alias_database = hash:/etc/aliases # Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" # listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. #mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp +mailbox_transport = lmtp:inet:localhost:24 +virtual_transport = lmtp:inet:localhost:24 # If using the cyrus-imapd IMAP server deliver local mail to the IMAP # server using LMTP (Local Mail Transport Protocol), this is prefered @@ -746,3 +748,8 @@ shlib_directory = /usr/lib64/postfix {% endfor %} smtpd_milters = {% for milter in ensure_postfix.milter_list %} {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} {% endfor %} {% endif %} + +{% if ensure_postifx.domain_list is defined and ensure_postfix.domain_list is iterable %} +virtual_mailbox_domains = {% for domain in ensure_postfix.domain_list %} {{ domain }} {% endfor %} +{% endif %} + From cbe3404f2afde2cfdb89d8f7537a26c11e6761c3 Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sun, 10 Apr 2022 01:10:00 -0500 Subject: [PATCH 19/47] Document the variable for virtual domains --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index d91bb75..957071c 100644 --- a/README.md +++ b/README.md @@ -14,6 +14,7 @@ Role Variables | Variable | Default | Description | |-|-|-| | postfix_vhost | inventory_hostname | What mod_md certificate should be used for Postfix | +| domain_list | Undefined | List of strings for domains to accept email for and send to local LMTP for | Dependencies ------------ From 7ede9e40313e91f3172392f5c111d836f08d671a Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sun, 10 Apr 2022 17:49:36 -0500 Subject: [PATCH 20/47] Fix mail acceptance domain list variable names --- README.md | 2 +- templates/Fedora/35/etc/postfix/main.cf | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 957071c..aac6d8f 100644 --- a/README.md +++ b/README.md @@ -14,7 +14,7 @@ Role Variables | Variable | Default | Description | |-|-|-| | postfix_vhost | inventory_hostname | What mod_md certificate should be used for Postfix | -| domain_list | Undefined | List of strings for domains to accept email for and send to local LMTP for | +| postfix_domain_list | Undefined | List of strings for domains to accept email for and send to local LMTP for | Dependencies ------------ diff --git a/templates/Fedora/35/etc/postfix/main.cf b/templates/Fedora/35/etc/postfix/main.cf index 445c833..9287fe5 100644 --- a/templates/Fedora/35/etc/postfix/main.cf +++ b/templates/Fedora/35/etc/postfix/main.cf @@ -749,7 +749,7 @@ shlib_directory = /usr/lib64/postfix smtpd_milters = {% for milter in ensure_postfix.milter_list %} {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} {% endfor %} {% endif %} -{% if ensure_postifx.domain_list is defined and ensure_postfix.domain_list is iterable %} -virtual_mailbox_domains = {% for domain in ensure_postfix.domain_list %} {{ domain }} {% endfor %} +{% if postfix_domain_list is defined and postfix_domain_list is iterable %} +virtual_mailbox_domains = {% for domain in postfix_domain_list %} {{ domain }} {% endfor %} {% endif %} From 7e4dc6b24536c2a371c58577f8f4e63b9885983f Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sun, 10 Apr 2022 17:56:34 -0500 Subject: [PATCH 21/47] Rename postfix_domains to make it easier to use --- README.md | 2 +- templates/Fedora/35/etc/postfix/main.cf | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index aac6d8f..3ba5b55 100644 --- a/README.md +++ b/README.md @@ -14,7 +14,7 @@ Role Variables | Variable | Default | Description | |-|-|-| | postfix_vhost | inventory_hostname | What mod_md certificate should be used for Postfix | -| postfix_domain_list | Undefined | List of strings for domains to accept email for and send to local LMTP for | +| postfix_domains | Undefined | List of strings for domains to accept email for and send to local LMTP for | Dependencies ------------ diff --git a/templates/Fedora/35/etc/postfix/main.cf b/templates/Fedora/35/etc/postfix/main.cf index 9287fe5..aabbb33 100644 --- a/templates/Fedora/35/etc/postfix/main.cf +++ b/templates/Fedora/35/etc/postfix/main.cf @@ -749,7 +749,7 @@ shlib_directory = /usr/lib64/postfix smtpd_milters = {% for milter in ensure_postfix.milter_list %} {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} {% endfor %} {% endif %} -{% if postfix_domain_list is defined and postfix_domain_list is iterable %} -virtual_mailbox_domains = {% for domain in postfix_domain_list %} {{ domain }} {% endfor %} +{% if postfix_domains is defined and postfix_domains is iterable %} +virtual_mailbox_domains = {% for domain in postfix_domains %} {{ domain }} {% endfor %} {% endif %} From 4395b8034ce316cbbf1c95178b6260089481d175 Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sun, 10 Apr 2022 22:36:09 -0500 Subject: [PATCH 22/47] Enable TLS with Postfix --- vars/Fedora-35-default.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/vars/Fedora-35-default.yml b/vars/Fedora-35-default.yml index 21a6a51..d2f418d 100644 --- a/vars/Fedora-35-default.yml +++ b/vars/Fedora-35-default.yml @@ -48,6 +48,12 @@ service_list: - enabled: 'yes' name: 'postfix.service' state: 'started' + - enabled: 'yes' + name: 'postfix-copytls.service' + state: 'started' + - enabled: 'yes' + name: 'postfix-copytls.timer' + state: 'started' template_list: - dest: '/etc/postfix/dynamicmaps.cf.d/ldap' src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/postfix/dynamicmaps.cf.d/ldap' From 021765352d9e120664fa39c9f99f29b444a85cfc Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Tue, 12 Apr 2022 22:56:20 -0500 Subject: [PATCH 23/47] Disable tcp/465 (SMTP SSL) and tcp/587 (SMTP Submission) listeners --- templates/Fedora/35/etc/postfix/master.cf | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/templates/Fedora/35/etc/postfix/master.cf b/templates/Fedora/35/etc/postfix/master.cf index ceff140..4beb91f 100644 --- a/templates/Fedora/35/etc/postfix/master.cf +++ b/templates/Fedora/35/etc/postfix/master.cf @@ -16,7 +16,7 @@ smtp inet n - n - - smtpd #tlsproxy unix - - n - 0 tlsproxy # Choose one: enable submission for loopback clients only, or for any client. #127.0.0.1:submission inet n - n - - smtpd -submission inet n - n - - smtpd +# submission inet n - n - - smtpd # -o syslog_name=postfix/submission # -o smtpd_tls_security_level=encrypt # -o smtpd_sasl_auth_enable=yes @@ -30,7 +30,7 @@ submission inet n - n - - smtpd # -o milter_macro_daemon_name=ORIGINATING # Choose one: enable smtps for loopback clients only, or for any client. #127.0.0.1:smtps inet n - n - - smtpd -smtps inet n - n - - smtpd +# smtps inet n - n - - smtpd # -o syslog_name=postfix/smtps # -o smtpd_tls_wrappermode=yes # -o smtpd_sasl_auth_enable=yes From 79e617c55d06eae237cc3334922d80866624b55e Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Tue, 12 Apr 2022 22:57:01 -0500 Subject: [PATCH 24/47] Redirect postmaster mail to the postmaster --- templates/Fedora/35/etc/postfix/main.cf | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/templates/Fedora/35/etc/postfix/main.cf b/templates/Fedora/35/etc/postfix/main.cf index aabbb33..5bf98a3 100644 --- a/templates/Fedora/35/etc/postfix/main.cf +++ b/templates/Fedora/35/etc/postfix/main.cf @@ -753,3 +753,9 @@ smtpd_milters = {% for milter in ensure_postfix.milter_list %} {{ milter.protoco virtual_mailbox_domains = {% for domain in postfix_domains %} {{ domain }} {% endfor %} {% endif %} +2bounce_notice_recipient = {{ postmaster_email }} +bounce_notice_recipient = {{ postmaster_email }} +delay_notice_recipient = {{ postmaster_email }} +error_notice_recipient = {{ postmaster_email }} +smtpd_helo_required = yes +disable_vrfy_command = yes From a5c6801ad7ee32df514809d12041689fc5ebedf4 Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sun, 5 Jun 2022 16:48:23 -0500 Subject: [PATCH 25/47] Update tasks --- tasks/main.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/tasks/main.yml b/tasks/main.yml index e7fcf1b..a446093 100644 --- a/tasks/main.yml +++ b/tasks/main.yml @@ -56,7 +56,6 @@ - ensure_postfix is defined - ensure_postfix.package_list is defined - ensure_postfix.package_list is iterable - - packages[item.name] is not defined ansible.builtin.package: name: '{{ item.name }}' state: '{{ item.state }}' From 3c4d4cc12ed53c4b70977e9d93c82c16a6dbdbf0 Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sun, 5 Jun 2022 18:30:32 -0500 Subject: [PATCH 26/47] Enable Fedora 36 --- templates/Fedora/36/etc/opendkim.conf | 134 +++ templates/Fedora/36/etc/opendkim/KeyTable | 6 + templates/Fedora/36/etc/opendkim/SigningTable | 25 + templates/Fedora/36/etc/opendkim/TrustedHosts | 9 + templates/Fedora/36/etc/opendmarc.conf | 442 ++++++++++ templates/Fedora/36/etc/postfix/access | 484 +++++++++++ templates/Fedora/36/etc/postfix/canonical | 307 +++++++ .../Fedora/36/etc/postfix/dynamicmaps.cf | 1 + .../36/etc/postfix/dynamicmaps.cf.d/ldap | 1 + .../36/etc/postfix/dynamicmaps.cf.d/mysql | 1 + .../36/etc/postfix/dynamicmaps.cf.d/pcre | 1 + templates/Fedora/36/etc/postfix/generic | 250 ++++++ templates/Fedora/36/etc/postfix/header_checks | 549 +++++++++++++ templates/Fedora/36/etc/postfix/main.cf | 761 ++++++++++++++++++ templates/Fedora/36/etc/postfix/main.cf.proto | 736 +++++++++++++++++ templates/Fedora/36/etc/postfix/master.cf | 137 ++++ .../Fedora/36/etc/postfix/master.cf.proto | 137 ++++ templates/Fedora/36/etc/postfix/postfix-files | 432 ++++++++++ .../36/etc/postfix/postfix-files.d/ldap | 3 + .../36/etc/postfix/postfix-files.d/mysql | 3 + .../36/etc/postfix/postfix-files.d/pcre | 3 + templates/Fedora/36/etc/postfix/relocated | 176 ++++ templates/Fedora/36/etc/postfix/transport | 317 ++++++++ templates/Fedora/36/etc/postfix/virtual | 324 ++++++++ .../systemd/system/postfix-copytls.service | 12 + .../lib/systemd/system/postfix-copytls.timer | 9 + vars/Fedora-36-default.yml | 110 +++ 27 files changed, 5370 insertions(+) create mode 100644 templates/Fedora/36/etc/opendkim.conf create mode 100644 templates/Fedora/36/etc/opendkim/KeyTable create mode 100644 templates/Fedora/36/etc/opendkim/SigningTable create mode 100644 templates/Fedora/36/etc/opendkim/TrustedHosts create mode 100644 templates/Fedora/36/etc/opendmarc.conf create mode 100644 templates/Fedora/36/etc/postfix/access create mode 100644 templates/Fedora/36/etc/postfix/canonical create mode 100644 templates/Fedora/36/etc/postfix/dynamicmaps.cf create mode 100644 templates/Fedora/36/etc/postfix/dynamicmaps.cf.d/ldap create mode 100644 templates/Fedora/36/etc/postfix/dynamicmaps.cf.d/mysql create mode 100644 templates/Fedora/36/etc/postfix/dynamicmaps.cf.d/pcre create mode 100644 templates/Fedora/36/etc/postfix/generic create mode 100644 templates/Fedora/36/etc/postfix/header_checks create mode 100644 templates/Fedora/36/etc/postfix/main.cf create mode 100644 templates/Fedora/36/etc/postfix/main.cf.proto create mode 100644 templates/Fedora/36/etc/postfix/master.cf create mode 100644 templates/Fedora/36/etc/postfix/master.cf.proto create mode 100644 templates/Fedora/36/etc/postfix/postfix-files create mode 100644 templates/Fedora/36/etc/postfix/postfix-files.d/ldap create mode 100644 templates/Fedora/36/etc/postfix/postfix-files.d/mysql create mode 100644 templates/Fedora/36/etc/postfix/postfix-files.d/pcre create mode 100644 templates/Fedora/36/etc/postfix/relocated create mode 100644 templates/Fedora/36/etc/postfix/transport create mode 100644 templates/Fedora/36/etc/postfix/virtual create mode 100644 templates/Fedora/36/usr/lib/systemd/system/postfix-copytls.service create mode 100644 templates/Fedora/36/usr/lib/systemd/system/postfix-copytls.timer create mode 100644 vars/Fedora-36-default.yml diff --git a/templates/Fedora/36/etc/opendkim.conf b/templates/Fedora/36/etc/opendkim.conf new file mode 100644 index 0000000..992e0b2 --- /dev/null +++ b/templates/Fedora/36/etc/opendkim.conf @@ -0,0 +1,134 @@ +## BASIC OPENDKIM CONFIGURATION FILE +## See opendkim.conf(5) or /usr/share/doc/opendkim/opendkim.conf.sample for more + +## BEFORE running OpenDKIM you must: + +## - make your MTA (Postfix, Sendmail, etc.) aware of OpenDKIM +## - generate keys for your domain (if signing) +## - edit your DNS records to publish your public keys (if signing) + +## See /usr/share/doc/opendkim/INSTALL for detailed instructions. + +## DEPRECATED CONFIGURATION OPTIONS +## +## The following configuration options are no longer valid. They should be +## removed from your existing configuration file to prevent potential issues. +## Failure to do so may result in opendkim being unable to start. +## +## Removed in 2.10.0: +## AddAllSignatureResults +## ADSPAction +## ADSPNoSuchDomain +## BogusPolicy +## DisableADSP +## LDAPSoftStart +## LocalADSP +## NoDiscardableMailTo +## On-PolicyError +## SendADSPReports +## UnprotectedPolicy + +## CONFIGURATION OPTIONS + +## Specifies the path to the process ID file. +PidFile /run/opendkim/opendkim.pid + +## Selects operating modes. Valid modes are s (sign) and v (verify). Default is v. +## Must be changed to s (sign only) or sv (sign and verify) in order to sign outgoing +## messages. +Mode v + +## Log activity to the system log. +Syslog yes + +## Log additional entries indicating successful signing or verification of messages. +SyslogSuccess yes + +## If logging is enabled, include detailed logging about why or why not a message was +## signed or verified. This causes an increase in the amount of log data generated +## for each message, so set this to No (or comment it out) if it gets too noisy. +LogWhy yes + +## Attempt to become the specified user before starting operations. +UserID opendkim:opendkim + +## Create a socket through which your MTA can communicate. +Socket inet:8891@localhost + +## Required to use local socket with MTAs that access the socket as a non- +## privileged user (e.g. Postfix) +Umask 002 + +## This specifies a text file in which to store DKIM transaction statistics. +## OpenDKIM must be manually compiled with --enable-stats to enable this feature. +# Statistics /var/spool/opendkim/stats.dat + +## Specifies whether or not the filter should generate report mail back +## to senders when verification fails and an address for such a purpose +## is provided. See opendkim.conf(5) for details. +SendReports yes + +## Specifies the sending address to be used on From: headers of outgoing +## failure reports. By default, the e-mail address of the user executing +## the filter is used (executing_user@hostname). +# ReportAddress "Example.com Postmaster" +ReportAddress "Postmaster" <{{ postmaster_email }}> + +## Add a DKIM-Filter header field to messages passing through this filter +## to identify messages it has processed. +SoftwareHeader yes + +## SIGNING OPTIONS + +## Selects the canonicalization method(s) to be used when signing messages. +Canonicalization relaxed/relaxed + +## Domain(s) whose mail should be signed by this filter. Mail from other domains will +## be verified rather than being signed. Uncomment and use your domain name. +## This parameter is not required if a SigningTable is in use. +# Domain example.com + +## Defines the name of the selector to be used when signing messages. +Selector default + +## Specifies the minimum number of key bits for acceptable keys and signatures. +MinimumKeyBits 1024 + +## Gives the location of a private key to be used for signing ALL messages. This +## directive is ignored if KeyTable is enabled. +# KeyFile /etc/opendkim/keys/default.private + +## Gives the location of a file mapping key names to signing keys. In simple terms, +## this tells OpenDKIM where to find your keys. If present, overrides any KeyFile +## directive in the configuration file. Requires SigningTable be enabled. +# KeyTable /etc/opendkim/KeyTable + +## Defines a table used to select one or more signatures to apply to a message based +## on the address found in the From: header field. In simple terms, this tells +## OpenDKIM how to use your keys. Requires KeyTable be enabled. +# SigningTable refile:/etc/opendkim/SigningTable + +## Identifies a set of "external" hosts that may send mail through the server as one +## of the signing domains without credentials as such. +# ExternalIgnoreList refile:/etc/opendkim/TrustedHosts + +## Identifies a set "internal" hosts whose mail should be signed rather than verified. +# InternalHosts refile:/etc/opendkim/TrustedHosts + +## Contains a list of IP addresses, CIDR blocks, hostnames or domain names +## whose mail should be neither signed nor verified by this filter. See man +## page for file format. +# PeerList X.X.X.X + +## Always oversign From (sign using actual From and a null From to prevent +## malicious signatures header fields (From and/or others) between the signer +## and the verifier. From is oversigned by default in the Fedora package +## because it is often the identity key used by reputation systems and thus +## somewhat security sensitive. +OversignHeaders From + +## Instructs the DKIM library to maintain its own local cache of keys and +## policies retrieved from DNS, rather than relying on the nameserver for +## caching service. Useful if the nameserver being used by the filter is +## not local. +QueryCache yes diff --git a/templates/Fedora/36/etc/opendkim/KeyTable b/templates/Fedora/36/etc/opendkim/KeyTable new file mode 100644 index 0000000..e804d68 --- /dev/null +++ b/templates/Fedora/36/etc/opendkim/KeyTable @@ -0,0 +1,6 @@ +# OPENDKIM KEY TABLE +# To use this file, uncomment the #KeyTable option in /etc/opendkim.conf, +# then uncomment the following line and replace example.com with your domain +# name, then restart OpenDKIM. Additional keys may be added on separate lines. + +#default._domainkey.example.com example.com:default:/etc/opendkim/keys/default.private diff --git a/templates/Fedora/36/etc/opendkim/SigningTable b/templates/Fedora/36/etc/opendkim/SigningTable new file mode 100644 index 0000000..e8161a1 --- /dev/null +++ b/templates/Fedora/36/etc/opendkim/SigningTable @@ -0,0 +1,25 @@ +# OPENDKIM SIGNING TABLE +# This table controls how to apply one or more signatures to outgoing messages based +# on the address found in the From: header field. In simple terms, this tells +# OpenDKIM "how" to apply your keys. + +# To use this file, uncomment the SigningTable option in /etc/opendkim.conf, +# then uncomment one of the usage examples below and replace example.com with your +# domain name, then restart OpenDKIM. + +# WILDCARD EXAMPLE +# Enables signing for any address on the listed domain(s), but will work only if +# "refile:/etc/opendkim/SigningTable" is included in /etc/opendkim.conf. +# Create additional lines for additional domains. + +#*@example.com default._domainkey.example.com + +# NON-WILDCARD EXAMPLE +# If "file:" (instead of "refile:") is specified in /etc/opendkim.conf, then +# wildcards will not work. Instead, full user@host is checked first, then simply host, +# then user@.domain (with all superdomains checked in sequence, so "foo.example.com" +# would first check "user@foo.example.com", then "user@.example.com", then "user@.com"), +# then .domain, then user@*, and finally *. See the opendkim.conf(5) man page under +# "SigningTable" for more details. + +#example.com default._domainkey.example.com diff --git a/templates/Fedora/36/etc/opendkim/TrustedHosts b/templates/Fedora/36/etc/opendkim/TrustedHosts new file mode 100644 index 0000000..7a086d4 --- /dev/null +++ b/templates/Fedora/36/etc/opendkim/TrustedHosts @@ -0,0 +1,9 @@ +# OPENDKIM TRUSTED HOSTS +# To use this file, uncomment the #ExternalIgnoreList and/or the #InternalHosts +# option in /etc/opendkim.conf then restart OpenDKIM. Additional hosts +# may be added on separate lines (IP addresses, hostnames, or CIDR ranges). +# The localhost IP (127.0.0.1) should always be the first entry in this file. +127.0.0.1 +::1 +#host.example.com +#192.168.1.0/24 diff --git a/templates/Fedora/36/etc/opendmarc.conf b/templates/Fedora/36/etc/opendmarc.conf new file mode 100644 index 0000000..cc1018d --- /dev/null +++ b/templates/Fedora/36/etc/opendmarc.conf @@ -0,0 +1,442 @@ +## opendmarc.conf -- configuration file for OpenDMARC filter +## +## Copyright (c) 2012-2015, 2018, 2021, The Trusted Domain Project. +## All rights reserved. + +## DEPRECATED CONFIGURATION OPTIONS +## +## The following configuration options are no longer valid. They should be +## removed from your existing configuration file to prevent potential issues. +## Failure to do so may result in opendmarc being unable to start. +## +## Renamed in 1.3.0: +## ForensicReports became FailureReports +## ForensicReportsBcc became FailureReportsBcc +## ForensicReportsOnNone became FailureReportsOnNone +## ForensicReportsSentBy became FailureReportsSentBy + +## CONFIGURATION OPTIONS + +## AuthservID (string) +## defaults to MTA name +## +## Sets the "authserv-id" to use when generating the Authentication-Results: +## header field after verifying a message. If the string "HOSTNAME" is +## provided, the name of the host running the filter (as returned by the +## gethostname(3) function) will be used. +# +# AuthservID name + +## AuthservIDWithJobID { true | false } +## default "false" +## +## If "true", requests that the authserv-id portion of the added +## Authentication-Results header fields contain the job ID of the message +## being evaluated. +# +# AuthservIDWithJobID false + +## AutoRestart { true | false } +## default "false" +## +## Automatically re-start on failures. Use with caution; if the filter fails +## instantly after it starts, this can cause a tight fork(2) loop. +# +# AutoRestart false + +## AutoRestartCount n +## default 0 +## +## Sets the maximum automatic restart count. After this number of automatic +## restarts, the filter will give up and terminate. A value of 0 implies no +## limit. +# +# AutoRestartCount 0 + +## AutoRestartRate n/t[u] +## default (no limit) +## +## Sets the maximum automatic restart rate. If the filter begins restarting +## faster than the rate defined here, it will give up and terminate. This +## is a string of the form n/t[u] where n is an integer limiting the count +## of restarts in the given interval and t[u] defines the time interval +## through which the rate is calculated; t is an integer and u defines the +## units thus represented ("s" or "S" for seconds, the default; "m" or "M" +## for minutes; "h" or "H" for hours; "d" or "D" for days). For example, a +## value of "10/1h" limits the restarts to 10 in one hour. There is no +## default, meaning restart rate is not limited. +# +# AutoRestartRate n/t[u] + +## Background { true | false } +## default "true" +## +## Causes opendmarc to fork and exits immediately, leaving the service +## running in the background. +# +# Background true + +## BaseDirectory (string) +## default (none) +## +## If set, instructs the filter to change to the specified directory using +## chdir(2) before doing anything else. This means any files referenced +## elsewhere in the configuration file can be specified relative to this +## directory. It's also useful for arranging that any crash dumps will be +## saved to a specific location. +# +# BaseDirectory /var/run/opendmarc + +## ChangeRootDirectory (string) +## default (none) +## +## Requests that the operating system change the effective root directory of +## the process to the one specified here prior to beginning execution. +## chroot(2) requires superuser access. A warning will be generated if +## UserID is not also set. +# +# ChangeRootDirectory /var/chroot/opendmarc + +## CopyFailuresTo (string) +## default (none) +## +## Requests addition of the specified email address to the envelope of +## any message that fails the DMARC evaluation. +# +# CopyFailuresTo postmaster@localhost + +## DomainWhitelist (string) +## default (none) +## +## A brief list of whitelisted domains for which ARC signature headers are +## trusted as determined by evaluating entries in the "arc.chain" field found +## in a locally generated Authentication-Results header. +## +## This list will be concatenated with DomainWhitelistFile (if provided). +## +# +# DomainWhitelist example.com + +## DomainWhitelistFile path +## default (none) +## +## A comprehensive list of whitelisted domains for which ARC signature headers +## are trusted as determined by evaluating entries in the "arc.chain" field +## found in a locally generated Authentication-Results header. +## +## This list will be concatenated with DomainWhitelist (if provided). +## +# +# DomainWhitelistFile /etc/opendmarc/whitelist.domains + +## DomainWhitelistSize +## default 3000 +## +## The maximum number of entries in the DomainWhitelist including both entries +## in the DomainWhitelist configuration parameter (above) and entries in the +## DomainWhitelistFile. This number will be increased by approximately 20% to +## increase the efficiency of the hashing algorithm. +## +# +# DomainWhitelistSize 3000 + +## DNSTimeout (integer) +## default 5 +## +## Sets the DNS timeout in seconds. A value of 0 causes an infinite wait. +## (NOT YET IMPLEMENTED) +# +# DNSTimeout 5 + +## EnableCoredumps { true | false } +## default "false" +## +## On systems that have such support, make an explicit request to the kernel +## to dump cores when the filter crashes for some reason. Some modern UNIX +## systems suppress core dumps during crashes for security reasons if the +## user ID has changed during the lifetime of the process. Currently only +## supported on Linux. +# +# EnableCoreDumps false + +## FailureReports { true | false } +## default "false" +## +## Enables generation of failure reports when the DMARC test fails and the +## purported sender of the message has requested such reports. Reports are +## formatted per RFC6591. +# +# FailureReports false + +## FailureReportsBcc (string) +## default (none) +## +## When failure reports are enabled and one is to be generated, always +## send one to the address(es) specified here. If a failure report is +## requested by the domain owner, the address(es) are added in a Bcc: field. +## If no request is made, they address(es) are used in a To: field. There +## is no default. +# +# FailureReportsBcc postmaster@example.coom +FailureReportsBcc {{ postmaster_email }} + +## FailureReportsOnNone { true | false } +## default "false" +## +## Supplements the "FailureReports" setting by generating reports for +## domains that advertise "none" policies. By default, reports are only +## generated (when enabled) for sending domains advertising a "quarantine" +## or "reject" policy. +# +# FailureReportsOnNone false + +## FailureReportsSentBy string +## default "USER@HOSTNAME" +## +## Specifies the email address to use in the From: field of failure +## reports generated by the filter. The default is to use the userid of +## the user running the filter and the local hostname to construct an +## email address. "postmaster" is used in place of the userid if a name +## could not be determined. +# +# FailureReportsSentBy USER@HOSTNAME +FailureReportsSentBy {{ postmaster_email }} + +## HistoryFile path +## default (none) +## +## If set, specifies the location of a text file to which records are written +## that can be used to generate DMARC aggregate reports. Records are groups +## of rows containing information about a single received message, and +## include all relevant information needed to generate a DMARC aggregate +## report. It is expected that this will not be used in its raw form, but +## rather periodically imported into a relational database from which the +## aggregate reports can be extracted by a tool such as opendmarc-import(8). +# +# HistoryFile /var/spool/opendmarc/opendmarc.dat + +## HoldQuarantinedMessages { true | false } +## default "false" +## +## If set, the milter will signal to the mta that messages with +## p=quarantine, which fail dmarc authentication, should be held in +## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. +## If false, messsages will be accepted and passed along with the +## regular mail flow, and the quarantine will be left up to downstream +## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, +## including the Authentication-Results header added by OpenDMARC +# +# HoldQuarantinedMessages false + +## IgnoreAuthenticatedClients { true | false } +## default "false" +## +## If set, causes mail from authenticated clients (i.e., those that used +## SMTP AUTH) to be ignored by the filter. +# +# IgnoreAuthenticatedClients false + +## HoldQuarantinedMessages { true | false } +## default "false" +## +## If set, the milter will signal to the mta that messages with +## p=quarantine, which fail dmarc authentication, should be held in +## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. +## If false, messsages will be accepted and passed along with the +## regular mail flow, and the quarantine will be left up to downstream +## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, +## including the Authentication-Results header added by OpenDMARC +# +# HoldQuarantinedMessages false + + +## IgnoreHosts path +## default (internal) +## +## Specifies the path to a file that contains a list of hostnames, IP +## addresses, and/or CIDR expressions identifying hosts whose SMTP +## connections are to be ignored by the filter. If not specified, defaults +## to "127.0.0.1" only. +# +# IgnoreHosts /etc/opendmarc/ignore.hosts + +## IgnoreMailFrom domain[,...] +## default (none) +## +## Gives a list of domain names whose mail (based on the From: domain) is to +## be ignored by the filter. The list should be comma-separated. Matching +## against this list is case-insensitive. The default is an empty list, +## meaning no mail is ignored. +# +# IgnoreMailFrom example.com + +## MilterDebug (integer) +## default 0 +## +## Sets the debug level to be requested from the milter library. +# +# MilterDebug 0 + +## PidFile path +## default (none) +## +## Specifies the path to a file that should be created at process start +## containing the process ID. +# +# PidFile /var/run/opendmarc.pid + +## PublicSuffixList path +## default (none) +## +## Specifies the path to a file that contains top-level domains (TLDs) that +## will be used to compute the Organizational Domain for a given domain name, +## as described in the DMARC specification. If not provided, the filter will +## not be able to determine the Organizational Domain and only the presented +## domain will be evaluated. This file should be periodically updated. +## One location to retrieve the file from is https://publicsuffix.org/list/ +# +# PublicSuffixList path + +## RecordAllMessages { true | false } +## default "false" +## +## If set and "HistoryFile" is in use, all received messages are recorded +## to the history file. If not set (the default), only messages for which +## the From: domain published a DMARC record will be recorded in the +## history file. +# +# RecordAllMessages false + +## RejectFailures { true | false } +## default "false" +## +## If set, messages will be rejected if they fail the DMARC evaluation, or +## temp-failed if evaluation could not be completed. By default, no message +## will be rejected or temp-failed regardless of the outcome of the DMARC +## evaluation of the message. Instead, an Authentication-Results header +## field will be added. +# +# RejectFailures false +RejectFailures true + +## RejectMultiValueFrom { true | false } +## default "false" +## +## If set, messages with multiple addresses in the From: field of the message +## will be rejected unless all domains in the field are the same. They will +## otherwise be ignored by the filter (the default). +# +# RejectMultiValueFrom false + +## ReportCommand string +## default "/usr/sbin/sendmail -t" +## +## Indicates the shell command to which failure reports should be passed for +## delivery when "FailureReports" is enabled. +# +# ReportCommand /usr/sbin/sendmail -t + +## RequiredHeaders { true | false } +## default "false" +## +## If set, the filter will ensure the header of the message conforms to the +## basic header field count restrictions laid out in RFC5322, Section 3.6. +## Messages failing this test are rejected without further processing. A +## From: field from which no domain name could be extracted will also be +## rejected. +# +# RequiredHeaders false + +## Socket socketspec +## default (none) +## +## Specifies the socket that should be established by the filter to receive +## connections from sendmail(8) in order to provide service. socketspec is +## in one of two forms: local:path, which creates a UNIX domain socket at +## the specified path, or inet:port[@host] or inet6:port[@host] which creates +## a TCP socket on the specified port for the appropriate protocol family. +## If the host is not given as either a hostname or an IP address, the +## socket will be listening on all interfaces. This option is mandatory +## either in the configuration file or on the command line. If an IP +## address is used, it must be enclosed in square brackets. +# +Socket inet:8893@localhost + +## SoftwareHeader { true | false } +## default "false" +## +## Causes the filter to add a "DMARC-Filter" header field indicating the +## presence of this filter in the path of the message from injection to +## delivery. The product's name, version, and the job ID are included in +## the header field's contents. +# +SoftwareHeader true + +## SPFIgnoreResults { true | false } +## default "false" +## +## Causes the filter to ignore any SPF results in the header of the +## message. This is useful if you want the filter to perform SPF checks +## itself, or because you don't trust the arriving header. +# +SPFIgnoreResults true + +## SPFSelfValidate { true | false } +## default false +## +## Enable internal spf checking with --with-spf +## To use libspf2 instead: --with-spf --with-spf2-include=path --with-spf2-lib=path +## +## Causes the filter to perform a fallback SPF check itself when +## it can find no SPF results in the message header. If SPFIgnoreResults +## is also set, it never looks for SPF results in headers and +## always performs the SPF check itself when this is set. +# +SPFSelfValidate true + +## Syslog { true | false } +## default "false" +## +## Log via calls to syslog(3) any interesting activity. +# +Syslog true + +## SyslogFacility facility-name +## default "mail" +## +## Log via calls to syslog(3) using the named facility. The facility names +## are the same as the ones allowed in syslog.conf(5). +# +# SyslogFacility mail + +## TrustedAuthservIDs string +## default HOSTNAME +## +## Specifies one or more "authserv-id" values to trust as relaying true +## upstream DKIM and SPF results. The default is to use the name of +## the MTA processing the message. To specify a list, separate each entry +## with a comma. The key word "HOSTNAME" will be replaced by the name of +## the host running the filter as reported by the gethostname(3) function. +# +# TrustedAuthservIDs HOSTNAME + +## UMask mask +## default (none) +## +## Requests a specific permissions mask to be used for file creation. This +## only really applies to creation of the socket when Socket specifies a +## UNIX domain socket, and to the HistoryFile and PidFile (if any); temporary +## files are normally created by the mkstemp(3) function that enforces a +## specific file mode on creation regardless of the process umask. See +## umask(2) for more information. +# +UMask 007 + +## UserID user[:group] +## default (none) +## +## Attempts to become the specified userid before starting operations. +## The process will be assigned all of the groups and primary group ID of +## the named userid unless an alternate group is specified. +# +UserID opendmarc:mail diff --git a/templates/Fedora/36/etc/postfix/access b/templates/Fedora/36/etc/postfix/access new file mode 100644 index 0000000..257339b --- /dev/null +++ b/templates/Fedora/36/etc/postfix/access @@ -0,0 +1,484 @@ +# ACCESS(5) ACCESS(5) +# +# NAME +# access - Postfix SMTP server access table +# +# SYNOPSIS +# postmap /etc/postfix/access +# +# postmap -q "string" /etc/postfix/access +# +# postmap -q - /etc/postfix/access as the lookup key for such addresses. The value is +# specified with the smtpd_null_access_lookup_key parameter +# in the Postfix main.cf file. +# +# EMAIL ADDRESS EXTENSION +# When a mail address localpart contains the optional recip- +# ient delimiter (e.g., user+foo@domain), the lookup order +# becomes: user+foo@domain, user@domain, domain, user+foo@, +# and user@. +# +# HOST NAME/ADDRESS PATTERNS +# With lookups from indexed files such as DB or DBM, or from +# networked tables such as NIS, LDAP or SQL, the following +# lookup patterns are examined in the order as listed: +# +# domain.tld +# Matches domain.tld. +# +# The pattern domain.tld also matches subdomains, but +# only when the string smtpd_access_maps is listed in +# the Postfix parent_domain_matches_subdomains con- +# figuration setting. +# +# .domain.tld +# Matches subdomains of domain.tld, but only when the +# string smtpd_access_maps is not listed in the Post- +# fix parent_domain_matches_subdomains configuration +# setting. +# +# net.work.addr.ess +# +# net.work.addr +# +# net.work +# +# net Matches a remote IPv4 host address or network +# address range. Specify one to four decimal octets +# separated by ".". Do not specify "[]" , "/", lead- +# ing zeros, or hexadecimal forms. +# +# Network ranges are matched by repeatedly truncating +# the last ".octet" from a remote IPv4 host address +# string, until a match is found in the access table, +# or until further truncation is not possible. +# +# NOTE: use the cidr lookup table type to specify +# network/netmask patterns. See cidr_table(5) for +# details. +# +# net:work:addr:ess +# +# net:work:addr +# +# net:work +# +# net Matches a remote IPv6 host address or network +# address range. Specify three to eight hexadecimal +# octet pairs separated by ":", using the compressed +# form "::" for a sequence of zero-valued octet +# pairs. Do not specify "[]", "/", leading zeros, or +# non-compressed forms. +# +# A network range is matched by repeatedly truncating +# the last ":octetpair" from the compressed-form +# remote IPv6 host address string, until a match is +# found in the access table, or until further trunca- +# tion is not possible. +# +# NOTE: use the cidr lookup table type to specify +# network/netmask patterns. See cidr_table(5) for +# details. +# +# IPv6 support is available in Postfix 2.2 and later. +# +# ACCEPT ACTIONS +# OK Accept the address etc. that matches the pattern. +# +# all-numerical +# An all-numerical result is treated as OK. This for- +# mat is generated by address-based relay authoriza- +# tion schemes such as pop-before-smtp. +# +# For other accept actions, see "OTHER ACTIONS" below. +# +# REJECT ACTIONS +# Postfix version 2.3 and later support enhanced status +# codes as defined in RFC 3463. When no code is specified +# at the beginning of the text below, Postfix inserts a +# default enhanced status code of "5.7.1" in the case of +# reject actions, and "4.7.1" in the case of defer actions. +# See "ENHANCED STATUS CODES" below. +# +# 4NN text +# +# 5NN text +# Reject the address etc. that matches the pattern, +# and respond with the numerical three-digit code and +# text. 4NN means "try again later", while 5NN means +# "do not try again". +# +# The following responses have special meaning for +# the Postfix SMTP server: +# +# 421 text (Postfix 2.3 and later) +# +# 521 text (Postfix 2.6 and later) +# After responding with the numerical +# three-digit code and text, disconnect imme- +# diately from the SMTP client. This frees up +# SMTP server resources so that they can be +# made available to another SMTP client. +# +# Note: The "521" response should be used only +# with botnets and other malware where inter- +# operability is of no concern. The "send 521 +# and disconnect" behavior is NOT defined in +# the SMTP standard. +# +# REJECT optional text... +# Reject the address etc. that matches the pattern. +# Reply with "$access_map_reject_code optional +# text..." when the optional text is specified, oth- +# erwise reply with a generic error response message. +# +# DEFER optional text... +# Reject the address etc. that matches the pattern. +# Reply with "$access_map_defer_code optional +# text..." when the optional text is specified, oth- +# erwise reply with a generic error response message. +# +# This feature is available in Postfix 2.6 and later. +# +# DEFER_IF_REJECT optional text... +# Defer the request if some later restriction would +# result in a REJECT action. Reply with +# "$access_map_defer_code 4.7.1 optional text..." +# when the optional text is specified, otherwise +# reply with a generic error response message. +# +# Prior to Postfix 2.6, the SMTP reply code is 450. +# +# This feature is available in Postfix 2.1 and later. +# +# DEFER_IF_PERMIT optional text... +# Defer the request if some later restriction would +# result in a an explicit or implicit PERMIT action. +# Reply with "$access_map_defer_code 4.7.1 optional +# text..." when the optional text is specified, oth- +# erwise reply with a generic error response message. +# +# Prior to Postfix 2.6, the SMTP reply code is 450. +# +# This feature is available in Postfix 2.1 and later. +# +# For other reject actions, see "OTHER ACTIONS" below. +# +# OTHER ACTIONS +# restriction... +# Apply the named UCE restriction(s) (permit, reject, +# reject_unauth_destination, and so on). +# +# BCC user@domain +# Send one copy of the message to the specified +# recipient. +# +# If multiple BCC actions are specified within the +# same SMTP MAIL transaction, with Postfix 3.0 only +# the last action will be used. +# +# This feature is available in Postfix 3.0 and later. +# +# DISCARD optional text... +# Claim successful delivery and silently discard the +# message. Log the optional text if specified, oth- +# erwise log a generic message. +# +# Note: this action currently affects all recipients +# of the message. To discard only one recipient +# without discarding the entire message, use the +# transport(5) table to direct mail to the discard(8) +# service. +# +# This feature is available in Postfix 2.0 and later. +# +# DUNNO Pretend that the lookup key was not found. This +# prevents Postfix from trying substrings of the +# lookup key (such as a subdomain name, or a network +# address subnetwork). +# +# This feature is available in Postfix 2.0 and later. +# +# FILTER transport:destination +# After the message is queued, send the entire mes- +# sage through the specified external content filter. +# The transport name specifies the first field of a +# mail delivery agent definition in master.cf; the +# syntax of the next-hop destination is described in +# the manual page of the corresponding delivery +# agent. More information about external content +# filters is in the Postfix FILTER_README file. +# +# Note 1: do not use $number regular expression sub- +# stitutions for transport or destination unless you +# know that the information has a trusted origin. +# +# Note 2: this action overrides the main.cf con- +# tent_filter setting, and affects all recipients of +# the message. In the case that multiple FILTER +# actions fire, only the last one is executed. +# +# Note 3: the purpose of the FILTER command is to +# override message routing. To override the recipi- +# ent's transport but not the next-hop destination, +# specify an empty filter destination (Postfix 2.7 +# and later), or specify a transport:destination that +# delivers through a different Postfix instance +# (Postfix 2.6 and earlier). Other options are using +# the recipient-dependent transport_maps or the sen- +# der-dependent sender_dependent_default_transport- +# _maps features. +# +# This feature is available in Postfix 2.0 and later. +# +# HOLD optional text... +# Place the message on the hold queue, where it will +# sit until someone either deletes it or releases it +# for delivery. Log the optional text if specified, +# otherwise log a generic message. +# +# Mail that is placed on hold can be examined with +# the postcat(1) command, and can be destroyed or +# released with the postsuper(1) command. +# +# Note: use "postsuper -r" to release mail that was +# kept on hold for a significant fraction of $maxi- +# mal_queue_lifetime or $bounce_queue_lifetime, or +# longer. Use "postsuper -H" only for mail that will +# not expire within a few delivery attempts. +# +# Note: this action currently affects all recipients +# of the message. +# +# This feature is available in Postfix 2.0 and later. +# +# PREPEND headername: headervalue +# Prepend the specified message header to the mes- +# sage. When more than one PREPEND action executes, +# the first prepended header appears before the sec- +# ond etc. prepended header. +# +# Note: this action must execute before the message +# content is received; it cannot execute in the con- +# text of smtpd_end_of_data_restrictions. +# +# This feature is available in Postfix 2.1 and later. +# +# REDIRECT user@domain +# After the message is queued, send the message to +# the specified address instead of the intended +# recipient(s). When multiple REDIRECT actions fire, +# only the last one takes effect. +# +# Note: this action overrides the FILTER action, and +# currently overrides all recipients of the message. +# +# This feature is available in Postfix 2.1 and later. +# +# INFO optional text... +# Log an informational record with the optional text, +# together with client information and if available, +# with helo, sender, recipient and protocol informa- +# tion. +# +# This feature is available in Postfix 3.0 and later. +# +# WARN optional text... +# Log a warning with the optional text, together with +# client information and if available, with helo, +# sender, recipient and protocol information. +# +# This feature is available in Postfix 2.1 and later. +# +# ENHANCED STATUS CODES +# Postfix version 2.3 and later support enhanced status +# codes as defined in RFC 3463. When an enhanced status +# code is specified in an access table, it is subject to +# modification. The following transformations are needed +# when the same access table is used for client, helo, +# sender, or recipient access restrictions; they happen +# regardless of whether Postfix replies to a MAIL FROM, RCPT +# TO or other SMTP command. +# +# o When a sender address matches a REJECT action, the +# Postfix SMTP server will transform a recipient DSN +# status (e.g., 4.1.1-4.1.6) into the corresponding +# sender DSN status, and vice versa. +# +# o When non-address information matches a REJECT +# action (such as the HELO command argument or the +# client hostname/address), the Postfix SMTP server +# will transform a sender or recipient DSN status +# into a generic non-address DSN status (e.g., +# 4.0.0). +# +# REGULAR EXPRESSION TABLES +# This section describes how the table lookups change when +# the table is given in the form of regular expressions. For +# a description of regular expression lookup table syntax, +# see regexp_table(5) or pcre_table(5). +# +# Each pattern is a regular expression that is applied to +# the entire string being looked up. Depending on the appli- +# cation, that string is an entire client hostname, an +# entire client IP address, or an entire mail address. Thus, +# no parent domain or parent network search is done, +# user@domain mail addresses are not broken up into their +# user@ and domain constituent parts, nor is user+foo broken +# up into user and foo. +# +# Patterns are applied in the order as specified in the ta- +# ble, until a pattern is found that matches the search +# string. +# +# Actions are the same as with indexed file lookups, with +# the additional feature that parenthesized substrings from +# the pattern can be interpolated as $1, $2 and so on. +# +# TCP-BASED TABLES +# This section describes how the table lookups change when +# lookups are directed to a TCP-based server. For a descrip- +# tion of the TCP client/server lookup protocol, see tcp_ta- +# ble(5). This feature is not available up to and including +# Postfix version 2.4. +# +# Each lookup operation uses the entire query string once. +# Depending on the application, that string is an entire +# client hostname, an entire client IP address, or an entire +# mail address. Thus, no parent domain or parent network +# search is done, user@domain mail addresses are not broken +# up into their user@ and domain constituent parts, nor is +# user+foo broken up into user and foo. +# +# Actions are the same as with indexed file lookups. +# +# EXAMPLE +# The following example uses an indexed file, so that the +# order of table entries does not matter. The example per- +# mits access by the client at address 1.2.3.4 but rejects +# all other clients in 1.2.3.0/24. Instead of hash lookup +# tables, some systems use dbm. Use the command "postconf +# -m" to find out what lookup tables Postfix supports on +# your system. +# +# /etc/postfix/main.cf: +# smtpd_client_restrictions = +# check_client_access hash:/etc/postfix/access +# +# /etc/postfix/access: +# 1.2.3 REJECT +# 1.2.3.4 OK +# +# Execute the command "postmap /etc/postfix/access" after +# editing the file. +# +# BUGS +# The table format does not understand quoting conventions. +# +# SEE ALSO +# postmap(1), Postfix lookup table manager +# smtpd(8), SMTP server +# postconf(5), configuration parameters +# transport(5), transport:nexthop syntax +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# SMTPD_ACCESS_README, built-in SMTP server access control +# DATABASE_README, Postfix lookup table overview +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# ACCESS(5) diff --git a/templates/Fedora/36/etc/postfix/canonical b/templates/Fedora/36/etc/postfix/canonical new file mode 100644 index 0000000..9881f4e --- /dev/null +++ b/templates/Fedora/36/etc/postfix/canonical @@ -0,0 +1,307 @@ +# CANONICAL(5) CANONICAL(5) +# +# NAME +# canonical - Postfix canonical table format +# +# SYNOPSIS +# postmap /etc/postfix/canonical +# +# postmap -q "string" /etc/postfix/canonical +# +# postmap -q - /etc/postfix/canonical $/ +# REJECT IFRAME vulnerability exploit +# +# SEE ALSO +# cleanup(8), canonicalize and enqueue Postfix message +# pcre_table(5), format of PCRE lookup tables +# regexp_table(5), format of POSIX regular expression tables +# postconf(1), Postfix configuration utility +# postmap(1), Postfix lookup table management +# postsuper(1), Postfix janitor +# postcat(1), show Postfix queue file contents +# RFC 2045, base64 and quoted-printable encoding rules +# RFC 2047, message header encoding for non-ASCII text +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# DATABASE_README, Postfix lookup table overview +# CONTENT_INSPECTION_README, Postfix content inspection overview +# BUILTIN_FILTER_README, Postfix built-in content inspection +# BACKSCATTER_README, blocking returned forged mail +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# HEADER_CHECKS(5) diff --git a/templates/Fedora/36/etc/postfix/main.cf b/templates/Fedora/36/etc/postfix/main.cf new file mode 100644 index 0000000..5bf98a3 --- /dev/null +++ b/templates/Fedora/36/etc/postfix/main.cf @@ -0,0 +1,761 @@ +# Global Postfix configuration file. This file lists only a subset +# of all parameters. For the syntax, and for a complete parameter +# list, see the postconf(5) manual page (command: "man 5 postconf"). +# +# For common configuration examples, see BASIC_CONFIGURATION_README +# and STANDARD_CONFIGURATION_README. To find these documents, use +# the command "postconf html_directory readme_directory", or go to +# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. +# +# For best results, change no more than 2-3 parameters at a time, +# and test if Postfix still works after every change. + +# COMPATIBILITY +# +# The compatibility_level determines what default settings Postfix +# will use for main.cf and master.cf settings. These defaults will +# change over time. +# +# To avoid breaking things, Postfix will use backwards-compatible +# default settings and log where it uses those old backwards-compatible +# default settings, until the system administrator has determined +# if any backwards-compatible default settings need to be made +# permanent in main.cf or master.cf. +# +# When this review is complete, update the compatibility_level setting +# below as recommended in the RELEASE_NOTES file. +# +# The level below is what should be used with new (not upgrade) installs. +# +compatibility_level = 3.6 + +# SOFT BOUNCE +# +# The soft_bounce parameter provides a limited safety net for +# testing. When soft_bounce is enabled, mail will remain queued that +# would otherwise bounce. This parameter disables locally-generated +# bounces, and prevents the SMTP server from rejecting mail permanently +# (by changing 5xx replies into 4xx replies). However, soft_bounce +# is no cure for address rewriting mistakes or mail routing mistakes. +# +#soft_bounce = no + +# LOCAL PATHNAME INFORMATION +# +# The queue_directory specifies the location of the Postfix queue. +# This is also the root directory of Postfix daemons that run chrooted. +# See the files in examples/chroot-setup for setting up Postfix chroot +# environments on different UNIX systems. +# +queue_directory = /var/spool/postfix + +# The command_directory parameter specifies the location of all +# postXXX commands. +# +command_directory = /usr/sbin + +# The daemon_directory parameter specifies the location of all Postfix +# daemon programs (i.e. programs listed in the master.cf file). This +# directory must be owned by root. +# +daemon_directory = /usr/libexec/postfix + +# The data_directory parameter specifies the location of Postfix-writable +# data files (caches, random numbers). This directory must be owned +# by the mail_owner account (see below). +# +data_directory = /var/lib/postfix + +# QUEUE AND PROCESS OWNERSHIP +# +# The mail_owner parameter specifies the owner of the Postfix queue +# and of most Postfix daemon processes. Specify the name of a user +# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS +# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In +# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED +# USER. +# +mail_owner = postfix + +# The default_privs parameter specifies the default rights used by +# the local delivery agent for delivery to external file or command. +# These rights are used in the absence of a recipient user context. +# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. +# +#default_privs = nobody + +# INTERNET HOST AND DOMAIN NAMES +# +# The myhostname parameter specifies the internet hostname of this +# mail system. The default is to use the fully-qualified domain name +# from gethostname(). $myhostname is used as a default value for many +# other configuration parameters. +# +#myhostname = host.domain.tld +#myhostname = virtual.domain.tld + +# The mydomain parameter specifies the local internet domain name. +# The default is to use $myhostname minus the first component. +# $mydomain is used as a default value for many other configuration +# parameters. +# +#mydomain = domain.tld + +# SENDING MAIL +# +# The myorigin parameter specifies the domain that locally-posted +# mail appears to come from. The default is to append $myhostname, +# which is fine for small sites. If you run a domain with multiple +# machines, you should (1) change this to $mydomain and (2) set up +# a domain-wide alias database that aliases each user to +# user@that.users.mailhost. +# +# For the sake of consistency between sender and recipient addresses, +# myorigin also specifies the default domain name that is appended +# to recipient addresses that have no @domain part. +# +#myorigin = $myhostname +#myorigin = $mydomain + +# RECEIVING MAIL + +# The inet_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on. By default, +# the software claims all active interfaces on the machine. The +# parameter also controls delivery of mail to user@[ip.address]. +# +# See also the proxy_interfaces parameter, for network addresses that +# are forwarded to us via a proxy or network address translator. +# +# Note: you need to stop/start Postfix when this parameter changes. +# +inet_interfaces = all +#inet_interfaces = $myhostname +#inet_interfaces = $myhostname, localhost +#inet_interfaces = localhost + +# Enable IPv4, and IPv6 if supported +inet_protocols = all + +# The proxy_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on by way of a +# proxy or network address translation unit. This setting extends +# the address list specified with the inet_interfaces parameter. +# +# You must specify your proxy/NAT addresses when your system is a +# backup MX host for other domains, otherwise mail delivery loops +# will happen when the primary MX host is down. +# +#proxy_interfaces = +#proxy_interfaces = 1.2.3.4 + +# The mydestination parameter specifies the list of domains that this +# machine considers itself the final destination for. +# +# These domains are routed to the delivery agent specified with the +# local_transport parameter setting. By default, that is the UNIX +# compatible delivery agent that lookups all recipients in /etc/passwd +# and /etc/aliases or their equivalent. +# +# The default is $myhostname + localhost.$mydomain + localhost. On +# a mail domain gateway, you should also include $mydomain. +# +# Do not specify the names of virtual domains - those domains are +# specified elsewhere (see VIRTUAL_README). +# +# Do not specify the names of domains that this machine is backup MX +# host for. Specify those names via the relay_domains settings for +# the SMTP server, or use permit_mx_backup if you are lazy (see +# STANDARD_CONFIGURATION_README). +# +# The local machine is always the final destination for mail addressed +# to user@[the.net.work.address] of an interface that the mail system +# receives mail on (see the inet_interfaces parameter). +# +# Specify a list of host or domain names, /file/name or type:table +# patterns, separated by commas and/or whitespace. A /file/name +# pattern is replaced by its contents; a type:table is matched when +# a name matches a lookup key (the right-hand side is ignored). +# Continue long lines by starting the next line with whitespace. +# +# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". +# +mydestination = $myhostname, localhost.$mydomain, localhost +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, +# mail.$mydomain, www.$mydomain, ftp.$mydomain + +# REJECTING MAIL FOR UNKNOWN LOCAL USERS +# +# The local_recipient_maps parameter specifies optional lookup tables +# with all names or addresses of users that are local with respect +# to $mydestination, $inet_interfaces or $proxy_interfaces. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown local users. This parameter is defined by default. +# +# To turn off local recipient checking in the SMTP server, specify +# local_recipient_maps = (i.e. empty). +# +# The default setting assumes that you use the default Postfix local +# delivery agent for local delivery. You need to update the +# local_recipient_maps setting if: +# +# - You define $mydestination domain recipients in files other than +# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. +# For example, you define $mydestination domain recipients in +# the $virtual_mailbox_maps files. +# +# - You redefine the local delivery agent in master.cf. +# +# - You redefine the "local_transport" setting in main.cf. +# +# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" +# feature of the Postfix local delivery agent (see local(8)). +# +# Details are described in the LOCAL_RECIPIENT_README file. +# +# Beware: if the Postfix SMTP server runs chrooted, you probably have +# to access the passwd file via the proxymap service, in order to +# overcome chroot restrictions. The alternative, having a copy of +# the system passwd file in the chroot jail is just not practical. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify a bare username, an @domain.tld +# wild-card, or specify a user@domain.tld address. +# +#local_recipient_maps = unix:passwd.byname $alias_maps +#local_recipient_maps = proxy:unix:passwd.byname $alias_maps +#local_recipient_maps = + +# The unknown_local_recipient_reject_code specifies the SMTP server +# response code when a recipient domain matches $mydestination or +# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty +# and the recipient address or address local-part is not found. +# +# The default setting is 550 (reject mail) but it is safer to start +# with 450 (try again later) until you are certain that your +# local_recipient_maps settings are OK. +# +unknown_local_recipient_reject_code = 550 + +# TRUST AND RELAY CONTROL + +# The mynetworks parameter specifies the list of "trusted" SMTP +# clients that have more privileges than "strangers". +# +# In particular, "trusted" SMTP clients are allowed to relay mail +# through Postfix. See the smtpd_recipient_restrictions parameter +# in postconf(5). +# +# You can specify the list of "trusted" network addresses by hand +# or you can let Postfix do it for you (which is the default). +# +# By default (mynetworks_style = subnet), Postfix "trusts" SMTP +# clients in the same IP subnetworks as the local machine. +# On Linux, this works correctly only with interfaces specified +# with the "ifconfig" command. +# +# Specify "mynetworks_style = class" when Postfix should "trust" SMTP +# clients in the same IP class A/B/C networks as the local machine. +# Don't do this with a dialup site - it would cause Postfix to "trust" +# your entire provider's network. Instead, specify an explicit +# mynetworks list by hand, as described below. +# +# Specify "mynetworks_style = host" when Postfix should "trust" +# only the local machine. +# +#mynetworks_style = class +#mynetworks_style = subnet +#mynetworks_style = host + +# Alternatively, you can specify the mynetworks list by hand, in +# which case Postfix ignores the mynetworks_style setting. +# +# Specify an explicit list of network/netmask patterns, where the +# mask specifies the number of bits in the network part of a host +# address. +# +# You can also specify the absolute pathname of a pattern file instead +# of listing the patterns here. Specify type:table for table-based lookups +# (the value on the table right-hand side is not used). +# +#mynetworks = 168.100.3.0/28, 127.0.0.0/8 +#mynetworks = $config_directory/mynetworks +#mynetworks = hash:/etc/postfix/network_table + +# The relay_domains parameter restricts what destinations this system will +# relay mail to. See the smtpd_recipient_restrictions description in +# postconf(5) for detailed information. +# +# By default, Postfix relays mail +# - from "trusted" clients (IP address matches $mynetworks) to any destination, +# - from "untrusted" clients to destinations that match $relay_domains or +# subdomains thereof, except addresses with sender-specified routing. +# The default relay_domains value is $mydestination. +# +# In addition to the above, the Postfix SMTP server by default accepts mail +# that Postfix is final destination for: +# - destinations that match $inet_interfaces or $proxy_interfaces, +# - destinations that match $mydestination +# - destinations that match $virtual_alias_domains, +# - destinations that match $virtual_mailbox_domains. +# These destinations do not need to be listed in $relay_domains. +# +# Specify a list of hosts or domains, /file/name patterns or type:name +# lookup tables, separated by commas and/or whitespace. Continue +# long lines by starting the next line with whitespace. A file name +# is replaced by its contents; a type:name table is matched when a +# (parent) domain appears as lookup key. +# +# NOTE: Postfix will not automatically forward mail for domains that +# list this system as their primary or backup MX host. See the +# permit_mx_backup restriction description in postconf(5). +# +#relay_domains = $mydestination + +# INTERNET OR INTRANET + +# The relayhost parameter specifies the default host to send mail to +# when no entry is matched in the optional transport(5) table. When +# no relayhost is given, mail is routed directly to the destination. +# +# On an intranet, specify the organizational domain name. If your +# internal DNS uses no MX records, specify the name of the intranet +# gateway host instead. +# +# In the case of SMTP, specify a domain, host, host:port, [host]:port, +# [address] or [address]:port; the form [host] turns off MX lookups. +# +# If you're connected via UUCP, see also the default_transport parameter. +# +#relayhost = $mydomain +#relayhost = [gateway.my.domain] +#relayhost = [mailserver.isp.tld] +#relayhost = uucphost +#relayhost = [an.ip.add.ress] + +# REJECTING UNKNOWN RELAY USERS +# +# The relay_recipient_maps parameter specifies optional lookup tables +# with all addresses in the domains that match $relay_domains. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown relay users. This feature is off by default. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify an @domain.tld wild-card, or specify +# a user@domain.tld address. +# +#relay_recipient_maps = hash:/etc/postfix/relay_recipients + +# INPUT RATE CONTROL +# +# The in_flow_delay configuration parameter implements mail input +# flow control. This feature is turned on by default, although it +# still needs further development (it's disabled on SCO UNIX due +# to an SCO bug). +# +# A Postfix process will pause for $in_flow_delay seconds before +# accepting a new message, when the message arrival rate exceeds the +# message delivery rate. With the default 100 SMTP server process +# limit, this limits the mail inflow to 100 messages a second more +# than the number of messages delivered per second. +# +# Specify 0 to disable the feature. Valid delays are 0..10. +# +#in_flow_delay = 1s + +# ADDRESS REWRITING +# +# The ADDRESS_REWRITING_README document gives information about +# address masquerading or other forms of address rewriting including +# username->Firstname.Lastname mapping. + +# ADDRESS REDIRECTION (VIRTUAL DOMAIN) +# +# The VIRTUAL_README document gives information about the many forms +# of domain hosting that Postfix supports. + +# "USER HAS MOVED" BOUNCE MESSAGES +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# TRANSPORT MAP +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# ALIAS DATABASE +# +# The alias_maps parameter specifies the list of alias databases used +# by the local delivery agent. The default list is system dependent. +# +# On systems with NIS, the default is to search the local alias +# database, then the NIS alias database. See aliases(5) for syntax +# details. +# +# If you change the alias database, run "postalias /etc/aliases" (or +# wherever your system stores the mail alias file), or simply run +# "newaliases" to build the necessary DBM or DB file. +# +# It will take a minute or so before changes become visible. Use +# "postfix reload" to eliminate the delay. +# +#alias_maps = dbm:/etc/aliases +alias_maps = hash:/etc/aliases +#alias_maps = hash:/etc/aliases, nis:mail.aliases +#alias_maps = netinfo:/aliases + +# The alias_database parameter specifies the alias database(s) that +# are built with "newaliases" or "sendmail -bi". This is a separate +# configuration parameter, because alias_maps (see above) may specify +# tables that are not necessarily all under control by Postfix. +# +#alias_database = dbm:/etc/aliases +#alias_database = dbm:/etc/mail/aliases +alias_database = hash:/etc/aliases +#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases + +# ADDRESS EXTENSIONS (e.g., user+foo) +# +# The recipient_delimiter parameter specifies the separator between +# user names and address extensions (user+foo). See canonical(5), +# local(8), relocated(5) and virtual(5) for the effects this has on +# aliases, canonical, virtual, relocated and .forward file lookups. +# Basically, the software tries user+foo and .forward+foo before +# trying user and .forward. +# +#recipient_delimiter = + + +# DELIVERY TO MAILBOX +# +# The home_mailbox parameter specifies the optional pathname of a +# mailbox file relative to a user's home directory. The default +# mailbox file is /var/spool/mail/user or /var/mail/user. Specify +# "Maildir/" for qmail-style delivery (the / is required). +# +#home_mailbox = Mailbox +#home_mailbox = Maildir/ + +# The mail_spool_directory parameter specifies the directory where +# UNIX-style mailboxes are kept. The default setting depends on the +# system type. +# +#mail_spool_directory = /var/mail +#mail_spool_directory = /var/spool/mail + +# The mailbox_command parameter specifies the optional external +# command to use instead of mailbox delivery. The command is run as +# the recipient with proper HOME, SHELL and LOGNAME environment settings. +# Exception: delivery for root is done as $default_user. +# +# Other environment variables of interest: USER (recipient username), +# EXTENSION (address extension), DOMAIN (domain part of address), +# and LOCAL (the address localpart). +# +# Unlike other Postfix configuration parameters, the mailbox_command +# parameter is not subjected to $parameter substitutions. This is to +# make it easier to specify shell syntax (see example below). +# +# Avoid shell meta characters because they will force Postfix to run +# an expensive shell process. Procmail alone is expensive enough. +# +# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN +# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. +# +#mailbox_command = /some/where/procmail +#mailbox_command = /some/where/procmail -a "$EXTENSION" + +# The mailbox_transport specifies the optional transport in master.cf +# to use after processing aliases and .forward files. This parameter +# has precedence over the mailbox_command, fallback_transport and +# luser_relay parameters. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" +# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. +#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp +mailbox_transport = lmtp:inet:localhost:24 +virtual_transport = lmtp:inet:localhost:24 + +# If using the cyrus-imapd IMAP server deliver local mail to the IMAP +# server using LMTP (Local Mail Transport Protocol), this is prefered +# over the older cyrus deliver program by setting the +# mailbox_transport as below: +# +# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp +# +# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via +# these settings. +# +# local_destination_recipient_limit = 300 +# local_destination_concurrency_limit = 5 +# +# Of course you should adjust these settings as appropriate for the +# capacity of the hardware you are using. The recipient limit setting +# can be used to take advantage of the single instance message store +# capability of Cyrus. The concurrency limit can be used to control +# how many simultaneous LMTP sessions will be permitted to the Cyrus +# message store. +# +# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and +# subsequent line in master.cf. +#mailbox_transport = cyrus + +# The fallback_transport specifies the optional transport in master.cf +# to use for recipients that are not found in the UNIX passwd database. +# This parameter has precedence over the luser_relay parameter. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp +#fallback_transport = + +# The luser_relay parameter specifies an optional destination address +# for unknown recipients. By default, mail for unknown@$mydestination, +# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned +# as undeliverable. +# +# The following expansions are done on luser_relay: $user (recipient +# username), $shell (recipient shell), $home (recipient home directory), +# $recipient (full recipient address), $extension (recipient address +# extension), $domain (recipient domain), $local (entire recipient +# localpart), $recipient_delimiter. Specify ${name?value} or +# ${name:value} to expand value only when $name does (does not) exist. +# +# luser_relay works only for the default Postfix local delivery agent. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must specify "local_recipient_maps =" (i.e. empty) in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#luser_relay = $user@other.host +#luser_relay = $local@other.host +#luser_relay = admin+$local + +# JUNK MAIL CONTROLS +# +# The controls listed here are only a very small subset. The file +# SMTPD_ACCESS_README provides an overview. + +# The header_checks parameter specifies an optional table with patterns +# that each logical message header is matched against, including +# headers that span multiple physical lines. +# +# By default, these patterns also apply to MIME headers and to the +# headers of attached messages. With older Postfix versions, MIME and +# attached message headers were treated as body text. +# +# For details, see "man header_checks". +# +#header_checks = regexp:/etc/postfix/header_checks + +# FAST ETRN SERVICE +# +# Postfix maintains per-destination logfiles with information about +# deferred mail, so that mail can be flushed quickly with the SMTP +# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". +# See the ETRN_README document for a detailed description. +# +# The fast_flush_domains parameter controls what destinations are +# eligible for this service. By default, they are all domains that +# this server is willing to relay mail to. +# +#fast_flush_domains = $relay_domains + +# SHOW SOFTWARE VERSION OR NOT +# +# The smtpd_banner parameter specifies the text that follows the 220 +# code in the SMTP server's greeting banner. Some people like to see +# the mail version advertised. By default, Postfix shows no version. +# +# You MUST specify $myhostname at the start of the text. That is an +# RFC requirement. Postfix itself does not care. +# +#smtpd_banner = $myhostname ESMTP $mail_name +#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) + +# PARALLEL DELIVERY TO THE SAME DESTINATION +# +# How many parallel deliveries to the same user or domain? With local +# delivery, it does not make sense to do massively parallel delivery +# to the same user, because mailbox updates must happen sequentially, +# and expensive pipelines in .forward files can cause disasters when +# too many are run at the same time. With SMTP deliveries, 10 +# simultaneous connections to the same domain could be sufficient to +# raise eyebrows. +# +# Each message delivery transport has its XXX_destination_concurrency_limit +# parameter. The default is $default_destination_concurrency_limit for +# most delivery transports. For the local delivery agent the default is 2. + +#local_destination_concurrency_limit = 2 +#default_destination_concurrency_limit = 20 + +# DEBUGGING CONTROL +# +# The debug_peer_level parameter specifies the increment in verbose +# logging level when an SMTP client or server host name or address +# matches a pattern in the debug_peer_list parameter. +# +debug_peer_level = 2 + +# The debug_peer_list parameter specifies an optional list of domain +# or network patterns, /file/name patterns or type:name tables. When +# an SMTP client or server host name or address matches a pattern, +# increase the verbose logging level by the amount specified in the +# debug_peer_level parameter. +# +#debug_peer_list = 127.0.0.1 +#debug_peer_list = some.domain + +# The debugger_command specifies the external command that is executed +# when a Postfix daemon program is run with the -D option. +# +# Use "command .. & sleep 5" so that the debugger can attach before +# the process marches on. If you use an X-based debugger, be sure to +# set up your XAUTHORITY environment variable before starting Postfix. +# +debugger_command = + PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin + ddd $daemon_directory/$process_name $process_id & sleep 5 + +# If you can't use X, use this to capture the call stack when a +# daemon crashes. The result is in a file in the configuration +# directory, and is named after the process name and the process ID. +# +# debugger_command = +# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; +# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 +# >$config_directory/$process_name.$process_id.log & sleep 5 +# +# Another possibility is to run gdb under a detached screen session. +# To attach to the screen session, su root and run "screen -r +# " where uniquely matches one of the detached +# sessions (from "screen -list"). +# +# debugger_command = +# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen +# -dmS $process_name gdb $daemon_directory/$process_name +# $process_id & sleep 1 + +# INSTALL-TIME CONFIGURATION INFORMATION +# +# The following parameters are used when installing a new Postfix version. +# +# sendmail_path: The full pathname of the Postfix sendmail command. +# This is the Sendmail-compatible mail posting interface. +# +sendmail_path = /usr/sbin/sendmail.postfix + +# newaliases_path: The full pathname of the Postfix newaliases command. +# This is the Sendmail-compatible command to build alias databases. +# +newaliases_path = /usr/bin/newaliases.postfix + +# mailq_path: The full pathname of the Postfix mailq command. This +# is the Sendmail-compatible mail queue listing command. +# +mailq_path = /usr/bin/mailq.postfix + +# setgid_group: The group for mail submission and queue management +# commands. This must be a group name with a numerical group ID that +# is not shared with other accounts, not even with the Postfix account. +# +setgid_group = postdrop + +# html_directory: The location of the Postfix HTML documentation. +# +html_directory = no + +# manpage_directory: The location of the Postfix on-line manual pages. +# +manpage_directory = /usr/share/man + +# sample_directory: The location of the Postfix sample configuration files. +# This parameter is obsolete as of Postfix 2.1. +# +sample_directory = /usr/share/doc/postfix/samples + +# readme_directory: The location of the Postfix README files. +# +readme_directory = /usr/share/doc/postfix/README_FILES + +# TLS CONFIGURATION +# +# Basic Postfix TLS configuration by default with self-signed certificate +# for inbound SMTP and also opportunistic TLS for outbound SMTP. + +# The full pathname of a file with the Postfix SMTP server RSA certificate +# in PEM format. Intermediate certificates should be included in general, +# the server certificate first, then the issuing CA(s) (bottom-up order). +# +# smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem +smtpd_tls_cert_file = /etc/postfix/certificates/pubcert.pem + +# The full pathname of a file with the Postfix SMTP server RSA private key +# in PEM format. The private key must be accessible without a pass-phrase, +# i.e. it must not be encrypted. +# +# smtpd_tls_key_file = /etc/pki/tls/private/postfix.key +smtpd_tls_key_file = /etc/postfix/certificates/privkey.pem + +# Announce STARTTLS support to remote SMTP clients, but do not require that +# clients use TLS encryption (opportunistic TLS inbound). +# +smtpd_tls_security_level = may + +# Directory with PEM format Certification Authority certificates that the +# Postfix SMTP client uses to verify a remote SMTP server certificate. +# +smtp_tls_CApath = /etc/pki/tls/certs + +# The full pathname of a file containing CA certificates of root CAs +# trusted to sign either remote SMTP server certificates or intermediate CA +# certificates. +# +smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt + +# Use TLS if this is supported by the remote SMTP server, otherwise use +# plaintext (opportunistic TLS outbound). +# +smtp_tls_security_level = may +meta_directory = /etc/postfix +shlib_directory = /usr/lib64/postfix + +{% if ensure_postfix.milter_list is defined and ensure_postfix.milter_list is iterable %} +# The Milter List +{% for milter in ensure_postfix.milter_list %} +# -- {{ milter.description }} -- {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} +{% endfor %} +smtpd_milters = {% for milter in ensure_postfix.milter_list %} {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} {% endfor %} +{% endif %} + +{% if postfix_domains is defined and postfix_domains is iterable %} +virtual_mailbox_domains = {% for domain in postfix_domains %} {{ domain }} {% endfor %} +{% endif %} + +2bounce_notice_recipient = {{ postmaster_email }} +bounce_notice_recipient = {{ postmaster_email }} +delay_notice_recipient = {{ postmaster_email }} +error_notice_recipient = {{ postmaster_email }} +smtpd_helo_required = yes +disable_vrfy_command = yes diff --git a/templates/Fedora/36/etc/postfix/main.cf.proto b/templates/Fedora/36/etc/postfix/main.cf.proto new file mode 100644 index 0000000..9bef4f2 --- /dev/null +++ b/templates/Fedora/36/etc/postfix/main.cf.proto @@ -0,0 +1,736 @@ +# Global Postfix configuration file. This file lists only a subset +# of all parameters. For the syntax, and for a complete parameter +# list, see the postconf(5) manual page (command: "man 5 postconf"). +# +# For common configuration examples, see BASIC_CONFIGURATION_README +# and STANDARD_CONFIGURATION_README. To find these documents, use +# the command "postconf html_directory readme_directory", or go to +# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. +# +# For best results, change no more than 2-3 parameters at a time, +# and test if Postfix still works after every change. + +# COMPATIBILITY +# +# The compatibility_level determines what default settings Postfix +# will use for main.cf and master.cf settings. These defaults will +# change over time. +# +# To avoid breaking things, Postfix will use backwards-compatible +# default settings and log where it uses those old backwards-compatible +# default settings, until the system administrator has determined +# if any backwards-compatible default settings need to be made +# permanent in main.cf or master.cf. +# +# When this review is complete, update the compatibility_level setting +# below as recommended in the RELEASE_NOTES file. +# +# The level below is what should be used with new (not upgrade) installs. +# +compatibility_level = 3.6 + +# SOFT BOUNCE +# +# The soft_bounce parameter provides a limited safety net for +# testing. When soft_bounce is enabled, mail will remain queued that +# would otherwise bounce. This parameter disables locally-generated +# bounces, and prevents the SMTP server from rejecting mail permanently +# (by changing 5xx replies into 4xx replies). However, soft_bounce +# is no cure for address rewriting mistakes or mail routing mistakes. +# +#soft_bounce = no + +# LOCAL PATHNAME INFORMATION +# +# The queue_directory specifies the location of the Postfix queue. +# This is also the root directory of Postfix daemons that run chrooted. +# See the files in examples/chroot-setup for setting up Postfix chroot +# environments on different UNIX systems. +# +queue_directory = /var/spool/postfix + +# The command_directory parameter specifies the location of all +# postXXX commands. +# +command_directory = /usr/sbin + +# The daemon_directory parameter specifies the location of all Postfix +# daemon programs (i.e. programs listed in the master.cf file). This +# directory must be owned by root. +# +daemon_directory = /usr/libexec/postfix + +# The data_directory parameter specifies the location of Postfix-writable +# data files (caches, random numbers). This directory must be owned +# by the mail_owner account (see below). +# +data_directory = /var/lib/postfix + +# QUEUE AND PROCESS OWNERSHIP +# +# The mail_owner parameter specifies the owner of the Postfix queue +# and of most Postfix daemon processes. Specify the name of a user +# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS +# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In +# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED +# USER. +# +mail_owner = postfix + +# The default_privs parameter specifies the default rights used by +# the local delivery agent for delivery to external file or command. +# These rights are used in the absence of a recipient user context. +# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. +# +#default_privs = nobody + +# INTERNET HOST AND DOMAIN NAMES +# +# The myhostname parameter specifies the internet hostname of this +# mail system. The default is to use the fully-qualified domain name +# from gethostname(). $myhostname is used as a default value for many +# other configuration parameters. +# +#myhostname = host.domain.tld +#myhostname = virtual.domain.tld + +# The mydomain parameter specifies the local internet domain name. +# The default is to use $myhostname minus the first component. +# $mydomain is used as a default value for many other configuration +# parameters. +# +#mydomain = domain.tld + +# SENDING MAIL +# +# The myorigin parameter specifies the domain that locally-posted +# mail appears to come from. The default is to append $myhostname, +# which is fine for small sites. If you run a domain with multiple +# machines, you should (1) change this to $mydomain and (2) set up +# a domain-wide alias database that aliases each user to +# user@that.users.mailhost. +# +# For the sake of consistency between sender and recipient addresses, +# myorigin also specifies the default domain name that is appended +# to recipient addresses that have no @domain part. +# +#myorigin = $myhostname +#myorigin = $mydomain + +# RECEIVING MAIL + +# The inet_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on. By default, +# the software claims all active interfaces on the machine. The +# parameter also controls delivery of mail to user@[ip.address]. +# +# See also the proxy_interfaces parameter, for network addresses that +# are forwarded to us via a proxy or network address translator. +# +# Note: you need to stop/start Postfix when this parameter changes. +# +#inet_interfaces = all +#inet_interfaces = $myhostname +#inet_interfaces = $myhostname, localhost +inet_interfaces = localhost + +# Enable IPv4, and IPv6 if supported +inet_protocols = all + +# The proxy_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on by way of a +# proxy or network address translation unit. This setting extends +# the address list specified with the inet_interfaces parameter. +# +# You must specify your proxy/NAT addresses when your system is a +# backup MX host for other domains, otherwise mail delivery loops +# will happen when the primary MX host is down. +# +#proxy_interfaces = +#proxy_interfaces = 1.2.3.4 + +# The mydestination parameter specifies the list of domains that this +# machine considers itself the final destination for. +# +# These domains are routed to the delivery agent specified with the +# local_transport parameter setting. By default, that is the UNIX +# compatible delivery agent that lookups all recipients in /etc/passwd +# and /etc/aliases or their equivalent. +# +# The default is $myhostname + localhost.$mydomain + localhost. On +# a mail domain gateway, you should also include $mydomain. +# +# Do not specify the names of virtual domains - those domains are +# specified elsewhere (see VIRTUAL_README). +# +# Do not specify the names of domains that this machine is backup MX +# host for. Specify those names via the relay_domains settings for +# the SMTP server, or use permit_mx_backup if you are lazy (see +# STANDARD_CONFIGURATION_README). +# +# The local machine is always the final destination for mail addressed +# to user@[the.net.work.address] of an interface that the mail system +# receives mail on (see the inet_interfaces parameter). +# +# Specify a list of host or domain names, /file/name or type:table +# patterns, separated by commas and/or whitespace. A /file/name +# pattern is replaced by its contents; a type:table is matched when +# a name matches a lookup key (the right-hand side is ignored). +# Continue long lines by starting the next line with whitespace. +# +# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". +# +mydestination = $myhostname, localhost.$mydomain, localhost +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, +# mail.$mydomain, www.$mydomain, ftp.$mydomain + +# REJECTING MAIL FOR UNKNOWN LOCAL USERS +# +# The local_recipient_maps parameter specifies optional lookup tables +# with all names or addresses of users that are local with respect +# to $mydestination, $inet_interfaces or $proxy_interfaces. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown local users. This parameter is defined by default. +# +# To turn off local recipient checking in the SMTP server, specify +# local_recipient_maps = (i.e. empty). +# +# The default setting assumes that you use the default Postfix local +# delivery agent for local delivery. You need to update the +# local_recipient_maps setting if: +# +# - You define $mydestination domain recipients in files other than +# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. +# For example, you define $mydestination domain recipients in +# the $virtual_mailbox_maps files. +# +# - You redefine the local delivery agent in master.cf. +# +# - You redefine the "local_transport" setting in main.cf. +# +# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" +# feature of the Postfix local delivery agent (see local(8)). +# +# Details are described in the LOCAL_RECIPIENT_README file. +# +# Beware: if the Postfix SMTP server runs chrooted, you probably have +# to access the passwd file via the proxymap service, in order to +# overcome chroot restrictions. The alternative, having a copy of +# the system passwd file in the chroot jail is just not practical. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify a bare username, an @domain.tld +# wild-card, or specify a user@domain.tld address. +# +#local_recipient_maps = unix:passwd.byname $alias_maps +#local_recipient_maps = proxy:unix:passwd.byname $alias_maps +#local_recipient_maps = + +# The unknown_local_recipient_reject_code specifies the SMTP server +# response code when a recipient domain matches $mydestination or +# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty +# and the recipient address or address local-part is not found. +# +# The default setting is 550 (reject mail) but it is safer to start +# with 450 (try again later) until you are certain that your +# local_recipient_maps settings are OK. +# +unknown_local_recipient_reject_code = 550 + +# TRUST AND RELAY CONTROL + +# The mynetworks parameter specifies the list of "trusted" SMTP +# clients that have more privileges than "strangers". +# +# In particular, "trusted" SMTP clients are allowed to relay mail +# through Postfix. See the smtpd_recipient_restrictions parameter +# in postconf(5). +# +# You can specify the list of "trusted" network addresses by hand +# or you can let Postfix do it for you (which is the default). +# +# By default (mynetworks_style = subnet), Postfix "trusts" SMTP +# clients in the same IP subnetworks as the local machine. +# On Linux, this works correctly only with interfaces specified +# with the "ifconfig" command. +# +# Specify "mynetworks_style = class" when Postfix should "trust" SMTP +# clients in the same IP class A/B/C networks as the local machine. +# Don't do this with a dialup site - it would cause Postfix to "trust" +# your entire provider's network. Instead, specify an explicit +# mynetworks list by hand, as described below. +# +# Specify "mynetworks_style = host" when Postfix should "trust" +# only the local machine. +# +#mynetworks_style = class +#mynetworks_style = subnet +#mynetworks_style = host + +# Alternatively, you can specify the mynetworks list by hand, in +# which case Postfix ignores the mynetworks_style setting. +# +# Specify an explicit list of network/netmask patterns, where the +# mask specifies the number of bits in the network part of a host +# address. +# +# You can also specify the absolute pathname of a pattern file instead +# of listing the patterns here. Specify type:table for table-based lookups +# (the value on the table right-hand side is not used). +# +#mynetworks = 168.100.3.0/28, 127.0.0.0/8 +#mynetworks = $config_directory/mynetworks +#mynetworks = hash:/etc/postfix/network_table + +# The relay_domains parameter restricts what destinations this system will +# relay mail to. See the smtpd_recipient_restrictions description in +# postconf(5) for detailed information. +# +# By default, Postfix relays mail +# - from "trusted" clients (IP address matches $mynetworks) to any destination, +# - from "untrusted" clients to destinations that match $relay_domains or +# subdomains thereof, except addresses with sender-specified routing. +# The default relay_domains value is $mydestination. +# +# In addition to the above, the Postfix SMTP server by default accepts mail +# that Postfix is final destination for: +# - destinations that match $inet_interfaces or $proxy_interfaces, +# - destinations that match $mydestination +# - destinations that match $virtual_alias_domains, +# - destinations that match $virtual_mailbox_domains. +# These destinations do not need to be listed in $relay_domains. +# +# Specify a list of hosts or domains, /file/name patterns or type:name +# lookup tables, separated by commas and/or whitespace. Continue +# long lines by starting the next line with whitespace. A file name +# is replaced by its contents; a type:name table is matched when a +# (parent) domain appears as lookup key. +# +# NOTE: Postfix will not automatically forward mail for domains that +# list this system as their primary or backup MX host. See the +# permit_mx_backup restriction description in postconf(5). +# +#relay_domains = $mydestination + +# INTERNET OR INTRANET + +# The relayhost parameter specifies the default host to send mail to +# when no entry is matched in the optional transport(5) table. When +# no relayhost is given, mail is routed directly to the destination. +# +# On an intranet, specify the organizational domain name. If your +# internal DNS uses no MX records, specify the name of the intranet +# gateway host instead. +# +# In the case of SMTP, specify a domain, host, host:port, [host]:port, +# [address] or [address]:port; the form [host] turns off MX lookups. +# +# If you're connected via UUCP, see also the default_transport parameter. +# +#relayhost = $mydomain +#relayhost = [gateway.my.domain] +#relayhost = [mailserver.isp.tld] +#relayhost = uucphost +#relayhost = [an.ip.add.ress] + +# REJECTING UNKNOWN RELAY USERS +# +# The relay_recipient_maps parameter specifies optional lookup tables +# with all addresses in the domains that match $relay_domains. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown relay users. This feature is off by default. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify an @domain.tld wild-card, or specify +# a user@domain.tld address. +# +#relay_recipient_maps = hash:/etc/postfix/relay_recipients + +# INPUT RATE CONTROL +# +# The in_flow_delay configuration parameter implements mail input +# flow control. This feature is turned on by default, although it +# still needs further development (it's disabled on SCO UNIX due +# to an SCO bug). +# +# A Postfix process will pause for $in_flow_delay seconds before +# accepting a new message, when the message arrival rate exceeds the +# message delivery rate. With the default 100 SMTP server process +# limit, this limits the mail inflow to 100 messages a second more +# than the number of messages delivered per second. +# +# Specify 0 to disable the feature. Valid delays are 0..10. +# +#in_flow_delay = 1s + +# ADDRESS REWRITING +# +# The ADDRESS_REWRITING_README document gives information about +# address masquerading or other forms of address rewriting including +# username->Firstname.Lastname mapping. + +# ADDRESS REDIRECTION (VIRTUAL DOMAIN) +# +# The VIRTUAL_README document gives information about the many forms +# of domain hosting that Postfix supports. + +# "USER HAS MOVED" BOUNCE MESSAGES +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# TRANSPORT MAP +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# ALIAS DATABASE +# +# The alias_maps parameter specifies the list of alias databases used +# by the local delivery agent. The default list is system dependent. +# +# On systems with NIS, the default is to search the local alias +# database, then the NIS alias database. See aliases(5) for syntax +# details. +# +# If you change the alias database, run "postalias /etc/aliases" (or +# wherever your system stores the mail alias file), or simply run +# "newaliases" to build the necessary DBM or DB file. +# +# It will take a minute or so before changes become visible. Use +# "postfix reload" to eliminate the delay. +# +#alias_maps = dbm:/etc/aliases +alias_maps = hash:/etc/aliases +#alias_maps = hash:/etc/aliases, nis:mail.aliases +#alias_maps = netinfo:/aliases + +# The alias_database parameter specifies the alias database(s) that +# are built with "newaliases" or "sendmail -bi". This is a separate +# configuration parameter, because alias_maps (see above) may specify +# tables that are not necessarily all under control by Postfix. +# +#alias_database = dbm:/etc/aliases +#alias_database = dbm:/etc/mail/aliases +alias_database = hash:/etc/aliases +#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases + +# ADDRESS EXTENSIONS (e.g., user+foo) +# +# The recipient_delimiter parameter specifies the separator between +# user names and address extensions (user+foo). See canonical(5), +# local(8), relocated(5) and virtual(5) for the effects this has on +# aliases, canonical, virtual, relocated and .forward file lookups. +# Basically, the software tries user+foo and .forward+foo before +# trying user and .forward. +# +#recipient_delimiter = + + +# DELIVERY TO MAILBOX +# +# The home_mailbox parameter specifies the optional pathname of a +# mailbox file relative to a user's home directory. The default +# mailbox file is /var/spool/mail/user or /var/mail/user. Specify +# "Maildir/" for qmail-style delivery (the / is required). +# +#home_mailbox = Mailbox +#home_mailbox = Maildir/ + +# The mail_spool_directory parameter specifies the directory where +# UNIX-style mailboxes are kept. The default setting depends on the +# system type. +# +#mail_spool_directory = /var/mail +#mail_spool_directory = /var/spool/mail + +# The mailbox_command parameter specifies the optional external +# command to use instead of mailbox delivery. The command is run as +# the recipient with proper HOME, SHELL and LOGNAME environment settings. +# Exception: delivery for root is done as $default_user. +# +# Other environment variables of interest: USER (recipient username), +# EXTENSION (address extension), DOMAIN (domain part of address), +# and LOCAL (the address localpart). +# +# Unlike other Postfix configuration parameters, the mailbox_command +# parameter is not subjected to $parameter substitutions. This is to +# make it easier to specify shell syntax (see example below). +# +# Avoid shell meta characters because they will force Postfix to run +# an expensive shell process. Procmail alone is expensive enough. +# +# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN +# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. +# +#mailbox_command = /some/where/procmail +#mailbox_command = /some/where/procmail -a "$EXTENSION" + +# The mailbox_transport specifies the optional transport in master.cf +# to use after processing aliases and .forward files. This parameter +# has precedence over the mailbox_command, fallback_transport and +# luser_relay parameters. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" +# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. +#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp + +# If using the cyrus-imapd IMAP server deliver local mail to the IMAP +# server using LMTP (Local Mail Transport Protocol), this is prefered +# over the older cyrus deliver program by setting the +# mailbox_transport as below: +# +# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp +# +# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via +# these settings. +# +# local_destination_recipient_limit = 300 +# local_destination_concurrency_limit = 5 +# +# Of course you should adjust these settings as appropriate for the +# capacity of the hardware you are using. The recipient limit setting +# can be used to take advantage of the single instance message store +# capability of Cyrus. The concurrency limit can be used to control +# how many simultaneous LMTP sessions will be permitted to the Cyrus +# message store. +# +# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and +# subsequent line in master.cf. +#mailbox_transport = cyrus + +# The fallback_transport specifies the optional transport in master.cf +# to use for recipients that are not found in the UNIX passwd database. +# This parameter has precedence over the luser_relay parameter. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp +#fallback_transport = + +# The luser_relay parameter specifies an optional destination address +# for unknown recipients. By default, mail for unknown@$mydestination, +# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned +# as undeliverable. +# +# The following expansions are done on luser_relay: $user (recipient +# username), $shell (recipient shell), $home (recipient home directory), +# $recipient (full recipient address), $extension (recipient address +# extension), $domain (recipient domain), $local (entire recipient +# localpart), $recipient_delimiter. Specify ${name?value} or +# ${name:value} to expand value only when $name does (does not) exist. +# +# luser_relay works only for the default Postfix local delivery agent. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must specify "local_recipient_maps =" (i.e. empty) in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#luser_relay = $user@other.host +#luser_relay = $local@other.host +#luser_relay = admin+$local + +# JUNK MAIL CONTROLS +# +# The controls listed here are only a very small subset. The file +# SMTPD_ACCESS_README provides an overview. + +# The header_checks parameter specifies an optional table with patterns +# that each logical message header is matched against, including +# headers that span multiple physical lines. +# +# By default, these patterns also apply to MIME headers and to the +# headers of attached messages. With older Postfix versions, MIME and +# attached message headers were treated as body text. +# +# For details, see "man header_checks". +# +#header_checks = regexp:/etc/postfix/header_checks + +# FAST ETRN SERVICE +# +# Postfix maintains per-destination logfiles with information about +# deferred mail, so that mail can be flushed quickly with the SMTP +# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". +# See the ETRN_README document for a detailed description. +# +# The fast_flush_domains parameter controls what destinations are +# eligible for this service. By default, they are all domains that +# this server is willing to relay mail to. +# +#fast_flush_domains = $relay_domains + +# SHOW SOFTWARE VERSION OR NOT +# +# The smtpd_banner parameter specifies the text that follows the 220 +# code in the SMTP server's greeting banner. Some people like to see +# the mail version advertised. By default, Postfix shows no version. +# +# You MUST specify $myhostname at the start of the text. That is an +# RFC requirement. Postfix itself does not care. +# +#smtpd_banner = $myhostname ESMTP $mail_name +#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) + +# PARALLEL DELIVERY TO THE SAME DESTINATION +# +# How many parallel deliveries to the same user or domain? With local +# delivery, it does not make sense to do massively parallel delivery +# to the same user, because mailbox updates must happen sequentially, +# and expensive pipelines in .forward files can cause disasters when +# too many are run at the same time. With SMTP deliveries, 10 +# simultaneous connections to the same domain could be sufficient to +# raise eyebrows. +# +# Each message delivery transport has its XXX_destination_concurrency_limit +# parameter. The default is $default_destination_concurrency_limit for +# most delivery transports. For the local delivery agent the default is 2. + +#local_destination_concurrency_limit = 2 +#default_destination_concurrency_limit = 20 + +# DEBUGGING CONTROL +# +# The debug_peer_level parameter specifies the increment in verbose +# logging level when an SMTP client or server host name or address +# matches a pattern in the debug_peer_list parameter. +# +debug_peer_level = 2 + +# The debug_peer_list parameter specifies an optional list of domain +# or network patterns, /file/name patterns or type:name tables. When +# an SMTP client or server host name or address matches a pattern, +# increase the verbose logging level by the amount specified in the +# debug_peer_level parameter. +# +#debug_peer_list = 127.0.0.1 +#debug_peer_list = some.domain + +# The debugger_command specifies the external command that is executed +# when a Postfix daemon program is run with the -D option. +# +# Use "command .. & sleep 5" so that the debugger can attach before +# the process marches on. If you use an X-based debugger, be sure to +# set up your XAUTHORITY environment variable before starting Postfix. +# +debugger_command = + PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin + ddd $daemon_directory/$process_name $process_id & sleep 5 + +# If you can't use X, use this to capture the call stack when a +# daemon crashes. The result is in a file in the configuration +# directory, and is named after the process name and the process ID. +# +# debugger_command = +# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; +# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 +# >$config_directory/$process_name.$process_id.log & sleep 5 +# +# Another possibility is to run gdb under a detached screen session. +# To attach to the screen session, su root and run "screen -r +# " where uniquely matches one of the detached +# sessions (from "screen -list"). +# +# debugger_command = +# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen +# -dmS $process_name gdb $daemon_directory/$process_name +# $process_id & sleep 1 + +# INSTALL-TIME CONFIGURATION INFORMATION +# +# The following parameters are used when installing a new Postfix version. +# +# sendmail_path: The full pathname of the Postfix sendmail command. +# This is the Sendmail-compatible mail posting interface. +# +sendmail_path = + +# newaliases_path: The full pathname of the Postfix newaliases command. +# This is the Sendmail-compatible command to build alias databases. +# +newaliases_path = + +# mailq_path: The full pathname of the Postfix mailq command. This +# is the Sendmail-compatible mail queue listing command. +# +mailq_path = + +# setgid_group: The group for mail submission and queue management +# commands. This must be a group name with a numerical group ID that +# is not shared with other accounts, not even with the Postfix account. +# +setgid_group = + +# html_directory: The location of the Postfix HTML documentation. +# +html_directory = + +# manpage_directory: The location of the Postfix on-line manual pages. +# +manpage_directory = + +# sample_directory: The location of the Postfix sample configuration files. +# This parameter is obsolete as of Postfix 2.1. +# +sample_directory = + +# readme_directory: The location of the Postfix README files. +# +readme_directory = + +# TLS CONFIGURATION +# +# Basic Postfix TLS configuration by default with self-signed certificate +# for inbound SMTP and also opportunistic TLS for outbound SMTP. + +# The full pathname of a file with the Postfix SMTP server RSA certificate +# in PEM format. Intermediate certificates should be included in general, +# the server certificate first, then the issuing CA(s) (bottom-up order). +# +smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem + +# The full pathname of a file with the Postfix SMTP server RSA private key +# in PEM format. The private key must be accessible without a pass-phrase, +# i.e. it must not be encrypted. +# +smtpd_tls_key_file = /etc/pki/tls/private/postfix.key + +# Announce STARTTLS support to remote SMTP clients, but do not require that +# clients use TLS encryption (opportunistic TLS inbound). +# +smtpd_tls_security_level = may + +# Directory with PEM format Certification Authority certificates that the +# Postfix SMTP client uses to verify a remote SMTP server certificate. +# +smtp_tls_CApath = /etc/pki/tls/certs + +# The full pathname of a file containing CA certificates of root CAs +# trusted to sign either remote SMTP server certificates or intermediate CA +# certificates. +# +smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt + +# Use TLS if this is supported by the remote SMTP server, otherwise use +# plaintext (opportunistic TLS outbound). +# +smtp_tls_security_level = may diff --git a/templates/Fedora/36/etc/postfix/master.cf b/templates/Fedora/36/etc/postfix/master.cf new file mode 100644 index 0000000..4beb91f --- /dev/null +++ b/templates/Fedora/36/etc/postfix/master.cf @@ -0,0 +1,137 @@ +# +# Postfix master process configuration file. For details on the format +# of the file, see the master(5) manual page (command: "man 5 master" or +# on-line: http://www.postfix.org/master.5.html). +# +# Do not forget to execute "postfix reload" after editing this file. +# +# ========================================================================== +# service type private unpriv chroot wakeup maxproc command + args +# (yes) (yes) (no) (never) (100) +# ========================================================================== +smtp inet n - n - - smtpd +#smtp inet n - n - 1 postscreen +#smtpd pass - - n - - smtpd +#dnsblog unix - - n - 0 dnsblog +#tlsproxy unix - - n - 0 tlsproxy +# Choose one: enable submission for loopback clients only, or for any client. +#127.0.0.1:submission inet n - n - - smtpd +# submission inet n - n - - smtpd +# -o syslog_name=postfix/submission +# -o smtpd_tls_security_level=encrypt +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_tls_auth_only=yes +# -o smtpd_reject_unlisted_recipient=no +# -o smtpd_client_restrictions=$mua_client_restrictions +# -o smtpd_helo_restrictions=$mua_helo_restrictions +# -o smtpd_sender_restrictions=$mua_sender_restrictions +# -o smtpd_recipient_restrictions= +# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +# Choose one: enable smtps for loopback clients only, or for any client. +#127.0.0.1:smtps inet n - n - - smtpd +# smtps inet n - n - - smtpd +# -o syslog_name=postfix/smtps +# -o smtpd_tls_wrappermode=yes +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_reject_unlisted_recipient=no +# -o smtpd_client_restrictions=$mua_client_restrictions +# -o smtpd_helo_restrictions=$mua_helo_restrictions +# -o smtpd_sender_restrictions=$mua_sender_restrictions +# -o smtpd_recipient_restrictions= +# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +#628 inet n - n - - qmqpd +pickup unix n - n 60 1 pickup +cleanup unix n - n - 0 cleanup +qmgr unix n - n 300 1 qmgr +#qmgr unix n - n 300 1 oqmgr +tlsmgr unix - - n 1000? 1 tlsmgr +rewrite unix - - n - - trivial-rewrite +bounce unix - - n - 0 bounce +defer unix - - n - 0 bounce +trace unix - - n - 0 bounce +verify unix - - n - 1 verify +flush unix n - n 1000? 0 flush +proxymap unix - - n - - proxymap +proxywrite unix - - n - 1 proxymap +smtp unix - - n - - smtp +relay unix - - n - - smtp + -o syslog_name=postfix/$service_name +# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 +showq unix n - n - - showq +error unix - - n - - error +retry unix - - n - - error +discard unix - - n - - discard +local unix - n n - - local +virtual unix - n n - - virtual +lmtp unix - - n - - lmtp +anvil unix - - n - 1 anvil +scache unix - - n - 1 scache +postlog unix-dgram n - n - 1 postlogd +# +# ==================================================================== +# Interfaces to non-Postfix software. Be sure to examine the manual +# pages of the non-Postfix software to find out what options it wants. +# +# Many of the following services use the Postfix pipe(8) delivery +# agent. See the pipe(8) man page for information about ${recipient} +# and other message envelope options. +# ==================================================================== +# +# maildrop. See the Postfix MAILDROP_README file for details. +# Also specify in main.cf: maildrop_destination_recipient_limit=1 +# +#maildrop unix - n n - - pipe +# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} +# +# ==================================================================== +# +# Recent Cyrus versions can use the existing "lmtp" master.cf entry. +# +# Specify in cyrus.conf: +# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 +# +# Specify in main.cf one or more of the following: +# mailbox_transport = lmtp:inet:localhost +# virtual_transport = lmtp:inet:localhost +# +# ==================================================================== +# +# Cyrus 2.1.5 (Amos Gouaux) +# Also specify in main.cf: cyrus_destination_recipient_limit=1 +# +#cyrus unix - n n - - pipe +# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} +# +# ==================================================================== +# +# Old example of delivery via Cyrus. +# +#old-cyrus unix - n n - - pipe +# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} +# +# ==================================================================== +# +# See the Postfix UUCP_README file for configuration details. +# +#uucp unix - n n - - pipe +# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) +# +# ==================================================================== +# +# Other external delivery methods. +# +#ifmail unix - n n - - pipe +# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) +# +#bsmtp unix - n n - - pipe +# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient +# +#scalemail-backend unix - n n - 2 pipe +# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store +# ${nexthop} ${user} ${extension} +# +#mailman unix - n n - - pipe +# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py +# ${nexthop} ${user} diff --git a/templates/Fedora/36/etc/postfix/master.cf.proto b/templates/Fedora/36/etc/postfix/master.cf.proto new file mode 100644 index 0000000..f33d9dd --- /dev/null +++ b/templates/Fedora/36/etc/postfix/master.cf.proto @@ -0,0 +1,137 @@ +# +# Postfix master process configuration file. For details on the format +# of the file, see the master(5) manual page (command: "man 5 master" or +# on-line: http://www.postfix.org/master.5.html). +# +# Do not forget to execute "postfix reload" after editing this file. +# +# ========================================================================== +# service type private unpriv chroot wakeup maxproc command + args +# (yes) (yes) (no) (never) (100) +# ========================================================================== +smtp inet n - n - - smtpd +#smtp inet n - n - 1 postscreen +#smtpd pass - - n - - smtpd +#dnsblog unix - - n - 0 dnsblog +#tlsproxy unix - - n - 0 tlsproxy +# Choose one: enable submission for loopback clients only, or for any client. +#127.0.0.1:submission inet n - n - - smtpd +#submission inet n - n - - smtpd +# -o syslog_name=postfix/submission +# -o smtpd_tls_security_level=encrypt +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_tls_auth_only=yes +# -o smtpd_reject_unlisted_recipient=no +# -o smtpd_client_restrictions=$mua_client_restrictions +# -o smtpd_helo_restrictions=$mua_helo_restrictions +# -o smtpd_sender_restrictions=$mua_sender_restrictions +# -o smtpd_recipient_restrictions= +# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +# Choose one: enable smtps for loopback clients only, or for any client. +#127.0.0.1:smtps inet n - n - - smtpd +#smtps inet n - n - - smtpd +# -o syslog_name=postfix/smtps +# -o smtpd_tls_wrappermode=yes +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_reject_unlisted_recipient=no +# -o smtpd_client_restrictions=$mua_client_restrictions +# -o smtpd_helo_restrictions=$mua_helo_restrictions +# -o smtpd_sender_restrictions=$mua_sender_restrictions +# -o smtpd_recipient_restrictions= +# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +#628 inet n - n - - qmqpd +pickup unix n - n 60 1 pickup +cleanup unix n - n - 0 cleanup +qmgr unix n - n 300 1 qmgr +#qmgr unix n - n 300 1 oqmgr +tlsmgr unix - - n 1000? 1 tlsmgr +rewrite unix - - n - - trivial-rewrite +bounce unix - - n - 0 bounce +defer unix - - n - 0 bounce +trace unix - - n - 0 bounce +verify unix - - n - 1 verify +flush unix n - n 1000? 0 flush +proxymap unix - - n - - proxymap +proxywrite unix - - n - 1 proxymap +smtp unix - - n - - smtp +relay unix - - n - - smtp + -o syslog_name=postfix/$service_name +# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 +showq unix n - n - - showq +error unix - - n - - error +retry unix - - n - - error +discard unix - - n - - discard +local unix - n n - - local +virtual unix - n n - - virtual +lmtp unix - - n - - lmtp +anvil unix - - n - 1 anvil +scache unix - - n - 1 scache +postlog unix-dgram n - n - 1 postlogd +# +# ==================================================================== +# Interfaces to non-Postfix software. Be sure to examine the manual +# pages of the non-Postfix software to find out what options it wants. +# +# Many of the following services use the Postfix pipe(8) delivery +# agent. See the pipe(8) man page for information about ${recipient} +# and other message envelope options. +# ==================================================================== +# +# maildrop. See the Postfix MAILDROP_README file for details. +# Also specify in main.cf: maildrop_destination_recipient_limit=1 +# +#maildrop unix - n n - - pipe +# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} +# +# ==================================================================== +# +# Recent Cyrus versions can use the existing "lmtp" master.cf entry. +# +# Specify in cyrus.conf: +# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 +# +# Specify in main.cf one or more of the following: +# mailbox_transport = lmtp:inet:localhost +# virtual_transport = lmtp:inet:localhost +# +# ==================================================================== +# +# Cyrus 2.1.5 (Amos Gouaux) +# Also specify in main.cf: cyrus_destination_recipient_limit=1 +# +#cyrus unix - n n - - pipe +# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} +# +# ==================================================================== +# +# Old example of delivery via Cyrus. +# +#old-cyrus unix - n n - - pipe +# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} +# +# ==================================================================== +# +# See the Postfix UUCP_README file for configuration details. +# +#uucp unix - n n - - pipe +# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) +# +# ==================================================================== +# +# Other external delivery methods. +# +#ifmail unix - n n - - pipe +# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) +# +#bsmtp unix - n n - - pipe +# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient +# +#scalemail-backend unix - n n - 2 pipe +# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store +# ${nexthop} ${user} ${extension} +# +#mailman unix - n n - - pipe +# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py +# ${nexthop} ${user} diff --git a/templates/Fedora/36/etc/postfix/postfix-files b/templates/Fedora/36/etc/postfix/postfix-files new file mode 100644 index 0000000..1eda0a3 --- /dev/null +++ b/templates/Fedora/36/etc/postfix/postfix-files @@ -0,0 +1,432 @@ +# +# Do not edit this file. +# +# This file controls the postfix-install script for installation of +# Postfix programs, configuration files and documentation, as well +# as the post-install script for setting permissions and for updating +# Postfix configuration files. See the respective manual pages within +# the script files. +# +# Do not list $command_directory or $shlib_directory in this file, +# or it will be blown away by a future Postfix uninstallation +# procedure. You would not want to lose all files in /usr/sbin or +# /usr/local/lib. +# +# Each record in this file describes one file or directory. +# Fields are separated by ":". Specify a null field as "-". +# Missing fields or separators at the end are OK. +# +# File format: +# name:type:owner:group:permission:flags +# No group means don't change group ownership. +# +# File types: +# d=directory +# f=regular file +# h=hard link (*) +# l=symbolic link (*) +# +# (*) With hard links and symbolic links, the owner field becomes the +# source pathname, while the group and permissions are ignored. +# +# File flags: +# No flag means the flag is not active. +# p=preserve existing file, do not replace (postfix-install). +# u=update owner/group/mode (post-install upgrade-permissions). +# c=create missing directory (post-install create-missing). +# r=apply owner/group recursively (post-install set/upgrade-permissions). +# o=obsolete, no longer part of Postfix +# 1=optional for non-default instance (config_dir != built-in default). +# +# Note: the "u" flag is for upgrading the permissions of existing files +# or directories after changes in Postfix architecture. For robustness +# it is a good idea to "u" all the files that have special ownership or +# permissions, so that running "make install" fixes any glitches. +# +# Note: order matters. Update shared libraries and database plugins +# before daemon/command-line programs. +$config_directory:d:root:-:755:u +$data_directory:d:$mail_owner:-:700:uc +$daemon_directory:d:root:-:755:u +$queue_directory:d:root:-:755:uc +$sample_directory:d:root:-:755:o +$readme_directory:d:root:-:755 +$html_directory:d:root:-:755 +$queue_directory/active:d:$mail_owner:-:700:ucr +$queue_directory/bounce:d:$mail_owner:-:700:ucr +$queue_directory/corrupt:d:$mail_owner:-:700:ucr +$queue_directory/defer:d:$mail_owner:-:700:ucr +$queue_directory/deferred:d:$mail_owner:-:700:ucr +$queue_directory/flush:d:$mail_owner:-:700:ucr +$queue_directory/hold:d:$mail_owner:-:700:ucr +$queue_directory/incoming:d:$mail_owner:-:700:ucr +$queue_directory/private:d:$mail_owner:-:700:uc +$queue_directory/maildrop:d:$mail_owner:$setgid_group:730:uc +$queue_directory/public:d:$mail_owner:$setgid_group:710:uc +$queue_directory/pid:d:root:-:755:uc +$queue_directory/saved:d:$mail_owner:-:700:ucr +$queue_directory/trace:d:$mail_owner:-:700:ucr +# Update shared libraries and plugins before daemon or command-line programs. +$shlib_directory/libpostfix-util.so:f:root:-:755 +$shlib_directory/libpostfix-global.so:f:root:-:755 +$shlib_directory/libpostfix-dns.so:f:root:-:755 +$shlib_directory/libpostfix-tls.so:f:root:-:755 +$shlib_directory/libpostfix-master.so:f:root:-:755 +$meta_directory/dynamicmaps.cf.d:d:root:-:755 +$meta_directory/dynamicmaps.cf:f:root:-:644 +$meta_directory/main.cf.proto:f:root:-:644 +$meta_directory/master.cf.proto:f:root:-:644 +$meta_directory/postfix-files.d:d:root:-:755 +$meta_directory/postfix-files:f:root:-:644 +$daemon_directory/anvil:f:root:-:755 +$daemon_directory/bounce:f:root:-:755 +$daemon_directory/cleanup:f:root:-:755 +$daemon_directory/discard:f:root:-:755 +$daemon_directory/dnsblog:f:root:-:755 +$daemon_directory/error:f:root:-:755 +$daemon_directory/flush:f:root:-:755 +$daemon_directory/local:f:root:-:755 +$daemon_directory/main.cf:f:root:-:644:o +$daemon_directory/master.cf:f:root:-:644:o +$daemon_directory/master:f:root:-:755 +$daemon_directory/oqmgr:f:root:-:755 +$daemon_directory/pickup:f:root:-:755 +$daemon_directory/pipe:f:root:-:755 +$daemon_directory/post-install:f:root:-:755 +# In case meta_directory == daemon_directory. +#$daemon_directory/postfix-files:f:root:-:644:o +#$daemon_directory/postfix-files.d:d:root:-:755:o +$daemon_directory/postfix-script:f:root:-:755 +$daemon_directory/postfix-tls-script:f:root:-:755 +$daemon_directory/postfix-wrapper:f:root:-:755 +$daemon_directory/postmulti-script:f:root:-:755 +$daemon_directory/postlogd:f:root:-:755 +$daemon_directory/postscreen:f:root:-:755 +$daemon_directory/proxymap:f:root:-:755 +$daemon_directory/qmgr:f:root:-:755 +$daemon_directory/qmqpd:f:root:-:755 +$daemon_directory/scache:f:root:-:755 +$daemon_directory/showq:f:root:-:755 +$daemon_directory/smtp:f:root:-:755 +$daemon_directory/smtpd:f:root:-:755 +$daemon_directory/spawn:f:root:-:755 +$daemon_directory/tlsproxy:f:root:-:755 +$daemon_directory/tlsmgr:f:root:-:755 +$daemon_directory/trivial-rewrite:f:root:-:755 +$daemon_directory/verify:f:root:-:755 +$daemon_directory/virtual:f:root:-:755 +$daemon_directory/nqmgr:h:$daemon_directory/qmgr +$daemon_directory/lmtp:h:$daemon_directory/smtp +$command_directory/postalias:f:root:-:755 +$command_directory/postcat:f:root:-:755 +$command_directory/postconf:f:root:-:755 +$command_directory/postfix:f:root:-:755 +$command_directory/postkick:f:root:-:755 +$command_directory/postlock:f:root:-:755 +$command_directory/postlog:f:root:-:755 +$command_directory/postmap:f:root:-:755 +$command_directory/postmulti:f:root:-:755 +$command_directory/postsuper:f:root:-:755 +$command_directory/postdrop:f:root:$setgid_group:2755:u +$command_directory/postqueue:f:root:$setgid_group:2755:u +$sendmail_path:f:root:-:755 +$newaliases_path:l:$sendmail_path +$mailq_path:l:$sendmail_path +$config_directory/access:f:root:-:644:p1 +$config_directory/canonical:f:root:-:644:p1 +$config_directory/cidr_table:f:root:-:644:o +$config_directory/generic:f:root:-:644:p1 +$config_directory/generics:f:root:-:644:o +$config_directory/header_checks:f:root:-:644:p1 +$config_directory/install.cf:f:root:-:644:o +$config_directory/main.cf:f:root:-:644:p +$config_directory/master.cf:f:root:-:644:p +$config_directory/pcre_table:f:root:-:644:o +$config_directory/regexp_table:f:root:-:644:o +$config_directory/relocated:f:root:-:644:p1 +$config_directory/tcp_table:f:root:-:644:o +$config_directory/transport:f:root:-:644:p1 +$config_directory/virtual:f:root:-:644:p1 +$config_directory/postfix-script:f:root:-:755:o +$config_directory/postfix-script-sgid:f:root:-:755:o +$config_directory/postfix-script-nosgid:f:root:-:755:o +$config_directory/post-install:f:root:-:755:o +$manpage_directory/man1/mailq.postfix.1.gz:f:root:-:644 +$manpage_directory/man1/newaliases.postfix.1.gz:f:root:-:644 +$manpage_directory/man1/postalias.1.gz:f:root:-:644 +$manpage_directory/man1/postcat.1.gz:f:root:-:644 +$manpage_directory/man1/postconf.1.gz:f:root:-:644 +$manpage_directory/man1/postdrop.1.gz:f:root:-:644 +$manpage_directory/man1/postfix.1.gz:f:root:-:644 +$manpage_directory/man1/postfix-tls.1.gz:f:root:-:644 +$manpage_directory/man1/postkick.1.gz:f:root:-:644 +$manpage_directory/man1/postlock.1.gz:f:root:-:644 +$manpage_directory/man1/postlog.1.gz:f:root:-:644 +$manpage_directory/man1/postmap.1.gz:f:root:-:644 +$manpage_directory/man1/postmulti.1.gz:f:root:-:644 +$manpage_directory/man1/postqueue.1.gz:f:root:-:644 +$manpage_directory/man1/postsuper.1.gz:f:root:-:644 +$manpage_directory/man1/sendmail.postfix.1.gz:f:root:-:644 +$manpage_directory/man5/access.5.gz:f:root:-:644 +$manpage_directory/man5/aliases.postfix.5.gz:f:root:-:644 +$manpage_directory/man5/body_checks.5.gz:f:root:-:644 +$manpage_directory/man5/bounce.5.gz:f:root:-:644 +$manpage_directory/man5/canonical.5.gz:f:root:-:644 +$manpage_directory/man5/cidr_table.5.gz:f:root:-:644 +$manpage_directory/man5/generics.5.gz:f:root:-:644:o +$manpage_directory/man5/generic.5.gz:f:root:-:644 +$manpage_directory/man5/header_checks.5.gz:f:root:-:644 +$manpage_directory/man5/master.5.gz:f:root:-:644 +$manpage_directory/man5/memcache_table.5.gz:f:root:-:644 +$manpage_directory/man5/socketmap_table.5.gz:f:root:-:644 +$manpage_directory/man5/nisplus_table.5.gz:f:root:-:644 +$manpage_directory/man5/postconf.5.gz:f:root:-:644 +$manpage_directory/man5/postfix-wrapper.5.gz:f:root:-:644 +$manpage_directory/man5/regexp_table.5.gz:f:root:-:644 +$manpage_directory/man5/relocated.5.gz:f:root:-:644 +$manpage_directory/man5/tcp_table.5.gz:f:root:-:644 +$manpage_directory/man5/transport.5.gz:f:root:-:644 +$manpage_directory/man5/virtual.5.gz:f:root:-:644 +$manpage_directory/man8/bounce.8.gz:f:root:-:644 +$manpage_directory/man8/cleanup.8.gz:f:root:-:644 +$manpage_directory/man8/anvil.8.gz:f:root:-:644 +$manpage_directory/man8/defer.8.gz:f:root:-:644 +$manpage_directory/man8/discard.8.gz:f:root:-:644 +$manpage_directory/man8/dnsblog.8.gz:f:root:-:644 +$manpage_directory/man8/error.8.gz:f:root:-:644 +$manpage_directory/man8/flush.8.gz:f:root:-:644 +$manpage_directory/man8/lmtp.8.gz:f:root:-:644 +$manpage_directory/man8/local.8.gz:f:root:-:644 +$manpage_directory/man8/master.8.gz:f:root:-:644 +$manpage_directory/man8/nqmgr.8.gz:f:root:-:644:o +$manpage_directory/man8/oqmgr.8.gz:f:root:-:644: +$manpage_directory/man8/pickup.8.gz:f:root:-:644 +$manpage_directory/man8/pipe.8.gz:f:root:-:644 +$manpage_directory/man8/postlogd.8.gz:f:root:-:644 +$manpage_directory/man8/postscreen.8.gz:f:root:-:644 +$manpage_directory/man8/proxymap.8.gz:f:root:-:644 +$manpage_directory/man8/qmgr.8.gz:f:root:-:644 +$manpage_directory/man8/qmqpd.8.gz:f:root:-:644 +$manpage_directory/man8/scache.8.gz:f:root:-:644 +$manpage_directory/man8/showq.8.gz:f:root:-:644 +$manpage_directory/man8/smtp.8.gz:f:root:-:644 +$manpage_directory/man8/smtpd.postfix.8.gz:f:root:-:644 +$manpage_directory/man8/spawn.8.gz:f:root:-:644 +$manpage_directory/man8/tlsproxy.8.gz:f:root:-:644 +$manpage_directory/man8/tlsmgr.8.gz:f:root:-:644 +$manpage_directory/man8/trace.8.gz:f:root:-:644 +$manpage_directory/man8/trivial-rewrite.8.gz:f:root:-:644 +$manpage_directory/man8/verify.8.gz:f:root:-:644 +$manpage_directory/man8/virtual.8.gz:f:root:-:644 +$sample_directory/sample-aliases.cf:f:root:-:644:o +$sample_directory/sample-auth.cf:f:root:-:644:o +$sample_directory/sample-canonical.cf:f:root:-:644:o +$sample_directory/sample-compatibility.cf:f:root:-:644:o +$sample_directory/sample-debug.cf:f:root:-:644:o +$sample_directory/sample-filter.cf:f:root:-:644:o +$sample_directory/sample-flush.cf:f:root:-:644:o +$sample_directory/sample-ipv6.cf:f:root:-:644:o +$sample_directory/sample-ldap.cf:f:root:-:644:o +$sample_directory/sample-lmtp.cf:f:root:-:644:o +$sample_directory/sample-local.cf:f:root:-:644:o +$sample_directory/sample-mime.cf:f:root:-:644:o +$sample_directory/sample-misc.cf:f:root:-:644:o +$sample_directory/sample-pcre-access.cf:f:root:-:644:o +$sample_directory/sample-pcre-body.cf:f:root:-:644:o +$sample_directory/sample-pcre-header.cf:f:root:-:644:o +$sample_directory/sample-pgsql-aliases.cf:f:root:-:644:o +$sample_directory/sample-qmqpd.cf:f:root:-:644:o +$sample_directory/sample-rate.cf:f:root:-:644:o +$sample_directory/sample-regexp-access.cf:f:root:-:644:o +$sample_directory/sample-regexp-body.cf:f:root:-:644:o +$sample_directory/sample-regexp-header.cf:f:root:-:644:o +$sample_directory/sample-relocated.cf:f:root:-:644:o +$sample_directory/sample-resource.cf:f:root:-:644:o +$sample_directory/sample-rewrite.cf:f:root:-:644:o +$sample_directory/sample-scheduler.cf:f:root:-:644:o +$sample_directory/sample-smtp.cf:f:root:-:644:o +$sample_directory/sample-smtpd.cf:f:root:-:644:o +$sample_directory/sample-tls.cf:f:root:-:644:o +$sample_directory/sample-transport.cf:f:root:-:644:o +$sample_directory/sample-verify.cf:f:root:-:644:o +$sample_directory/sample-virtual.cf:f:root:-:644:o +$readme_directory/AAAREADME:f:root:-:644 +$readme_directory/ADDRESS_CLASS_README:f:root:-:644 +$readme_directory/ADDRESS_REWRITING_README:f:root:-:644 +$readme_directory/ADDRESS_VERIFICATION_README:f:root:-:644 +$readme_directory/BACKSCATTER_README:f:root:-:644 +$readme_directory/BASIC_CONFIGURATION_README:f:root:-:644 +$readme_directory/BUILTIN_FILTER_README:f:root:-:644 +$readme_directory/COMPATIBILITY_README:f:root:-:644 +$readme_directory/CONNECTION_CACHE_README:f:root:-:644 +$readme_directory/CONTENT_INSPECTION_README:f:root:-:644 +$readme_directory/DATABASE_README:f:root:-:644 +$readme_directory/DB_README:f:root:-:644 +$readme_directory/DEBUG_README:f:root:-:644 +$readme_directory/DSN_README:f:root:-:644 +$readme_directory/ETRN_README:f:root:-:644 +$readme_directory/FILTER_README:f:root:-:644 +$readme_directory/FORWARD_SECRECY_README:f:root:-:644 +$readme_directory/HOSTING_README:f:root:-:644:o +$readme_directory/INSTALL:f:root:-:644 +$readme_directory/IPV6_README:f:root:-:644 +$readme_directory/LINUX_README:f:root:-:644 +$readme_directory/LOCAL_RECIPIENT_README:f:root:-:644 +$readme_directory/MACOSX_README:f:root:-:644:o +$readme_directory/MAILDROP_README:f:root:-:644 +$readme_directory/MEMCACHE_README:f:root:-:644 +$readme_directory/MILTER_README:f:root:-:644 +$readme_directory/MULTI_INSTANCE_README:f:root:-:644 +$readme_directory/NFS_README:f:root:-:644 +$readme_directory/OVERVIEW:f:root:-:644 +$readme_directory/PACKAGE_README:f:root:-:644 +$readme_directory/POSTSCREEN_README:f:root:-:644 +$readme_directory/QMQP_README:f:root:-:644:o +$readme_directory/QSHAPE_README:f:root:-:644 +$readme_directory/RELEASE_NOTES:f:root:-:644 +$readme_directory/RESTRICTION_CLASS_README:f:root:-:644 +$readme_directory/SASL_README:f:root:-:644 +$readme_directory/SCHEDULER_README:f:root:-:644 +$readme_directory/SMTPD_ACCESS_README:f:root:-:644 +$readme_directory/SMTPD_POLICY_README:f:root:-:644 +$readme_directory/SMTPD_PROXY_README:f:root:-:644 +$readme_directory/SOHO_README:f:root:-:644 +$readme_directory/STANDARD_CONFIGURATION_README:f:root:-:644 +$readme_directory/STRESS_README:f:root:-:644 +$readme_directory/TLS_LEGACY_README:f:root:-:644 +$readme_directory/TLS_README:f:root:-:644 +$readme_directory/TUNING_README:f:root:-:644 +$readme_directory/ULTRIX_README:f:root:-:644 +$readme_directory/UUCP_README:f:root:-:644 +$readme_directory/VERP_README:f:root:-:644 +$readme_directory/VIRTUAL_README:f:root:-:644 +$readme_directory/XCLIENT_README:f:root:-:644 +$readme_directory/XFORWARD_README:f:root:-:644 +$html_directory/ADDRESS_CLASS_README.html:f:root:-:644 +$html_directory/ADDRESS_REWRITING_README.html:f:root:-:644 +$html_directory/ADDRESS_VERIFICATION_README.html:f:root:-:644 +$html_directory/BACKSCATTER_README.html:f:root:-:644 +$html_directory/BASIC_CONFIGURATION_README.html:f:root:-:644 +$html_directory/BUILTIN_FILTER_README.html:f:root:-:644 +$html_directory/CDB_README.html:f:root:-:644 +$html_directory/COMPATIBILITY_README.html:f:root:-:644 +$html_directory/CONNECTION_CACHE_README.html:f:root:-:644 +$html_directory/CONTENT_INSPECTION_README.html:f:root:-:644 +$html_directory/CYRUS_README.html:f:root:-:644:o +$html_directory/DATABASE_README.html:f:root:-:644 +$html_directory/DB_README.html:f:root:-:644 +$html_directory/DEBUG_README.html:f:root:-:644 +$html_directory/DSN_README.html:f:root:-:644 +$html_directory/ETRN_README.html:f:root:-:644 +$html_directory/FILTER_README.html:f:root:-:644 +$html_directory/FORWARD_SECRECY_README.html:f:root:-:644 +$html_directory/INSTALL.html:f:root:-:644 +$html_directory/IPV6_README.html:f:root:-:644 +$html_directory/LDAP_README.html:f:root:-:644 +$html_directory/LINUX_README.html:f:root:-:644 +$html_directory/LMDB_README.html:f:root:-:644 +$html_directory/LOCAL_RECIPIENT_README.html:f:root:-:644 +$html_directory/MAILDROP_README.html:f:root:-:644 +$html_directory/MILTER_README.html:f:root:-:644 +$html_directory/MULTI_INSTANCE_README.html:f:root:-:644 +$html_directory/MYSQL_README.html:f:root:-:644 +$html_directory/SQLITE_README.html:f:root:-:644 +$html_directory/NFS_README.html:f:root:-:644 +$html_directory/OVERVIEW.html:f:root:-:644 +$html_directory/PACKAGE_README.html:f:root:-:644 +$html_directory/PCRE_README.html:f:root:-:644 +$html_directory/PGSQL_README.html:f:root:-:644 +$html_directory/POSTSCREEN_README.html:f:root:-:644 +$html_directory/QMQP_README.html:f:root:-:644:o +$html_directory/QSHAPE_README.html:f:root:-:644 +$html_directory/RESTRICTION_CLASS_README.html:f:root:-:644 +$html_directory/SASL_README.html:f:root:-:644 +$html_directory/SCHEDULER_README.html:f:root:-:644 +$html_directory/SMTPD_ACCESS_README.html:f:root:-:644 +$html_directory/SMTPD_POLICY_README.html:f:root:-:644 +$html_directory/SMTPD_PROXY_README.html:f:root:-:644 +$html_directory/SOHO_README.html:f:root:-:644 +$html_directory/STANDARD_CONFIGURATION_README.html:f:root:-:644 +$html_directory/STRESS_README.html:f:root:-:644 +$html_directory/TLS_LEGACY_README.html:f:root:-:644 +$html_directory/TLS_README.html:f:root:-:644 +$html_directory/TUNING_README.html:f:root:-:644 +$html_directory/ULTRIX_README.html:f:root:-:644:o +$html_directory/UUCP_README.html:f:root:-:644 +$html_directory/VERP_README.html:f:root:-:644 +$html_directory/VIRTUAL_README.html:f:root:-:644 +$html_directory/XCLIENT_README.html:f:root:-:644 +$html_directory/XFORWARD_README.html:f:root:-:644 +$html_directory/access.5.html:f:root:-:644 +$html_directory/aliases.5.html:f:root:-:644 +$html_directory/anvil.8.html:f:root:-:644 +$html_directory/bounce.8.html:f:root:-:644 +$html_directory/canonical.5.html:f:root:-:644 +$html_directory/cidr_table.5.html:f:root:-:644 +$html_directory/cleanup.8.html:f:root:-:644 +$html_directory/defer.8.html:h:$html_directory/bounce.8.html:-:644 +$html_directory/discard.8.html:f:root:-:644 +$html_directory/dnsblog.8.html:f:root:-:644 +$html_directory/error.8.html:f:root:-:644 +$html_directory/flush.8.html:f:root:-:644 +$html_directory/generics.5.html:f:root:-:644:o +$html_directory/generic.5.html:f:root:-:644 +$html_directory/header_checks.5.html:f:root:-:644 +$html_directory/index.html:f:root:-:644 +$html_directory/ldap_table.5.html:f:root:-:644 +$html_directory/lmtp.8.html:f:root:-:644 +$html_directory/local.8.html:f:root:-:644 +$html_directory/mailq.1.html:f:root:-:644 +$html_directory/master.5.html:f:root:-:644 +$html_directory/master.8.html:f:root:-:644 +$html_directory/memcache_table.5.html:f:root:-:644 +$html_directory/mysql_table.5.html:f:root:-:644 +$html_directory/sqlite_table.5.html:f:root:-:644 +$html_directory/nisplus_table.5.html:f:root:-:644 +$html_directory/newaliases.1.html:h:$html_directory/mailq.1.html:-:644 +$html_directory/oqmgr.8.html:f:root:-:644 +$html_directory/pcre_table.5.html:f:root:-:644 +$html_directory/pgsql_table.5.html:f:root:-:644 +$html_directory/pickup.8.html:f:root:-:644 +$html_directory/pipe.8.html:f:root:-:644 +$html_directory/postalias.1.html:f:root:-:644 +$html_directory/postcat.1.html:f:root:-:644 +$html_directory/postconf.1.html:f:root:-:644 +$html_directory/postconf.5.html:f:root:-:644 +$html_directory/postdrop.1.html:f:root:-:644 +$html_directory/postfix-logo.jpg:f:root:-:644 +$html_directory/postfix-manuals.html:f:root:-:644 +$html_directory/postfix-wrapper.5.html:f:root:-:644 +$html_directory/postfix.1.html:f:root:-:644 +$html_directory/postkick.1.html:f:root:-:644 +$html_directory/postlock.1.html:f:root:-:644 +$html_directory/postlog.1.html:f:root:-:644 +$html_directory/postmap.1.html:f:root:-:644 +$html_directory/postmulti.1.html:f:root:-:644 +$html_directory/postlogd.8.html:f:root:-:644 +$html_directory/postqueue.1.html:f:root:-:644 +$html_directory/postscreen.8.html:f:root:-:644 +$html_directory/postsuper.1.html:f:root:-:644 +$html_directory/qshape.1.html:f:root:-:644 +$html_directory/proxymap.8.html:f:root:-:644 +$html_directory/qmgr.8.html:f:root:-:644 +$html_directory/qmqp-sink.1.html:f:root:-:644 +$html_directory/qmqp-source.1.html:f:root:-:644 +$html_directory/qmqpd.8.html:f:root:-:644 +$html_directory/regexp_table.5.html:f:root:-:644 +$html_directory/relocated.5.html:f:root:-:644 +$html_directory/sendmail.1.html:h:$html_directory/mailq.1.html:-:644 +$html_directory/showq.8.html:f:root:-:644 +$html_directory/smtp-sink.1.html:f:root:-:644 +$html_directory/smtp-source.1.html:f:root:-:644 +$html_directory/smtp.8.html:h:$html_directory/lmtp.8.html:-:644 +$html_directory/smtpd.8.html:f:root:-:644 +$html_directory/spawn.8.html:f:root:-:644 +$html_directory/tlsproxy.8.html:f:root:-:644 +$html_directory/tcp_table.5.html:f:root:-:644 +$html_directory/trace.8.html:h:$html_directory/bounce.8.html:-:644 +$html_directory/transport.5.html:f:root:-:644 +$html_directory/trivial-rewrite.8.html:f:root:-:644 +$html_directory/verify.8.html:f:root:-:644 +$html_directory/virtual.5.html:f:root:-:644 +$html_directory/virtual.8.html:f:root:-:644 diff --git a/templates/Fedora/36/etc/postfix/postfix-files.d/ldap b/templates/Fedora/36/etc/postfix/postfix-files.d/ldap new file mode 100644 index 0000000..684b05d --- /dev/null +++ b/templates/Fedora/36/etc/postfix/postfix-files.d/ldap @@ -0,0 +1,3 @@ +$shlib_directory/postfix-ldap.so:f:root:-:755 +$manpage_directory/man5/ldap_table.5.gz:f:root:-:644 +$readme_directory/LDAP_README:f:root:-:644 diff --git a/templates/Fedora/36/etc/postfix/postfix-files.d/mysql b/templates/Fedora/36/etc/postfix/postfix-files.d/mysql new file mode 100644 index 0000000..8e41d61 --- /dev/null +++ b/templates/Fedora/36/etc/postfix/postfix-files.d/mysql @@ -0,0 +1,3 @@ +$shlib_directory/postfix-mysql.so:f:root:-:755 +$manpage_directory/man5/mysql_table.5.gz:f:root:-:644 +$readme_directory/MYSQL_README:f:root:-:644 diff --git a/templates/Fedora/36/etc/postfix/postfix-files.d/pcre b/templates/Fedora/36/etc/postfix/postfix-files.d/pcre new file mode 100644 index 0000000..a34fd73 --- /dev/null +++ b/templates/Fedora/36/etc/postfix/postfix-files.d/pcre @@ -0,0 +1,3 @@ +$shlib_directory/postfix-pcre.so:f:root:-:755 +$manpage_directory/man5/pcre_table.5.gz:f:root:-:644 +$readme_directory/PCRE_README:f:root:-:644 diff --git a/templates/Fedora/36/etc/postfix/relocated b/templates/Fedora/36/etc/postfix/relocated new file mode 100644 index 0000000..e50edfd --- /dev/null +++ b/templates/Fedora/36/etc/postfix/relocated @@ -0,0 +1,176 @@ +# RELOCATED(5) RELOCATED(5) +# +# NAME +# relocated - Postfix relocated table format +# +# SYNOPSIS +# postmap /etc/postfix/relocated +# +# DESCRIPTION +# The optional relocated(5) table provides the information +# that is used in "user has moved to new_location" bounce +# messages. +# +# Normally, the relocated(5) table is specified as a text +# file that serves as input to the postmap(1) command. The +# result, an indexed file in dbm or db format, is used for +# fast searching by the mail system. Execute the command +# "postmap /etc/postfix/relocated" to rebuild an indexed +# file after changing the corresponding relocated table. +# +# When the table is provided via other means such as NIS, +# LDAP or SQL, the same lookups are done as for ordinary +# indexed files. +# +# Alternatively, the table can be provided as a regu- +# lar-expression map where patterns are given as regular +# expressions, or lookups can be directed to TCP-based +# server. In those case, the lookups are done in a slightly +# different way as described below under "REGULAR EXPRESSION +# TABLES" or "TCP-BASED TABLES". +# +# Table lookups are case insensitive. +# +# CASE FOLDING +# The search string is folded to lowercase before database +# lookup. As of Postfix 2.3, the search string is not case +# folded with database types such as regexp: or pcre: whose +# lookup fields can match both upper and lower case. +# +# TABLE FORMAT +# The input format for the postmap(1) command is as follows: +# +# o An entry has one of the following form: +# +# pattern new_location +# +# Where new_location specifies contact information +# such as an email address, or perhaps a street +# address or telephone number. +# +# o Empty lines and whitespace-only lines are ignored, +# as are lines whose first non-whitespace character +# is a `#'. +# +# o A logical line starts with non-whitespace text. A +# line that starts with whitespace continues a logi- +# cal line. +# +# TABLE SEARCH ORDER +# With lookups from indexed files such as DB or DBM, or from +# networked tables such as NIS, LDAP or SQL, patterns are +# tried in the order as listed below: +# +# user@domain +# Matches user@domain. This form has precedence over +# all other forms. +# +# user Matches user@site when site is $myorigin, when site +# is listed in $mydestination, or when site is listed +# in $inet_interfaces or $proxy_interfaces. +# +# @domain +# Matches other addresses in domain. This form has +# the lowest precedence. +# +# ADDRESS EXTENSION +# When a mail address localpart contains the optional recip- +# ient delimiter (e.g., user+foo@domain), the lookup order +# becomes: user+foo@domain, user@domain, user+foo, user, and +# @domain. +# +# REGULAR EXPRESSION TABLES +# This section describes how the table lookups change when +# the table is given in the form of regular expressions or +# when lookups are directed to a TCP-based server. For a +# description of regular expression lookup table syntax, see +# regexp_table(5) or pcre_table(5). For a description of the +# TCP client/server table lookup protocol, see tcp_table(5). +# This feature is not available up to and including Postfix +# version 2.4. +# +# Each pattern is a regular expression that is applied to +# the entire address being looked up. Thus, user@domain mail +# addresses are not broken up into their user and @domain +# constituent parts, nor is user+foo broken up into user and +# foo. +# +# Patterns are applied in the order as specified in the ta- +# ble, until a pattern is found that matches the search +# string. +# +# Results are the same as with indexed file lookups, with +# the additional feature that parenthesized substrings from +# the pattern can be interpolated as $1, $2 and so on. +# +# TCP-BASED TABLES +# This section describes how the table lookups change when +# lookups are directed to a TCP-based server. For a descrip- +# tion of the TCP client/server lookup protocol, see tcp_ta- +# ble(5). This feature is not available up to and including +# Postfix version 2.4. +# +# Each lookup operation uses the entire address once. Thus, +# user@domain mail addresses are not broken up into their +# user and @domain constituent parts, nor is user+foo broken +# up into user and foo. +# +# Results are the same as with indexed file lookups. +# +# BUGS +# The table format does not understand quoting conventions. +# +# CONFIGURATION PARAMETERS +# The following main.cf parameters are especially relevant. +# The text below provides only a parameter summary. See +# postconf(5) for more details including examples. +# +# relocated_maps +# List of lookup tables for relocated users or sites. +# +# Other parameters of interest: +# +# inet_interfaces +# The network interface addresses that this system +# receives mail on. You need to stop and start Post- +# fix when this parameter changes. +# +# mydestination +# List of domains that this mail system considers +# local. +# +# myorigin +# The domain that is appended to locally-posted mail. +# +# proxy_interfaces +# Other interfaces that this machine receives mail on +# by way of a proxy agent or network address transla- +# tor. +# +# SEE ALSO +# trivial-rewrite(8), address resolver +# postmap(1), Postfix lookup table manager +# postconf(5), configuration parameters +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# DATABASE_README, Postfix lookup table overview +# ADDRESS_REWRITING_README, address rewriting guide +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# RELOCATED(5) diff --git a/templates/Fedora/36/etc/postfix/transport b/templates/Fedora/36/etc/postfix/transport new file mode 100644 index 0000000..1dcd787 --- /dev/null +++ b/templates/Fedora/36/etc/postfix/transport @@ -0,0 +1,317 @@ +# TRANSPORT(5) TRANSPORT(5) +# +# NAME +# transport - Postfix transport table format +# +# SYNOPSIS +# postmap /etc/postfix/transport +# +# postmap -q "string" /etc/postfix/transport +# +# postmap -q - /etc/postfix/transport = 3.5): +# +# example.com smtp:bar.example, foo.example +# +# This tries to deliver to bar.example before trying to +# deliver to foo.example. +# +# The error mailer can be used to bounce mail: +# +# .example.com error:mail for *.example.com is not deliverable +# +# This causes all mail for user@anything.example.com to be +# bounced. +# +# REGULAR EXPRESSION TABLES +# This section describes how the table lookups change when +# the table is given in the form of regular expressions. For +# a description of regular expression lookup table syntax, +# see regexp_table(5) or pcre_table(5). +# +# Each pattern is a regular expression that is applied to +# the entire address being looked up. Thus, +# some.domain.hierarchy is not looked up via its parent +# domains, nor is user+foo@domain looked up as user@domain. +# +# Patterns are applied in the order as specified in the ta- +# ble, until a pattern is found that matches the search +# string. +# +# The trivial-rewrite(8) server disallows regular expression +# substitution of $1 etc. in regular expression lookup +# tables, because that could open a security hole (Postfix +# version 2.3 and later). +# +# TCP-BASED TABLES +# This section describes how the table lookups change when +# lookups are directed to a TCP-based server. For a descrip- +# tion of the TCP client/server lookup protocol, see tcp_ta- +# ble(5). This feature is not available up to and including +# Postfix version 2.4. +# +# Each lookup operation uses the entire recipient address +# once. Thus, some.domain.hierarchy is not looked up via +# its parent domains, nor is user+foo@domain looked up as +# user@domain. +# +# Results are the same as with indexed file lookups. +# +# CONFIGURATION PARAMETERS +# The following main.cf parameters are especially relevant. +# The text below provides only a parameter summary. See +# postconf(5) for more details including examples. +# +# empty_address_recipient (MAILER-DAEMON) +# The recipient of mail addressed to the null +# address. +# +# parent_domain_matches_subdomains (see 'postconf -d' out- +# put) +# A list of Postfix features where the pattern "exam- +# ple.com" also matches subdomains of example.com, +# instead of requiring an explicit ".example.com" +# pattern. +# +# transport_maps (empty) +# Optional lookup tables with mappings from recipient +# address to (message delivery transport, next-hop +# destination). +# +# SEE ALSO +# trivial-rewrite(8), rewrite and resolve addresses +# master(5), master.cf file format +# postconf(5), configuration parameters +# postmap(1), Postfix lookup table manager +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# ADDRESS_REWRITING_README, address rewriting guide +# DATABASE_README, Postfix lookup table overview +# FILTER_README, external content filter +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# TRANSPORT(5) diff --git a/templates/Fedora/36/etc/postfix/virtual b/templates/Fedora/36/etc/postfix/virtual new file mode 100644 index 0000000..da9cd65 --- /dev/null +++ b/templates/Fedora/36/etc/postfix/virtual @@ -0,0 +1,324 @@ +# VIRTUAL(5) VIRTUAL(5) +# +# NAME +# virtual - Postfix virtual alias table format +# +# SYNOPSIS +# postmap /etc/postfix/virtual +# +# postmap -q "string" /etc/postfix/virtual +# +# postmap -q - /etc/postfix/virtual Date: Thu, 15 Sep 2022 20:41:20 -0500 Subject: [PATCH 27/47] Make size of email permitted configurable --- defaults/main.yml | 1 + templates/Fedora/35/etc/postfix/main.cf | 2 ++ templates/Fedora/36/etc/postfix/main.cf | 2 ++ 3 files changed, 5 insertions(+) diff --git a/defaults/main.yml b/defaults/main.yml index af38716..bddcd8d 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -2,3 +2,4 @@ # defaults file for ensure_postfix postmaster_email: 'postmaster@example.com' postfix_vhost: '{{ inventory_hostname }}' +postfix_message_size_limit: 10240000 diff --git a/templates/Fedora/35/etc/postfix/main.cf b/templates/Fedora/35/etc/postfix/main.cf index 5bf98a3..b3d981a 100644 --- a/templates/Fedora/35/etc/postfix/main.cf +++ b/templates/Fedora/35/etc/postfix/main.cf @@ -759,3 +759,5 @@ delay_notice_recipient = {{ postmaster_email }} error_notice_recipient = {{ postmaster_email }} smtpd_helo_required = yes disable_vrfy_command = yes +message_size_limit = {{ postfix_message_size_limit }} + diff --git a/templates/Fedora/36/etc/postfix/main.cf b/templates/Fedora/36/etc/postfix/main.cf index 5bf98a3..b3d981a 100644 --- a/templates/Fedora/36/etc/postfix/main.cf +++ b/templates/Fedora/36/etc/postfix/main.cf @@ -759,3 +759,5 @@ delay_notice_recipient = {{ postmaster_email }} error_notice_recipient = {{ postmaster_email }} smtpd_helo_required = yes disable_vrfy_command = yes +message_size_limit = {{ postfix_message_size_limit }} + From 9f2438be2a98cc9e286048c59a2e32f02e531f25 Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Thu, 15 Sep 2022 21:08:08 -0500 Subject: [PATCH 28/47] Restrict clients to those with valid DNS and HELO --- templates/Fedora/35/etc/postfix/main.cf | 2 ++ templates/Fedora/36/etc/postfix/main.cf | 2 ++ 2 files changed, 4 insertions(+) diff --git a/templates/Fedora/35/etc/postfix/main.cf b/templates/Fedora/35/etc/postfix/main.cf index b3d981a..5b19283 100644 --- a/templates/Fedora/35/etc/postfix/main.cf +++ b/templates/Fedora/35/etc/postfix/main.cf @@ -760,4 +760,6 @@ error_notice_recipient = {{ postmaster_email }} smtpd_helo_required = yes disable_vrfy_command = yes message_size_limit = {{ postfix_message_size_limit }} +smtpd_helo_restrictions = reject_unknown_helo_hostname +smtpd_client_restrictions = reject_unknown_reverse_client_hostname reject_unauth_pipelining diff --git a/templates/Fedora/36/etc/postfix/main.cf b/templates/Fedora/36/etc/postfix/main.cf index b3d981a..5b19283 100644 --- a/templates/Fedora/36/etc/postfix/main.cf +++ b/templates/Fedora/36/etc/postfix/main.cf @@ -760,4 +760,6 @@ error_notice_recipient = {{ postmaster_email }} smtpd_helo_required = yes disable_vrfy_command = yes message_size_limit = {{ postfix_message_size_limit }} +smtpd_helo_restrictions = reject_unknown_helo_hostname +smtpd_client_restrictions = reject_unknown_reverse_client_hostname reject_unauth_pipelining From 768615cb0177bf3d7ad97efffe2bbf226afab8b1 Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Tue, 6 Dec 2022 21:56:26 -0600 Subject: [PATCH 29/47] Add Fedora 37 --- templates/Fedora/37/etc/opendkim.conf | 134 +++ templates/Fedora/37/etc/opendkim/KeyTable | 6 + templates/Fedora/37/etc/opendkim/SigningTable | 25 + templates/Fedora/37/etc/opendkim/TrustedHosts | 9 + templates/Fedora/37/etc/opendmarc.conf | 442 ++++++++++ templates/Fedora/37/etc/postfix/access | 484 +++++++++++ templates/Fedora/37/etc/postfix/canonical | 307 +++++++ .../Fedora/37/etc/postfix/dynamicmaps.cf | 1 + .../37/etc/postfix/dynamicmaps.cf.d/ldap | 1 + .../37/etc/postfix/dynamicmaps.cf.d/mysql | 1 + .../37/etc/postfix/dynamicmaps.cf.d/pcre | 1 + templates/Fedora/37/etc/postfix/generic | 250 ++++++ templates/Fedora/37/etc/postfix/header_checks | 549 +++++++++++++ templates/Fedora/37/etc/postfix/main.cf | 765 ++++++++++++++++++ templates/Fedora/37/etc/postfix/main.cf.proto | 736 +++++++++++++++++ templates/Fedora/37/etc/postfix/master.cf | 137 ++++ .../Fedora/37/etc/postfix/master.cf.proto | 137 ++++ templates/Fedora/37/etc/postfix/postfix-files | 432 ++++++++++ .../37/etc/postfix/postfix-files.d/ldap | 3 + .../37/etc/postfix/postfix-files.d/mysql | 3 + .../37/etc/postfix/postfix-files.d/pcre | 3 + templates/Fedora/37/etc/postfix/relocated | 176 ++++ templates/Fedora/37/etc/postfix/transport | 317 ++++++++ templates/Fedora/37/etc/postfix/virtual | 324 ++++++++ .../systemd/system/postfix-copytls.service | 12 + .../lib/systemd/system/postfix-copytls.timer | 9 + vars/Fedora-37-default.yml | 110 +++ 27 files changed, 5374 insertions(+) create mode 100644 templates/Fedora/37/etc/opendkim.conf create mode 100644 templates/Fedora/37/etc/opendkim/KeyTable create mode 100644 templates/Fedora/37/etc/opendkim/SigningTable create mode 100644 templates/Fedora/37/etc/opendkim/TrustedHosts create mode 100644 templates/Fedora/37/etc/opendmarc.conf create mode 100644 templates/Fedora/37/etc/postfix/access create mode 100644 templates/Fedora/37/etc/postfix/canonical create mode 100644 templates/Fedora/37/etc/postfix/dynamicmaps.cf create mode 100644 templates/Fedora/37/etc/postfix/dynamicmaps.cf.d/ldap create mode 100644 templates/Fedora/37/etc/postfix/dynamicmaps.cf.d/mysql create mode 100644 templates/Fedora/37/etc/postfix/dynamicmaps.cf.d/pcre create mode 100644 templates/Fedora/37/etc/postfix/generic create mode 100644 templates/Fedora/37/etc/postfix/header_checks create mode 100644 templates/Fedora/37/etc/postfix/main.cf create mode 100644 templates/Fedora/37/etc/postfix/main.cf.proto create mode 100644 templates/Fedora/37/etc/postfix/master.cf create mode 100644 templates/Fedora/37/etc/postfix/master.cf.proto create mode 100644 templates/Fedora/37/etc/postfix/postfix-files create mode 100644 templates/Fedora/37/etc/postfix/postfix-files.d/ldap create mode 100644 templates/Fedora/37/etc/postfix/postfix-files.d/mysql create mode 100644 templates/Fedora/37/etc/postfix/postfix-files.d/pcre create mode 100644 templates/Fedora/37/etc/postfix/relocated create mode 100644 templates/Fedora/37/etc/postfix/transport create mode 100644 templates/Fedora/37/etc/postfix/virtual create mode 100644 templates/Fedora/37/usr/lib/systemd/system/postfix-copytls.service create mode 100644 templates/Fedora/37/usr/lib/systemd/system/postfix-copytls.timer create mode 100644 vars/Fedora-37-default.yml diff --git a/templates/Fedora/37/etc/opendkim.conf b/templates/Fedora/37/etc/opendkim.conf new file mode 100644 index 0000000..992e0b2 --- /dev/null +++ b/templates/Fedora/37/etc/opendkim.conf @@ -0,0 +1,134 @@ +## BASIC OPENDKIM CONFIGURATION FILE +## See opendkim.conf(5) or /usr/share/doc/opendkim/opendkim.conf.sample for more + +## BEFORE running OpenDKIM you must: + +## - make your MTA (Postfix, Sendmail, etc.) aware of OpenDKIM +## - generate keys for your domain (if signing) +## - edit your DNS records to publish your public keys (if signing) + +## See /usr/share/doc/opendkim/INSTALL for detailed instructions. + +## DEPRECATED CONFIGURATION OPTIONS +## +## The following configuration options are no longer valid. They should be +## removed from your existing configuration file to prevent potential issues. +## Failure to do so may result in opendkim being unable to start. +## +## Removed in 2.10.0: +## AddAllSignatureResults +## ADSPAction +## ADSPNoSuchDomain +## BogusPolicy +## DisableADSP +## LDAPSoftStart +## LocalADSP +## NoDiscardableMailTo +## On-PolicyError +## SendADSPReports +## UnprotectedPolicy + +## CONFIGURATION OPTIONS + +## Specifies the path to the process ID file. +PidFile /run/opendkim/opendkim.pid + +## Selects operating modes. Valid modes are s (sign) and v (verify). Default is v. +## Must be changed to s (sign only) or sv (sign and verify) in order to sign outgoing +## messages. +Mode v + +## Log activity to the system log. +Syslog yes + +## Log additional entries indicating successful signing or verification of messages. +SyslogSuccess yes + +## If logging is enabled, include detailed logging about why or why not a message was +## signed or verified. This causes an increase in the amount of log data generated +## for each message, so set this to No (or comment it out) if it gets too noisy. +LogWhy yes + +## Attempt to become the specified user before starting operations. +UserID opendkim:opendkim + +## Create a socket through which your MTA can communicate. +Socket inet:8891@localhost + +## Required to use local socket with MTAs that access the socket as a non- +## privileged user (e.g. Postfix) +Umask 002 + +## This specifies a text file in which to store DKIM transaction statistics. +## OpenDKIM must be manually compiled with --enable-stats to enable this feature. +# Statistics /var/spool/opendkim/stats.dat + +## Specifies whether or not the filter should generate report mail back +## to senders when verification fails and an address for such a purpose +## is provided. See opendkim.conf(5) for details. +SendReports yes + +## Specifies the sending address to be used on From: headers of outgoing +## failure reports. By default, the e-mail address of the user executing +## the filter is used (executing_user@hostname). +# ReportAddress "Example.com Postmaster" +ReportAddress "Postmaster" <{{ postmaster_email }}> + +## Add a DKIM-Filter header field to messages passing through this filter +## to identify messages it has processed. +SoftwareHeader yes + +## SIGNING OPTIONS + +## Selects the canonicalization method(s) to be used when signing messages. +Canonicalization relaxed/relaxed + +## Domain(s) whose mail should be signed by this filter. Mail from other domains will +## be verified rather than being signed. Uncomment and use your domain name. +## This parameter is not required if a SigningTable is in use. +# Domain example.com + +## Defines the name of the selector to be used when signing messages. +Selector default + +## Specifies the minimum number of key bits for acceptable keys and signatures. +MinimumKeyBits 1024 + +## Gives the location of a private key to be used for signing ALL messages. This +## directive is ignored if KeyTable is enabled. +# KeyFile /etc/opendkim/keys/default.private + +## Gives the location of a file mapping key names to signing keys. In simple terms, +## this tells OpenDKIM where to find your keys. If present, overrides any KeyFile +## directive in the configuration file. Requires SigningTable be enabled. +# KeyTable /etc/opendkim/KeyTable + +## Defines a table used to select one or more signatures to apply to a message based +## on the address found in the From: header field. In simple terms, this tells +## OpenDKIM how to use your keys. Requires KeyTable be enabled. +# SigningTable refile:/etc/opendkim/SigningTable + +## Identifies a set of "external" hosts that may send mail through the server as one +## of the signing domains without credentials as such. +# ExternalIgnoreList refile:/etc/opendkim/TrustedHosts + +## Identifies a set "internal" hosts whose mail should be signed rather than verified. +# InternalHosts refile:/etc/opendkim/TrustedHosts + +## Contains a list of IP addresses, CIDR blocks, hostnames or domain names +## whose mail should be neither signed nor verified by this filter. See man +## page for file format. +# PeerList X.X.X.X + +## Always oversign From (sign using actual From and a null From to prevent +## malicious signatures header fields (From and/or others) between the signer +## and the verifier. From is oversigned by default in the Fedora package +## because it is often the identity key used by reputation systems and thus +## somewhat security sensitive. +OversignHeaders From + +## Instructs the DKIM library to maintain its own local cache of keys and +## policies retrieved from DNS, rather than relying on the nameserver for +## caching service. Useful if the nameserver being used by the filter is +## not local. +QueryCache yes diff --git a/templates/Fedora/37/etc/opendkim/KeyTable b/templates/Fedora/37/etc/opendkim/KeyTable new file mode 100644 index 0000000..e804d68 --- /dev/null +++ b/templates/Fedora/37/etc/opendkim/KeyTable @@ -0,0 +1,6 @@ +# OPENDKIM KEY TABLE +# To use this file, uncomment the #KeyTable option in /etc/opendkim.conf, +# then uncomment the following line and replace example.com with your domain +# name, then restart OpenDKIM. Additional keys may be added on separate lines. + +#default._domainkey.example.com example.com:default:/etc/opendkim/keys/default.private diff --git a/templates/Fedora/37/etc/opendkim/SigningTable b/templates/Fedora/37/etc/opendkim/SigningTable new file mode 100644 index 0000000..e8161a1 --- /dev/null +++ b/templates/Fedora/37/etc/opendkim/SigningTable @@ -0,0 +1,25 @@ +# OPENDKIM SIGNING TABLE +# This table controls how to apply one or more signatures to outgoing messages based +# on the address found in the From: header field. In simple terms, this tells +# OpenDKIM "how" to apply your keys. + +# To use this file, uncomment the SigningTable option in /etc/opendkim.conf, +# then uncomment one of the usage examples below and replace example.com with your +# domain name, then restart OpenDKIM. + +# WILDCARD EXAMPLE +# Enables signing for any address on the listed domain(s), but will work only if +# "refile:/etc/opendkim/SigningTable" is included in /etc/opendkim.conf. +# Create additional lines for additional domains. + +#*@example.com default._domainkey.example.com + +# NON-WILDCARD EXAMPLE +# If "file:" (instead of "refile:") is specified in /etc/opendkim.conf, then +# wildcards will not work. Instead, full user@host is checked first, then simply host, +# then user@.domain (with all superdomains checked in sequence, so "foo.example.com" +# would first check "user@foo.example.com", then "user@.example.com", then "user@.com"), +# then .domain, then user@*, and finally *. See the opendkim.conf(5) man page under +# "SigningTable" for more details. + +#example.com default._domainkey.example.com diff --git a/templates/Fedora/37/etc/opendkim/TrustedHosts b/templates/Fedora/37/etc/opendkim/TrustedHosts new file mode 100644 index 0000000..7a086d4 --- /dev/null +++ b/templates/Fedora/37/etc/opendkim/TrustedHosts @@ -0,0 +1,9 @@ +# OPENDKIM TRUSTED HOSTS +# To use this file, uncomment the #ExternalIgnoreList and/or the #InternalHosts +# option in /etc/opendkim.conf then restart OpenDKIM. Additional hosts +# may be added on separate lines (IP addresses, hostnames, or CIDR ranges). +# The localhost IP (127.0.0.1) should always be the first entry in this file. +127.0.0.1 +::1 +#host.example.com +#192.168.1.0/24 diff --git a/templates/Fedora/37/etc/opendmarc.conf b/templates/Fedora/37/etc/opendmarc.conf new file mode 100644 index 0000000..cc1018d --- /dev/null +++ b/templates/Fedora/37/etc/opendmarc.conf @@ -0,0 +1,442 @@ +## opendmarc.conf -- configuration file for OpenDMARC filter +## +## Copyright (c) 2012-2015, 2018, 2021, The Trusted Domain Project. +## All rights reserved. + +## DEPRECATED CONFIGURATION OPTIONS +## +## The following configuration options are no longer valid. They should be +## removed from your existing configuration file to prevent potential issues. +## Failure to do so may result in opendmarc being unable to start. +## +## Renamed in 1.3.0: +## ForensicReports became FailureReports +## ForensicReportsBcc became FailureReportsBcc +## ForensicReportsOnNone became FailureReportsOnNone +## ForensicReportsSentBy became FailureReportsSentBy + +## CONFIGURATION OPTIONS + +## AuthservID (string) +## defaults to MTA name +## +## Sets the "authserv-id" to use when generating the Authentication-Results: +## header field after verifying a message. If the string "HOSTNAME" is +## provided, the name of the host running the filter (as returned by the +## gethostname(3) function) will be used. +# +# AuthservID name + +## AuthservIDWithJobID { true | false } +## default "false" +## +## If "true", requests that the authserv-id portion of the added +## Authentication-Results header fields contain the job ID of the message +## being evaluated. +# +# AuthservIDWithJobID false + +## AutoRestart { true | false } +## default "false" +## +## Automatically re-start on failures. Use with caution; if the filter fails +## instantly after it starts, this can cause a tight fork(2) loop. +# +# AutoRestart false + +## AutoRestartCount n +## default 0 +## +## Sets the maximum automatic restart count. After this number of automatic +## restarts, the filter will give up and terminate. A value of 0 implies no +## limit. +# +# AutoRestartCount 0 + +## AutoRestartRate n/t[u] +## default (no limit) +## +## Sets the maximum automatic restart rate. If the filter begins restarting +## faster than the rate defined here, it will give up and terminate. This +## is a string of the form n/t[u] where n is an integer limiting the count +## of restarts in the given interval and t[u] defines the time interval +## through which the rate is calculated; t is an integer and u defines the +## units thus represented ("s" or "S" for seconds, the default; "m" or "M" +## for minutes; "h" or "H" for hours; "d" or "D" for days). For example, a +## value of "10/1h" limits the restarts to 10 in one hour. There is no +## default, meaning restart rate is not limited. +# +# AutoRestartRate n/t[u] + +## Background { true | false } +## default "true" +## +## Causes opendmarc to fork and exits immediately, leaving the service +## running in the background. +# +# Background true + +## BaseDirectory (string) +## default (none) +## +## If set, instructs the filter to change to the specified directory using +## chdir(2) before doing anything else. This means any files referenced +## elsewhere in the configuration file can be specified relative to this +## directory. It's also useful for arranging that any crash dumps will be +## saved to a specific location. +# +# BaseDirectory /var/run/opendmarc + +## ChangeRootDirectory (string) +## default (none) +## +## Requests that the operating system change the effective root directory of +## the process to the one specified here prior to beginning execution. +## chroot(2) requires superuser access. A warning will be generated if +## UserID is not also set. +# +# ChangeRootDirectory /var/chroot/opendmarc + +## CopyFailuresTo (string) +## default (none) +## +## Requests addition of the specified email address to the envelope of +## any message that fails the DMARC evaluation. +# +# CopyFailuresTo postmaster@localhost + +## DomainWhitelist (string) +## default (none) +## +## A brief list of whitelisted domains for which ARC signature headers are +## trusted as determined by evaluating entries in the "arc.chain" field found +## in a locally generated Authentication-Results header. +## +## This list will be concatenated with DomainWhitelistFile (if provided). +## +# +# DomainWhitelist example.com + +## DomainWhitelistFile path +## default (none) +## +## A comprehensive list of whitelisted domains for which ARC signature headers +## are trusted as determined by evaluating entries in the "arc.chain" field +## found in a locally generated Authentication-Results header. +## +## This list will be concatenated with DomainWhitelist (if provided). +## +# +# DomainWhitelistFile /etc/opendmarc/whitelist.domains + +## DomainWhitelistSize +## default 3000 +## +## The maximum number of entries in the DomainWhitelist including both entries +## in the DomainWhitelist configuration parameter (above) and entries in the +## DomainWhitelistFile. This number will be increased by approximately 20% to +## increase the efficiency of the hashing algorithm. +## +# +# DomainWhitelistSize 3000 + +## DNSTimeout (integer) +## default 5 +## +## Sets the DNS timeout in seconds. A value of 0 causes an infinite wait. +## (NOT YET IMPLEMENTED) +# +# DNSTimeout 5 + +## EnableCoredumps { true | false } +## default "false" +## +## On systems that have such support, make an explicit request to the kernel +## to dump cores when the filter crashes for some reason. Some modern UNIX +## systems suppress core dumps during crashes for security reasons if the +## user ID has changed during the lifetime of the process. Currently only +## supported on Linux. +# +# EnableCoreDumps false + +## FailureReports { true | false } +## default "false" +## +## Enables generation of failure reports when the DMARC test fails and the +## purported sender of the message has requested such reports. Reports are +## formatted per RFC6591. +# +# FailureReports false + +## FailureReportsBcc (string) +## default (none) +## +## When failure reports are enabled and one is to be generated, always +## send one to the address(es) specified here. If a failure report is +## requested by the domain owner, the address(es) are added in a Bcc: field. +## If no request is made, they address(es) are used in a To: field. There +## is no default. +# +# FailureReportsBcc postmaster@example.coom +FailureReportsBcc {{ postmaster_email }} + +## FailureReportsOnNone { true | false } +## default "false" +## +## Supplements the "FailureReports" setting by generating reports for +## domains that advertise "none" policies. By default, reports are only +## generated (when enabled) for sending domains advertising a "quarantine" +## or "reject" policy. +# +# FailureReportsOnNone false + +## FailureReportsSentBy string +## default "USER@HOSTNAME" +## +## Specifies the email address to use in the From: field of failure +## reports generated by the filter. The default is to use the userid of +## the user running the filter and the local hostname to construct an +## email address. "postmaster" is used in place of the userid if a name +## could not be determined. +# +# FailureReportsSentBy USER@HOSTNAME +FailureReportsSentBy {{ postmaster_email }} + +## HistoryFile path +## default (none) +## +## If set, specifies the location of a text file to which records are written +## that can be used to generate DMARC aggregate reports. Records are groups +## of rows containing information about a single received message, and +## include all relevant information needed to generate a DMARC aggregate +## report. It is expected that this will not be used in its raw form, but +## rather periodically imported into a relational database from which the +## aggregate reports can be extracted by a tool such as opendmarc-import(8). +# +# HistoryFile /var/spool/opendmarc/opendmarc.dat + +## HoldQuarantinedMessages { true | false } +## default "false" +## +## If set, the milter will signal to the mta that messages with +## p=quarantine, which fail dmarc authentication, should be held in +## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. +## If false, messsages will be accepted and passed along with the +## regular mail flow, and the quarantine will be left up to downstream +## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, +## including the Authentication-Results header added by OpenDMARC +# +# HoldQuarantinedMessages false + +## IgnoreAuthenticatedClients { true | false } +## default "false" +## +## If set, causes mail from authenticated clients (i.e., those that used +## SMTP AUTH) to be ignored by the filter. +# +# IgnoreAuthenticatedClients false + +## HoldQuarantinedMessages { true | false } +## default "false" +## +## If set, the milter will signal to the mta that messages with +## p=quarantine, which fail dmarc authentication, should be held in +## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. +## If false, messsages will be accepted and passed along with the +## regular mail flow, and the quarantine will be left up to downstream +## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, +## including the Authentication-Results header added by OpenDMARC +# +# HoldQuarantinedMessages false + + +## IgnoreHosts path +## default (internal) +## +## Specifies the path to a file that contains a list of hostnames, IP +## addresses, and/or CIDR expressions identifying hosts whose SMTP +## connections are to be ignored by the filter. If not specified, defaults +## to "127.0.0.1" only. +# +# IgnoreHosts /etc/opendmarc/ignore.hosts + +## IgnoreMailFrom domain[,...] +## default (none) +## +## Gives a list of domain names whose mail (based on the From: domain) is to +## be ignored by the filter. The list should be comma-separated. Matching +## against this list is case-insensitive. The default is an empty list, +## meaning no mail is ignored. +# +# IgnoreMailFrom example.com + +## MilterDebug (integer) +## default 0 +## +## Sets the debug level to be requested from the milter library. +# +# MilterDebug 0 + +## PidFile path +## default (none) +## +## Specifies the path to a file that should be created at process start +## containing the process ID. +# +# PidFile /var/run/opendmarc.pid + +## PublicSuffixList path +## default (none) +## +## Specifies the path to a file that contains top-level domains (TLDs) that +## will be used to compute the Organizational Domain for a given domain name, +## as described in the DMARC specification. If not provided, the filter will +## not be able to determine the Organizational Domain and only the presented +## domain will be evaluated. This file should be periodically updated. +## One location to retrieve the file from is https://publicsuffix.org/list/ +# +# PublicSuffixList path + +## RecordAllMessages { true | false } +## default "false" +## +## If set and "HistoryFile" is in use, all received messages are recorded +## to the history file. If not set (the default), only messages for which +## the From: domain published a DMARC record will be recorded in the +## history file. +# +# RecordAllMessages false + +## RejectFailures { true | false } +## default "false" +## +## If set, messages will be rejected if they fail the DMARC evaluation, or +## temp-failed if evaluation could not be completed. By default, no message +## will be rejected or temp-failed regardless of the outcome of the DMARC +## evaluation of the message. Instead, an Authentication-Results header +## field will be added. +# +# RejectFailures false +RejectFailures true + +## RejectMultiValueFrom { true | false } +## default "false" +## +## If set, messages with multiple addresses in the From: field of the message +## will be rejected unless all domains in the field are the same. They will +## otherwise be ignored by the filter (the default). +# +# RejectMultiValueFrom false + +## ReportCommand string +## default "/usr/sbin/sendmail -t" +## +## Indicates the shell command to which failure reports should be passed for +## delivery when "FailureReports" is enabled. +# +# ReportCommand /usr/sbin/sendmail -t + +## RequiredHeaders { true | false } +## default "false" +## +## If set, the filter will ensure the header of the message conforms to the +## basic header field count restrictions laid out in RFC5322, Section 3.6. +## Messages failing this test are rejected without further processing. A +## From: field from which no domain name could be extracted will also be +## rejected. +# +# RequiredHeaders false + +## Socket socketspec +## default (none) +## +## Specifies the socket that should be established by the filter to receive +## connections from sendmail(8) in order to provide service. socketspec is +## in one of two forms: local:path, which creates a UNIX domain socket at +## the specified path, or inet:port[@host] or inet6:port[@host] which creates +## a TCP socket on the specified port for the appropriate protocol family. +## If the host is not given as either a hostname or an IP address, the +## socket will be listening on all interfaces. This option is mandatory +## either in the configuration file or on the command line. If an IP +## address is used, it must be enclosed in square brackets. +# +Socket inet:8893@localhost + +## SoftwareHeader { true | false } +## default "false" +## +## Causes the filter to add a "DMARC-Filter" header field indicating the +## presence of this filter in the path of the message from injection to +## delivery. The product's name, version, and the job ID are included in +## the header field's contents. +# +SoftwareHeader true + +## SPFIgnoreResults { true | false } +## default "false" +## +## Causes the filter to ignore any SPF results in the header of the +## message. This is useful if you want the filter to perform SPF checks +## itself, or because you don't trust the arriving header. +# +SPFIgnoreResults true + +## SPFSelfValidate { true | false } +## default false +## +## Enable internal spf checking with --with-spf +## To use libspf2 instead: --with-spf --with-spf2-include=path --with-spf2-lib=path +## +## Causes the filter to perform a fallback SPF check itself when +## it can find no SPF results in the message header. If SPFIgnoreResults +## is also set, it never looks for SPF results in headers and +## always performs the SPF check itself when this is set. +# +SPFSelfValidate true + +## Syslog { true | false } +## default "false" +## +## Log via calls to syslog(3) any interesting activity. +# +Syslog true + +## SyslogFacility facility-name +## default "mail" +## +## Log via calls to syslog(3) using the named facility. The facility names +## are the same as the ones allowed in syslog.conf(5). +# +# SyslogFacility mail + +## TrustedAuthservIDs string +## default HOSTNAME +## +## Specifies one or more "authserv-id" values to trust as relaying true +## upstream DKIM and SPF results. The default is to use the name of +## the MTA processing the message. To specify a list, separate each entry +## with a comma. The key word "HOSTNAME" will be replaced by the name of +## the host running the filter as reported by the gethostname(3) function. +# +# TrustedAuthservIDs HOSTNAME + +## UMask mask +## default (none) +## +## Requests a specific permissions mask to be used for file creation. This +## only really applies to creation of the socket when Socket specifies a +## UNIX domain socket, and to the HistoryFile and PidFile (if any); temporary +## files are normally created by the mkstemp(3) function that enforces a +## specific file mode on creation regardless of the process umask. See +## umask(2) for more information. +# +UMask 007 + +## UserID user[:group] +## default (none) +## +## Attempts to become the specified userid before starting operations. +## The process will be assigned all of the groups and primary group ID of +## the named userid unless an alternate group is specified. +# +UserID opendmarc:mail diff --git a/templates/Fedora/37/etc/postfix/access b/templates/Fedora/37/etc/postfix/access new file mode 100644 index 0000000..257339b --- /dev/null +++ b/templates/Fedora/37/etc/postfix/access @@ -0,0 +1,484 @@ +# ACCESS(5) ACCESS(5) +# +# NAME +# access - Postfix SMTP server access table +# +# SYNOPSIS +# postmap /etc/postfix/access +# +# postmap -q "string" /etc/postfix/access +# +# postmap -q - /etc/postfix/access as the lookup key for such addresses. The value is +# specified with the smtpd_null_access_lookup_key parameter +# in the Postfix main.cf file. +# +# EMAIL ADDRESS EXTENSION +# When a mail address localpart contains the optional recip- +# ient delimiter (e.g., user+foo@domain), the lookup order +# becomes: user+foo@domain, user@domain, domain, user+foo@, +# and user@. +# +# HOST NAME/ADDRESS PATTERNS +# With lookups from indexed files such as DB or DBM, or from +# networked tables such as NIS, LDAP or SQL, the following +# lookup patterns are examined in the order as listed: +# +# domain.tld +# Matches domain.tld. +# +# The pattern domain.tld also matches subdomains, but +# only when the string smtpd_access_maps is listed in +# the Postfix parent_domain_matches_subdomains con- +# figuration setting. +# +# .domain.tld +# Matches subdomains of domain.tld, but only when the +# string smtpd_access_maps is not listed in the Post- +# fix parent_domain_matches_subdomains configuration +# setting. +# +# net.work.addr.ess +# +# net.work.addr +# +# net.work +# +# net Matches a remote IPv4 host address or network +# address range. Specify one to four decimal octets +# separated by ".". Do not specify "[]" , "/", lead- +# ing zeros, or hexadecimal forms. +# +# Network ranges are matched by repeatedly truncating +# the last ".octet" from a remote IPv4 host address +# string, until a match is found in the access table, +# or until further truncation is not possible. +# +# NOTE: use the cidr lookup table type to specify +# network/netmask patterns. See cidr_table(5) for +# details. +# +# net:work:addr:ess +# +# net:work:addr +# +# net:work +# +# net Matches a remote IPv6 host address or network +# address range. Specify three to eight hexadecimal +# octet pairs separated by ":", using the compressed +# form "::" for a sequence of zero-valued octet +# pairs. Do not specify "[]", "/", leading zeros, or +# non-compressed forms. +# +# A network range is matched by repeatedly truncating +# the last ":octetpair" from the compressed-form +# remote IPv6 host address string, until a match is +# found in the access table, or until further trunca- +# tion is not possible. +# +# NOTE: use the cidr lookup table type to specify +# network/netmask patterns. See cidr_table(5) for +# details. +# +# IPv6 support is available in Postfix 2.2 and later. +# +# ACCEPT ACTIONS +# OK Accept the address etc. that matches the pattern. +# +# all-numerical +# An all-numerical result is treated as OK. This for- +# mat is generated by address-based relay authoriza- +# tion schemes such as pop-before-smtp. +# +# For other accept actions, see "OTHER ACTIONS" below. +# +# REJECT ACTIONS +# Postfix version 2.3 and later support enhanced status +# codes as defined in RFC 3463. When no code is specified +# at the beginning of the text below, Postfix inserts a +# default enhanced status code of "5.7.1" in the case of +# reject actions, and "4.7.1" in the case of defer actions. +# See "ENHANCED STATUS CODES" below. +# +# 4NN text +# +# 5NN text +# Reject the address etc. that matches the pattern, +# and respond with the numerical three-digit code and +# text. 4NN means "try again later", while 5NN means +# "do not try again". +# +# The following responses have special meaning for +# the Postfix SMTP server: +# +# 421 text (Postfix 2.3 and later) +# +# 521 text (Postfix 2.6 and later) +# After responding with the numerical +# three-digit code and text, disconnect imme- +# diately from the SMTP client. This frees up +# SMTP server resources so that they can be +# made available to another SMTP client. +# +# Note: The "521" response should be used only +# with botnets and other malware where inter- +# operability is of no concern. The "send 521 +# and disconnect" behavior is NOT defined in +# the SMTP standard. +# +# REJECT optional text... +# Reject the address etc. that matches the pattern. +# Reply with "$access_map_reject_code optional +# text..." when the optional text is specified, oth- +# erwise reply with a generic error response message. +# +# DEFER optional text... +# Reject the address etc. that matches the pattern. +# Reply with "$access_map_defer_code optional +# text..." when the optional text is specified, oth- +# erwise reply with a generic error response message. +# +# This feature is available in Postfix 2.6 and later. +# +# DEFER_IF_REJECT optional text... +# Defer the request if some later restriction would +# result in a REJECT action. Reply with +# "$access_map_defer_code 4.7.1 optional text..." +# when the optional text is specified, otherwise +# reply with a generic error response message. +# +# Prior to Postfix 2.6, the SMTP reply code is 450. +# +# This feature is available in Postfix 2.1 and later. +# +# DEFER_IF_PERMIT optional text... +# Defer the request if some later restriction would +# result in a an explicit or implicit PERMIT action. +# Reply with "$access_map_defer_code 4.7.1 optional +# text..." when the optional text is specified, oth- +# erwise reply with a generic error response message. +# +# Prior to Postfix 2.6, the SMTP reply code is 450. +# +# This feature is available in Postfix 2.1 and later. +# +# For other reject actions, see "OTHER ACTIONS" below. +# +# OTHER ACTIONS +# restriction... +# Apply the named UCE restriction(s) (permit, reject, +# reject_unauth_destination, and so on). +# +# BCC user@domain +# Send one copy of the message to the specified +# recipient. +# +# If multiple BCC actions are specified within the +# same SMTP MAIL transaction, with Postfix 3.0 only +# the last action will be used. +# +# This feature is available in Postfix 3.0 and later. +# +# DISCARD optional text... +# Claim successful delivery and silently discard the +# message. Log the optional text if specified, oth- +# erwise log a generic message. +# +# Note: this action currently affects all recipients +# of the message. To discard only one recipient +# without discarding the entire message, use the +# transport(5) table to direct mail to the discard(8) +# service. +# +# This feature is available in Postfix 2.0 and later. +# +# DUNNO Pretend that the lookup key was not found. This +# prevents Postfix from trying substrings of the +# lookup key (such as a subdomain name, or a network +# address subnetwork). +# +# This feature is available in Postfix 2.0 and later. +# +# FILTER transport:destination +# After the message is queued, send the entire mes- +# sage through the specified external content filter. +# The transport name specifies the first field of a +# mail delivery agent definition in master.cf; the +# syntax of the next-hop destination is described in +# the manual page of the corresponding delivery +# agent. More information about external content +# filters is in the Postfix FILTER_README file. +# +# Note 1: do not use $number regular expression sub- +# stitutions for transport or destination unless you +# know that the information has a trusted origin. +# +# Note 2: this action overrides the main.cf con- +# tent_filter setting, and affects all recipients of +# the message. In the case that multiple FILTER +# actions fire, only the last one is executed. +# +# Note 3: the purpose of the FILTER command is to +# override message routing. To override the recipi- +# ent's transport but not the next-hop destination, +# specify an empty filter destination (Postfix 2.7 +# and later), or specify a transport:destination that +# delivers through a different Postfix instance +# (Postfix 2.6 and earlier). Other options are using +# the recipient-dependent transport_maps or the sen- +# der-dependent sender_dependent_default_transport- +# _maps features. +# +# This feature is available in Postfix 2.0 and later. +# +# HOLD optional text... +# Place the message on the hold queue, where it will +# sit until someone either deletes it or releases it +# for delivery. Log the optional text if specified, +# otherwise log a generic message. +# +# Mail that is placed on hold can be examined with +# the postcat(1) command, and can be destroyed or +# released with the postsuper(1) command. +# +# Note: use "postsuper -r" to release mail that was +# kept on hold for a significant fraction of $maxi- +# mal_queue_lifetime or $bounce_queue_lifetime, or +# longer. Use "postsuper -H" only for mail that will +# not expire within a few delivery attempts. +# +# Note: this action currently affects all recipients +# of the message. +# +# This feature is available in Postfix 2.0 and later. +# +# PREPEND headername: headervalue +# Prepend the specified message header to the mes- +# sage. When more than one PREPEND action executes, +# the first prepended header appears before the sec- +# ond etc. prepended header. +# +# Note: this action must execute before the message +# content is received; it cannot execute in the con- +# text of smtpd_end_of_data_restrictions. +# +# This feature is available in Postfix 2.1 and later. +# +# REDIRECT user@domain +# After the message is queued, send the message to +# the specified address instead of the intended +# recipient(s). When multiple REDIRECT actions fire, +# only the last one takes effect. +# +# Note: this action overrides the FILTER action, and +# currently overrides all recipients of the message. +# +# This feature is available in Postfix 2.1 and later. +# +# INFO optional text... +# Log an informational record with the optional text, +# together with client information and if available, +# with helo, sender, recipient and protocol informa- +# tion. +# +# This feature is available in Postfix 3.0 and later. +# +# WARN optional text... +# Log a warning with the optional text, together with +# client information and if available, with helo, +# sender, recipient and protocol information. +# +# This feature is available in Postfix 2.1 and later. +# +# ENHANCED STATUS CODES +# Postfix version 2.3 and later support enhanced status +# codes as defined in RFC 3463. When an enhanced status +# code is specified in an access table, it is subject to +# modification. The following transformations are needed +# when the same access table is used for client, helo, +# sender, or recipient access restrictions; they happen +# regardless of whether Postfix replies to a MAIL FROM, RCPT +# TO or other SMTP command. +# +# o When a sender address matches a REJECT action, the +# Postfix SMTP server will transform a recipient DSN +# status (e.g., 4.1.1-4.1.6) into the corresponding +# sender DSN status, and vice versa. +# +# o When non-address information matches a REJECT +# action (such as the HELO command argument or the +# client hostname/address), the Postfix SMTP server +# will transform a sender or recipient DSN status +# into a generic non-address DSN status (e.g., +# 4.0.0). +# +# REGULAR EXPRESSION TABLES +# This section describes how the table lookups change when +# the table is given in the form of regular expressions. For +# a description of regular expression lookup table syntax, +# see regexp_table(5) or pcre_table(5). +# +# Each pattern is a regular expression that is applied to +# the entire string being looked up. Depending on the appli- +# cation, that string is an entire client hostname, an +# entire client IP address, or an entire mail address. Thus, +# no parent domain or parent network search is done, +# user@domain mail addresses are not broken up into their +# user@ and domain constituent parts, nor is user+foo broken +# up into user and foo. +# +# Patterns are applied in the order as specified in the ta- +# ble, until a pattern is found that matches the search +# string. +# +# Actions are the same as with indexed file lookups, with +# the additional feature that parenthesized substrings from +# the pattern can be interpolated as $1, $2 and so on. +# +# TCP-BASED TABLES +# This section describes how the table lookups change when +# lookups are directed to a TCP-based server. For a descrip- +# tion of the TCP client/server lookup protocol, see tcp_ta- +# ble(5). This feature is not available up to and including +# Postfix version 2.4. +# +# Each lookup operation uses the entire query string once. +# Depending on the application, that string is an entire +# client hostname, an entire client IP address, or an entire +# mail address. Thus, no parent domain or parent network +# search is done, user@domain mail addresses are not broken +# up into their user@ and domain constituent parts, nor is +# user+foo broken up into user and foo. +# +# Actions are the same as with indexed file lookups. +# +# EXAMPLE +# The following example uses an indexed file, so that the +# order of table entries does not matter. The example per- +# mits access by the client at address 1.2.3.4 but rejects +# all other clients in 1.2.3.0/24. Instead of hash lookup +# tables, some systems use dbm. Use the command "postconf +# -m" to find out what lookup tables Postfix supports on +# your system. +# +# /etc/postfix/main.cf: +# smtpd_client_restrictions = +# check_client_access hash:/etc/postfix/access +# +# /etc/postfix/access: +# 1.2.3 REJECT +# 1.2.3.4 OK +# +# Execute the command "postmap /etc/postfix/access" after +# editing the file. +# +# BUGS +# The table format does not understand quoting conventions. +# +# SEE ALSO +# postmap(1), Postfix lookup table manager +# smtpd(8), SMTP server +# postconf(5), configuration parameters +# transport(5), transport:nexthop syntax +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# SMTPD_ACCESS_README, built-in SMTP server access control +# DATABASE_README, Postfix lookup table overview +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# ACCESS(5) diff --git a/templates/Fedora/37/etc/postfix/canonical b/templates/Fedora/37/etc/postfix/canonical new file mode 100644 index 0000000..9881f4e --- /dev/null +++ b/templates/Fedora/37/etc/postfix/canonical @@ -0,0 +1,307 @@ +# CANONICAL(5) CANONICAL(5) +# +# NAME +# canonical - Postfix canonical table format +# +# SYNOPSIS +# postmap /etc/postfix/canonical +# +# postmap -q "string" /etc/postfix/canonical +# +# postmap -q - /etc/postfix/canonical $/ +# REJECT IFRAME vulnerability exploit +# +# SEE ALSO +# cleanup(8), canonicalize and enqueue Postfix message +# pcre_table(5), format of PCRE lookup tables +# regexp_table(5), format of POSIX regular expression tables +# postconf(1), Postfix configuration utility +# postmap(1), Postfix lookup table management +# postsuper(1), Postfix janitor +# postcat(1), show Postfix queue file contents +# RFC 2045, base64 and quoted-printable encoding rules +# RFC 2047, message header encoding for non-ASCII text +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# DATABASE_README, Postfix lookup table overview +# CONTENT_INSPECTION_README, Postfix content inspection overview +# BUILTIN_FILTER_README, Postfix built-in content inspection +# BACKSCATTER_README, blocking returned forged mail +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# HEADER_CHECKS(5) diff --git a/templates/Fedora/37/etc/postfix/main.cf b/templates/Fedora/37/etc/postfix/main.cf new file mode 100644 index 0000000..5b19283 --- /dev/null +++ b/templates/Fedora/37/etc/postfix/main.cf @@ -0,0 +1,765 @@ +# Global Postfix configuration file. This file lists only a subset +# of all parameters. For the syntax, and for a complete parameter +# list, see the postconf(5) manual page (command: "man 5 postconf"). +# +# For common configuration examples, see BASIC_CONFIGURATION_README +# and STANDARD_CONFIGURATION_README. To find these documents, use +# the command "postconf html_directory readme_directory", or go to +# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. +# +# For best results, change no more than 2-3 parameters at a time, +# and test if Postfix still works after every change. + +# COMPATIBILITY +# +# The compatibility_level determines what default settings Postfix +# will use for main.cf and master.cf settings. These defaults will +# change over time. +# +# To avoid breaking things, Postfix will use backwards-compatible +# default settings and log where it uses those old backwards-compatible +# default settings, until the system administrator has determined +# if any backwards-compatible default settings need to be made +# permanent in main.cf or master.cf. +# +# When this review is complete, update the compatibility_level setting +# below as recommended in the RELEASE_NOTES file. +# +# The level below is what should be used with new (not upgrade) installs. +# +compatibility_level = 3.6 + +# SOFT BOUNCE +# +# The soft_bounce parameter provides a limited safety net for +# testing. When soft_bounce is enabled, mail will remain queued that +# would otherwise bounce. This parameter disables locally-generated +# bounces, and prevents the SMTP server from rejecting mail permanently +# (by changing 5xx replies into 4xx replies). However, soft_bounce +# is no cure for address rewriting mistakes or mail routing mistakes. +# +#soft_bounce = no + +# LOCAL PATHNAME INFORMATION +# +# The queue_directory specifies the location of the Postfix queue. +# This is also the root directory of Postfix daemons that run chrooted. +# See the files in examples/chroot-setup for setting up Postfix chroot +# environments on different UNIX systems. +# +queue_directory = /var/spool/postfix + +# The command_directory parameter specifies the location of all +# postXXX commands. +# +command_directory = /usr/sbin + +# The daemon_directory parameter specifies the location of all Postfix +# daemon programs (i.e. programs listed in the master.cf file). This +# directory must be owned by root. +# +daemon_directory = /usr/libexec/postfix + +# The data_directory parameter specifies the location of Postfix-writable +# data files (caches, random numbers). This directory must be owned +# by the mail_owner account (see below). +# +data_directory = /var/lib/postfix + +# QUEUE AND PROCESS OWNERSHIP +# +# The mail_owner parameter specifies the owner of the Postfix queue +# and of most Postfix daemon processes. Specify the name of a user +# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS +# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In +# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED +# USER. +# +mail_owner = postfix + +# The default_privs parameter specifies the default rights used by +# the local delivery agent for delivery to external file or command. +# These rights are used in the absence of a recipient user context. +# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. +# +#default_privs = nobody + +# INTERNET HOST AND DOMAIN NAMES +# +# The myhostname parameter specifies the internet hostname of this +# mail system. The default is to use the fully-qualified domain name +# from gethostname(). $myhostname is used as a default value for many +# other configuration parameters. +# +#myhostname = host.domain.tld +#myhostname = virtual.domain.tld + +# The mydomain parameter specifies the local internet domain name. +# The default is to use $myhostname minus the first component. +# $mydomain is used as a default value for many other configuration +# parameters. +# +#mydomain = domain.tld + +# SENDING MAIL +# +# The myorigin parameter specifies the domain that locally-posted +# mail appears to come from. The default is to append $myhostname, +# which is fine for small sites. If you run a domain with multiple +# machines, you should (1) change this to $mydomain and (2) set up +# a domain-wide alias database that aliases each user to +# user@that.users.mailhost. +# +# For the sake of consistency between sender and recipient addresses, +# myorigin also specifies the default domain name that is appended +# to recipient addresses that have no @domain part. +# +#myorigin = $myhostname +#myorigin = $mydomain + +# RECEIVING MAIL + +# The inet_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on. By default, +# the software claims all active interfaces on the machine. The +# parameter also controls delivery of mail to user@[ip.address]. +# +# See also the proxy_interfaces parameter, for network addresses that +# are forwarded to us via a proxy or network address translator. +# +# Note: you need to stop/start Postfix when this parameter changes. +# +inet_interfaces = all +#inet_interfaces = $myhostname +#inet_interfaces = $myhostname, localhost +#inet_interfaces = localhost + +# Enable IPv4, and IPv6 if supported +inet_protocols = all + +# The proxy_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on by way of a +# proxy or network address translation unit. This setting extends +# the address list specified with the inet_interfaces parameter. +# +# You must specify your proxy/NAT addresses when your system is a +# backup MX host for other domains, otherwise mail delivery loops +# will happen when the primary MX host is down. +# +#proxy_interfaces = +#proxy_interfaces = 1.2.3.4 + +# The mydestination parameter specifies the list of domains that this +# machine considers itself the final destination for. +# +# These domains are routed to the delivery agent specified with the +# local_transport parameter setting. By default, that is the UNIX +# compatible delivery agent that lookups all recipients in /etc/passwd +# and /etc/aliases or their equivalent. +# +# The default is $myhostname + localhost.$mydomain + localhost. On +# a mail domain gateway, you should also include $mydomain. +# +# Do not specify the names of virtual domains - those domains are +# specified elsewhere (see VIRTUAL_README). +# +# Do not specify the names of domains that this machine is backup MX +# host for. Specify those names via the relay_domains settings for +# the SMTP server, or use permit_mx_backup if you are lazy (see +# STANDARD_CONFIGURATION_README). +# +# The local machine is always the final destination for mail addressed +# to user@[the.net.work.address] of an interface that the mail system +# receives mail on (see the inet_interfaces parameter). +# +# Specify a list of host or domain names, /file/name or type:table +# patterns, separated by commas and/or whitespace. A /file/name +# pattern is replaced by its contents; a type:table is matched when +# a name matches a lookup key (the right-hand side is ignored). +# Continue long lines by starting the next line with whitespace. +# +# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". +# +mydestination = $myhostname, localhost.$mydomain, localhost +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, +# mail.$mydomain, www.$mydomain, ftp.$mydomain + +# REJECTING MAIL FOR UNKNOWN LOCAL USERS +# +# The local_recipient_maps parameter specifies optional lookup tables +# with all names or addresses of users that are local with respect +# to $mydestination, $inet_interfaces or $proxy_interfaces. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown local users. This parameter is defined by default. +# +# To turn off local recipient checking in the SMTP server, specify +# local_recipient_maps = (i.e. empty). +# +# The default setting assumes that you use the default Postfix local +# delivery agent for local delivery. You need to update the +# local_recipient_maps setting if: +# +# - You define $mydestination domain recipients in files other than +# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. +# For example, you define $mydestination domain recipients in +# the $virtual_mailbox_maps files. +# +# - You redefine the local delivery agent in master.cf. +# +# - You redefine the "local_transport" setting in main.cf. +# +# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" +# feature of the Postfix local delivery agent (see local(8)). +# +# Details are described in the LOCAL_RECIPIENT_README file. +# +# Beware: if the Postfix SMTP server runs chrooted, you probably have +# to access the passwd file via the proxymap service, in order to +# overcome chroot restrictions. The alternative, having a copy of +# the system passwd file in the chroot jail is just not practical. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify a bare username, an @domain.tld +# wild-card, or specify a user@domain.tld address. +# +#local_recipient_maps = unix:passwd.byname $alias_maps +#local_recipient_maps = proxy:unix:passwd.byname $alias_maps +#local_recipient_maps = + +# The unknown_local_recipient_reject_code specifies the SMTP server +# response code when a recipient domain matches $mydestination or +# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty +# and the recipient address or address local-part is not found. +# +# The default setting is 550 (reject mail) but it is safer to start +# with 450 (try again later) until you are certain that your +# local_recipient_maps settings are OK. +# +unknown_local_recipient_reject_code = 550 + +# TRUST AND RELAY CONTROL + +# The mynetworks parameter specifies the list of "trusted" SMTP +# clients that have more privileges than "strangers". +# +# In particular, "trusted" SMTP clients are allowed to relay mail +# through Postfix. See the smtpd_recipient_restrictions parameter +# in postconf(5). +# +# You can specify the list of "trusted" network addresses by hand +# or you can let Postfix do it for you (which is the default). +# +# By default (mynetworks_style = subnet), Postfix "trusts" SMTP +# clients in the same IP subnetworks as the local machine. +# On Linux, this works correctly only with interfaces specified +# with the "ifconfig" command. +# +# Specify "mynetworks_style = class" when Postfix should "trust" SMTP +# clients in the same IP class A/B/C networks as the local machine. +# Don't do this with a dialup site - it would cause Postfix to "trust" +# your entire provider's network. Instead, specify an explicit +# mynetworks list by hand, as described below. +# +# Specify "mynetworks_style = host" when Postfix should "trust" +# only the local machine. +# +#mynetworks_style = class +#mynetworks_style = subnet +#mynetworks_style = host + +# Alternatively, you can specify the mynetworks list by hand, in +# which case Postfix ignores the mynetworks_style setting. +# +# Specify an explicit list of network/netmask patterns, where the +# mask specifies the number of bits in the network part of a host +# address. +# +# You can also specify the absolute pathname of a pattern file instead +# of listing the patterns here. Specify type:table for table-based lookups +# (the value on the table right-hand side is not used). +# +#mynetworks = 168.100.3.0/28, 127.0.0.0/8 +#mynetworks = $config_directory/mynetworks +#mynetworks = hash:/etc/postfix/network_table + +# The relay_domains parameter restricts what destinations this system will +# relay mail to. See the smtpd_recipient_restrictions description in +# postconf(5) for detailed information. +# +# By default, Postfix relays mail +# - from "trusted" clients (IP address matches $mynetworks) to any destination, +# - from "untrusted" clients to destinations that match $relay_domains or +# subdomains thereof, except addresses with sender-specified routing. +# The default relay_domains value is $mydestination. +# +# In addition to the above, the Postfix SMTP server by default accepts mail +# that Postfix is final destination for: +# - destinations that match $inet_interfaces or $proxy_interfaces, +# - destinations that match $mydestination +# - destinations that match $virtual_alias_domains, +# - destinations that match $virtual_mailbox_domains. +# These destinations do not need to be listed in $relay_domains. +# +# Specify a list of hosts or domains, /file/name patterns or type:name +# lookup tables, separated by commas and/or whitespace. Continue +# long lines by starting the next line with whitespace. A file name +# is replaced by its contents; a type:name table is matched when a +# (parent) domain appears as lookup key. +# +# NOTE: Postfix will not automatically forward mail for domains that +# list this system as their primary or backup MX host. See the +# permit_mx_backup restriction description in postconf(5). +# +#relay_domains = $mydestination + +# INTERNET OR INTRANET + +# The relayhost parameter specifies the default host to send mail to +# when no entry is matched in the optional transport(5) table. When +# no relayhost is given, mail is routed directly to the destination. +# +# On an intranet, specify the organizational domain name. If your +# internal DNS uses no MX records, specify the name of the intranet +# gateway host instead. +# +# In the case of SMTP, specify a domain, host, host:port, [host]:port, +# [address] or [address]:port; the form [host] turns off MX lookups. +# +# If you're connected via UUCP, see also the default_transport parameter. +# +#relayhost = $mydomain +#relayhost = [gateway.my.domain] +#relayhost = [mailserver.isp.tld] +#relayhost = uucphost +#relayhost = [an.ip.add.ress] + +# REJECTING UNKNOWN RELAY USERS +# +# The relay_recipient_maps parameter specifies optional lookup tables +# with all addresses in the domains that match $relay_domains. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown relay users. This feature is off by default. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify an @domain.tld wild-card, or specify +# a user@domain.tld address. +# +#relay_recipient_maps = hash:/etc/postfix/relay_recipients + +# INPUT RATE CONTROL +# +# The in_flow_delay configuration parameter implements mail input +# flow control. This feature is turned on by default, although it +# still needs further development (it's disabled on SCO UNIX due +# to an SCO bug). +# +# A Postfix process will pause for $in_flow_delay seconds before +# accepting a new message, when the message arrival rate exceeds the +# message delivery rate. With the default 100 SMTP server process +# limit, this limits the mail inflow to 100 messages a second more +# than the number of messages delivered per second. +# +# Specify 0 to disable the feature. Valid delays are 0..10. +# +#in_flow_delay = 1s + +# ADDRESS REWRITING +# +# The ADDRESS_REWRITING_README document gives information about +# address masquerading or other forms of address rewriting including +# username->Firstname.Lastname mapping. + +# ADDRESS REDIRECTION (VIRTUAL DOMAIN) +# +# The VIRTUAL_README document gives information about the many forms +# of domain hosting that Postfix supports. + +# "USER HAS MOVED" BOUNCE MESSAGES +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# TRANSPORT MAP +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# ALIAS DATABASE +# +# The alias_maps parameter specifies the list of alias databases used +# by the local delivery agent. The default list is system dependent. +# +# On systems with NIS, the default is to search the local alias +# database, then the NIS alias database. See aliases(5) for syntax +# details. +# +# If you change the alias database, run "postalias /etc/aliases" (or +# wherever your system stores the mail alias file), or simply run +# "newaliases" to build the necessary DBM or DB file. +# +# It will take a minute or so before changes become visible. Use +# "postfix reload" to eliminate the delay. +# +#alias_maps = dbm:/etc/aliases +alias_maps = hash:/etc/aliases +#alias_maps = hash:/etc/aliases, nis:mail.aliases +#alias_maps = netinfo:/aliases + +# The alias_database parameter specifies the alias database(s) that +# are built with "newaliases" or "sendmail -bi". This is a separate +# configuration parameter, because alias_maps (see above) may specify +# tables that are not necessarily all under control by Postfix. +# +#alias_database = dbm:/etc/aliases +#alias_database = dbm:/etc/mail/aliases +alias_database = hash:/etc/aliases +#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases + +# ADDRESS EXTENSIONS (e.g., user+foo) +# +# The recipient_delimiter parameter specifies the separator between +# user names and address extensions (user+foo). See canonical(5), +# local(8), relocated(5) and virtual(5) for the effects this has on +# aliases, canonical, virtual, relocated and .forward file lookups. +# Basically, the software tries user+foo and .forward+foo before +# trying user and .forward. +# +#recipient_delimiter = + + +# DELIVERY TO MAILBOX +# +# The home_mailbox parameter specifies the optional pathname of a +# mailbox file relative to a user's home directory. The default +# mailbox file is /var/spool/mail/user or /var/mail/user. Specify +# "Maildir/" for qmail-style delivery (the / is required). +# +#home_mailbox = Mailbox +#home_mailbox = Maildir/ + +# The mail_spool_directory parameter specifies the directory where +# UNIX-style mailboxes are kept. The default setting depends on the +# system type. +# +#mail_spool_directory = /var/mail +#mail_spool_directory = /var/spool/mail + +# The mailbox_command parameter specifies the optional external +# command to use instead of mailbox delivery. The command is run as +# the recipient with proper HOME, SHELL and LOGNAME environment settings. +# Exception: delivery for root is done as $default_user. +# +# Other environment variables of interest: USER (recipient username), +# EXTENSION (address extension), DOMAIN (domain part of address), +# and LOCAL (the address localpart). +# +# Unlike other Postfix configuration parameters, the mailbox_command +# parameter is not subjected to $parameter substitutions. This is to +# make it easier to specify shell syntax (see example below). +# +# Avoid shell meta characters because they will force Postfix to run +# an expensive shell process. Procmail alone is expensive enough. +# +# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN +# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. +# +#mailbox_command = /some/where/procmail +#mailbox_command = /some/where/procmail -a "$EXTENSION" + +# The mailbox_transport specifies the optional transport in master.cf +# to use after processing aliases and .forward files. This parameter +# has precedence over the mailbox_command, fallback_transport and +# luser_relay parameters. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" +# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. +#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp +mailbox_transport = lmtp:inet:localhost:24 +virtual_transport = lmtp:inet:localhost:24 + +# If using the cyrus-imapd IMAP server deliver local mail to the IMAP +# server using LMTP (Local Mail Transport Protocol), this is prefered +# over the older cyrus deliver program by setting the +# mailbox_transport as below: +# +# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp +# +# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via +# these settings. +# +# local_destination_recipient_limit = 300 +# local_destination_concurrency_limit = 5 +# +# Of course you should adjust these settings as appropriate for the +# capacity of the hardware you are using. The recipient limit setting +# can be used to take advantage of the single instance message store +# capability of Cyrus. The concurrency limit can be used to control +# how many simultaneous LMTP sessions will be permitted to the Cyrus +# message store. +# +# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and +# subsequent line in master.cf. +#mailbox_transport = cyrus + +# The fallback_transport specifies the optional transport in master.cf +# to use for recipients that are not found in the UNIX passwd database. +# This parameter has precedence over the luser_relay parameter. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp +#fallback_transport = + +# The luser_relay parameter specifies an optional destination address +# for unknown recipients. By default, mail for unknown@$mydestination, +# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned +# as undeliverable. +# +# The following expansions are done on luser_relay: $user (recipient +# username), $shell (recipient shell), $home (recipient home directory), +# $recipient (full recipient address), $extension (recipient address +# extension), $domain (recipient domain), $local (entire recipient +# localpart), $recipient_delimiter. Specify ${name?value} or +# ${name:value} to expand value only when $name does (does not) exist. +# +# luser_relay works only for the default Postfix local delivery agent. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must specify "local_recipient_maps =" (i.e. empty) in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#luser_relay = $user@other.host +#luser_relay = $local@other.host +#luser_relay = admin+$local + +# JUNK MAIL CONTROLS +# +# The controls listed here are only a very small subset. The file +# SMTPD_ACCESS_README provides an overview. + +# The header_checks parameter specifies an optional table with patterns +# that each logical message header is matched against, including +# headers that span multiple physical lines. +# +# By default, these patterns also apply to MIME headers and to the +# headers of attached messages. With older Postfix versions, MIME and +# attached message headers were treated as body text. +# +# For details, see "man header_checks". +# +#header_checks = regexp:/etc/postfix/header_checks + +# FAST ETRN SERVICE +# +# Postfix maintains per-destination logfiles with information about +# deferred mail, so that mail can be flushed quickly with the SMTP +# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". +# See the ETRN_README document for a detailed description. +# +# The fast_flush_domains parameter controls what destinations are +# eligible for this service. By default, they are all domains that +# this server is willing to relay mail to. +# +#fast_flush_domains = $relay_domains + +# SHOW SOFTWARE VERSION OR NOT +# +# The smtpd_banner parameter specifies the text that follows the 220 +# code in the SMTP server's greeting banner. Some people like to see +# the mail version advertised. By default, Postfix shows no version. +# +# You MUST specify $myhostname at the start of the text. That is an +# RFC requirement. Postfix itself does not care. +# +#smtpd_banner = $myhostname ESMTP $mail_name +#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) + +# PARALLEL DELIVERY TO THE SAME DESTINATION +# +# How many parallel deliveries to the same user or domain? With local +# delivery, it does not make sense to do massively parallel delivery +# to the same user, because mailbox updates must happen sequentially, +# and expensive pipelines in .forward files can cause disasters when +# too many are run at the same time. With SMTP deliveries, 10 +# simultaneous connections to the same domain could be sufficient to +# raise eyebrows. +# +# Each message delivery transport has its XXX_destination_concurrency_limit +# parameter. The default is $default_destination_concurrency_limit for +# most delivery transports. For the local delivery agent the default is 2. + +#local_destination_concurrency_limit = 2 +#default_destination_concurrency_limit = 20 + +# DEBUGGING CONTROL +# +# The debug_peer_level parameter specifies the increment in verbose +# logging level when an SMTP client or server host name or address +# matches a pattern in the debug_peer_list parameter. +# +debug_peer_level = 2 + +# The debug_peer_list parameter specifies an optional list of domain +# or network patterns, /file/name patterns or type:name tables. When +# an SMTP client or server host name or address matches a pattern, +# increase the verbose logging level by the amount specified in the +# debug_peer_level parameter. +# +#debug_peer_list = 127.0.0.1 +#debug_peer_list = some.domain + +# The debugger_command specifies the external command that is executed +# when a Postfix daemon program is run with the -D option. +# +# Use "command .. & sleep 5" so that the debugger can attach before +# the process marches on. If you use an X-based debugger, be sure to +# set up your XAUTHORITY environment variable before starting Postfix. +# +debugger_command = + PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin + ddd $daemon_directory/$process_name $process_id & sleep 5 + +# If you can't use X, use this to capture the call stack when a +# daemon crashes. The result is in a file in the configuration +# directory, and is named after the process name and the process ID. +# +# debugger_command = +# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; +# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 +# >$config_directory/$process_name.$process_id.log & sleep 5 +# +# Another possibility is to run gdb under a detached screen session. +# To attach to the screen session, su root and run "screen -r +# " where uniquely matches one of the detached +# sessions (from "screen -list"). +# +# debugger_command = +# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen +# -dmS $process_name gdb $daemon_directory/$process_name +# $process_id & sleep 1 + +# INSTALL-TIME CONFIGURATION INFORMATION +# +# The following parameters are used when installing a new Postfix version. +# +# sendmail_path: The full pathname of the Postfix sendmail command. +# This is the Sendmail-compatible mail posting interface. +# +sendmail_path = /usr/sbin/sendmail.postfix + +# newaliases_path: The full pathname of the Postfix newaliases command. +# This is the Sendmail-compatible command to build alias databases. +# +newaliases_path = /usr/bin/newaliases.postfix + +# mailq_path: The full pathname of the Postfix mailq command. This +# is the Sendmail-compatible mail queue listing command. +# +mailq_path = /usr/bin/mailq.postfix + +# setgid_group: The group for mail submission and queue management +# commands. This must be a group name with a numerical group ID that +# is not shared with other accounts, not even with the Postfix account. +# +setgid_group = postdrop + +# html_directory: The location of the Postfix HTML documentation. +# +html_directory = no + +# manpage_directory: The location of the Postfix on-line manual pages. +# +manpage_directory = /usr/share/man + +# sample_directory: The location of the Postfix sample configuration files. +# This parameter is obsolete as of Postfix 2.1. +# +sample_directory = /usr/share/doc/postfix/samples + +# readme_directory: The location of the Postfix README files. +# +readme_directory = /usr/share/doc/postfix/README_FILES + +# TLS CONFIGURATION +# +# Basic Postfix TLS configuration by default with self-signed certificate +# for inbound SMTP and also opportunistic TLS for outbound SMTP. + +# The full pathname of a file with the Postfix SMTP server RSA certificate +# in PEM format. Intermediate certificates should be included in general, +# the server certificate first, then the issuing CA(s) (bottom-up order). +# +# smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem +smtpd_tls_cert_file = /etc/postfix/certificates/pubcert.pem + +# The full pathname of a file with the Postfix SMTP server RSA private key +# in PEM format. The private key must be accessible without a pass-phrase, +# i.e. it must not be encrypted. +# +# smtpd_tls_key_file = /etc/pki/tls/private/postfix.key +smtpd_tls_key_file = /etc/postfix/certificates/privkey.pem + +# Announce STARTTLS support to remote SMTP clients, but do not require that +# clients use TLS encryption (opportunistic TLS inbound). +# +smtpd_tls_security_level = may + +# Directory with PEM format Certification Authority certificates that the +# Postfix SMTP client uses to verify a remote SMTP server certificate. +# +smtp_tls_CApath = /etc/pki/tls/certs + +# The full pathname of a file containing CA certificates of root CAs +# trusted to sign either remote SMTP server certificates or intermediate CA +# certificates. +# +smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt + +# Use TLS if this is supported by the remote SMTP server, otherwise use +# plaintext (opportunistic TLS outbound). +# +smtp_tls_security_level = may +meta_directory = /etc/postfix +shlib_directory = /usr/lib64/postfix + +{% if ensure_postfix.milter_list is defined and ensure_postfix.milter_list is iterable %} +# The Milter List +{% for milter in ensure_postfix.milter_list %} +# -- {{ milter.description }} -- {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} +{% endfor %} +smtpd_milters = {% for milter in ensure_postfix.milter_list %} {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} {% endfor %} +{% endif %} + +{% if postfix_domains is defined and postfix_domains is iterable %} +virtual_mailbox_domains = {% for domain in postfix_domains %} {{ domain }} {% endfor %} +{% endif %} + +2bounce_notice_recipient = {{ postmaster_email }} +bounce_notice_recipient = {{ postmaster_email }} +delay_notice_recipient = {{ postmaster_email }} +error_notice_recipient = {{ postmaster_email }} +smtpd_helo_required = yes +disable_vrfy_command = yes +message_size_limit = {{ postfix_message_size_limit }} +smtpd_helo_restrictions = reject_unknown_helo_hostname +smtpd_client_restrictions = reject_unknown_reverse_client_hostname reject_unauth_pipelining + diff --git a/templates/Fedora/37/etc/postfix/main.cf.proto b/templates/Fedora/37/etc/postfix/main.cf.proto new file mode 100644 index 0000000..9bef4f2 --- /dev/null +++ b/templates/Fedora/37/etc/postfix/main.cf.proto @@ -0,0 +1,736 @@ +# Global Postfix configuration file. This file lists only a subset +# of all parameters. For the syntax, and for a complete parameter +# list, see the postconf(5) manual page (command: "man 5 postconf"). +# +# For common configuration examples, see BASIC_CONFIGURATION_README +# and STANDARD_CONFIGURATION_README. To find these documents, use +# the command "postconf html_directory readme_directory", or go to +# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. +# +# For best results, change no more than 2-3 parameters at a time, +# and test if Postfix still works after every change. + +# COMPATIBILITY +# +# The compatibility_level determines what default settings Postfix +# will use for main.cf and master.cf settings. These defaults will +# change over time. +# +# To avoid breaking things, Postfix will use backwards-compatible +# default settings and log where it uses those old backwards-compatible +# default settings, until the system administrator has determined +# if any backwards-compatible default settings need to be made +# permanent in main.cf or master.cf. +# +# When this review is complete, update the compatibility_level setting +# below as recommended in the RELEASE_NOTES file. +# +# The level below is what should be used with new (not upgrade) installs. +# +compatibility_level = 3.6 + +# SOFT BOUNCE +# +# The soft_bounce parameter provides a limited safety net for +# testing. When soft_bounce is enabled, mail will remain queued that +# would otherwise bounce. This parameter disables locally-generated +# bounces, and prevents the SMTP server from rejecting mail permanently +# (by changing 5xx replies into 4xx replies). However, soft_bounce +# is no cure for address rewriting mistakes or mail routing mistakes. +# +#soft_bounce = no + +# LOCAL PATHNAME INFORMATION +# +# The queue_directory specifies the location of the Postfix queue. +# This is also the root directory of Postfix daemons that run chrooted. +# See the files in examples/chroot-setup for setting up Postfix chroot +# environments on different UNIX systems. +# +queue_directory = /var/spool/postfix + +# The command_directory parameter specifies the location of all +# postXXX commands. +# +command_directory = /usr/sbin + +# The daemon_directory parameter specifies the location of all Postfix +# daemon programs (i.e. programs listed in the master.cf file). This +# directory must be owned by root. +# +daemon_directory = /usr/libexec/postfix + +# The data_directory parameter specifies the location of Postfix-writable +# data files (caches, random numbers). This directory must be owned +# by the mail_owner account (see below). +# +data_directory = /var/lib/postfix + +# QUEUE AND PROCESS OWNERSHIP +# +# The mail_owner parameter specifies the owner of the Postfix queue +# and of most Postfix daemon processes. Specify the name of a user +# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS +# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In +# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED +# USER. +# +mail_owner = postfix + +# The default_privs parameter specifies the default rights used by +# the local delivery agent for delivery to external file or command. +# These rights are used in the absence of a recipient user context. +# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. +# +#default_privs = nobody + +# INTERNET HOST AND DOMAIN NAMES +# +# The myhostname parameter specifies the internet hostname of this +# mail system. The default is to use the fully-qualified domain name +# from gethostname(). $myhostname is used as a default value for many +# other configuration parameters. +# +#myhostname = host.domain.tld +#myhostname = virtual.domain.tld + +# The mydomain parameter specifies the local internet domain name. +# The default is to use $myhostname minus the first component. +# $mydomain is used as a default value for many other configuration +# parameters. +# +#mydomain = domain.tld + +# SENDING MAIL +# +# The myorigin parameter specifies the domain that locally-posted +# mail appears to come from. The default is to append $myhostname, +# which is fine for small sites. If you run a domain with multiple +# machines, you should (1) change this to $mydomain and (2) set up +# a domain-wide alias database that aliases each user to +# user@that.users.mailhost. +# +# For the sake of consistency between sender and recipient addresses, +# myorigin also specifies the default domain name that is appended +# to recipient addresses that have no @domain part. +# +#myorigin = $myhostname +#myorigin = $mydomain + +# RECEIVING MAIL + +# The inet_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on. By default, +# the software claims all active interfaces on the machine. The +# parameter also controls delivery of mail to user@[ip.address]. +# +# See also the proxy_interfaces parameter, for network addresses that +# are forwarded to us via a proxy or network address translator. +# +# Note: you need to stop/start Postfix when this parameter changes. +# +#inet_interfaces = all +#inet_interfaces = $myhostname +#inet_interfaces = $myhostname, localhost +inet_interfaces = localhost + +# Enable IPv4, and IPv6 if supported +inet_protocols = all + +# The proxy_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on by way of a +# proxy or network address translation unit. This setting extends +# the address list specified with the inet_interfaces parameter. +# +# You must specify your proxy/NAT addresses when your system is a +# backup MX host for other domains, otherwise mail delivery loops +# will happen when the primary MX host is down. +# +#proxy_interfaces = +#proxy_interfaces = 1.2.3.4 + +# The mydestination parameter specifies the list of domains that this +# machine considers itself the final destination for. +# +# These domains are routed to the delivery agent specified with the +# local_transport parameter setting. By default, that is the UNIX +# compatible delivery agent that lookups all recipients in /etc/passwd +# and /etc/aliases or their equivalent. +# +# The default is $myhostname + localhost.$mydomain + localhost. On +# a mail domain gateway, you should also include $mydomain. +# +# Do not specify the names of virtual domains - those domains are +# specified elsewhere (see VIRTUAL_README). +# +# Do not specify the names of domains that this machine is backup MX +# host for. Specify those names via the relay_domains settings for +# the SMTP server, or use permit_mx_backup if you are lazy (see +# STANDARD_CONFIGURATION_README). +# +# The local machine is always the final destination for mail addressed +# to user@[the.net.work.address] of an interface that the mail system +# receives mail on (see the inet_interfaces parameter). +# +# Specify a list of host or domain names, /file/name or type:table +# patterns, separated by commas and/or whitespace. A /file/name +# pattern is replaced by its contents; a type:table is matched when +# a name matches a lookup key (the right-hand side is ignored). +# Continue long lines by starting the next line with whitespace. +# +# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". +# +mydestination = $myhostname, localhost.$mydomain, localhost +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, +# mail.$mydomain, www.$mydomain, ftp.$mydomain + +# REJECTING MAIL FOR UNKNOWN LOCAL USERS +# +# The local_recipient_maps parameter specifies optional lookup tables +# with all names or addresses of users that are local with respect +# to $mydestination, $inet_interfaces or $proxy_interfaces. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown local users. This parameter is defined by default. +# +# To turn off local recipient checking in the SMTP server, specify +# local_recipient_maps = (i.e. empty). +# +# The default setting assumes that you use the default Postfix local +# delivery agent for local delivery. You need to update the +# local_recipient_maps setting if: +# +# - You define $mydestination domain recipients in files other than +# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. +# For example, you define $mydestination domain recipients in +# the $virtual_mailbox_maps files. +# +# - You redefine the local delivery agent in master.cf. +# +# - You redefine the "local_transport" setting in main.cf. +# +# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" +# feature of the Postfix local delivery agent (see local(8)). +# +# Details are described in the LOCAL_RECIPIENT_README file. +# +# Beware: if the Postfix SMTP server runs chrooted, you probably have +# to access the passwd file via the proxymap service, in order to +# overcome chroot restrictions. The alternative, having a copy of +# the system passwd file in the chroot jail is just not practical. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify a bare username, an @domain.tld +# wild-card, or specify a user@domain.tld address. +# +#local_recipient_maps = unix:passwd.byname $alias_maps +#local_recipient_maps = proxy:unix:passwd.byname $alias_maps +#local_recipient_maps = + +# The unknown_local_recipient_reject_code specifies the SMTP server +# response code when a recipient domain matches $mydestination or +# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty +# and the recipient address or address local-part is not found. +# +# The default setting is 550 (reject mail) but it is safer to start +# with 450 (try again later) until you are certain that your +# local_recipient_maps settings are OK. +# +unknown_local_recipient_reject_code = 550 + +# TRUST AND RELAY CONTROL + +# The mynetworks parameter specifies the list of "trusted" SMTP +# clients that have more privileges than "strangers". +# +# In particular, "trusted" SMTP clients are allowed to relay mail +# through Postfix. See the smtpd_recipient_restrictions parameter +# in postconf(5). +# +# You can specify the list of "trusted" network addresses by hand +# or you can let Postfix do it for you (which is the default). +# +# By default (mynetworks_style = subnet), Postfix "trusts" SMTP +# clients in the same IP subnetworks as the local machine. +# On Linux, this works correctly only with interfaces specified +# with the "ifconfig" command. +# +# Specify "mynetworks_style = class" when Postfix should "trust" SMTP +# clients in the same IP class A/B/C networks as the local machine. +# Don't do this with a dialup site - it would cause Postfix to "trust" +# your entire provider's network. Instead, specify an explicit +# mynetworks list by hand, as described below. +# +# Specify "mynetworks_style = host" when Postfix should "trust" +# only the local machine. +# +#mynetworks_style = class +#mynetworks_style = subnet +#mynetworks_style = host + +# Alternatively, you can specify the mynetworks list by hand, in +# which case Postfix ignores the mynetworks_style setting. +# +# Specify an explicit list of network/netmask patterns, where the +# mask specifies the number of bits in the network part of a host +# address. +# +# You can also specify the absolute pathname of a pattern file instead +# of listing the patterns here. Specify type:table for table-based lookups +# (the value on the table right-hand side is not used). +# +#mynetworks = 168.100.3.0/28, 127.0.0.0/8 +#mynetworks = $config_directory/mynetworks +#mynetworks = hash:/etc/postfix/network_table + +# The relay_domains parameter restricts what destinations this system will +# relay mail to. See the smtpd_recipient_restrictions description in +# postconf(5) for detailed information. +# +# By default, Postfix relays mail +# - from "trusted" clients (IP address matches $mynetworks) to any destination, +# - from "untrusted" clients to destinations that match $relay_domains or +# subdomains thereof, except addresses with sender-specified routing. +# The default relay_domains value is $mydestination. +# +# In addition to the above, the Postfix SMTP server by default accepts mail +# that Postfix is final destination for: +# - destinations that match $inet_interfaces or $proxy_interfaces, +# - destinations that match $mydestination +# - destinations that match $virtual_alias_domains, +# - destinations that match $virtual_mailbox_domains. +# These destinations do not need to be listed in $relay_domains. +# +# Specify a list of hosts or domains, /file/name patterns or type:name +# lookup tables, separated by commas and/or whitespace. Continue +# long lines by starting the next line with whitespace. A file name +# is replaced by its contents; a type:name table is matched when a +# (parent) domain appears as lookup key. +# +# NOTE: Postfix will not automatically forward mail for domains that +# list this system as their primary or backup MX host. See the +# permit_mx_backup restriction description in postconf(5). +# +#relay_domains = $mydestination + +# INTERNET OR INTRANET + +# The relayhost parameter specifies the default host to send mail to +# when no entry is matched in the optional transport(5) table. When +# no relayhost is given, mail is routed directly to the destination. +# +# On an intranet, specify the organizational domain name. If your +# internal DNS uses no MX records, specify the name of the intranet +# gateway host instead. +# +# In the case of SMTP, specify a domain, host, host:port, [host]:port, +# [address] or [address]:port; the form [host] turns off MX lookups. +# +# If you're connected via UUCP, see also the default_transport parameter. +# +#relayhost = $mydomain +#relayhost = [gateway.my.domain] +#relayhost = [mailserver.isp.tld] +#relayhost = uucphost +#relayhost = [an.ip.add.ress] + +# REJECTING UNKNOWN RELAY USERS +# +# The relay_recipient_maps parameter specifies optional lookup tables +# with all addresses in the domains that match $relay_domains. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown relay users. This feature is off by default. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify an @domain.tld wild-card, or specify +# a user@domain.tld address. +# +#relay_recipient_maps = hash:/etc/postfix/relay_recipients + +# INPUT RATE CONTROL +# +# The in_flow_delay configuration parameter implements mail input +# flow control. This feature is turned on by default, although it +# still needs further development (it's disabled on SCO UNIX due +# to an SCO bug). +# +# A Postfix process will pause for $in_flow_delay seconds before +# accepting a new message, when the message arrival rate exceeds the +# message delivery rate. With the default 100 SMTP server process +# limit, this limits the mail inflow to 100 messages a second more +# than the number of messages delivered per second. +# +# Specify 0 to disable the feature. Valid delays are 0..10. +# +#in_flow_delay = 1s + +# ADDRESS REWRITING +# +# The ADDRESS_REWRITING_README document gives information about +# address masquerading or other forms of address rewriting including +# username->Firstname.Lastname mapping. + +# ADDRESS REDIRECTION (VIRTUAL DOMAIN) +# +# The VIRTUAL_README document gives information about the many forms +# of domain hosting that Postfix supports. + +# "USER HAS MOVED" BOUNCE MESSAGES +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# TRANSPORT MAP +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# ALIAS DATABASE +# +# The alias_maps parameter specifies the list of alias databases used +# by the local delivery agent. The default list is system dependent. +# +# On systems with NIS, the default is to search the local alias +# database, then the NIS alias database. See aliases(5) for syntax +# details. +# +# If you change the alias database, run "postalias /etc/aliases" (or +# wherever your system stores the mail alias file), or simply run +# "newaliases" to build the necessary DBM or DB file. +# +# It will take a minute or so before changes become visible. Use +# "postfix reload" to eliminate the delay. +# +#alias_maps = dbm:/etc/aliases +alias_maps = hash:/etc/aliases +#alias_maps = hash:/etc/aliases, nis:mail.aliases +#alias_maps = netinfo:/aliases + +# The alias_database parameter specifies the alias database(s) that +# are built with "newaliases" or "sendmail -bi". This is a separate +# configuration parameter, because alias_maps (see above) may specify +# tables that are not necessarily all under control by Postfix. +# +#alias_database = dbm:/etc/aliases +#alias_database = dbm:/etc/mail/aliases +alias_database = hash:/etc/aliases +#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases + +# ADDRESS EXTENSIONS (e.g., user+foo) +# +# The recipient_delimiter parameter specifies the separator between +# user names and address extensions (user+foo). See canonical(5), +# local(8), relocated(5) and virtual(5) for the effects this has on +# aliases, canonical, virtual, relocated and .forward file lookups. +# Basically, the software tries user+foo and .forward+foo before +# trying user and .forward. +# +#recipient_delimiter = + + +# DELIVERY TO MAILBOX +# +# The home_mailbox parameter specifies the optional pathname of a +# mailbox file relative to a user's home directory. The default +# mailbox file is /var/spool/mail/user or /var/mail/user. Specify +# "Maildir/" for qmail-style delivery (the / is required). +# +#home_mailbox = Mailbox +#home_mailbox = Maildir/ + +# The mail_spool_directory parameter specifies the directory where +# UNIX-style mailboxes are kept. The default setting depends on the +# system type. +# +#mail_spool_directory = /var/mail +#mail_spool_directory = /var/spool/mail + +# The mailbox_command parameter specifies the optional external +# command to use instead of mailbox delivery. The command is run as +# the recipient with proper HOME, SHELL and LOGNAME environment settings. +# Exception: delivery for root is done as $default_user. +# +# Other environment variables of interest: USER (recipient username), +# EXTENSION (address extension), DOMAIN (domain part of address), +# and LOCAL (the address localpart). +# +# Unlike other Postfix configuration parameters, the mailbox_command +# parameter is not subjected to $parameter substitutions. This is to +# make it easier to specify shell syntax (see example below). +# +# Avoid shell meta characters because they will force Postfix to run +# an expensive shell process. Procmail alone is expensive enough. +# +# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN +# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. +# +#mailbox_command = /some/where/procmail +#mailbox_command = /some/where/procmail -a "$EXTENSION" + +# The mailbox_transport specifies the optional transport in master.cf +# to use after processing aliases and .forward files. This parameter +# has precedence over the mailbox_command, fallback_transport and +# luser_relay parameters. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" +# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. +#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp + +# If using the cyrus-imapd IMAP server deliver local mail to the IMAP +# server using LMTP (Local Mail Transport Protocol), this is prefered +# over the older cyrus deliver program by setting the +# mailbox_transport as below: +# +# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp +# +# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via +# these settings. +# +# local_destination_recipient_limit = 300 +# local_destination_concurrency_limit = 5 +# +# Of course you should adjust these settings as appropriate for the +# capacity of the hardware you are using. The recipient limit setting +# can be used to take advantage of the single instance message store +# capability of Cyrus. The concurrency limit can be used to control +# how many simultaneous LMTP sessions will be permitted to the Cyrus +# message store. +# +# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and +# subsequent line in master.cf. +#mailbox_transport = cyrus + +# The fallback_transport specifies the optional transport in master.cf +# to use for recipients that are not found in the UNIX passwd database. +# This parameter has precedence over the luser_relay parameter. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp +#fallback_transport = + +# The luser_relay parameter specifies an optional destination address +# for unknown recipients. By default, mail for unknown@$mydestination, +# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned +# as undeliverable. +# +# The following expansions are done on luser_relay: $user (recipient +# username), $shell (recipient shell), $home (recipient home directory), +# $recipient (full recipient address), $extension (recipient address +# extension), $domain (recipient domain), $local (entire recipient +# localpart), $recipient_delimiter. Specify ${name?value} or +# ${name:value} to expand value only when $name does (does not) exist. +# +# luser_relay works only for the default Postfix local delivery agent. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must specify "local_recipient_maps =" (i.e. empty) in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#luser_relay = $user@other.host +#luser_relay = $local@other.host +#luser_relay = admin+$local + +# JUNK MAIL CONTROLS +# +# The controls listed here are only a very small subset. The file +# SMTPD_ACCESS_README provides an overview. + +# The header_checks parameter specifies an optional table with patterns +# that each logical message header is matched against, including +# headers that span multiple physical lines. +# +# By default, these patterns also apply to MIME headers and to the +# headers of attached messages. With older Postfix versions, MIME and +# attached message headers were treated as body text. +# +# For details, see "man header_checks". +# +#header_checks = regexp:/etc/postfix/header_checks + +# FAST ETRN SERVICE +# +# Postfix maintains per-destination logfiles with information about +# deferred mail, so that mail can be flushed quickly with the SMTP +# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". +# See the ETRN_README document for a detailed description. +# +# The fast_flush_domains parameter controls what destinations are +# eligible for this service. By default, they are all domains that +# this server is willing to relay mail to. +# +#fast_flush_domains = $relay_domains + +# SHOW SOFTWARE VERSION OR NOT +# +# The smtpd_banner parameter specifies the text that follows the 220 +# code in the SMTP server's greeting banner. Some people like to see +# the mail version advertised. By default, Postfix shows no version. +# +# You MUST specify $myhostname at the start of the text. That is an +# RFC requirement. Postfix itself does not care. +# +#smtpd_banner = $myhostname ESMTP $mail_name +#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) + +# PARALLEL DELIVERY TO THE SAME DESTINATION +# +# How many parallel deliveries to the same user or domain? With local +# delivery, it does not make sense to do massively parallel delivery +# to the same user, because mailbox updates must happen sequentially, +# and expensive pipelines in .forward files can cause disasters when +# too many are run at the same time. With SMTP deliveries, 10 +# simultaneous connections to the same domain could be sufficient to +# raise eyebrows. +# +# Each message delivery transport has its XXX_destination_concurrency_limit +# parameter. The default is $default_destination_concurrency_limit for +# most delivery transports. For the local delivery agent the default is 2. + +#local_destination_concurrency_limit = 2 +#default_destination_concurrency_limit = 20 + +# DEBUGGING CONTROL +# +# The debug_peer_level parameter specifies the increment in verbose +# logging level when an SMTP client or server host name or address +# matches a pattern in the debug_peer_list parameter. +# +debug_peer_level = 2 + +# The debug_peer_list parameter specifies an optional list of domain +# or network patterns, /file/name patterns or type:name tables. When +# an SMTP client or server host name or address matches a pattern, +# increase the verbose logging level by the amount specified in the +# debug_peer_level parameter. +# +#debug_peer_list = 127.0.0.1 +#debug_peer_list = some.domain + +# The debugger_command specifies the external command that is executed +# when a Postfix daemon program is run with the -D option. +# +# Use "command .. & sleep 5" so that the debugger can attach before +# the process marches on. If you use an X-based debugger, be sure to +# set up your XAUTHORITY environment variable before starting Postfix. +# +debugger_command = + PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin + ddd $daemon_directory/$process_name $process_id & sleep 5 + +# If you can't use X, use this to capture the call stack when a +# daemon crashes. The result is in a file in the configuration +# directory, and is named after the process name and the process ID. +# +# debugger_command = +# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; +# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 +# >$config_directory/$process_name.$process_id.log & sleep 5 +# +# Another possibility is to run gdb under a detached screen session. +# To attach to the screen session, su root and run "screen -r +# " where uniquely matches one of the detached +# sessions (from "screen -list"). +# +# debugger_command = +# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen +# -dmS $process_name gdb $daemon_directory/$process_name +# $process_id & sleep 1 + +# INSTALL-TIME CONFIGURATION INFORMATION +# +# The following parameters are used when installing a new Postfix version. +# +# sendmail_path: The full pathname of the Postfix sendmail command. +# This is the Sendmail-compatible mail posting interface. +# +sendmail_path = + +# newaliases_path: The full pathname of the Postfix newaliases command. +# This is the Sendmail-compatible command to build alias databases. +# +newaliases_path = + +# mailq_path: The full pathname of the Postfix mailq command. This +# is the Sendmail-compatible mail queue listing command. +# +mailq_path = + +# setgid_group: The group for mail submission and queue management +# commands. This must be a group name with a numerical group ID that +# is not shared with other accounts, not even with the Postfix account. +# +setgid_group = + +# html_directory: The location of the Postfix HTML documentation. +# +html_directory = + +# manpage_directory: The location of the Postfix on-line manual pages. +# +manpage_directory = + +# sample_directory: The location of the Postfix sample configuration files. +# This parameter is obsolete as of Postfix 2.1. +# +sample_directory = + +# readme_directory: The location of the Postfix README files. +# +readme_directory = + +# TLS CONFIGURATION +# +# Basic Postfix TLS configuration by default with self-signed certificate +# for inbound SMTP and also opportunistic TLS for outbound SMTP. + +# The full pathname of a file with the Postfix SMTP server RSA certificate +# in PEM format. Intermediate certificates should be included in general, +# the server certificate first, then the issuing CA(s) (bottom-up order). +# +smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem + +# The full pathname of a file with the Postfix SMTP server RSA private key +# in PEM format. The private key must be accessible without a pass-phrase, +# i.e. it must not be encrypted. +# +smtpd_tls_key_file = /etc/pki/tls/private/postfix.key + +# Announce STARTTLS support to remote SMTP clients, but do not require that +# clients use TLS encryption (opportunistic TLS inbound). +# +smtpd_tls_security_level = may + +# Directory with PEM format Certification Authority certificates that the +# Postfix SMTP client uses to verify a remote SMTP server certificate. +# +smtp_tls_CApath = /etc/pki/tls/certs + +# The full pathname of a file containing CA certificates of root CAs +# trusted to sign either remote SMTP server certificates or intermediate CA +# certificates. +# +smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt + +# Use TLS if this is supported by the remote SMTP server, otherwise use +# plaintext (opportunistic TLS outbound). +# +smtp_tls_security_level = may diff --git a/templates/Fedora/37/etc/postfix/master.cf b/templates/Fedora/37/etc/postfix/master.cf new file mode 100644 index 0000000..4beb91f --- /dev/null +++ b/templates/Fedora/37/etc/postfix/master.cf @@ -0,0 +1,137 @@ +# +# Postfix master process configuration file. For details on the format +# of the file, see the master(5) manual page (command: "man 5 master" or +# on-line: http://www.postfix.org/master.5.html). +# +# Do not forget to execute "postfix reload" after editing this file. +# +# ========================================================================== +# service type private unpriv chroot wakeup maxproc command + args +# (yes) (yes) (no) (never) (100) +# ========================================================================== +smtp inet n - n - - smtpd +#smtp inet n - n - 1 postscreen +#smtpd pass - - n - - smtpd +#dnsblog unix - - n - 0 dnsblog +#tlsproxy unix - - n - 0 tlsproxy +# Choose one: enable submission for loopback clients only, or for any client. +#127.0.0.1:submission inet n - n - - smtpd +# submission inet n - n - - smtpd +# -o syslog_name=postfix/submission +# -o smtpd_tls_security_level=encrypt +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_tls_auth_only=yes +# -o smtpd_reject_unlisted_recipient=no +# -o smtpd_client_restrictions=$mua_client_restrictions +# -o smtpd_helo_restrictions=$mua_helo_restrictions +# -o smtpd_sender_restrictions=$mua_sender_restrictions +# -o smtpd_recipient_restrictions= +# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +# Choose one: enable smtps for loopback clients only, or for any client. +#127.0.0.1:smtps inet n - n - - smtpd +# smtps inet n - n - - smtpd +# -o syslog_name=postfix/smtps +# -o smtpd_tls_wrappermode=yes +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_reject_unlisted_recipient=no +# -o smtpd_client_restrictions=$mua_client_restrictions +# -o smtpd_helo_restrictions=$mua_helo_restrictions +# -o smtpd_sender_restrictions=$mua_sender_restrictions +# -o smtpd_recipient_restrictions= +# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +#628 inet n - n - - qmqpd +pickup unix n - n 60 1 pickup +cleanup unix n - n - 0 cleanup +qmgr unix n - n 300 1 qmgr +#qmgr unix n - n 300 1 oqmgr +tlsmgr unix - - n 1000? 1 tlsmgr +rewrite unix - - n - - trivial-rewrite +bounce unix - - n - 0 bounce +defer unix - - n - 0 bounce +trace unix - - n - 0 bounce +verify unix - - n - 1 verify +flush unix n - n 1000? 0 flush +proxymap unix - - n - - proxymap +proxywrite unix - - n - 1 proxymap +smtp unix - - n - - smtp +relay unix - - n - - smtp + -o syslog_name=postfix/$service_name +# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 +showq unix n - n - - showq +error unix - - n - - error +retry unix - - n - - error +discard unix - - n - - discard +local unix - n n - - local +virtual unix - n n - - virtual +lmtp unix - - n - - lmtp +anvil unix - - n - 1 anvil +scache unix - - n - 1 scache +postlog unix-dgram n - n - 1 postlogd +# +# ==================================================================== +# Interfaces to non-Postfix software. Be sure to examine the manual +# pages of the non-Postfix software to find out what options it wants. +# +# Many of the following services use the Postfix pipe(8) delivery +# agent. See the pipe(8) man page for information about ${recipient} +# and other message envelope options. +# ==================================================================== +# +# maildrop. See the Postfix MAILDROP_README file for details. +# Also specify in main.cf: maildrop_destination_recipient_limit=1 +# +#maildrop unix - n n - - pipe +# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} +# +# ==================================================================== +# +# Recent Cyrus versions can use the existing "lmtp" master.cf entry. +# +# Specify in cyrus.conf: +# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 +# +# Specify in main.cf one or more of the following: +# mailbox_transport = lmtp:inet:localhost +# virtual_transport = lmtp:inet:localhost +# +# ==================================================================== +# +# Cyrus 2.1.5 (Amos Gouaux) +# Also specify in main.cf: cyrus_destination_recipient_limit=1 +# +#cyrus unix - n n - - pipe +# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} +# +# ==================================================================== +# +# Old example of delivery via Cyrus. +# +#old-cyrus unix - n n - - pipe +# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} +# +# ==================================================================== +# +# See the Postfix UUCP_README file for configuration details. +# +#uucp unix - n n - - pipe +# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) +# +# ==================================================================== +# +# Other external delivery methods. +# +#ifmail unix - n n - - pipe +# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) +# +#bsmtp unix - n n - - pipe +# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient +# +#scalemail-backend unix - n n - 2 pipe +# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store +# ${nexthop} ${user} ${extension} +# +#mailman unix - n n - - pipe +# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py +# ${nexthop} ${user} diff --git a/templates/Fedora/37/etc/postfix/master.cf.proto b/templates/Fedora/37/etc/postfix/master.cf.proto new file mode 100644 index 0000000..f33d9dd --- /dev/null +++ b/templates/Fedora/37/etc/postfix/master.cf.proto @@ -0,0 +1,137 @@ +# +# Postfix master process configuration file. For details on the format +# of the file, see the master(5) manual page (command: "man 5 master" or +# on-line: http://www.postfix.org/master.5.html). +# +# Do not forget to execute "postfix reload" after editing this file. +# +# ========================================================================== +# service type private unpriv chroot wakeup maxproc command + args +# (yes) (yes) (no) (never) (100) +# ========================================================================== +smtp inet n - n - - smtpd +#smtp inet n - n - 1 postscreen +#smtpd pass - - n - - smtpd +#dnsblog unix - - n - 0 dnsblog +#tlsproxy unix - - n - 0 tlsproxy +# Choose one: enable submission for loopback clients only, or for any client. +#127.0.0.1:submission inet n - n - - smtpd +#submission inet n - n - - smtpd +# -o syslog_name=postfix/submission +# -o smtpd_tls_security_level=encrypt +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_tls_auth_only=yes +# -o smtpd_reject_unlisted_recipient=no +# -o smtpd_client_restrictions=$mua_client_restrictions +# -o smtpd_helo_restrictions=$mua_helo_restrictions +# -o smtpd_sender_restrictions=$mua_sender_restrictions +# -o smtpd_recipient_restrictions= +# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +# Choose one: enable smtps for loopback clients only, or for any client. +#127.0.0.1:smtps inet n - n - - smtpd +#smtps inet n - n - - smtpd +# -o syslog_name=postfix/smtps +# -o smtpd_tls_wrappermode=yes +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_reject_unlisted_recipient=no +# -o smtpd_client_restrictions=$mua_client_restrictions +# -o smtpd_helo_restrictions=$mua_helo_restrictions +# -o smtpd_sender_restrictions=$mua_sender_restrictions +# -o smtpd_recipient_restrictions= +# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +#628 inet n - n - - qmqpd +pickup unix n - n 60 1 pickup +cleanup unix n - n - 0 cleanup +qmgr unix n - n 300 1 qmgr +#qmgr unix n - n 300 1 oqmgr +tlsmgr unix - - n 1000? 1 tlsmgr +rewrite unix - - n - - trivial-rewrite +bounce unix - - n - 0 bounce +defer unix - - n - 0 bounce +trace unix - - n - 0 bounce +verify unix - - n - 1 verify +flush unix n - n 1000? 0 flush +proxymap unix - - n - - proxymap +proxywrite unix - - n - 1 proxymap +smtp unix - - n - - smtp +relay unix - - n - - smtp + -o syslog_name=postfix/$service_name +# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 +showq unix n - n - - showq +error unix - - n - - error +retry unix - - n - - error +discard unix - - n - - discard +local unix - n n - - local +virtual unix - n n - - virtual +lmtp unix - - n - - lmtp +anvil unix - - n - 1 anvil +scache unix - - n - 1 scache +postlog unix-dgram n - n - 1 postlogd +# +# ==================================================================== +# Interfaces to non-Postfix software. Be sure to examine the manual +# pages of the non-Postfix software to find out what options it wants. +# +# Many of the following services use the Postfix pipe(8) delivery +# agent. See the pipe(8) man page for information about ${recipient} +# and other message envelope options. +# ==================================================================== +# +# maildrop. See the Postfix MAILDROP_README file for details. +# Also specify in main.cf: maildrop_destination_recipient_limit=1 +# +#maildrop unix - n n - - pipe +# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} +# +# ==================================================================== +# +# Recent Cyrus versions can use the existing "lmtp" master.cf entry. +# +# Specify in cyrus.conf: +# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 +# +# Specify in main.cf one or more of the following: +# mailbox_transport = lmtp:inet:localhost +# virtual_transport = lmtp:inet:localhost +# +# ==================================================================== +# +# Cyrus 2.1.5 (Amos Gouaux) +# Also specify in main.cf: cyrus_destination_recipient_limit=1 +# +#cyrus unix - n n - - pipe +# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} +# +# ==================================================================== +# +# Old example of delivery via Cyrus. +# +#old-cyrus unix - n n - - pipe +# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} +# +# ==================================================================== +# +# See the Postfix UUCP_README file for configuration details. +# +#uucp unix - n n - - pipe +# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) +# +# ==================================================================== +# +# Other external delivery methods. +# +#ifmail unix - n n - - pipe +# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) +# +#bsmtp unix - n n - - pipe +# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient +# +#scalemail-backend unix - n n - 2 pipe +# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store +# ${nexthop} ${user} ${extension} +# +#mailman unix - n n - - pipe +# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py +# ${nexthop} ${user} diff --git a/templates/Fedora/37/etc/postfix/postfix-files b/templates/Fedora/37/etc/postfix/postfix-files new file mode 100644 index 0000000..1eda0a3 --- /dev/null +++ b/templates/Fedora/37/etc/postfix/postfix-files @@ -0,0 +1,432 @@ +# +# Do not edit this file. +# +# This file controls the postfix-install script for installation of +# Postfix programs, configuration files and documentation, as well +# as the post-install script for setting permissions and for updating +# Postfix configuration files. See the respective manual pages within +# the script files. +# +# Do not list $command_directory or $shlib_directory in this file, +# or it will be blown away by a future Postfix uninstallation +# procedure. You would not want to lose all files in /usr/sbin or +# /usr/local/lib. +# +# Each record in this file describes one file or directory. +# Fields are separated by ":". Specify a null field as "-". +# Missing fields or separators at the end are OK. +# +# File format: +# name:type:owner:group:permission:flags +# No group means don't change group ownership. +# +# File types: +# d=directory +# f=regular file +# h=hard link (*) +# l=symbolic link (*) +# +# (*) With hard links and symbolic links, the owner field becomes the +# source pathname, while the group and permissions are ignored. +# +# File flags: +# No flag means the flag is not active. +# p=preserve existing file, do not replace (postfix-install). +# u=update owner/group/mode (post-install upgrade-permissions). +# c=create missing directory (post-install create-missing). +# r=apply owner/group recursively (post-install set/upgrade-permissions). +# o=obsolete, no longer part of Postfix +# 1=optional for non-default instance (config_dir != built-in default). +# +# Note: the "u" flag is for upgrading the permissions of existing files +# or directories after changes in Postfix architecture. For robustness +# it is a good idea to "u" all the files that have special ownership or +# permissions, so that running "make install" fixes any glitches. +# +# Note: order matters. Update shared libraries and database plugins +# before daemon/command-line programs. +$config_directory:d:root:-:755:u +$data_directory:d:$mail_owner:-:700:uc +$daemon_directory:d:root:-:755:u +$queue_directory:d:root:-:755:uc +$sample_directory:d:root:-:755:o +$readme_directory:d:root:-:755 +$html_directory:d:root:-:755 +$queue_directory/active:d:$mail_owner:-:700:ucr +$queue_directory/bounce:d:$mail_owner:-:700:ucr +$queue_directory/corrupt:d:$mail_owner:-:700:ucr +$queue_directory/defer:d:$mail_owner:-:700:ucr +$queue_directory/deferred:d:$mail_owner:-:700:ucr +$queue_directory/flush:d:$mail_owner:-:700:ucr +$queue_directory/hold:d:$mail_owner:-:700:ucr +$queue_directory/incoming:d:$mail_owner:-:700:ucr +$queue_directory/private:d:$mail_owner:-:700:uc +$queue_directory/maildrop:d:$mail_owner:$setgid_group:730:uc +$queue_directory/public:d:$mail_owner:$setgid_group:710:uc +$queue_directory/pid:d:root:-:755:uc +$queue_directory/saved:d:$mail_owner:-:700:ucr +$queue_directory/trace:d:$mail_owner:-:700:ucr +# Update shared libraries and plugins before daemon or command-line programs. +$shlib_directory/libpostfix-util.so:f:root:-:755 +$shlib_directory/libpostfix-global.so:f:root:-:755 +$shlib_directory/libpostfix-dns.so:f:root:-:755 +$shlib_directory/libpostfix-tls.so:f:root:-:755 +$shlib_directory/libpostfix-master.so:f:root:-:755 +$meta_directory/dynamicmaps.cf.d:d:root:-:755 +$meta_directory/dynamicmaps.cf:f:root:-:644 +$meta_directory/main.cf.proto:f:root:-:644 +$meta_directory/master.cf.proto:f:root:-:644 +$meta_directory/postfix-files.d:d:root:-:755 +$meta_directory/postfix-files:f:root:-:644 +$daemon_directory/anvil:f:root:-:755 +$daemon_directory/bounce:f:root:-:755 +$daemon_directory/cleanup:f:root:-:755 +$daemon_directory/discard:f:root:-:755 +$daemon_directory/dnsblog:f:root:-:755 +$daemon_directory/error:f:root:-:755 +$daemon_directory/flush:f:root:-:755 +$daemon_directory/local:f:root:-:755 +$daemon_directory/main.cf:f:root:-:644:o +$daemon_directory/master.cf:f:root:-:644:o +$daemon_directory/master:f:root:-:755 +$daemon_directory/oqmgr:f:root:-:755 +$daemon_directory/pickup:f:root:-:755 +$daemon_directory/pipe:f:root:-:755 +$daemon_directory/post-install:f:root:-:755 +# In case meta_directory == daemon_directory. +#$daemon_directory/postfix-files:f:root:-:644:o +#$daemon_directory/postfix-files.d:d:root:-:755:o +$daemon_directory/postfix-script:f:root:-:755 +$daemon_directory/postfix-tls-script:f:root:-:755 +$daemon_directory/postfix-wrapper:f:root:-:755 +$daemon_directory/postmulti-script:f:root:-:755 +$daemon_directory/postlogd:f:root:-:755 +$daemon_directory/postscreen:f:root:-:755 +$daemon_directory/proxymap:f:root:-:755 +$daemon_directory/qmgr:f:root:-:755 +$daemon_directory/qmqpd:f:root:-:755 +$daemon_directory/scache:f:root:-:755 +$daemon_directory/showq:f:root:-:755 +$daemon_directory/smtp:f:root:-:755 +$daemon_directory/smtpd:f:root:-:755 +$daemon_directory/spawn:f:root:-:755 +$daemon_directory/tlsproxy:f:root:-:755 +$daemon_directory/tlsmgr:f:root:-:755 +$daemon_directory/trivial-rewrite:f:root:-:755 +$daemon_directory/verify:f:root:-:755 +$daemon_directory/virtual:f:root:-:755 +$daemon_directory/nqmgr:h:$daemon_directory/qmgr +$daemon_directory/lmtp:h:$daemon_directory/smtp +$command_directory/postalias:f:root:-:755 +$command_directory/postcat:f:root:-:755 +$command_directory/postconf:f:root:-:755 +$command_directory/postfix:f:root:-:755 +$command_directory/postkick:f:root:-:755 +$command_directory/postlock:f:root:-:755 +$command_directory/postlog:f:root:-:755 +$command_directory/postmap:f:root:-:755 +$command_directory/postmulti:f:root:-:755 +$command_directory/postsuper:f:root:-:755 +$command_directory/postdrop:f:root:$setgid_group:2755:u +$command_directory/postqueue:f:root:$setgid_group:2755:u +$sendmail_path:f:root:-:755 +$newaliases_path:l:$sendmail_path +$mailq_path:l:$sendmail_path +$config_directory/access:f:root:-:644:p1 +$config_directory/canonical:f:root:-:644:p1 +$config_directory/cidr_table:f:root:-:644:o +$config_directory/generic:f:root:-:644:p1 +$config_directory/generics:f:root:-:644:o +$config_directory/header_checks:f:root:-:644:p1 +$config_directory/install.cf:f:root:-:644:o +$config_directory/main.cf:f:root:-:644:p +$config_directory/master.cf:f:root:-:644:p +$config_directory/pcre_table:f:root:-:644:o +$config_directory/regexp_table:f:root:-:644:o +$config_directory/relocated:f:root:-:644:p1 +$config_directory/tcp_table:f:root:-:644:o +$config_directory/transport:f:root:-:644:p1 +$config_directory/virtual:f:root:-:644:p1 +$config_directory/postfix-script:f:root:-:755:o +$config_directory/postfix-script-sgid:f:root:-:755:o +$config_directory/postfix-script-nosgid:f:root:-:755:o +$config_directory/post-install:f:root:-:755:o +$manpage_directory/man1/mailq.postfix.1.gz:f:root:-:644 +$manpage_directory/man1/newaliases.postfix.1.gz:f:root:-:644 +$manpage_directory/man1/postalias.1.gz:f:root:-:644 +$manpage_directory/man1/postcat.1.gz:f:root:-:644 +$manpage_directory/man1/postconf.1.gz:f:root:-:644 +$manpage_directory/man1/postdrop.1.gz:f:root:-:644 +$manpage_directory/man1/postfix.1.gz:f:root:-:644 +$manpage_directory/man1/postfix-tls.1.gz:f:root:-:644 +$manpage_directory/man1/postkick.1.gz:f:root:-:644 +$manpage_directory/man1/postlock.1.gz:f:root:-:644 +$manpage_directory/man1/postlog.1.gz:f:root:-:644 +$manpage_directory/man1/postmap.1.gz:f:root:-:644 +$manpage_directory/man1/postmulti.1.gz:f:root:-:644 +$manpage_directory/man1/postqueue.1.gz:f:root:-:644 +$manpage_directory/man1/postsuper.1.gz:f:root:-:644 +$manpage_directory/man1/sendmail.postfix.1.gz:f:root:-:644 +$manpage_directory/man5/access.5.gz:f:root:-:644 +$manpage_directory/man5/aliases.postfix.5.gz:f:root:-:644 +$manpage_directory/man5/body_checks.5.gz:f:root:-:644 +$manpage_directory/man5/bounce.5.gz:f:root:-:644 +$manpage_directory/man5/canonical.5.gz:f:root:-:644 +$manpage_directory/man5/cidr_table.5.gz:f:root:-:644 +$manpage_directory/man5/generics.5.gz:f:root:-:644:o +$manpage_directory/man5/generic.5.gz:f:root:-:644 +$manpage_directory/man5/header_checks.5.gz:f:root:-:644 +$manpage_directory/man5/master.5.gz:f:root:-:644 +$manpage_directory/man5/memcache_table.5.gz:f:root:-:644 +$manpage_directory/man5/socketmap_table.5.gz:f:root:-:644 +$manpage_directory/man5/nisplus_table.5.gz:f:root:-:644 +$manpage_directory/man5/postconf.5.gz:f:root:-:644 +$manpage_directory/man5/postfix-wrapper.5.gz:f:root:-:644 +$manpage_directory/man5/regexp_table.5.gz:f:root:-:644 +$manpage_directory/man5/relocated.5.gz:f:root:-:644 +$manpage_directory/man5/tcp_table.5.gz:f:root:-:644 +$manpage_directory/man5/transport.5.gz:f:root:-:644 +$manpage_directory/man5/virtual.5.gz:f:root:-:644 +$manpage_directory/man8/bounce.8.gz:f:root:-:644 +$manpage_directory/man8/cleanup.8.gz:f:root:-:644 +$manpage_directory/man8/anvil.8.gz:f:root:-:644 +$manpage_directory/man8/defer.8.gz:f:root:-:644 +$manpage_directory/man8/discard.8.gz:f:root:-:644 +$manpage_directory/man8/dnsblog.8.gz:f:root:-:644 +$manpage_directory/man8/error.8.gz:f:root:-:644 +$manpage_directory/man8/flush.8.gz:f:root:-:644 +$manpage_directory/man8/lmtp.8.gz:f:root:-:644 +$manpage_directory/man8/local.8.gz:f:root:-:644 +$manpage_directory/man8/master.8.gz:f:root:-:644 +$manpage_directory/man8/nqmgr.8.gz:f:root:-:644:o +$manpage_directory/man8/oqmgr.8.gz:f:root:-:644: +$manpage_directory/man8/pickup.8.gz:f:root:-:644 +$manpage_directory/man8/pipe.8.gz:f:root:-:644 +$manpage_directory/man8/postlogd.8.gz:f:root:-:644 +$manpage_directory/man8/postscreen.8.gz:f:root:-:644 +$manpage_directory/man8/proxymap.8.gz:f:root:-:644 +$manpage_directory/man8/qmgr.8.gz:f:root:-:644 +$manpage_directory/man8/qmqpd.8.gz:f:root:-:644 +$manpage_directory/man8/scache.8.gz:f:root:-:644 +$manpage_directory/man8/showq.8.gz:f:root:-:644 +$manpage_directory/man8/smtp.8.gz:f:root:-:644 +$manpage_directory/man8/smtpd.postfix.8.gz:f:root:-:644 +$manpage_directory/man8/spawn.8.gz:f:root:-:644 +$manpage_directory/man8/tlsproxy.8.gz:f:root:-:644 +$manpage_directory/man8/tlsmgr.8.gz:f:root:-:644 +$manpage_directory/man8/trace.8.gz:f:root:-:644 +$manpage_directory/man8/trivial-rewrite.8.gz:f:root:-:644 +$manpage_directory/man8/verify.8.gz:f:root:-:644 +$manpage_directory/man8/virtual.8.gz:f:root:-:644 +$sample_directory/sample-aliases.cf:f:root:-:644:o +$sample_directory/sample-auth.cf:f:root:-:644:o +$sample_directory/sample-canonical.cf:f:root:-:644:o +$sample_directory/sample-compatibility.cf:f:root:-:644:o +$sample_directory/sample-debug.cf:f:root:-:644:o +$sample_directory/sample-filter.cf:f:root:-:644:o +$sample_directory/sample-flush.cf:f:root:-:644:o +$sample_directory/sample-ipv6.cf:f:root:-:644:o +$sample_directory/sample-ldap.cf:f:root:-:644:o +$sample_directory/sample-lmtp.cf:f:root:-:644:o +$sample_directory/sample-local.cf:f:root:-:644:o +$sample_directory/sample-mime.cf:f:root:-:644:o +$sample_directory/sample-misc.cf:f:root:-:644:o +$sample_directory/sample-pcre-access.cf:f:root:-:644:o +$sample_directory/sample-pcre-body.cf:f:root:-:644:o +$sample_directory/sample-pcre-header.cf:f:root:-:644:o +$sample_directory/sample-pgsql-aliases.cf:f:root:-:644:o +$sample_directory/sample-qmqpd.cf:f:root:-:644:o +$sample_directory/sample-rate.cf:f:root:-:644:o +$sample_directory/sample-regexp-access.cf:f:root:-:644:o +$sample_directory/sample-regexp-body.cf:f:root:-:644:o +$sample_directory/sample-regexp-header.cf:f:root:-:644:o +$sample_directory/sample-relocated.cf:f:root:-:644:o +$sample_directory/sample-resource.cf:f:root:-:644:o +$sample_directory/sample-rewrite.cf:f:root:-:644:o +$sample_directory/sample-scheduler.cf:f:root:-:644:o +$sample_directory/sample-smtp.cf:f:root:-:644:o +$sample_directory/sample-smtpd.cf:f:root:-:644:o +$sample_directory/sample-tls.cf:f:root:-:644:o +$sample_directory/sample-transport.cf:f:root:-:644:o +$sample_directory/sample-verify.cf:f:root:-:644:o +$sample_directory/sample-virtual.cf:f:root:-:644:o +$readme_directory/AAAREADME:f:root:-:644 +$readme_directory/ADDRESS_CLASS_README:f:root:-:644 +$readme_directory/ADDRESS_REWRITING_README:f:root:-:644 +$readme_directory/ADDRESS_VERIFICATION_README:f:root:-:644 +$readme_directory/BACKSCATTER_README:f:root:-:644 +$readme_directory/BASIC_CONFIGURATION_README:f:root:-:644 +$readme_directory/BUILTIN_FILTER_README:f:root:-:644 +$readme_directory/COMPATIBILITY_README:f:root:-:644 +$readme_directory/CONNECTION_CACHE_README:f:root:-:644 +$readme_directory/CONTENT_INSPECTION_README:f:root:-:644 +$readme_directory/DATABASE_README:f:root:-:644 +$readme_directory/DB_README:f:root:-:644 +$readme_directory/DEBUG_README:f:root:-:644 +$readme_directory/DSN_README:f:root:-:644 +$readme_directory/ETRN_README:f:root:-:644 +$readme_directory/FILTER_README:f:root:-:644 +$readme_directory/FORWARD_SECRECY_README:f:root:-:644 +$readme_directory/HOSTING_README:f:root:-:644:o +$readme_directory/INSTALL:f:root:-:644 +$readme_directory/IPV6_README:f:root:-:644 +$readme_directory/LINUX_README:f:root:-:644 +$readme_directory/LOCAL_RECIPIENT_README:f:root:-:644 +$readme_directory/MACOSX_README:f:root:-:644:o +$readme_directory/MAILDROP_README:f:root:-:644 +$readme_directory/MEMCACHE_README:f:root:-:644 +$readme_directory/MILTER_README:f:root:-:644 +$readme_directory/MULTI_INSTANCE_README:f:root:-:644 +$readme_directory/NFS_README:f:root:-:644 +$readme_directory/OVERVIEW:f:root:-:644 +$readme_directory/PACKAGE_README:f:root:-:644 +$readme_directory/POSTSCREEN_README:f:root:-:644 +$readme_directory/QMQP_README:f:root:-:644:o +$readme_directory/QSHAPE_README:f:root:-:644 +$readme_directory/RELEASE_NOTES:f:root:-:644 +$readme_directory/RESTRICTION_CLASS_README:f:root:-:644 +$readme_directory/SASL_README:f:root:-:644 +$readme_directory/SCHEDULER_README:f:root:-:644 +$readme_directory/SMTPD_ACCESS_README:f:root:-:644 +$readme_directory/SMTPD_POLICY_README:f:root:-:644 +$readme_directory/SMTPD_PROXY_README:f:root:-:644 +$readme_directory/SOHO_README:f:root:-:644 +$readme_directory/STANDARD_CONFIGURATION_README:f:root:-:644 +$readme_directory/STRESS_README:f:root:-:644 +$readme_directory/TLS_LEGACY_README:f:root:-:644 +$readme_directory/TLS_README:f:root:-:644 +$readme_directory/TUNING_README:f:root:-:644 +$readme_directory/ULTRIX_README:f:root:-:644 +$readme_directory/UUCP_README:f:root:-:644 +$readme_directory/VERP_README:f:root:-:644 +$readme_directory/VIRTUAL_README:f:root:-:644 +$readme_directory/XCLIENT_README:f:root:-:644 +$readme_directory/XFORWARD_README:f:root:-:644 +$html_directory/ADDRESS_CLASS_README.html:f:root:-:644 +$html_directory/ADDRESS_REWRITING_README.html:f:root:-:644 +$html_directory/ADDRESS_VERIFICATION_README.html:f:root:-:644 +$html_directory/BACKSCATTER_README.html:f:root:-:644 +$html_directory/BASIC_CONFIGURATION_README.html:f:root:-:644 +$html_directory/BUILTIN_FILTER_README.html:f:root:-:644 +$html_directory/CDB_README.html:f:root:-:644 +$html_directory/COMPATIBILITY_README.html:f:root:-:644 +$html_directory/CONNECTION_CACHE_README.html:f:root:-:644 +$html_directory/CONTENT_INSPECTION_README.html:f:root:-:644 +$html_directory/CYRUS_README.html:f:root:-:644:o +$html_directory/DATABASE_README.html:f:root:-:644 +$html_directory/DB_README.html:f:root:-:644 +$html_directory/DEBUG_README.html:f:root:-:644 +$html_directory/DSN_README.html:f:root:-:644 +$html_directory/ETRN_README.html:f:root:-:644 +$html_directory/FILTER_README.html:f:root:-:644 +$html_directory/FORWARD_SECRECY_README.html:f:root:-:644 +$html_directory/INSTALL.html:f:root:-:644 +$html_directory/IPV6_README.html:f:root:-:644 +$html_directory/LDAP_README.html:f:root:-:644 +$html_directory/LINUX_README.html:f:root:-:644 +$html_directory/LMDB_README.html:f:root:-:644 +$html_directory/LOCAL_RECIPIENT_README.html:f:root:-:644 +$html_directory/MAILDROP_README.html:f:root:-:644 +$html_directory/MILTER_README.html:f:root:-:644 +$html_directory/MULTI_INSTANCE_README.html:f:root:-:644 +$html_directory/MYSQL_README.html:f:root:-:644 +$html_directory/SQLITE_README.html:f:root:-:644 +$html_directory/NFS_README.html:f:root:-:644 +$html_directory/OVERVIEW.html:f:root:-:644 +$html_directory/PACKAGE_README.html:f:root:-:644 +$html_directory/PCRE_README.html:f:root:-:644 +$html_directory/PGSQL_README.html:f:root:-:644 +$html_directory/POSTSCREEN_README.html:f:root:-:644 +$html_directory/QMQP_README.html:f:root:-:644:o +$html_directory/QSHAPE_README.html:f:root:-:644 +$html_directory/RESTRICTION_CLASS_README.html:f:root:-:644 +$html_directory/SASL_README.html:f:root:-:644 +$html_directory/SCHEDULER_README.html:f:root:-:644 +$html_directory/SMTPD_ACCESS_README.html:f:root:-:644 +$html_directory/SMTPD_POLICY_README.html:f:root:-:644 +$html_directory/SMTPD_PROXY_README.html:f:root:-:644 +$html_directory/SOHO_README.html:f:root:-:644 +$html_directory/STANDARD_CONFIGURATION_README.html:f:root:-:644 +$html_directory/STRESS_README.html:f:root:-:644 +$html_directory/TLS_LEGACY_README.html:f:root:-:644 +$html_directory/TLS_README.html:f:root:-:644 +$html_directory/TUNING_README.html:f:root:-:644 +$html_directory/ULTRIX_README.html:f:root:-:644:o +$html_directory/UUCP_README.html:f:root:-:644 +$html_directory/VERP_README.html:f:root:-:644 +$html_directory/VIRTUAL_README.html:f:root:-:644 +$html_directory/XCLIENT_README.html:f:root:-:644 +$html_directory/XFORWARD_README.html:f:root:-:644 +$html_directory/access.5.html:f:root:-:644 +$html_directory/aliases.5.html:f:root:-:644 +$html_directory/anvil.8.html:f:root:-:644 +$html_directory/bounce.8.html:f:root:-:644 +$html_directory/canonical.5.html:f:root:-:644 +$html_directory/cidr_table.5.html:f:root:-:644 +$html_directory/cleanup.8.html:f:root:-:644 +$html_directory/defer.8.html:h:$html_directory/bounce.8.html:-:644 +$html_directory/discard.8.html:f:root:-:644 +$html_directory/dnsblog.8.html:f:root:-:644 +$html_directory/error.8.html:f:root:-:644 +$html_directory/flush.8.html:f:root:-:644 +$html_directory/generics.5.html:f:root:-:644:o +$html_directory/generic.5.html:f:root:-:644 +$html_directory/header_checks.5.html:f:root:-:644 +$html_directory/index.html:f:root:-:644 +$html_directory/ldap_table.5.html:f:root:-:644 +$html_directory/lmtp.8.html:f:root:-:644 +$html_directory/local.8.html:f:root:-:644 +$html_directory/mailq.1.html:f:root:-:644 +$html_directory/master.5.html:f:root:-:644 +$html_directory/master.8.html:f:root:-:644 +$html_directory/memcache_table.5.html:f:root:-:644 +$html_directory/mysql_table.5.html:f:root:-:644 +$html_directory/sqlite_table.5.html:f:root:-:644 +$html_directory/nisplus_table.5.html:f:root:-:644 +$html_directory/newaliases.1.html:h:$html_directory/mailq.1.html:-:644 +$html_directory/oqmgr.8.html:f:root:-:644 +$html_directory/pcre_table.5.html:f:root:-:644 +$html_directory/pgsql_table.5.html:f:root:-:644 +$html_directory/pickup.8.html:f:root:-:644 +$html_directory/pipe.8.html:f:root:-:644 +$html_directory/postalias.1.html:f:root:-:644 +$html_directory/postcat.1.html:f:root:-:644 +$html_directory/postconf.1.html:f:root:-:644 +$html_directory/postconf.5.html:f:root:-:644 +$html_directory/postdrop.1.html:f:root:-:644 +$html_directory/postfix-logo.jpg:f:root:-:644 +$html_directory/postfix-manuals.html:f:root:-:644 +$html_directory/postfix-wrapper.5.html:f:root:-:644 +$html_directory/postfix.1.html:f:root:-:644 +$html_directory/postkick.1.html:f:root:-:644 +$html_directory/postlock.1.html:f:root:-:644 +$html_directory/postlog.1.html:f:root:-:644 +$html_directory/postmap.1.html:f:root:-:644 +$html_directory/postmulti.1.html:f:root:-:644 +$html_directory/postlogd.8.html:f:root:-:644 +$html_directory/postqueue.1.html:f:root:-:644 +$html_directory/postscreen.8.html:f:root:-:644 +$html_directory/postsuper.1.html:f:root:-:644 +$html_directory/qshape.1.html:f:root:-:644 +$html_directory/proxymap.8.html:f:root:-:644 +$html_directory/qmgr.8.html:f:root:-:644 +$html_directory/qmqp-sink.1.html:f:root:-:644 +$html_directory/qmqp-source.1.html:f:root:-:644 +$html_directory/qmqpd.8.html:f:root:-:644 +$html_directory/regexp_table.5.html:f:root:-:644 +$html_directory/relocated.5.html:f:root:-:644 +$html_directory/sendmail.1.html:h:$html_directory/mailq.1.html:-:644 +$html_directory/showq.8.html:f:root:-:644 +$html_directory/smtp-sink.1.html:f:root:-:644 +$html_directory/smtp-source.1.html:f:root:-:644 +$html_directory/smtp.8.html:h:$html_directory/lmtp.8.html:-:644 +$html_directory/smtpd.8.html:f:root:-:644 +$html_directory/spawn.8.html:f:root:-:644 +$html_directory/tlsproxy.8.html:f:root:-:644 +$html_directory/tcp_table.5.html:f:root:-:644 +$html_directory/trace.8.html:h:$html_directory/bounce.8.html:-:644 +$html_directory/transport.5.html:f:root:-:644 +$html_directory/trivial-rewrite.8.html:f:root:-:644 +$html_directory/verify.8.html:f:root:-:644 +$html_directory/virtual.5.html:f:root:-:644 +$html_directory/virtual.8.html:f:root:-:644 diff --git a/templates/Fedora/37/etc/postfix/postfix-files.d/ldap b/templates/Fedora/37/etc/postfix/postfix-files.d/ldap new file mode 100644 index 0000000..684b05d --- /dev/null +++ b/templates/Fedora/37/etc/postfix/postfix-files.d/ldap @@ -0,0 +1,3 @@ +$shlib_directory/postfix-ldap.so:f:root:-:755 +$manpage_directory/man5/ldap_table.5.gz:f:root:-:644 +$readme_directory/LDAP_README:f:root:-:644 diff --git a/templates/Fedora/37/etc/postfix/postfix-files.d/mysql b/templates/Fedora/37/etc/postfix/postfix-files.d/mysql new file mode 100644 index 0000000..8e41d61 --- /dev/null +++ b/templates/Fedora/37/etc/postfix/postfix-files.d/mysql @@ -0,0 +1,3 @@ +$shlib_directory/postfix-mysql.so:f:root:-:755 +$manpage_directory/man5/mysql_table.5.gz:f:root:-:644 +$readme_directory/MYSQL_README:f:root:-:644 diff --git a/templates/Fedora/37/etc/postfix/postfix-files.d/pcre b/templates/Fedora/37/etc/postfix/postfix-files.d/pcre new file mode 100644 index 0000000..a34fd73 --- /dev/null +++ b/templates/Fedora/37/etc/postfix/postfix-files.d/pcre @@ -0,0 +1,3 @@ +$shlib_directory/postfix-pcre.so:f:root:-:755 +$manpage_directory/man5/pcre_table.5.gz:f:root:-:644 +$readme_directory/PCRE_README:f:root:-:644 diff --git a/templates/Fedora/37/etc/postfix/relocated b/templates/Fedora/37/etc/postfix/relocated new file mode 100644 index 0000000..e50edfd --- /dev/null +++ b/templates/Fedora/37/etc/postfix/relocated @@ -0,0 +1,176 @@ +# RELOCATED(5) RELOCATED(5) +# +# NAME +# relocated - Postfix relocated table format +# +# SYNOPSIS +# postmap /etc/postfix/relocated +# +# DESCRIPTION +# The optional relocated(5) table provides the information +# that is used in "user has moved to new_location" bounce +# messages. +# +# Normally, the relocated(5) table is specified as a text +# file that serves as input to the postmap(1) command. The +# result, an indexed file in dbm or db format, is used for +# fast searching by the mail system. Execute the command +# "postmap /etc/postfix/relocated" to rebuild an indexed +# file after changing the corresponding relocated table. +# +# When the table is provided via other means such as NIS, +# LDAP or SQL, the same lookups are done as for ordinary +# indexed files. +# +# Alternatively, the table can be provided as a regu- +# lar-expression map where patterns are given as regular +# expressions, or lookups can be directed to TCP-based +# server. In those case, the lookups are done in a slightly +# different way as described below under "REGULAR EXPRESSION +# TABLES" or "TCP-BASED TABLES". +# +# Table lookups are case insensitive. +# +# CASE FOLDING +# The search string is folded to lowercase before database +# lookup. As of Postfix 2.3, the search string is not case +# folded with database types such as regexp: or pcre: whose +# lookup fields can match both upper and lower case. +# +# TABLE FORMAT +# The input format for the postmap(1) command is as follows: +# +# o An entry has one of the following form: +# +# pattern new_location +# +# Where new_location specifies contact information +# such as an email address, or perhaps a street +# address or telephone number. +# +# o Empty lines and whitespace-only lines are ignored, +# as are lines whose first non-whitespace character +# is a `#'. +# +# o A logical line starts with non-whitespace text. A +# line that starts with whitespace continues a logi- +# cal line. +# +# TABLE SEARCH ORDER +# With lookups from indexed files such as DB or DBM, or from +# networked tables such as NIS, LDAP or SQL, patterns are +# tried in the order as listed below: +# +# user@domain +# Matches user@domain. This form has precedence over +# all other forms. +# +# user Matches user@site when site is $myorigin, when site +# is listed in $mydestination, or when site is listed +# in $inet_interfaces or $proxy_interfaces. +# +# @domain +# Matches other addresses in domain. This form has +# the lowest precedence. +# +# ADDRESS EXTENSION +# When a mail address localpart contains the optional recip- +# ient delimiter (e.g., user+foo@domain), the lookup order +# becomes: user+foo@domain, user@domain, user+foo, user, and +# @domain. +# +# REGULAR EXPRESSION TABLES +# This section describes how the table lookups change when +# the table is given in the form of regular expressions or +# when lookups are directed to a TCP-based server. For a +# description of regular expression lookup table syntax, see +# regexp_table(5) or pcre_table(5). For a description of the +# TCP client/server table lookup protocol, see tcp_table(5). +# This feature is not available up to and including Postfix +# version 2.4. +# +# Each pattern is a regular expression that is applied to +# the entire address being looked up. Thus, user@domain mail +# addresses are not broken up into their user and @domain +# constituent parts, nor is user+foo broken up into user and +# foo. +# +# Patterns are applied in the order as specified in the ta- +# ble, until a pattern is found that matches the search +# string. +# +# Results are the same as with indexed file lookups, with +# the additional feature that parenthesized substrings from +# the pattern can be interpolated as $1, $2 and so on. +# +# TCP-BASED TABLES +# This section describes how the table lookups change when +# lookups are directed to a TCP-based server. For a descrip- +# tion of the TCP client/server lookup protocol, see tcp_ta- +# ble(5). This feature is not available up to and including +# Postfix version 2.4. +# +# Each lookup operation uses the entire address once. Thus, +# user@domain mail addresses are not broken up into their +# user and @domain constituent parts, nor is user+foo broken +# up into user and foo. +# +# Results are the same as with indexed file lookups. +# +# BUGS +# The table format does not understand quoting conventions. +# +# CONFIGURATION PARAMETERS +# The following main.cf parameters are especially relevant. +# The text below provides only a parameter summary. See +# postconf(5) for more details including examples. +# +# relocated_maps +# List of lookup tables for relocated users or sites. +# +# Other parameters of interest: +# +# inet_interfaces +# The network interface addresses that this system +# receives mail on. You need to stop and start Post- +# fix when this parameter changes. +# +# mydestination +# List of domains that this mail system considers +# local. +# +# myorigin +# The domain that is appended to locally-posted mail. +# +# proxy_interfaces +# Other interfaces that this machine receives mail on +# by way of a proxy agent or network address transla- +# tor. +# +# SEE ALSO +# trivial-rewrite(8), address resolver +# postmap(1), Postfix lookup table manager +# postconf(5), configuration parameters +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# DATABASE_README, Postfix lookup table overview +# ADDRESS_REWRITING_README, address rewriting guide +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# RELOCATED(5) diff --git a/templates/Fedora/37/etc/postfix/transport b/templates/Fedora/37/etc/postfix/transport new file mode 100644 index 0000000..1dcd787 --- /dev/null +++ b/templates/Fedora/37/etc/postfix/transport @@ -0,0 +1,317 @@ +# TRANSPORT(5) TRANSPORT(5) +# +# NAME +# transport - Postfix transport table format +# +# SYNOPSIS +# postmap /etc/postfix/transport +# +# postmap -q "string" /etc/postfix/transport +# +# postmap -q - /etc/postfix/transport = 3.5): +# +# example.com smtp:bar.example, foo.example +# +# This tries to deliver to bar.example before trying to +# deliver to foo.example. +# +# The error mailer can be used to bounce mail: +# +# .example.com error:mail for *.example.com is not deliverable +# +# This causes all mail for user@anything.example.com to be +# bounced. +# +# REGULAR EXPRESSION TABLES +# This section describes how the table lookups change when +# the table is given in the form of regular expressions. For +# a description of regular expression lookup table syntax, +# see regexp_table(5) or pcre_table(5). +# +# Each pattern is a regular expression that is applied to +# the entire address being looked up. Thus, +# some.domain.hierarchy is not looked up via its parent +# domains, nor is user+foo@domain looked up as user@domain. +# +# Patterns are applied in the order as specified in the ta- +# ble, until a pattern is found that matches the search +# string. +# +# The trivial-rewrite(8) server disallows regular expression +# substitution of $1 etc. in regular expression lookup +# tables, because that could open a security hole (Postfix +# version 2.3 and later). +# +# TCP-BASED TABLES +# This section describes how the table lookups change when +# lookups are directed to a TCP-based server. For a descrip- +# tion of the TCP client/server lookup protocol, see tcp_ta- +# ble(5). This feature is not available up to and including +# Postfix version 2.4. +# +# Each lookup operation uses the entire recipient address +# once. Thus, some.domain.hierarchy is not looked up via +# its parent domains, nor is user+foo@domain looked up as +# user@domain. +# +# Results are the same as with indexed file lookups. +# +# CONFIGURATION PARAMETERS +# The following main.cf parameters are especially relevant. +# The text below provides only a parameter summary. See +# postconf(5) for more details including examples. +# +# empty_address_recipient (MAILER-DAEMON) +# The recipient of mail addressed to the null +# address. +# +# parent_domain_matches_subdomains (see 'postconf -d' out- +# put) +# A list of Postfix features where the pattern "exam- +# ple.com" also matches subdomains of example.com, +# instead of requiring an explicit ".example.com" +# pattern. +# +# transport_maps (empty) +# Optional lookup tables with mappings from recipient +# address to (message delivery transport, next-hop +# destination). +# +# SEE ALSO +# trivial-rewrite(8), rewrite and resolve addresses +# master(5), master.cf file format +# postconf(5), configuration parameters +# postmap(1), Postfix lookup table manager +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# ADDRESS_REWRITING_README, address rewriting guide +# DATABASE_README, Postfix lookup table overview +# FILTER_README, external content filter +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# TRANSPORT(5) diff --git a/templates/Fedora/37/etc/postfix/virtual b/templates/Fedora/37/etc/postfix/virtual new file mode 100644 index 0000000..da9cd65 --- /dev/null +++ b/templates/Fedora/37/etc/postfix/virtual @@ -0,0 +1,324 @@ +# VIRTUAL(5) VIRTUAL(5) +# +# NAME +# virtual - Postfix virtual alias table format +# +# SYNOPSIS +# postmap /etc/postfix/virtual +# +# postmap -q "string" /etc/postfix/virtual +# +# postmap -q - /etc/postfix/virtual Date: Mon, 20 Feb 2023 12:47:06 -0600 Subject: [PATCH 30/47] Stop sending delivery status notifications due to creating backskatter spam --- templates/Fedora/35/etc/postfix/main.cf | 1 + templates/Fedora/36/etc/postfix/main.cf | 1 + templates/Fedora/37/etc/postfix/main.cf | 1 + 3 files changed, 3 insertions(+) diff --git a/templates/Fedora/35/etc/postfix/main.cf b/templates/Fedora/35/etc/postfix/main.cf index 5b19283..e26183d 100644 --- a/templates/Fedora/35/etc/postfix/main.cf +++ b/templates/Fedora/35/etc/postfix/main.cf @@ -762,4 +762,5 @@ disable_vrfy_command = yes message_size_limit = {{ postfix_message_size_limit }} smtpd_helo_restrictions = reject_unknown_helo_hostname smtpd_client_restrictions = reject_unknown_reverse_client_hostname reject_unauth_pipelining +smtpd_discard_ehlo_keywords = silent-discard, dsn diff --git a/templates/Fedora/36/etc/postfix/main.cf b/templates/Fedora/36/etc/postfix/main.cf index 5b19283..e26183d 100644 --- a/templates/Fedora/36/etc/postfix/main.cf +++ b/templates/Fedora/36/etc/postfix/main.cf @@ -762,4 +762,5 @@ disable_vrfy_command = yes message_size_limit = {{ postfix_message_size_limit }} smtpd_helo_restrictions = reject_unknown_helo_hostname smtpd_client_restrictions = reject_unknown_reverse_client_hostname reject_unauth_pipelining +smtpd_discard_ehlo_keywords = silent-discard, dsn diff --git a/templates/Fedora/37/etc/postfix/main.cf b/templates/Fedora/37/etc/postfix/main.cf index 5b19283..e26183d 100644 --- a/templates/Fedora/37/etc/postfix/main.cf +++ b/templates/Fedora/37/etc/postfix/main.cf @@ -762,4 +762,5 @@ disable_vrfy_command = yes message_size_limit = {{ postfix_message_size_limit }} smtpd_helo_restrictions = reject_unknown_helo_hostname smtpd_client_restrictions = reject_unknown_reverse_client_hostname reject_unauth_pipelining +smtpd_discard_ehlo_keywords = silent-discard, dsn From 4494865cf1deb8b23eeee6c13eae012df6dc82d8 Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sun, 30 Apr 2023 17:53:01 -0500 Subject: [PATCH 31/47] Add Fedora 38 --- templates/Fedora/38/etc/opendkim.conf | 134 +++ templates/Fedora/38/etc/opendkim/KeyTable | 6 + templates/Fedora/38/etc/opendkim/SigningTable | 25 + templates/Fedora/38/etc/opendkim/TrustedHosts | 9 + templates/Fedora/38/etc/opendmarc.conf | 442 ++++++++++ templates/Fedora/38/etc/postfix/access | 484 +++++++++++ templates/Fedora/38/etc/postfix/canonical | 307 +++++++ .../Fedora/38/etc/postfix/dynamicmaps.cf | 1 + .../38/etc/postfix/dynamicmaps.cf.d/ldap | 1 + .../38/etc/postfix/dynamicmaps.cf.d/mysql | 1 + .../38/etc/postfix/dynamicmaps.cf.d/pcre | 1 + templates/Fedora/38/etc/postfix/generic | 250 ++++++ templates/Fedora/38/etc/postfix/header_checks | 549 +++++++++++++ templates/Fedora/38/etc/postfix/main.cf | 766 ++++++++++++++++++ templates/Fedora/38/etc/postfix/main.cf.proto | 736 +++++++++++++++++ templates/Fedora/38/etc/postfix/master.cf | 137 ++++ .../Fedora/38/etc/postfix/master.cf.proto | 137 ++++ templates/Fedora/38/etc/postfix/postfix-files | 432 ++++++++++ .../38/etc/postfix/postfix-files.d/ldap | 3 + .../38/etc/postfix/postfix-files.d/mysql | 3 + .../38/etc/postfix/postfix-files.d/pcre | 3 + templates/Fedora/38/etc/postfix/relocated | 176 ++++ templates/Fedora/38/etc/postfix/transport | 317 ++++++++ templates/Fedora/38/etc/postfix/virtual | 324 ++++++++ .../systemd/system/postfix-copytls.service | 12 + .../lib/systemd/system/postfix-copytls.timer | 9 + vars/Fedora-38-default.yml | 110 +++ 27 files changed, 5375 insertions(+) create mode 100644 templates/Fedora/38/etc/opendkim.conf create mode 100644 templates/Fedora/38/etc/opendkim/KeyTable create mode 100644 templates/Fedora/38/etc/opendkim/SigningTable create mode 100644 templates/Fedora/38/etc/opendkim/TrustedHosts create mode 100644 templates/Fedora/38/etc/opendmarc.conf create mode 100644 templates/Fedora/38/etc/postfix/access create mode 100644 templates/Fedora/38/etc/postfix/canonical create mode 100644 templates/Fedora/38/etc/postfix/dynamicmaps.cf create mode 100644 templates/Fedora/38/etc/postfix/dynamicmaps.cf.d/ldap create mode 100644 templates/Fedora/38/etc/postfix/dynamicmaps.cf.d/mysql create mode 100644 templates/Fedora/38/etc/postfix/dynamicmaps.cf.d/pcre create mode 100644 templates/Fedora/38/etc/postfix/generic create mode 100644 templates/Fedora/38/etc/postfix/header_checks create mode 100644 templates/Fedora/38/etc/postfix/main.cf create mode 100644 templates/Fedora/38/etc/postfix/main.cf.proto create mode 100644 templates/Fedora/38/etc/postfix/master.cf create mode 100644 templates/Fedora/38/etc/postfix/master.cf.proto create mode 100644 templates/Fedora/38/etc/postfix/postfix-files create mode 100644 templates/Fedora/38/etc/postfix/postfix-files.d/ldap create mode 100644 templates/Fedora/38/etc/postfix/postfix-files.d/mysql create mode 100644 templates/Fedora/38/etc/postfix/postfix-files.d/pcre create mode 100644 templates/Fedora/38/etc/postfix/relocated create mode 100644 templates/Fedora/38/etc/postfix/transport create mode 100644 templates/Fedora/38/etc/postfix/virtual create mode 100644 templates/Fedora/38/usr/lib/systemd/system/postfix-copytls.service create mode 100644 templates/Fedora/38/usr/lib/systemd/system/postfix-copytls.timer create mode 100644 vars/Fedora-38-default.yml diff --git a/templates/Fedora/38/etc/opendkim.conf b/templates/Fedora/38/etc/opendkim.conf new file mode 100644 index 0000000..992e0b2 --- /dev/null +++ b/templates/Fedora/38/etc/opendkim.conf @@ -0,0 +1,134 @@ +## BASIC OPENDKIM CONFIGURATION FILE +## See opendkim.conf(5) or /usr/share/doc/opendkim/opendkim.conf.sample for more + +## BEFORE running OpenDKIM you must: + +## - make your MTA (Postfix, Sendmail, etc.) aware of OpenDKIM +## - generate keys for your domain (if signing) +## - edit your DNS records to publish your public keys (if signing) + +## See /usr/share/doc/opendkim/INSTALL for detailed instructions. + +## DEPRECATED CONFIGURATION OPTIONS +## +## The following configuration options are no longer valid. They should be +## removed from your existing configuration file to prevent potential issues. +## Failure to do so may result in opendkim being unable to start. +## +## Removed in 2.10.0: +## AddAllSignatureResults +## ADSPAction +## ADSPNoSuchDomain +## BogusPolicy +## DisableADSP +## LDAPSoftStart +## LocalADSP +## NoDiscardableMailTo +## On-PolicyError +## SendADSPReports +## UnprotectedPolicy + +## CONFIGURATION OPTIONS + +## Specifies the path to the process ID file. +PidFile /run/opendkim/opendkim.pid + +## Selects operating modes. Valid modes are s (sign) and v (verify). Default is v. +## Must be changed to s (sign only) or sv (sign and verify) in order to sign outgoing +## messages. +Mode v + +## Log activity to the system log. +Syslog yes + +## Log additional entries indicating successful signing or verification of messages. +SyslogSuccess yes + +## If logging is enabled, include detailed logging about why or why not a message was +## signed or verified. This causes an increase in the amount of log data generated +## for each message, so set this to No (or comment it out) if it gets too noisy. +LogWhy yes + +## Attempt to become the specified user before starting operations. +UserID opendkim:opendkim + +## Create a socket through which your MTA can communicate. +Socket inet:8891@localhost + +## Required to use local socket with MTAs that access the socket as a non- +## privileged user (e.g. Postfix) +Umask 002 + +## This specifies a text file in which to store DKIM transaction statistics. +## OpenDKIM must be manually compiled with --enable-stats to enable this feature. +# Statistics /var/spool/opendkim/stats.dat + +## Specifies whether or not the filter should generate report mail back +## to senders when verification fails and an address for such a purpose +## is provided. See opendkim.conf(5) for details. +SendReports yes + +## Specifies the sending address to be used on From: headers of outgoing +## failure reports. By default, the e-mail address of the user executing +## the filter is used (executing_user@hostname). +# ReportAddress "Example.com Postmaster" +ReportAddress "Postmaster" <{{ postmaster_email }}> + +## Add a DKIM-Filter header field to messages passing through this filter +## to identify messages it has processed. +SoftwareHeader yes + +## SIGNING OPTIONS + +## Selects the canonicalization method(s) to be used when signing messages. +Canonicalization relaxed/relaxed + +## Domain(s) whose mail should be signed by this filter. Mail from other domains will +## be verified rather than being signed. Uncomment and use your domain name. +## This parameter is not required if a SigningTable is in use. +# Domain example.com + +## Defines the name of the selector to be used when signing messages. +Selector default + +## Specifies the minimum number of key bits for acceptable keys and signatures. +MinimumKeyBits 1024 + +## Gives the location of a private key to be used for signing ALL messages. This +## directive is ignored if KeyTable is enabled. +# KeyFile /etc/opendkim/keys/default.private + +## Gives the location of a file mapping key names to signing keys. In simple terms, +## this tells OpenDKIM where to find your keys. If present, overrides any KeyFile +## directive in the configuration file. Requires SigningTable be enabled. +# KeyTable /etc/opendkim/KeyTable + +## Defines a table used to select one or more signatures to apply to a message based +## on the address found in the From: header field. In simple terms, this tells +## OpenDKIM how to use your keys. Requires KeyTable be enabled. +# SigningTable refile:/etc/opendkim/SigningTable + +## Identifies a set of "external" hosts that may send mail through the server as one +## of the signing domains without credentials as such. +# ExternalIgnoreList refile:/etc/opendkim/TrustedHosts + +## Identifies a set "internal" hosts whose mail should be signed rather than verified. +# InternalHosts refile:/etc/opendkim/TrustedHosts + +## Contains a list of IP addresses, CIDR blocks, hostnames or domain names +## whose mail should be neither signed nor verified by this filter. See man +## page for file format. +# PeerList X.X.X.X + +## Always oversign From (sign using actual From and a null From to prevent +## malicious signatures header fields (From and/or others) between the signer +## and the verifier. From is oversigned by default in the Fedora package +## because it is often the identity key used by reputation systems and thus +## somewhat security sensitive. +OversignHeaders From + +## Instructs the DKIM library to maintain its own local cache of keys and +## policies retrieved from DNS, rather than relying on the nameserver for +## caching service. Useful if the nameserver being used by the filter is +## not local. +QueryCache yes diff --git a/templates/Fedora/38/etc/opendkim/KeyTable b/templates/Fedora/38/etc/opendkim/KeyTable new file mode 100644 index 0000000..e804d68 --- /dev/null +++ b/templates/Fedora/38/etc/opendkim/KeyTable @@ -0,0 +1,6 @@ +# OPENDKIM KEY TABLE +# To use this file, uncomment the #KeyTable option in /etc/opendkim.conf, +# then uncomment the following line and replace example.com with your domain +# name, then restart OpenDKIM. Additional keys may be added on separate lines. + +#default._domainkey.example.com example.com:default:/etc/opendkim/keys/default.private diff --git a/templates/Fedora/38/etc/opendkim/SigningTable b/templates/Fedora/38/etc/opendkim/SigningTable new file mode 100644 index 0000000..e8161a1 --- /dev/null +++ b/templates/Fedora/38/etc/opendkim/SigningTable @@ -0,0 +1,25 @@ +# OPENDKIM SIGNING TABLE +# This table controls how to apply one or more signatures to outgoing messages based +# on the address found in the From: header field. In simple terms, this tells +# OpenDKIM "how" to apply your keys. + +# To use this file, uncomment the SigningTable option in /etc/opendkim.conf, +# then uncomment one of the usage examples below and replace example.com with your +# domain name, then restart OpenDKIM. + +# WILDCARD EXAMPLE +# Enables signing for any address on the listed domain(s), but will work only if +# "refile:/etc/opendkim/SigningTable" is included in /etc/opendkim.conf. +# Create additional lines for additional domains. + +#*@example.com default._domainkey.example.com + +# NON-WILDCARD EXAMPLE +# If "file:" (instead of "refile:") is specified in /etc/opendkim.conf, then +# wildcards will not work. Instead, full user@host is checked first, then simply host, +# then user@.domain (with all superdomains checked in sequence, so "foo.example.com" +# would first check "user@foo.example.com", then "user@.example.com", then "user@.com"), +# then .domain, then user@*, and finally *. See the opendkim.conf(5) man page under +# "SigningTable" for more details. + +#example.com default._domainkey.example.com diff --git a/templates/Fedora/38/etc/opendkim/TrustedHosts b/templates/Fedora/38/etc/opendkim/TrustedHosts new file mode 100644 index 0000000..7a086d4 --- /dev/null +++ b/templates/Fedora/38/etc/opendkim/TrustedHosts @@ -0,0 +1,9 @@ +# OPENDKIM TRUSTED HOSTS +# To use this file, uncomment the #ExternalIgnoreList and/or the #InternalHosts +# option in /etc/opendkim.conf then restart OpenDKIM. Additional hosts +# may be added on separate lines (IP addresses, hostnames, or CIDR ranges). +# The localhost IP (127.0.0.1) should always be the first entry in this file. +127.0.0.1 +::1 +#host.example.com +#192.168.1.0/24 diff --git a/templates/Fedora/38/etc/opendmarc.conf b/templates/Fedora/38/etc/opendmarc.conf new file mode 100644 index 0000000..cc1018d --- /dev/null +++ b/templates/Fedora/38/etc/opendmarc.conf @@ -0,0 +1,442 @@ +## opendmarc.conf -- configuration file for OpenDMARC filter +## +## Copyright (c) 2012-2015, 2018, 2021, The Trusted Domain Project. +## All rights reserved. + +## DEPRECATED CONFIGURATION OPTIONS +## +## The following configuration options are no longer valid. They should be +## removed from your existing configuration file to prevent potential issues. +## Failure to do so may result in opendmarc being unable to start. +## +## Renamed in 1.3.0: +## ForensicReports became FailureReports +## ForensicReportsBcc became FailureReportsBcc +## ForensicReportsOnNone became FailureReportsOnNone +## ForensicReportsSentBy became FailureReportsSentBy + +## CONFIGURATION OPTIONS + +## AuthservID (string) +## defaults to MTA name +## +## Sets the "authserv-id" to use when generating the Authentication-Results: +## header field after verifying a message. If the string "HOSTNAME" is +## provided, the name of the host running the filter (as returned by the +## gethostname(3) function) will be used. +# +# AuthservID name + +## AuthservIDWithJobID { true | false } +## default "false" +## +## If "true", requests that the authserv-id portion of the added +## Authentication-Results header fields contain the job ID of the message +## being evaluated. +# +# AuthservIDWithJobID false + +## AutoRestart { true | false } +## default "false" +## +## Automatically re-start on failures. Use with caution; if the filter fails +## instantly after it starts, this can cause a tight fork(2) loop. +# +# AutoRestart false + +## AutoRestartCount n +## default 0 +## +## Sets the maximum automatic restart count. After this number of automatic +## restarts, the filter will give up and terminate. A value of 0 implies no +## limit. +# +# AutoRestartCount 0 + +## AutoRestartRate n/t[u] +## default (no limit) +## +## Sets the maximum automatic restart rate. If the filter begins restarting +## faster than the rate defined here, it will give up and terminate. This +## is a string of the form n/t[u] where n is an integer limiting the count +## of restarts in the given interval and t[u] defines the time interval +## through which the rate is calculated; t is an integer and u defines the +## units thus represented ("s" or "S" for seconds, the default; "m" or "M" +## for minutes; "h" or "H" for hours; "d" or "D" for days). For example, a +## value of "10/1h" limits the restarts to 10 in one hour. There is no +## default, meaning restart rate is not limited. +# +# AutoRestartRate n/t[u] + +## Background { true | false } +## default "true" +## +## Causes opendmarc to fork and exits immediately, leaving the service +## running in the background. +# +# Background true + +## BaseDirectory (string) +## default (none) +## +## If set, instructs the filter to change to the specified directory using +## chdir(2) before doing anything else. This means any files referenced +## elsewhere in the configuration file can be specified relative to this +## directory. It's also useful for arranging that any crash dumps will be +## saved to a specific location. +# +# BaseDirectory /var/run/opendmarc + +## ChangeRootDirectory (string) +## default (none) +## +## Requests that the operating system change the effective root directory of +## the process to the one specified here prior to beginning execution. +## chroot(2) requires superuser access. A warning will be generated if +## UserID is not also set. +# +# ChangeRootDirectory /var/chroot/opendmarc + +## CopyFailuresTo (string) +## default (none) +## +## Requests addition of the specified email address to the envelope of +## any message that fails the DMARC evaluation. +# +# CopyFailuresTo postmaster@localhost + +## DomainWhitelist (string) +## default (none) +## +## A brief list of whitelisted domains for which ARC signature headers are +## trusted as determined by evaluating entries in the "arc.chain" field found +## in a locally generated Authentication-Results header. +## +## This list will be concatenated with DomainWhitelistFile (if provided). +## +# +# DomainWhitelist example.com + +## DomainWhitelistFile path +## default (none) +## +## A comprehensive list of whitelisted domains for which ARC signature headers +## are trusted as determined by evaluating entries in the "arc.chain" field +## found in a locally generated Authentication-Results header. +## +## This list will be concatenated with DomainWhitelist (if provided). +## +# +# DomainWhitelistFile /etc/opendmarc/whitelist.domains + +## DomainWhitelistSize +## default 3000 +## +## The maximum number of entries in the DomainWhitelist including both entries +## in the DomainWhitelist configuration parameter (above) and entries in the +## DomainWhitelistFile. This number will be increased by approximately 20% to +## increase the efficiency of the hashing algorithm. +## +# +# DomainWhitelistSize 3000 + +## DNSTimeout (integer) +## default 5 +## +## Sets the DNS timeout in seconds. A value of 0 causes an infinite wait. +## (NOT YET IMPLEMENTED) +# +# DNSTimeout 5 + +## EnableCoredumps { true | false } +## default "false" +## +## On systems that have such support, make an explicit request to the kernel +## to dump cores when the filter crashes for some reason. Some modern UNIX +## systems suppress core dumps during crashes for security reasons if the +## user ID has changed during the lifetime of the process. Currently only +## supported on Linux. +# +# EnableCoreDumps false + +## FailureReports { true | false } +## default "false" +## +## Enables generation of failure reports when the DMARC test fails and the +## purported sender of the message has requested such reports. Reports are +## formatted per RFC6591. +# +# FailureReports false + +## FailureReportsBcc (string) +## default (none) +## +## When failure reports are enabled and one is to be generated, always +## send one to the address(es) specified here. If a failure report is +## requested by the domain owner, the address(es) are added in a Bcc: field. +## If no request is made, they address(es) are used in a To: field. There +## is no default. +# +# FailureReportsBcc postmaster@example.coom +FailureReportsBcc {{ postmaster_email }} + +## FailureReportsOnNone { true | false } +## default "false" +## +## Supplements the "FailureReports" setting by generating reports for +## domains that advertise "none" policies. By default, reports are only +## generated (when enabled) for sending domains advertising a "quarantine" +## or "reject" policy. +# +# FailureReportsOnNone false + +## FailureReportsSentBy string +## default "USER@HOSTNAME" +## +## Specifies the email address to use in the From: field of failure +## reports generated by the filter. The default is to use the userid of +## the user running the filter and the local hostname to construct an +## email address. "postmaster" is used in place of the userid if a name +## could not be determined. +# +# FailureReportsSentBy USER@HOSTNAME +FailureReportsSentBy {{ postmaster_email }} + +## HistoryFile path +## default (none) +## +## If set, specifies the location of a text file to which records are written +## that can be used to generate DMARC aggregate reports. Records are groups +## of rows containing information about a single received message, and +## include all relevant information needed to generate a DMARC aggregate +## report. It is expected that this will not be used in its raw form, but +## rather periodically imported into a relational database from which the +## aggregate reports can be extracted by a tool such as opendmarc-import(8). +# +# HistoryFile /var/spool/opendmarc/opendmarc.dat + +## HoldQuarantinedMessages { true | false } +## default "false" +## +## If set, the milter will signal to the mta that messages with +## p=quarantine, which fail dmarc authentication, should be held in +## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. +## If false, messsages will be accepted and passed along with the +## regular mail flow, and the quarantine will be left up to downstream +## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, +## including the Authentication-Results header added by OpenDMARC +# +# HoldQuarantinedMessages false + +## IgnoreAuthenticatedClients { true | false } +## default "false" +## +## If set, causes mail from authenticated clients (i.e., those that used +## SMTP AUTH) to be ignored by the filter. +# +# IgnoreAuthenticatedClients false + +## HoldQuarantinedMessages { true | false } +## default "false" +## +## If set, the milter will signal to the mta that messages with +## p=quarantine, which fail dmarc authentication, should be held in +## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. +## If false, messsages will be accepted and passed along with the +## regular mail flow, and the quarantine will be left up to downstream +## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, +## including the Authentication-Results header added by OpenDMARC +# +# HoldQuarantinedMessages false + + +## IgnoreHosts path +## default (internal) +## +## Specifies the path to a file that contains a list of hostnames, IP +## addresses, and/or CIDR expressions identifying hosts whose SMTP +## connections are to be ignored by the filter. If not specified, defaults +## to "127.0.0.1" only. +# +# IgnoreHosts /etc/opendmarc/ignore.hosts + +## IgnoreMailFrom domain[,...] +## default (none) +## +## Gives a list of domain names whose mail (based on the From: domain) is to +## be ignored by the filter. The list should be comma-separated. Matching +## against this list is case-insensitive. The default is an empty list, +## meaning no mail is ignored. +# +# IgnoreMailFrom example.com + +## MilterDebug (integer) +## default 0 +## +## Sets the debug level to be requested from the milter library. +# +# MilterDebug 0 + +## PidFile path +## default (none) +## +## Specifies the path to a file that should be created at process start +## containing the process ID. +# +# PidFile /var/run/opendmarc.pid + +## PublicSuffixList path +## default (none) +## +## Specifies the path to a file that contains top-level domains (TLDs) that +## will be used to compute the Organizational Domain for a given domain name, +## as described in the DMARC specification. If not provided, the filter will +## not be able to determine the Organizational Domain and only the presented +## domain will be evaluated. This file should be periodically updated. +## One location to retrieve the file from is https://publicsuffix.org/list/ +# +# PublicSuffixList path + +## RecordAllMessages { true | false } +## default "false" +## +## If set and "HistoryFile" is in use, all received messages are recorded +## to the history file. If not set (the default), only messages for which +## the From: domain published a DMARC record will be recorded in the +## history file. +# +# RecordAllMessages false + +## RejectFailures { true | false } +## default "false" +## +## If set, messages will be rejected if they fail the DMARC evaluation, or +## temp-failed if evaluation could not be completed. By default, no message +## will be rejected or temp-failed regardless of the outcome of the DMARC +## evaluation of the message. Instead, an Authentication-Results header +## field will be added. +# +# RejectFailures false +RejectFailures true + +## RejectMultiValueFrom { true | false } +## default "false" +## +## If set, messages with multiple addresses in the From: field of the message +## will be rejected unless all domains in the field are the same. They will +## otherwise be ignored by the filter (the default). +# +# RejectMultiValueFrom false + +## ReportCommand string +## default "/usr/sbin/sendmail -t" +## +## Indicates the shell command to which failure reports should be passed for +## delivery when "FailureReports" is enabled. +# +# ReportCommand /usr/sbin/sendmail -t + +## RequiredHeaders { true | false } +## default "false" +## +## If set, the filter will ensure the header of the message conforms to the +## basic header field count restrictions laid out in RFC5322, Section 3.6. +## Messages failing this test are rejected without further processing. A +## From: field from which no domain name could be extracted will also be +## rejected. +# +# RequiredHeaders false + +## Socket socketspec +## default (none) +## +## Specifies the socket that should be established by the filter to receive +## connections from sendmail(8) in order to provide service. socketspec is +## in one of two forms: local:path, which creates a UNIX domain socket at +## the specified path, or inet:port[@host] or inet6:port[@host] which creates +## a TCP socket on the specified port for the appropriate protocol family. +## If the host is not given as either a hostname or an IP address, the +## socket will be listening on all interfaces. This option is mandatory +## either in the configuration file or on the command line. If an IP +## address is used, it must be enclosed in square brackets. +# +Socket inet:8893@localhost + +## SoftwareHeader { true | false } +## default "false" +## +## Causes the filter to add a "DMARC-Filter" header field indicating the +## presence of this filter in the path of the message from injection to +## delivery. The product's name, version, and the job ID are included in +## the header field's contents. +# +SoftwareHeader true + +## SPFIgnoreResults { true | false } +## default "false" +## +## Causes the filter to ignore any SPF results in the header of the +## message. This is useful if you want the filter to perform SPF checks +## itself, or because you don't trust the arriving header. +# +SPFIgnoreResults true + +## SPFSelfValidate { true | false } +## default false +## +## Enable internal spf checking with --with-spf +## To use libspf2 instead: --with-spf --with-spf2-include=path --with-spf2-lib=path +## +## Causes the filter to perform a fallback SPF check itself when +## it can find no SPF results in the message header. If SPFIgnoreResults +## is also set, it never looks for SPF results in headers and +## always performs the SPF check itself when this is set. +# +SPFSelfValidate true + +## Syslog { true | false } +## default "false" +## +## Log via calls to syslog(3) any interesting activity. +# +Syslog true + +## SyslogFacility facility-name +## default "mail" +## +## Log via calls to syslog(3) using the named facility. The facility names +## are the same as the ones allowed in syslog.conf(5). +# +# SyslogFacility mail + +## TrustedAuthservIDs string +## default HOSTNAME +## +## Specifies one or more "authserv-id" values to trust as relaying true +## upstream DKIM and SPF results. The default is to use the name of +## the MTA processing the message. To specify a list, separate each entry +## with a comma. The key word "HOSTNAME" will be replaced by the name of +## the host running the filter as reported by the gethostname(3) function. +# +# TrustedAuthservIDs HOSTNAME + +## UMask mask +## default (none) +## +## Requests a specific permissions mask to be used for file creation. This +## only really applies to creation of the socket when Socket specifies a +## UNIX domain socket, and to the HistoryFile and PidFile (if any); temporary +## files are normally created by the mkstemp(3) function that enforces a +## specific file mode on creation regardless of the process umask. See +## umask(2) for more information. +# +UMask 007 + +## UserID user[:group] +## default (none) +## +## Attempts to become the specified userid before starting operations. +## The process will be assigned all of the groups and primary group ID of +## the named userid unless an alternate group is specified. +# +UserID opendmarc:mail diff --git a/templates/Fedora/38/etc/postfix/access b/templates/Fedora/38/etc/postfix/access new file mode 100644 index 0000000..257339b --- /dev/null +++ b/templates/Fedora/38/etc/postfix/access @@ -0,0 +1,484 @@ +# ACCESS(5) ACCESS(5) +# +# NAME +# access - Postfix SMTP server access table +# +# SYNOPSIS +# postmap /etc/postfix/access +# +# postmap -q "string" /etc/postfix/access +# +# postmap -q - /etc/postfix/access as the lookup key for such addresses. The value is +# specified with the smtpd_null_access_lookup_key parameter +# in the Postfix main.cf file. +# +# EMAIL ADDRESS EXTENSION +# When a mail address localpart contains the optional recip- +# ient delimiter (e.g., user+foo@domain), the lookup order +# becomes: user+foo@domain, user@domain, domain, user+foo@, +# and user@. +# +# HOST NAME/ADDRESS PATTERNS +# With lookups from indexed files such as DB or DBM, or from +# networked tables such as NIS, LDAP or SQL, the following +# lookup patterns are examined in the order as listed: +# +# domain.tld +# Matches domain.tld. +# +# The pattern domain.tld also matches subdomains, but +# only when the string smtpd_access_maps is listed in +# the Postfix parent_domain_matches_subdomains con- +# figuration setting. +# +# .domain.tld +# Matches subdomains of domain.tld, but only when the +# string smtpd_access_maps is not listed in the Post- +# fix parent_domain_matches_subdomains configuration +# setting. +# +# net.work.addr.ess +# +# net.work.addr +# +# net.work +# +# net Matches a remote IPv4 host address or network +# address range. Specify one to four decimal octets +# separated by ".". Do not specify "[]" , "/", lead- +# ing zeros, or hexadecimal forms. +# +# Network ranges are matched by repeatedly truncating +# the last ".octet" from a remote IPv4 host address +# string, until a match is found in the access table, +# or until further truncation is not possible. +# +# NOTE: use the cidr lookup table type to specify +# network/netmask patterns. See cidr_table(5) for +# details. +# +# net:work:addr:ess +# +# net:work:addr +# +# net:work +# +# net Matches a remote IPv6 host address or network +# address range. Specify three to eight hexadecimal +# octet pairs separated by ":", using the compressed +# form "::" for a sequence of zero-valued octet +# pairs. Do not specify "[]", "/", leading zeros, or +# non-compressed forms. +# +# A network range is matched by repeatedly truncating +# the last ":octetpair" from the compressed-form +# remote IPv6 host address string, until a match is +# found in the access table, or until further trunca- +# tion is not possible. +# +# NOTE: use the cidr lookup table type to specify +# network/netmask patterns. See cidr_table(5) for +# details. +# +# IPv6 support is available in Postfix 2.2 and later. +# +# ACCEPT ACTIONS +# OK Accept the address etc. that matches the pattern. +# +# all-numerical +# An all-numerical result is treated as OK. This for- +# mat is generated by address-based relay authoriza- +# tion schemes such as pop-before-smtp. +# +# For other accept actions, see "OTHER ACTIONS" below. +# +# REJECT ACTIONS +# Postfix version 2.3 and later support enhanced status +# codes as defined in RFC 3463. When no code is specified +# at the beginning of the text below, Postfix inserts a +# default enhanced status code of "5.7.1" in the case of +# reject actions, and "4.7.1" in the case of defer actions. +# See "ENHANCED STATUS CODES" below. +# +# 4NN text +# +# 5NN text +# Reject the address etc. that matches the pattern, +# and respond with the numerical three-digit code and +# text. 4NN means "try again later", while 5NN means +# "do not try again". +# +# The following responses have special meaning for +# the Postfix SMTP server: +# +# 421 text (Postfix 2.3 and later) +# +# 521 text (Postfix 2.6 and later) +# After responding with the numerical +# three-digit code and text, disconnect imme- +# diately from the SMTP client. This frees up +# SMTP server resources so that they can be +# made available to another SMTP client. +# +# Note: The "521" response should be used only +# with botnets and other malware where inter- +# operability is of no concern. The "send 521 +# and disconnect" behavior is NOT defined in +# the SMTP standard. +# +# REJECT optional text... +# Reject the address etc. that matches the pattern. +# Reply with "$access_map_reject_code optional +# text..." when the optional text is specified, oth- +# erwise reply with a generic error response message. +# +# DEFER optional text... +# Reject the address etc. that matches the pattern. +# Reply with "$access_map_defer_code optional +# text..." when the optional text is specified, oth- +# erwise reply with a generic error response message. +# +# This feature is available in Postfix 2.6 and later. +# +# DEFER_IF_REJECT optional text... +# Defer the request if some later restriction would +# result in a REJECT action. Reply with +# "$access_map_defer_code 4.7.1 optional text..." +# when the optional text is specified, otherwise +# reply with a generic error response message. +# +# Prior to Postfix 2.6, the SMTP reply code is 450. +# +# This feature is available in Postfix 2.1 and later. +# +# DEFER_IF_PERMIT optional text... +# Defer the request if some later restriction would +# result in a an explicit or implicit PERMIT action. +# Reply with "$access_map_defer_code 4.7.1 optional +# text..." when the optional text is specified, oth- +# erwise reply with a generic error response message. +# +# Prior to Postfix 2.6, the SMTP reply code is 450. +# +# This feature is available in Postfix 2.1 and later. +# +# For other reject actions, see "OTHER ACTIONS" below. +# +# OTHER ACTIONS +# restriction... +# Apply the named UCE restriction(s) (permit, reject, +# reject_unauth_destination, and so on). +# +# BCC user@domain +# Send one copy of the message to the specified +# recipient. +# +# If multiple BCC actions are specified within the +# same SMTP MAIL transaction, with Postfix 3.0 only +# the last action will be used. +# +# This feature is available in Postfix 3.0 and later. +# +# DISCARD optional text... +# Claim successful delivery and silently discard the +# message. Log the optional text if specified, oth- +# erwise log a generic message. +# +# Note: this action currently affects all recipients +# of the message. To discard only one recipient +# without discarding the entire message, use the +# transport(5) table to direct mail to the discard(8) +# service. +# +# This feature is available in Postfix 2.0 and later. +# +# DUNNO Pretend that the lookup key was not found. This +# prevents Postfix from trying substrings of the +# lookup key (such as a subdomain name, or a network +# address subnetwork). +# +# This feature is available in Postfix 2.0 and later. +# +# FILTER transport:destination +# After the message is queued, send the entire mes- +# sage through the specified external content filter. +# The transport name specifies the first field of a +# mail delivery agent definition in master.cf; the +# syntax of the next-hop destination is described in +# the manual page of the corresponding delivery +# agent. More information about external content +# filters is in the Postfix FILTER_README file. +# +# Note 1: do not use $number regular expression sub- +# stitutions for transport or destination unless you +# know that the information has a trusted origin. +# +# Note 2: this action overrides the main.cf con- +# tent_filter setting, and affects all recipients of +# the message. In the case that multiple FILTER +# actions fire, only the last one is executed. +# +# Note 3: the purpose of the FILTER command is to +# override message routing. To override the recipi- +# ent's transport but not the next-hop destination, +# specify an empty filter destination (Postfix 2.7 +# and later), or specify a transport:destination that +# delivers through a different Postfix instance +# (Postfix 2.6 and earlier). Other options are using +# the recipient-dependent transport_maps or the sen- +# der-dependent sender_dependent_default_transport- +# _maps features. +# +# This feature is available in Postfix 2.0 and later. +# +# HOLD optional text... +# Place the message on the hold queue, where it will +# sit until someone either deletes it or releases it +# for delivery. Log the optional text if specified, +# otherwise log a generic message. +# +# Mail that is placed on hold can be examined with +# the postcat(1) command, and can be destroyed or +# released with the postsuper(1) command. +# +# Note: use "postsuper -r" to release mail that was +# kept on hold for a significant fraction of $maxi- +# mal_queue_lifetime or $bounce_queue_lifetime, or +# longer. Use "postsuper -H" only for mail that will +# not expire within a few delivery attempts. +# +# Note: this action currently affects all recipients +# of the message. +# +# This feature is available in Postfix 2.0 and later. +# +# PREPEND headername: headervalue +# Prepend the specified message header to the mes- +# sage. When more than one PREPEND action executes, +# the first prepended header appears before the sec- +# ond etc. prepended header. +# +# Note: this action must execute before the message +# content is received; it cannot execute in the con- +# text of smtpd_end_of_data_restrictions. +# +# This feature is available in Postfix 2.1 and later. +# +# REDIRECT user@domain +# After the message is queued, send the message to +# the specified address instead of the intended +# recipient(s). When multiple REDIRECT actions fire, +# only the last one takes effect. +# +# Note: this action overrides the FILTER action, and +# currently overrides all recipients of the message. +# +# This feature is available in Postfix 2.1 and later. +# +# INFO optional text... +# Log an informational record with the optional text, +# together with client information and if available, +# with helo, sender, recipient and protocol informa- +# tion. +# +# This feature is available in Postfix 3.0 and later. +# +# WARN optional text... +# Log a warning with the optional text, together with +# client information and if available, with helo, +# sender, recipient and protocol information. +# +# This feature is available in Postfix 2.1 and later. +# +# ENHANCED STATUS CODES +# Postfix version 2.3 and later support enhanced status +# codes as defined in RFC 3463. When an enhanced status +# code is specified in an access table, it is subject to +# modification. The following transformations are needed +# when the same access table is used for client, helo, +# sender, or recipient access restrictions; they happen +# regardless of whether Postfix replies to a MAIL FROM, RCPT +# TO or other SMTP command. +# +# o When a sender address matches a REJECT action, the +# Postfix SMTP server will transform a recipient DSN +# status (e.g., 4.1.1-4.1.6) into the corresponding +# sender DSN status, and vice versa. +# +# o When non-address information matches a REJECT +# action (such as the HELO command argument or the +# client hostname/address), the Postfix SMTP server +# will transform a sender or recipient DSN status +# into a generic non-address DSN status (e.g., +# 4.0.0). +# +# REGULAR EXPRESSION TABLES +# This section describes how the table lookups change when +# the table is given in the form of regular expressions. For +# a description of regular expression lookup table syntax, +# see regexp_table(5) or pcre_table(5). +# +# Each pattern is a regular expression that is applied to +# the entire string being looked up. Depending on the appli- +# cation, that string is an entire client hostname, an +# entire client IP address, or an entire mail address. Thus, +# no parent domain or parent network search is done, +# user@domain mail addresses are not broken up into their +# user@ and domain constituent parts, nor is user+foo broken +# up into user and foo. +# +# Patterns are applied in the order as specified in the ta- +# ble, until a pattern is found that matches the search +# string. +# +# Actions are the same as with indexed file lookups, with +# the additional feature that parenthesized substrings from +# the pattern can be interpolated as $1, $2 and so on. +# +# TCP-BASED TABLES +# This section describes how the table lookups change when +# lookups are directed to a TCP-based server. For a descrip- +# tion of the TCP client/server lookup protocol, see tcp_ta- +# ble(5). This feature is not available up to and including +# Postfix version 2.4. +# +# Each lookup operation uses the entire query string once. +# Depending on the application, that string is an entire +# client hostname, an entire client IP address, or an entire +# mail address. Thus, no parent domain or parent network +# search is done, user@domain mail addresses are not broken +# up into their user@ and domain constituent parts, nor is +# user+foo broken up into user and foo. +# +# Actions are the same as with indexed file lookups. +# +# EXAMPLE +# The following example uses an indexed file, so that the +# order of table entries does not matter. The example per- +# mits access by the client at address 1.2.3.4 but rejects +# all other clients in 1.2.3.0/24. Instead of hash lookup +# tables, some systems use dbm. Use the command "postconf +# -m" to find out what lookup tables Postfix supports on +# your system. +# +# /etc/postfix/main.cf: +# smtpd_client_restrictions = +# check_client_access hash:/etc/postfix/access +# +# /etc/postfix/access: +# 1.2.3 REJECT +# 1.2.3.4 OK +# +# Execute the command "postmap /etc/postfix/access" after +# editing the file. +# +# BUGS +# The table format does not understand quoting conventions. +# +# SEE ALSO +# postmap(1), Postfix lookup table manager +# smtpd(8), SMTP server +# postconf(5), configuration parameters +# transport(5), transport:nexthop syntax +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# SMTPD_ACCESS_README, built-in SMTP server access control +# DATABASE_README, Postfix lookup table overview +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# ACCESS(5) diff --git a/templates/Fedora/38/etc/postfix/canonical b/templates/Fedora/38/etc/postfix/canonical new file mode 100644 index 0000000..9881f4e --- /dev/null +++ b/templates/Fedora/38/etc/postfix/canonical @@ -0,0 +1,307 @@ +# CANONICAL(5) CANONICAL(5) +# +# NAME +# canonical - Postfix canonical table format +# +# SYNOPSIS +# postmap /etc/postfix/canonical +# +# postmap -q "string" /etc/postfix/canonical +# +# postmap -q - /etc/postfix/canonical $/ +# REJECT IFRAME vulnerability exploit +# +# SEE ALSO +# cleanup(8), canonicalize and enqueue Postfix message +# pcre_table(5), format of PCRE lookup tables +# regexp_table(5), format of POSIX regular expression tables +# postconf(1), Postfix configuration utility +# postmap(1), Postfix lookup table management +# postsuper(1), Postfix janitor +# postcat(1), show Postfix queue file contents +# RFC 2045, base64 and quoted-printable encoding rules +# RFC 2047, message header encoding for non-ASCII text +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# DATABASE_README, Postfix lookup table overview +# CONTENT_INSPECTION_README, Postfix content inspection overview +# BUILTIN_FILTER_README, Postfix built-in content inspection +# BACKSCATTER_README, blocking returned forged mail +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# HEADER_CHECKS(5) diff --git a/templates/Fedora/38/etc/postfix/main.cf b/templates/Fedora/38/etc/postfix/main.cf new file mode 100644 index 0000000..e26183d --- /dev/null +++ b/templates/Fedora/38/etc/postfix/main.cf @@ -0,0 +1,766 @@ +# Global Postfix configuration file. This file lists only a subset +# of all parameters. For the syntax, and for a complete parameter +# list, see the postconf(5) manual page (command: "man 5 postconf"). +# +# For common configuration examples, see BASIC_CONFIGURATION_README +# and STANDARD_CONFIGURATION_README. To find these documents, use +# the command "postconf html_directory readme_directory", or go to +# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. +# +# For best results, change no more than 2-3 parameters at a time, +# and test if Postfix still works after every change. + +# COMPATIBILITY +# +# The compatibility_level determines what default settings Postfix +# will use for main.cf and master.cf settings. These defaults will +# change over time. +# +# To avoid breaking things, Postfix will use backwards-compatible +# default settings and log where it uses those old backwards-compatible +# default settings, until the system administrator has determined +# if any backwards-compatible default settings need to be made +# permanent in main.cf or master.cf. +# +# When this review is complete, update the compatibility_level setting +# below as recommended in the RELEASE_NOTES file. +# +# The level below is what should be used with new (not upgrade) installs. +# +compatibility_level = 3.6 + +# SOFT BOUNCE +# +# The soft_bounce parameter provides a limited safety net for +# testing. When soft_bounce is enabled, mail will remain queued that +# would otherwise bounce. This parameter disables locally-generated +# bounces, and prevents the SMTP server from rejecting mail permanently +# (by changing 5xx replies into 4xx replies). However, soft_bounce +# is no cure for address rewriting mistakes or mail routing mistakes. +# +#soft_bounce = no + +# LOCAL PATHNAME INFORMATION +# +# The queue_directory specifies the location of the Postfix queue. +# This is also the root directory of Postfix daemons that run chrooted. +# See the files in examples/chroot-setup for setting up Postfix chroot +# environments on different UNIX systems. +# +queue_directory = /var/spool/postfix + +# The command_directory parameter specifies the location of all +# postXXX commands. +# +command_directory = /usr/sbin + +# The daemon_directory parameter specifies the location of all Postfix +# daemon programs (i.e. programs listed in the master.cf file). This +# directory must be owned by root. +# +daemon_directory = /usr/libexec/postfix + +# The data_directory parameter specifies the location of Postfix-writable +# data files (caches, random numbers). This directory must be owned +# by the mail_owner account (see below). +# +data_directory = /var/lib/postfix + +# QUEUE AND PROCESS OWNERSHIP +# +# The mail_owner parameter specifies the owner of the Postfix queue +# and of most Postfix daemon processes. Specify the name of a user +# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS +# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In +# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED +# USER. +# +mail_owner = postfix + +# The default_privs parameter specifies the default rights used by +# the local delivery agent for delivery to external file or command. +# These rights are used in the absence of a recipient user context. +# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. +# +#default_privs = nobody + +# INTERNET HOST AND DOMAIN NAMES +# +# The myhostname parameter specifies the internet hostname of this +# mail system. The default is to use the fully-qualified domain name +# from gethostname(). $myhostname is used as a default value for many +# other configuration parameters. +# +#myhostname = host.domain.tld +#myhostname = virtual.domain.tld + +# The mydomain parameter specifies the local internet domain name. +# The default is to use $myhostname minus the first component. +# $mydomain is used as a default value for many other configuration +# parameters. +# +#mydomain = domain.tld + +# SENDING MAIL +# +# The myorigin parameter specifies the domain that locally-posted +# mail appears to come from. The default is to append $myhostname, +# which is fine for small sites. If you run a domain with multiple +# machines, you should (1) change this to $mydomain and (2) set up +# a domain-wide alias database that aliases each user to +# user@that.users.mailhost. +# +# For the sake of consistency between sender and recipient addresses, +# myorigin also specifies the default domain name that is appended +# to recipient addresses that have no @domain part. +# +#myorigin = $myhostname +#myorigin = $mydomain + +# RECEIVING MAIL + +# The inet_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on. By default, +# the software claims all active interfaces on the machine. The +# parameter also controls delivery of mail to user@[ip.address]. +# +# See also the proxy_interfaces parameter, for network addresses that +# are forwarded to us via a proxy or network address translator. +# +# Note: you need to stop/start Postfix when this parameter changes. +# +inet_interfaces = all +#inet_interfaces = $myhostname +#inet_interfaces = $myhostname, localhost +#inet_interfaces = localhost + +# Enable IPv4, and IPv6 if supported +inet_protocols = all + +# The proxy_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on by way of a +# proxy or network address translation unit. This setting extends +# the address list specified with the inet_interfaces parameter. +# +# You must specify your proxy/NAT addresses when your system is a +# backup MX host for other domains, otherwise mail delivery loops +# will happen when the primary MX host is down. +# +#proxy_interfaces = +#proxy_interfaces = 1.2.3.4 + +# The mydestination parameter specifies the list of domains that this +# machine considers itself the final destination for. +# +# These domains are routed to the delivery agent specified with the +# local_transport parameter setting. By default, that is the UNIX +# compatible delivery agent that lookups all recipients in /etc/passwd +# and /etc/aliases or their equivalent. +# +# The default is $myhostname + localhost.$mydomain + localhost. On +# a mail domain gateway, you should also include $mydomain. +# +# Do not specify the names of virtual domains - those domains are +# specified elsewhere (see VIRTUAL_README). +# +# Do not specify the names of domains that this machine is backup MX +# host for. Specify those names via the relay_domains settings for +# the SMTP server, or use permit_mx_backup if you are lazy (see +# STANDARD_CONFIGURATION_README). +# +# The local machine is always the final destination for mail addressed +# to user@[the.net.work.address] of an interface that the mail system +# receives mail on (see the inet_interfaces parameter). +# +# Specify a list of host or domain names, /file/name or type:table +# patterns, separated by commas and/or whitespace. A /file/name +# pattern is replaced by its contents; a type:table is matched when +# a name matches a lookup key (the right-hand side is ignored). +# Continue long lines by starting the next line with whitespace. +# +# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". +# +mydestination = $myhostname, localhost.$mydomain, localhost +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, +# mail.$mydomain, www.$mydomain, ftp.$mydomain + +# REJECTING MAIL FOR UNKNOWN LOCAL USERS +# +# The local_recipient_maps parameter specifies optional lookup tables +# with all names or addresses of users that are local with respect +# to $mydestination, $inet_interfaces or $proxy_interfaces. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown local users. This parameter is defined by default. +# +# To turn off local recipient checking in the SMTP server, specify +# local_recipient_maps = (i.e. empty). +# +# The default setting assumes that you use the default Postfix local +# delivery agent for local delivery. You need to update the +# local_recipient_maps setting if: +# +# - You define $mydestination domain recipients in files other than +# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. +# For example, you define $mydestination domain recipients in +# the $virtual_mailbox_maps files. +# +# - You redefine the local delivery agent in master.cf. +# +# - You redefine the "local_transport" setting in main.cf. +# +# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" +# feature of the Postfix local delivery agent (see local(8)). +# +# Details are described in the LOCAL_RECIPIENT_README file. +# +# Beware: if the Postfix SMTP server runs chrooted, you probably have +# to access the passwd file via the proxymap service, in order to +# overcome chroot restrictions. The alternative, having a copy of +# the system passwd file in the chroot jail is just not practical. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify a bare username, an @domain.tld +# wild-card, or specify a user@domain.tld address. +# +#local_recipient_maps = unix:passwd.byname $alias_maps +#local_recipient_maps = proxy:unix:passwd.byname $alias_maps +#local_recipient_maps = + +# The unknown_local_recipient_reject_code specifies the SMTP server +# response code when a recipient domain matches $mydestination or +# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty +# and the recipient address or address local-part is not found. +# +# The default setting is 550 (reject mail) but it is safer to start +# with 450 (try again later) until you are certain that your +# local_recipient_maps settings are OK. +# +unknown_local_recipient_reject_code = 550 + +# TRUST AND RELAY CONTROL + +# The mynetworks parameter specifies the list of "trusted" SMTP +# clients that have more privileges than "strangers". +# +# In particular, "trusted" SMTP clients are allowed to relay mail +# through Postfix. See the smtpd_recipient_restrictions parameter +# in postconf(5). +# +# You can specify the list of "trusted" network addresses by hand +# or you can let Postfix do it for you (which is the default). +# +# By default (mynetworks_style = subnet), Postfix "trusts" SMTP +# clients in the same IP subnetworks as the local machine. +# On Linux, this works correctly only with interfaces specified +# with the "ifconfig" command. +# +# Specify "mynetworks_style = class" when Postfix should "trust" SMTP +# clients in the same IP class A/B/C networks as the local machine. +# Don't do this with a dialup site - it would cause Postfix to "trust" +# your entire provider's network. Instead, specify an explicit +# mynetworks list by hand, as described below. +# +# Specify "mynetworks_style = host" when Postfix should "trust" +# only the local machine. +# +#mynetworks_style = class +#mynetworks_style = subnet +#mynetworks_style = host + +# Alternatively, you can specify the mynetworks list by hand, in +# which case Postfix ignores the mynetworks_style setting. +# +# Specify an explicit list of network/netmask patterns, where the +# mask specifies the number of bits in the network part of a host +# address. +# +# You can also specify the absolute pathname of a pattern file instead +# of listing the patterns here. Specify type:table for table-based lookups +# (the value on the table right-hand side is not used). +# +#mynetworks = 168.100.3.0/28, 127.0.0.0/8 +#mynetworks = $config_directory/mynetworks +#mynetworks = hash:/etc/postfix/network_table + +# The relay_domains parameter restricts what destinations this system will +# relay mail to. See the smtpd_recipient_restrictions description in +# postconf(5) for detailed information. +# +# By default, Postfix relays mail +# - from "trusted" clients (IP address matches $mynetworks) to any destination, +# - from "untrusted" clients to destinations that match $relay_domains or +# subdomains thereof, except addresses with sender-specified routing. +# The default relay_domains value is $mydestination. +# +# In addition to the above, the Postfix SMTP server by default accepts mail +# that Postfix is final destination for: +# - destinations that match $inet_interfaces or $proxy_interfaces, +# - destinations that match $mydestination +# - destinations that match $virtual_alias_domains, +# - destinations that match $virtual_mailbox_domains. +# These destinations do not need to be listed in $relay_domains. +# +# Specify a list of hosts or domains, /file/name patterns or type:name +# lookup tables, separated by commas and/or whitespace. Continue +# long lines by starting the next line with whitespace. A file name +# is replaced by its contents; a type:name table is matched when a +# (parent) domain appears as lookup key. +# +# NOTE: Postfix will not automatically forward mail for domains that +# list this system as their primary or backup MX host. See the +# permit_mx_backup restriction description in postconf(5). +# +#relay_domains = $mydestination + +# INTERNET OR INTRANET + +# The relayhost parameter specifies the default host to send mail to +# when no entry is matched in the optional transport(5) table. When +# no relayhost is given, mail is routed directly to the destination. +# +# On an intranet, specify the organizational domain name. If your +# internal DNS uses no MX records, specify the name of the intranet +# gateway host instead. +# +# In the case of SMTP, specify a domain, host, host:port, [host]:port, +# [address] or [address]:port; the form [host] turns off MX lookups. +# +# If you're connected via UUCP, see also the default_transport parameter. +# +#relayhost = $mydomain +#relayhost = [gateway.my.domain] +#relayhost = [mailserver.isp.tld] +#relayhost = uucphost +#relayhost = [an.ip.add.ress] + +# REJECTING UNKNOWN RELAY USERS +# +# The relay_recipient_maps parameter specifies optional lookup tables +# with all addresses in the domains that match $relay_domains. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown relay users. This feature is off by default. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify an @domain.tld wild-card, or specify +# a user@domain.tld address. +# +#relay_recipient_maps = hash:/etc/postfix/relay_recipients + +# INPUT RATE CONTROL +# +# The in_flow_delay configuration parameter implements mail input +# flow control. This feature is turned on by default, although it +# still needs further development (it's disabled on SCO UNIX due +# to an SCO bug). +# +# A Postfix process will pause for $in_flow_delay seconds before +# accepting a new message, when the message arrival rate exceeds the +# message delivery rate. With the default 100 SMTP server process +# limit, this limits the mail inflow to 100 messages a second more +# than the number of messages delivered per second. +# +# Specify 0 to disable the feature. Valid delays are 0..10. +# +#in_flow_delay = 1s + +# ADDRESS REWRITING +# +# The ADDRESS_REWRITING_README document gives information about +# address masquerading or other forms of address rewriting including +# username->Firstname.Lastname mapping. + +# ADDRESS REDIRECTION (VIRTUAL DOMAIN) +# +# The VIRTUAL_README document gives information about the many forms +# of domain hosting that Postfix supports. + +# "USER HAS MOVED" BOUNCE MESSAGES +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# TRANSPORT MAP +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# ALIAS DATABASE +# +# The alias_maps parameter specifies the list of alias databases used +# by the local delivery agent. The default list is system dependent. +# +# On systems with NIS, the default is to search the local alias +# database, then the NIS alias database. See aliases(5) for syntax +# details. +# +# If you change the alias database, run "postalias /etc/aliases" (or +# wherever your system stores the mail alias file), or simply run +# "newaliases" to build the necessary DBM or DB file. +# +# It will take a minute or so before changes become visible. Use +# "postfix reload" to eliminate the delay. +# +#alias_maps = dbm:/etc/aliases +alias_maps = hash:/etc/aliases +#alias_maps = hash:/etc/aliases, nis:mail.aliases +#alias_maps = netinfo:/aliases + +# The alias_database parameter specifies the alias database(s) that +# are built with "newaliases" or "sendmail -bi". This is a separate +# configuration parameter, because alias_maps (see above) may specify +# tables that are not necessarily all under control by Postfix. +# +#alias_database = dbm:/etc/aliases +#alias_database = dbm:/etc/mail/aliases +alias_database = hash:/etc/aliases +#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases + +# ADDRESS EXTENSIONS (e.g., user+foo) +# +# The recipient_delimiter parameter specifies the separator between +# user names and address extensions (user+foo). See canonical(5), +# local(8), relocated(5) and virtual(5) for the effects this has on +# aliases, canonical, virtual, relocated and .forward file lookups. +# Basically, the software tries user+foo and .forward+foo before +# trying user and .forward. +# +#recipient_delimiter = + + +# DELIVERY TO MAILBOX +# +# The home_mailbox parameter specifies the optional pathname of a +# mailbox file relative to a user's home directory. The default +# mailbox file is /var/spool/mail/user or /var/mail/user. Specify +# "Maildir/" for qmail-style delivery (the / is required). +# +#home_mailbox = Mailbox +#home_mailbox = Maildir/ + +# The mail_spool_directory parameter specifies the directory where +# UNIX-style mailboxes are kept. The default setting depends on the +# system type. +# +#mail_spool_directory = /var/mail +#mail_spool_directory = /var/spool/mail + +# The mailbox_command parameter specifies the optional external +# command to use instead of mailbox delivery. The command is run as +# the recipient with proper HOME, SHELL and LOGNAME environment settings. +# Exception: delivery for root is done as $default_user. +# +# Other environment variables of interest: USER (recipient username), +# EXTENSION (address extension), DOMAIN (domain part of address), +# and LOCAL (the address localpart). +# +# Unlike other Postfix configuration parameters, the mailbox_command +# parameter is not subjected to $parameter substitutions. This is to +# make it easier to specify shell syntax (see example below). +# +# Avoid shell meta characters because they will force Postfix to run +# an expensive shell process. Procmail alone is expensive enough. +# +# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN +# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. +# +#mailbox_command = /some/where/procmail +#mailbox_command = /some/where/procmail -a "$EXTENSION" + +# The mailbox_transport specifies the optional transport in master.cf +# to use after processing aliases and .forward files. This parameter +# has precedence over the mailbox_command, fallback_transport and +# luser_relay parameters. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" +# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. +#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp +mailbox_transport = lmtp:inet:localhost:24 +virtual_transport = lmtp:inet:localhost:24 + +# If using the cyrus-imapd IMAP server deliver local mail to the IMAP +# server using LMTP (Local Mail Transport Protocol), this is prefered +# over the older cyrus deliver program by setting the +# mailbox_transport as below: +# +# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp +# +# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via +# these settings. +# +# local_destination_recipient_limit = 300 +# local_destination_concurrency_limit = 5 +# +# Of course you should adjust these settings as appropriate for the +# capacity of the hardware you are using. The recipient limit setting +# can be used to take advantage of the single instance message store +# capability of Cyrus. The concurrency limit can be used to control +# how many simultaneous LMTP sessions will be permitted to the Cyrus +# message store. +# +# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and +# subsequent line in master.cf. +#mailbox_transport = cyrus + +# The fallback_transport specifies the optional transport in master.cf +# to use for recipients that are not found in the UNIX passwd database. +# This parameter has precedence over the luser_relay parameter. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp +#fallback_transport = + +# The luser_relay parameter specifies an optional destination address +# for unknown recipients. By default, mail for unknown@$mydestination, +# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned +# as undeliverable. +# +# The following expansions are done on luser_relay: $user (recipient +# username), $shell (recipient shell), $home (recipient home directory), +# $recipient (full recipient address), $extension (recipient address +# extension), $domain (recipient domain), $local (entire recipient +# localpart), $recipient_delimiter. Specify ${name?value} or +# ${name:value} to expand value only when $name does (does not) exist. +# +# luser_relay works only for the default Postfix local delivery agent. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must specify "local_recipient_maps =" (i.e. empty) in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#luser_relay = $user@other.host +#luser_relay = $local@other.host +#luser_relay = admin+$local + +# JUNK MAIL CONTROLS +# +# The controls listed here are only a very small subset. The file +# SMTPD_ACCESS_README provides an overview. + +# The header_checks parameter specifies an optional table with patterns +# that each logical message header is matched against, including +# headers that span multiple physical lines. +# +# By default, these patterns also apply to MIME headers and to the +# headers of attached messages. With older Postfix versions, MIME and +# attached message headers were treated as body text. +# +# For details, see "man header_checks". +# +#header_checks = regexp:/etc/postfix/header_checks + +# FAST ETRN SERVICE +# +# Postfix maintains per-destination logfiles with information about +# deferred mail, so that mail can be flushed quickly with the SMTP +# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". +# See the ETRN_README document for a detailed description. +# +# The fast_flush_domains parameter controls what destinations are +# eligible for this service. By default, they are all domains that +# this server is willing to relay mail to. +# +#fast_flush_domains = $relay_domains + +# SHOW SOFTWARE VERSION OR NOT +# +# The smtpd_banner parameter specifies the text that follows the 220 +# code in the SMTP server's greeting banner. Some people like to see +# the mail version advertised. By default, Postfix shows no version. +# +# You MUST specify $myhostname at the start of the text. That is an +# RFC requirement. Postfix itself does not care. +# +#smtpd_banner = $myhostname ESMTP $mail_name +#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) + +# PARALLEL DELIVERY TO THE SAME DESTINATION +# +# How many parallel deliveries to the same user or domain? With local +# delivery, it does not make sense to do massively parallel delivery +# to the same user, because mailbox updates must happen sequentially, +# and expensive pipelines in .forward files can cause disasters when +# too many are run at the same time. With SMTP deliveries, 10 +# simultaneous connections to the same domain could be sufficient to +# raise eyebrows. +# +# Each message delivery transport has its XXX_destination_concurrency_limit +# parameter. The default is $default_destination_concurrency_limit for +# most delivery transports. For the local delivery agent the default is 2. + +#local_destination_concurrency_limit = 2 +#default_destination_concurrency_limit = 20 + +# DEBUGGING CONTROL +# +# The debug_peer_level parameter specifies the increment in verbose +# logging level when an SMTP client or server host name or address +# matches a pattern in the debug_peer_list parameter. +# +debug_peer_level = 2 + +# The debug_peer_list parameter specifies an optional list of domain +# or network patterns, /file/name patterns or type:name tables. When +# an SMTP client or server host name or address matches a pattern, +# increase the verbose logging level by the amount specified in the +# debug_peer_level parameter. +# +#debug_peer_list = 127.0.0.1 +#debug_peer_list = some.domain + +# The debugger_command specifies the external command that is executed +# when a Postfix daemon program is run with the -D option. +# +# Use "command .. & sleep 5" so that the debugger can attach before +# the process marches on. If you use an X-based debugger, be sure to +# set up your XAUTHORITY environment variable before starting Postfix. +# +debugger_command = + PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin + ddd $daemon_directory/$process_name $process_id & sleep 5 + +# If you can't use X, use this to capture the call stack when a +# daemon crashes. The result is in a file in the configuration +# directory, and is named after the process name and the process ID. +# +# debugger_command = +# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; +# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 +# >$config_directory/$process_name.$process_id.log & sleep 5 +# +# Another possibility is to run gdb under a detached screen session. +# To attach to the screen session, su root and run "screen -r +# " where uniquely matches one of the detached +# sessions (from "screen -list"). +# +# debugger_command = +# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen +# -dmS $process_name gdb $daemon_directory/$process_name +# $process_id & sleep 1 + +# INSTALL-TIME CONFIGURATION INFORMATION +# +# The following parameters are used when installing a new Postfix version. +# +# sendmail_path: The full pathname of the Postfix sendmail command. +# This is the Sendmail-compatible mail posting interface. +# +sendmail_path = /usr/sbin/sendmail.postfix + +# newaliases_path: The full pathname of the Postfix newaliases command. +# This is the Sendmail-compatible command to build alias databases. +# +newaliases_path = /usr/bin/newaliases.postfix + +# mailq_path: The full pathname of the Postfix mailq command. This +# is the Sendmail-compatible mail queue listing command. +# +mailq_path = /usr/bin/mailq.postfix + +# setgid_group: The group for mail submission and queue management +# commands. This must be a group name with a numerical group ID that +# is not shared with other accounts, not even with the Postfix account. +# +setgid_group = postdrop + +# html_directory: The location of the Postfix HTML documentation. +# +html_directory = no + +# manpage_directory: The location of the Postfix on-line manual pages. +# +manpage_directory = /usr/share/man + +# sample_directory: The location of the Postfix sample configuration files. +# This parameter is obsolete as of Postfix 2.1. +# +sample_directory = /usr/share/doc/postfix/samples + +# readme_directory: The location of the Postfix README files. +# +readme_directory = /usr/share/doc/postfix/README_FILES + +# TLS CONFIGURATION +# +# Basic Postfix TLS configuration by default with self-signed certificate +# for inbound SMTP and also opportunistic TLS for outbound SMTP. + +# The full pathname of a file with the Postfix SMTP server RSA certificate +# in PEM format. Intermediate certificates should be included in general, +# the server certificate first, then the issuing CA(s) (bottom-up order). +# +# smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem +smtpd_tls_cert_file = /etc/postfix/certificates/pubcert.pem + +# The full pathname of a file with the Postfix SMTP server RSA private key +# in PEM format. The private key must be accessible without a pass-phrase, +# i.e. it must not be encrypted. +# +# smtpd_tls_key_file = /etc/pki/tls/private/postfix.key +smtpd_tls_key_file = /etc/postfix/certificates/privkey.pem + +# Announce STARTTLS support to remote SMTP clients, but do not require that +# clients use TLS encryption (opportunistic TLS inbound). +# +smtpd_tls_security_level = may + +# Directory with PEM format Certification Authority certificates that the +# Postfix SMTP client uses to verify a remote SMTP server certificate. +# +smtp_tls_CApath = /etc/pki/tls/certs + +# The full pathname of a file containing CA certificates of root CAs +# trusted to sign either remote SMTP server certificates or intermediate CA +# certificates. +# +smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt + +# Use TLS if this is supported by the remote SMTP server, otherwise use +# plaintext (opportunistic TLS outbound). +# +smtp_tls_security_level = may +meta_directory = /etc/postfix +shlib_directory = /usr/lib64/postfix + +{% if ensure_postfix.milter_list is defined and ensure_postfix.milter_list is iterable %} +# The Milter List +{% for milter in ensure_postfix.milter_list %} +# -- {{ milter.description }} -- {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} +{% endfor %} +smtpd_milters = {% for milter in ensure_postfix.milter_list %} {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} {% endfor %} +{% endif %} + +{% if postfix_domains is defined and postfix_domains is iterable %} +virtual_mailbox_domains = {% for domain in postfix_domains %} {{ domain }} {% endfor %} +{% endif %} + +2bounce_notice_recipient = {{ postmaster_email }} +bounce_notice_recipient = {{ postmaster_email }} +delay_notice_recipient = {{ postmaster_email }} +error_notice_recipient = {{ postmaster_email }} +smtpd_helo_required = yes +disable_vrfy_command = yes +message_size_limit = {{ postfix_message_size_limit }} +smtpd_helo_restrictions = reject_unknown_helo_hostname +smtpd_client_restrictions = reject_unknown_reverse_client_hostname reject_unauth_pipelining +smtpd_discard_ehlo_keywords = silent-discard, dsn + diff --git a/templates/Fedora/38/etc/postfix/main.cf.proto b/templates/Fedora/38/etc/postfix/main.cf.proto new file mode 100644 index 0000000..9bef4f2 --- /dev/null +++ b/templates/Fedora/38/etc/postfix/main.cf.proto @@ -0,0 +1,736 @@ +# Global Postfix configuration file. This file lists only a subset +# of all parameters. For the syntax, and for a complete parameter +# list, see the postconf(5) manual page (command: "man 5 postconf"). +# +# For common configuration examples, see BASIC_CONFIGURATION_README +# and STANDARD_CONFIGURATION_README. To find these documents, use +# the command "postconf html_directory readme_directory", or go to +# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. +# +# For best results, change no more than 2-3 parameters at a time, +# and test if Postfix still works after every change. + +# COMPATIBILITY +# +# The compatibility_level determines what default settings Postfix +# will use for main.cf and master.cf settings. These defaults will +# change over time. +# +# To avoid breaking things, Postfix will use backwards-compatible +# default settings and log where it uses those old backwards-compatible +# default settings, until the system administrator has determined +# if any backwards-compatible default settings need to be made +# permanent in main.cf or master.cf. +# +# When this review is complete, update the compatibility_level setting +# below as recommended in the RELEASE_NOTES file. +# +# The level below is what should be used with new (not upgrade) installs. +# +compatibility_level = 3.6 + +# SOFT BOUNCE +# +# The soft_bounce parameter provides a limited safety net for +# testing. When soft_bounce is enabled, mail will remain queued that +# would otherwise bounce. This parameter disables locally-generated +# bounces, and prevents the SMTP server from rejecting mail permanently +# (by changing 5xx replies into 4xx replies). However, soft_bounce +# is no cure for address rewriting mistakes or mail routing mistakes. +# +#soft_bounce = no + +# LOCAL PATHNAME INFORMATION +# +# The queue_directory specifies the location of the Postfix queue. +# This is also the root directory of Postfix daemons that run chrooted. +# See the files in examples/chroot-setup for setting up Postfix chroot +# environments on different UNIX systems. +# +queue_directory = /var/spool/postfix + +# The command_directory parameter specifies the location of all +# postXXX commands. +# +command_directory = /usr/sbin + +# The daemon_directory parameter specifies the location of all Postfix +# daemon programs (i.e. programs listed in the master.cf file). This +# directory must be owned by root. +# +daemon_directory = /usr/libexec/postfix + +# The data_directory parameter specifies the location of Postfix-writable +# data files (caches, random numbers). This directory must be owned +# by the mail_owner account (see below). +# +data_directory = /var/lib/postfix + +# QUEUE AND PROCESS OWNERSHIP +# +# The mail_owner parameter specifies the owner of the Postfix queue +# and of most Postfix daemon processes. Specify the name of a user +# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS +# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In +# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED +# USER. +# +mail_owner = postfix + +# The default_privs parameter specifies the default rights used by +# the local delivery agent for delivery to external file or command. +# These rights are used in the absence of a recipient user context. +# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. +# +#default_privs = nobody + +# INTERNET HOST AND DOMAIN NAMES +# +# The myhostname parameter specifies the internet hostname of this +# mail system. The default is to use the fully-qualified domain name +# from gethostname(). $myhostname is used as a default value for many +# other configuration parameters. +# +#myhostname = host.domain.tld +#myhostname = virtual.domain.tld + +# The mydomain parameter specifies the local internet domain name. +# The default is to use $myhostname minus the first component. +# $mydomain is used as a default value for many other configuration +# parameters. +# +#mydomain = domain.tld + +# SENDING MAIL +# +# The myorigin parameter specifies the domain that locally-posted +# mail appears to come from. The default is to append $myhostname, +# which is fine for small sites. If you run a domain with multiple +# machines, you should (1) change this to $mydomain and (2) set up +# a domain-wide alias database that aliases each user to +# user@that.users.mailhost. +# +# For the sake of consistency between sender and recipient addresses, +# myorigin also specifies the default domain name that is appended +# to recipient addresses that have no @domain part. +# +#myorigin = $myhostname +#myorigin = $mydomain + +# RECEIVING MAIL + +# The inet_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on. By default, +# the software claims all active interfaces on the machine. The +# parameter also controls delivery of mail to user@[ip.address]. +# +# See also the proxy_interfaces parameter, for network addresses that +# are forwarded to us via a proxy or network address translator. +# +# Note: you need to stop/start Postfix when this parameter changes. +# +#inet_interfaces = all +#inet_interfaces = $myhostname +#inet_interfaces = $myhostname, localhost +inet_interfaces = localhost + +# Enable IPv4, and IPv6 if supported +inet_protocols = all + +# The proxy_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on by way of a +# proxy or network address translation unit. This setting extends +# the address list specified with the inet_interfaces parameter. +# +# You must specify your proxy/NAT addresses when your system is a +# backup MX host for other domains, otherwise mail delivery loops +# will happen when the primary MX host is down. +# +#proxy_interfaces = +#proxy_interfaces = 1.2.3.4 + +# The mydestination parameter specifies the list of domains that this +# machine considers itself the final destination for. +# +# These domains are routed to the delivery agent specified with the +# local_transport parameter setting. By default, that is the UNIX +# compatible delivery agent that lookups all recipients in /etc/passwd +# and /etc/aliases or their equivalent. +# +# The default is $myhostname + localhost.$mydomain + localhost. On +# a mail domain gateway, you should also include $mydomain. +# +# Do not specify the names of virtual domains - those domains are +# specified elsewhere (see VIRTUAL_README). +# +# Do not specify the names of domains that this machine is backup MX +# host for. Specify those names via the relay_domains settings for +# the SMTP server, or use permit_mx_backup if you are lazy (see +# STANDARD_CONFIGURATION_README). +# +# The local machine is always the final destination for mail addressed +# to user@[the.net.work.address] of an interface that the mail system +# receives mail on (see the inet_interfaces parameter). +# +# Specify a list of host or domain names, /file/name or type:table +# patterns, separated by commas and/or whitespace. A /file/name +# pattern is replaced by its contents; a type:table is matched when +# a name matches a lookup key (the right-hand side is ignored). +# Continue long lines by starting the next line with whitespace. +# +# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". +# +mydestination = $myhostname, localhost.$mydomain, localhost +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, +# mail.$mydomain, www.$mydomain, ftp.$mydomain + +# REJECTING MAIL FOR UNKNOWN LOCAL USERS +# +# The local_recipient_maps parameter specifies optional lookup tables +# with all names or addresses of users that are local with respect +# to $mydestination, $inet_interfaces or $proxy_interfaces. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown local users. This parameter is defined by default. +# +# To turn off local recipient checking in the SMTP server, specify +# local_recipient_maps = (i.e. empty). +# +# The default setting assumes that you use the default Postfix local +# delivery agent for local delivery. You need to update the +# local_recipient_maps setting if: +# +# - You define $mydestination domain recipients in files other than +# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. +# For example, you define $mydestination domain recipients in +# the $virtual_mailbox_maps files. +# +# - You redefine the local delivery agent in master.cf. +# +# - You redefine the "local_transport" setting in main.cf. +# +# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" +# feature of the Postfix local delivery agent (see local(8)). +# +# Details are described in the LOCAL_RECIPIENT_README file. +# +# Beware: if the Postfix SMTP server runs chrooted, you probably have +# to access the passwd file via the proxymap service, in order to +# overcome chroot restrictions. The alternative, having a copy of +# the system passwd file in the chroot jail is just not practical. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify a bare username, an @domain.tld +# wild-card, or specify a user@domain.tld address. +# +#local_recipient_maps = unix:passwd.byname $alias_maps +#local_recipient_maps = proxy:unix:passwd.byname $alias_maps +#local_recipient_maps = + +# The unknown_local_recipient_reject_code specifies the SMTP server +# response code when a recipient domain matches $mydestination or +# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty +# and the recipient address or address local-part is not found. +# +# The default setting is 550 (reject mail) but it is safer to start +# with 450 (try again later) until you are certain that your +# local_recipient_maps settings are OK. +# +unknown_local_recipient_reject_code = 550 + +# TRUST AND RELAY CONTROL + +# The mynetworks parameter specifies the list of "trusted" SMTP +# clients that have more privileges than "strangers". +# +# In particular, "trusted" SMTP clients are allowed to relay mail +# through Postfix. See the smtpd_recipient_restrictions parameter +# in postconf(5). +# +# You can specify the list of "trusted" network addresses by hand +# or you can let Postfix do it for you (which is the default). +# +# By default (mynetworks_style = subnet), Postfix "trusts" SMTP +# clients in the same IP subnetworks as the local machine. +# On Linux, this works correctly only with interfaces specified +# with the "ifconfig" command. +# +# Specify "mynetworks_style = class" when Postfix should "trust" SMTP +# clients in the same IP class A/B/C networks as the local machine. +# Don't do this with a dialup site - it would cause Postfix to "trust" +# your entire provider's network. Instead, specify an explicit +# mynetworks list by hand, as described below. +# +# Specify "mynetworks_style = host" when Postfix should "trust" +# only the local machine. +# +#mynetworks_style = class +#mynetworks_style = subnet +#mynetworks_style = host + +# Alternatively, you can specify the mynetworks list by hand, in +# which case Postfix ignores the mynetworks_style setting. +# +# Specify an explicit list of network/netmask patterns, where the +# mask specifies the number of bits in the network part of a host +# address. +# +# You can also specify the absolute pathname of a pattern file instead +# of listing the patterns here. Specify type:table for table-based lookups +# (the value on the table right-hand side is not used). +# +#mynetworks = 168.100.3.0/28, 127.0.0.0/8 +#mynetworks = $config_directory/mynetworks +#mynetworks = hash:/etc/postfix/network_table + +# The relay_domains parameter restricts what destinations this system will +# relay mail to. See the smtpd_recipient_restrictions description in +# postconf(5) for detailed information. +# +# By default, Postfix relays mail +# - from "trusted" clients (IP address matches $mynetworks) to any destination, +# - from "untrusted" clients to destinations that match $relay_domains or +# subdomains thereof, except addresses with sender-specified routing. +# The default relay_domains value is $mydestination. +# +# In addition to the above, the Postfix SMTP server by default accepts mail +# that Postfix is final destination for: +# - destinations that match $inet_interfaces or $proxy_interfaces, +# - destinations that match $mydestination +# - destinations that match $virtual_alias_domains, +# - destinations that match $virtual_mailbox_domains. +# These destinations do not need to be listed in $relay_domains. +# +# Specify a list of hosts or domains, /file/name patterns or type:name +# lookup tables, separated by commas and/or whitespace. Continue +# long lines by starting the next line with whitespace. A file name +# is replaced by its contents; a type:name table is matched when a +# (parent) domain appears as lookup key. +# +# NOTE: Postfix will not automatically forward mail for domains that +# list this system as their primary or backup MX host. See the +# permit_mx_backup restriction description in postconf(5). +# +#relay_domains = $mydestination + +# INTERNET OR INTRANET + +# The relayhost parameter specifies the default host to send mail to +# when no entry is matched in the optional transport(5) table. When +# no relayhost is given, mail is routed directly to the destination. +# +# On an intranet, specify the organizational domain name. If your +# internal DNS uses no MX records, specify the name of the intranet +# gateway host instead. +# +# In the case of SMTP, specify a domain, host, host:port, [host]:port, +# [address] or [address]:port; the form [host] turns off MX lookups. +# +# If you're connected via UUCP, see also the default_transport parameter. +# +#relayhost = $mydomain +#relayhost = [gateway.my.domain] +#relayhost = [mailserver.isp.tld] +#relayhost = uucphost +#relayhost = [an.ip.add.ress] + +# REJECTING UNKNOWN RELAY USERS +# +# The relay_recipient_maps parameter specifies optional lookup tables +# with all addresses in the domains that match $relay_domains. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown relay users. This feature is off by default. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify an @domain.tld wild-card, or specify +# a user@domain.tld address. +# +#relay_recipient_maps = hash:/etc/postfix/relay_recipients + +# INPUT RATE CONTROL +# +# The in_flow_delay configuration parameter implements mail input +# flow control. This feature is turned on by default, although it +# still needs further development (it's disabled on SCO UNIX due +# to an SCO bug). +# +# A Postfix process will pause for $in_flow_delay seconds before +# accepting a new message, when the message arrival rate exceeds the +# message delivery rate. With the default 100 SMTP server process +# limit, this limits the mail inflow to 100 messages a second more +# than the number of messages delivered per second. +# +# Specify 0 to disable the feature. Valid delays are 0..10. +# +#in_flow_delay = 1s + +# ADDRESS REWRITING +# +# The ADDRESS_REWRITING_README document gives information about +# address masquerading or other forms of address rewriting including +# username->Firstname.Lastname mapping. + +# ADDRESS REDIRECTION (VIRTUAL DOMAIN) +# +# The VIRTUAL_README document gives information about the many forms +# of domain hosting that Postfix supports. + +# "USER HAS MOVED" BOUNCE MESSAGES +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# TRANSPORT MAP +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# ALIAS DATABASE +# +# The alias_maps parameter specifies the list of alias databases used +# by the local delivery agent. The default list is system dependent. +# +# On systems with NIS, the default is to search the local alias +# database, then the NIS alias database. See aliases(5) for syntax +# details. +# +# If you change the alias database, run "postalias /etc/aliases" (or +# wherever your system stores the mail alias file), or simply run +# "newaliases" to build the necessary DBM or DB file. +# +# It will take a minute or so before changes become visible. Use +# "postfix reload" to eliminate the delay. +# +#alias_maps = dbm:/etc/aliases +alias_maps = hash:/etc/aliases +#alias_maps = hash:/etc/aliases, nis:mail.aliases +#alias_maps = netinfo:/aliases + +# The alias_database parameter specifies the alias database(s) that +# are built with "newaliases" or "sendmail -bi". This is a separate +# configuration parameter, because alias_maps (see above) may specify +# tables that are not necessarily all under control by Postfix. +# +#alias_database = dbm:/etc/aliases +#alias_database = dbm:/etc/mail/aliases +alias_database = hash:/etc/aliases +#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases + +# ADDRESS EXTENSIONS (e.g., user+foo) +# +# The recipient_delimiter parameter specifies the separator between +# user names and address extensions (user+foo). See canonical(5), +# local(8), relocated(5) and virtual(5) for the effects this has on +# aliases, canonical, virtual, relocated and .forward file lookups. +# Basically, the software tries user+foo and .forward+foo before +# trying user and .forward. +# +#recipient_delimiter = + + +# DELIVERY TO MAILBOX +# +# The home_mailbox parameter specifies the optional pathname of a +# mailbox file relative to a user's home directory. The default +# mailbox file is /var/spool/mail/user or /var/mail/user. Specify +# "Maildir/" for qmail-style delivery (the / is required). +# +#home_mailbox = Mailbox +#home_mailbox = Maildir/ + +# The mail_spool_directory parameter specifies the directory where +# UNIX-style mailboxes are kept. The default setting depends on the +# system type. +# +#mail_spool_directory = /var/mail +#mail_spool_directory = /var/spool/mail + +# The mailbox_command parameter specifies the optional external +# command to use instead of mailbox delivery. The command is run as +# the recipient with proper HOME, SHELL and LOGNAME environment settings. +# Exception: delivery for root is done as $default_user. +# +# Other environment variables of interest: USER (recipient username), +# EXTENSION (address extension), DOMAIN (domain part of address), +# and LOCAL (the address localpart). +# +# Unlike other Postfix configuration parameters, the mailbox_command +# parameter is not subjected to $parameter substitutions. This is to +# make it easier to specify shell syntax (see example below). +# +# Avoid shell meta characters because they will force Postfix to run +# an expensive shell process. Procmail alone is expensive enough. +# +# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN +# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. +# +#mailbox_command = /some/where/procmail +#mailbox_command = /some/where/procmail -a "$EXTENSION" + +# The mailbox_transport specifies the optional transport in master.cf +# to use after processing aliases and .forward files. This parameter +# has precedence over the mailbox_command, fallback_transport and +# luser_relay parameters. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" +# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. +#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp + +# If using the cyrus-imapd IMAP server deliver local mail to the IMAP +# server using LMTP (Local Mail Transport Protocol), this is prefered +# over the older cyrus deliver program by setting the +# mailbox_transport as below: +# +# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp +# +# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via +# these settings. +# +# local_destination_recipient_limit = 300 +# local_destination_concurrency_limit = 5 +# +# Of course you should adjust these settings as appropriate for the +# capacity of the hardware you are using. The recipient limit setting +# can be used to take advantage of the single instance message store +# capability of Cyrus. The concurrency limit can be used to control +# how many simultaneous LMTP sessions will be permitted to the Cyrus +# message store. +# +# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and +# subsequent line in master.cf. +#mailbox_transport = cyrus + +# The fallback_transport specifies the optional transport in master.cf +# to use for recipients that are not found in the UNIX passwd database. +# This parameter has precedence over the luser_relay parameter. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp +#fallback_transport = + +# The luser_relay parameter specifies an optional destination address +# for unknown recipients. By default, mail for unknown@$mydestination, +# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned +# as undeliverable. +# +# The following expansions are done on luser_relay: $user (recipient +# username), $shell (recipient shell), $home (recipient home directory), +# $recipient (full recipient address), $extension (recipient address +# extension), $domain (recipient domain), $local (entire recipient +# localpart), $recipient_delimiter. Specify ${name?value} or +# ${name:value} to expand value only when $name does (does not) exist. +# +# luser_relay works only for the default Postfix local delivery agent. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must specify "local_recipient_maps =" (i.e. empty) in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#luser_relay = $user@other.host +#luser_relay = $local@other.host +#luser_relay = admin+$local + +# JUNK MAIL CONTROLS +# +# The controls listed here are only a very small subset. The file +# SMTPD_ACCESS_README provides an overview. + +# The header_checks parameter specifies an optional table with patterns +# that each logical message header is matched against, including +# headers that span multiple physical lines. +# +# By default, these patterns also apply to MIME headers and to the +# headers of attached messages. With older Postfix versions, MIME and +# attached message headers were treated as body text. +# +# For details, see "man header_checks". +# +#header_checks = regexp:/etc/postfix/header_checks + +# FAST ETRN SERVICE +# +# Postfix maintains per-destination logfiles with information about +# deferred mail, so that mail can be flushed quickly with the SMTP +# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". +# See the ETRN_README document for a detailed description. +# +# The fast_flush_domains parameter controls what destinations are +# eligible for this service. By default, they are all domains that +# this server is willing to relay mail to. +# +#fast_flush_domains = $relay_domains + +# SHOW SOFTWARE VERSION OR NOT +# +# The smtpd_banner parameter specifies the text that follows the 220 +# code in the SMTP server's greeting banner. Some people like to see +# the mail version advertised. By default, Postfix shows no version. +# +# You MUST specify $myhostname at the start of the text. That is an +# RFC requirement. Postfix itself does not care. +# +#smtpd_banner = $myhostname ESMTP $mail_name +#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) + +# PARALLEL DELIVERY TO THE SAME DESTINATION +# +# How many parallel deliveries to the same user or domain? With local +# delivery, it does not make sense to do massively parallel delivery +# to the same user, because mailbox updates must happen sequentially, +# and expensive pipelines in .forward files can cause disasters when +# too many are run at the same time. With SMTP deliveries, 10 +# simultaneous connections to the same domain could be sufficient to +# raise eyebrows. +# +# Each message delivery transport has its XXX_destination_concurrency_limit +# parameter. The default is $default_destination_concurrency_limit for +# most delivery transports. For the local delivery agent the default is 2. + +#local_destination_concurrency_limit = 2 +#default_destination_concurrency_limit = 20 + +# DEBUGGING CONTROL +# +# The debug_peer_level parameter specifies the increment in verbose +# logging level when an SMTP client or server host name or address +# matches a pattern in the debug_peer_list parameter. +# +debug_peer_level = 2 + +# The debug_peer_list parameter specifies an optional list of domain +# or network patterns, /file/name patterns or type:name tables. When +# an SMTP client or server host name or address matches a pattern, +# increase the verbose logging level by the amount specified in the +# debug_peer_level parameter. +# +#debug_peer_list = 127.0.0.1 +#debug_peer_list = some.domain + +# The debugger_command specifies the external command that is executed +# when a Postfix daemon program is run with the -D option. +# +# Use "command .. & sleep 5" so that the debugger can attach before +# the process marches on. If you use an X-based debugger, be sure to +# set up your XAUTHORITY environment variable before starting Postfix. +# +debugger_command = + PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin + ddd $daemon_directory/$process_name $process_id & sleep 5 + +# If you can't use X, use this to capture the call stack when a +# daemon crashes. The result is in a file in the configuration +# directory, and is named after the process name and the process ID. +# +# debugger_command = +# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; +# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 +# >$config_directory/$process_name.$process_id.log & sleep 5 +# +# Another possibility is to run gdb under a detached screen session. +# To attach to the screen session, su root and run "screen -r +# " where uniquely matches one of the detached +# sessions (from "screen -list"). +# +# debugger_command = +# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen +# -dmS $process_name gdb $daemon_directory/$process_name +# $process_id & sleep 1 + +# INSTALL-TIME CONFIGURATION INFORMATION +# +# The following parameters are used when installing a new Postfix version. +# +# sendmail_path: The full pathname of the Postfix sendmail command. +# This is the Sendmail-compatible mail posting interface. +# +sendmail_path = + +# newaliases_path: The full pathname of the Postfix newaliases command. +# This is the Sendmail-compatible command to build alias databases. +# +newaliases_path = + +# mailq_path: The full pathname of the Postfix mailq command. This +# is the Sendmail-compatible mail queue listing command. +# +mailq_path = + +# setgid_group: The group for mail submission and queue management +# commands. This must be a group name with a numerical group ID that +# is not shared with other accounts, not even with the Postfix account. +# +setgid_group = + +# html_directory: The location of the Postfix HTML documentation. +# +html_directory = + +# manpage_directory: The location of the Postfix on-line manual pages. +# +manpage_directory = + +# sample_directory: The location of the Postfix sample configuration files. +# This parameter is obsolete as of Postfix 2.1. +# +sample_directory = + +# readme_directory: The location of the Postfix README files. +# +readme_directory = + +# TLS CONFIGURATION +# +# Basic Postfix TLS configuration by default with self-signed certificate +# for inbound SMTP and also opportunistic TLS for outbound SMTP. + +# The full pathname of a file with the Postfix SMTP server RSA certificate +# in PEM format. Intermediate certificates should be included in general, +# the server certificate first, then the issuing CA(s) (bottom-up order). +# +smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem + +# The full pathname of a file with the Postfix SMTP server RSA private key +# in PEM format. The private key must be accessible without a pass-phrase, +# i.e. it must not be encrypted. +# +smtpd_tls_key_file = /etc/pki/tls/private/postfix.key + +# Announce STARTTLS support to remote SMTP clients, but do not require that +# clients use TLS encryption (opportunistic TLS inbound). +# +smtpd_tls_security_level = may + +# Directory with PEM format Certification Authority certificates that the +# Postfix SMTP client uses to verify a remote SMTP server certificate. +# +smtp_tls_CApath = /etc/pki/tls/certs + +# The full pathname of a file containing CA certificates of root CAs +# trusted to sign either remote SMTP server certificates or intermediate CA +# certificates. +# +smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt + +# Use TLS if this is supported by the remote SMTP server, otherwise use +# plaintext (opportunistic TLS outbound). +# +smtp_tls_security_level = may diff --git a/templates/Fedora/38/etc/postfix/master.cf b/templates/Fedora/38/etc/postfix/master.cf new file mode 100644 index 0000000..4beb91f --- /dev/null +++ b/templates/Fedora/38/etc/postfix/master.cf @@ -0,0 +1,137 @@ +# +# Postfix master process configuration file. For details on the format +# of the file, see the master(5) manual page (command: "man 5 master" or +# on-line: http://www.postfix.org/master.5.html). +# +# Do not forget to execute "postfix reload" after editing this file. +# +# ========================================================================== +# service type private unpriv chroot wakeup maxproc command + args +# (yes) (yes) (no) (never) (100) +# ========================================================================== +smtp inet n - n - - smtpd +#smtp inet n - n - 1 postscreen +#smtpd pass - - n - - smtpd +#dnsblog unix - - n - 0 dnsblog +#tlsproxy unix - - n - 0 tlsproxy +# Choose one: enable submission for loopback clients only, or for any client. +#127.0.0.1:submission inet n - n - - smtpd +# submission inet n - n - - smtpd +# -o syslog_name=postfix/submission +# -o smtpd_tls_security_level=encrypt +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_tls_auth_only=yes +# -o smtpd_reject_unlisted_recipient=no +# -o smtpd_client_restrictions=$mua_client_restrictions +# -o smtpd_helo_restrictions=$mua_helo_restrictions +# -o smtpd_sender_restrictions=$mua_sender_restrictions +# -o smtpd_recipient_restrictions= +# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +# Choose one: enable smtps for loopback clients only, or for any client. +#127.0.0.1:smtps inet n - n - - smtpd +# smtps inet n - n - - smtpd +# -o syslog_name=postfix/smtps +# -o smtpd_tls_wrappermode=yes +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_reject_unlisted_recipient=no +# -o smtpd_client_restrictions=$mua_client_restrictions +# -o smtpd_helo_restrictions=$mua_helo_restrictions +# -o smtpd_sender_restrictions=$mua_sender_restrictions +# -o smtpd_recipient_restrictions= +# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +#628 inet n - n - - qmqpd +pickup unix n - n 60 1 pickup +cleanup unix n - n - 0 cleanup +qmgr unix n - n 300 1 qmgr +#qmgr unix n - n 300 1 oqmgr +tlsmgr unix - - n 1000? 1 tlsmgr +rewrite unix - - n - - trivial-rewrite +bounce unix - - n - 0 bounce +defer unix - - n - 0 bounce +trace unix - - n - 0 bounce +verify unix - - n - 1 verify +flush unix n - n 1000? 0 flush +proxymap unix - - n - - proxymap +proxywrite unix - - n - 1 proxymap +smtp unix - - n - - smtp +relay unix - - n - - smtp + -o syslog_name=postfix/$service_name +# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 +showq unix n - n - - showq +error unix - - n - - error +retry unix - - n - - error +discard unix - - n - - discard +local unix - n n - - local +virtual unix - n n - - virtual +lmtp unix - - n - - lmtp +anvil unix - - n - 1 anvil +scache unix - - n - 1 scache +postlog unix-dgram n - n - 1 postlogd +# +# ==================================================================== +# Interfaces to non-Postfix software. Be sure to examine the manual +# pages of the non-Postfix software to find out what options it wants. +# +# Many of the following services use the Postfix pipe(8) delivery +# agent. See the pipe(8) man page for information about ${recipient} +# and other message envelope options. +# ==================================================================== +# +# maildrop. See the Postfix MAILDROP_README file for details. +# Also specify in main.cf: maildrop_destination_recipient_limit=1 +# +#maildrop unix - n n - - pipe +# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} +# +# ==================================================================== +# +# Recent Cyrus versions can use the existing "lmtp" master.cf entry. +# +# Specify in cyrus.conf: +# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 +# +# Specify in main.cf one or more of the following: +# mailbox_transport = lmtp:inet:localhost +# virtual_transport = lmtp:inet:localhost +# +# ==================================================================== +# +# Cyrus 2.1.5 (Amos Gouaux) +# Also specify in main.cf: cyrus_destination_recipient_limit=1 +# +#cyrus unix - n n - - pipe +# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} +# +# ==================================================================== +# +# Old example of delivery via Cyrus. +# +#old-cyrus unix - n n - - pipe +# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} +# +# ==================================================================== +# +# See the Postfix UUCP_README file for configuration details. +# +#uucp unix - n n - - pipe +# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) +# +# ==================================================================== +# +# Other external delivery methods. +# +#ifmail unix - n n - - pipe +# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) +# +#bsmtp unix - n n - - pipe +# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient +# +#scalemail-backend unix - n n - 2 pipe +# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store +# ${nexthop} ${user} ${extension} +# +#mailman unix - n n - - pipe +# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py +# ${nexthop} ${user} diff --git a/templates/Fedora/38/etc/postfix/master.cf.proto b/templates/Fedora/38/etc/postfix/master.cf.proto new file mode 100644 index 0000000..f33d9dd --- /dev/null +++ b/templates/Fedora/38/etc/postfix/master.cf.proto @@ -0,0 +1,137 @@ +# +# Postfix master process configuration file. For details on the format +# of the file, see the master(5) manual page (command: "man 5 master" or +# on-line: http://www.postfix.org/master.5.html). +# +# Do not forget to execute "postfix reload" after editing this file. +# +# ========================================================================== +# service type private unpriv chroot wakeup maxproc command + args +# (yes) (yes) (no) (never) (100) +# ========================================================================== +smtp inet n - n - - smtpd +#smtp inet n - n - 1 postscreen +#smtpd pass - - n - - smtpd +#dnsblog unix - - n - 0 dnsblog +#tlsproxy unix - - n - 0 tlsproxy +# Choose one: enable submission for loopback clients only, or for any client. +#127.0.0.1:submission inet n - n - - smtpd +#submission inet n - n - - smtpd +# -o syslog_name=postfix/submission +# -o smtpd_tls_security_level=encrypt +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_tls_auth_only=yes +# -o smtpd_reject_unlisted_recipient=no +# -o smtpd_client_restrictions=$mua_client_restrictions +# -o smtpd_helo_restrictions=$mua_helo_restrictions +# -o smtpd_sender_restrictions=$mua_sender_restrictions +# -o smtpd_recipient_restrictions= +# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +# Choose one: enable smtps for loopback clients only, or for any client. +#127.0.0.1:smtps inet n - n - - smtpd +#smtps inet n - n - - smtpd +# -o syslog_name=postfix/smtps +# -o smtpd_tls_wrappermode=yes +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_reject_unlisted_recipient=no +# -o smtpd_client_restrictions=$mua_client_restrictions +# -o smtpd_helo_restrictions=$mua_helo_restrictions +# -o smtpd_sender_restrictions=$mua_sender_restrictions +# -o smtpd_recipient_restrictions= +# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +#628 inet n - n - - qmqpd +pickup unix n - n 60 1 pickup +cleanup unix n - n - 0 cleanup +qmgr unix n - n 300 1 qmgr +#qmgr unix n - n 300 1 oqmgr +tlsmgr unix - - n 1000? 1 tlsmgr +rewrite unix - - n - - trivial-rewrite +bounce unix - - n - 0 bounce +defer unix - - n - 0 bounce +trace unix - - n - 0 bounce +verify unix - - n - 1 verify +flush unix n - n 1000? 0 flush +proxymap unix - - n - - proxymap +proxywrite unix - - n - 1 proxymap +smtp unix - - n - - smtp +relay unix - - n - - smtp + -o syslog_name=postfix/$service_name +# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 +showq unix n - n - - showq +error unix - - n - - error +retry unix - - n - - error +discard unix - - n - - discard +local unix - n n - - local +virtual unix - n n - - virtual +lmtp unix - - n - - lmtp +anvil unix - - n - 1 anvil +scache unix - - n - 1 scache +postlog unix-dgram n - n - 1 postlogd +# +# ==================================================================== +# Interfaces to non-Postfix software. Be sure to examine the manual +# pages of the non-Postfix software to find out what options it wants. +# +# Many of the following services use the Postfix pipe(8) delivery +# agent. See the pipe(8) man page for information about ${recipient} +# and other message envelope options. +# ==================================================================== +# +# maildrop. See the Postfix MAILDROP_README file for details. +# Also specify in main.cf: maildrop_destination_recipient_limit=1 +# +#maildrop unix - n n - - pipe +# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} +# +# ==================================================================== +# +# Recent Cyrus versions can use the existing "lmtp" master.cf entry. +# +# Specify in cyrus.conf: +# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 +# +# Specify in main.cf one or more of the following: +# mailbox_transport = lmtp:inet:localhost +# virtual_transport = lmtp:inet:localhost +# +# ==================================================================== +# +# Cyrus 2.1.5 (Amos Gouaux) +# Also specify in main.cf: cyrus_destination_recipient_limit=1 +# +#cyrus unix - n n - - pipe +# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} +# +# ==================================================================== +# +# Old example of delivery via Cyrus. +# +#old-cyrus unix - n n - - pipe +# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} +# +# ==================================================================== +# +# See the Postfix UUCP_README file for configuration details. +# +#uucp unix - n n - - pipe +# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) +# +# ==================================================================== +# +# Other external delivery methods. +# +#ifmail unix - n n - - pipe +# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) +# +#bsmtp unix - n n - - pipe +# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient +# +#scalemail-backend unix - n n - 2 pipe +# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store +# ${nexthop} ${user} ${extension} +# +#mailman unix - n n - - pipe +# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py +# ${nexthop} ${user} diff --git a/templates/Fedora/38/etc/postfix/postfix-files b/templates/Fedora/38/etc/postfix/postfix-files new file mode 100644 index 0000000..1eda0a3 --- /dev/null +++ b/templates/Fedora/38/etc/postfix/postfix-files @@ -0,0 +1,432 @@ +# +# Do not edit this file. +# +# This file controls the postfix-install script for installation of +# Postfix programs, configuration files and documentation, as well +# as the post-install script for setting permissions and for updating +# Postfix configuration files. See the respective manual pages within +# the script files. +# +# Do not list $command_directory or $shlib_directory in this file, +# or it will be blown away by a future Postfix uninstallation +# procedure. You would not want to lose all files in /usr/sbin or +# /usr/local/lib. +# +# Each record in this file describes one file or directory. +# Fields are separated by ":". Specify a null field as "-". +# Missing fields or separators at the end are OK. +# +# File format: +# name:type:owner:group:permission:flags +# No group means don't change group ownership. +# +# File types: +# d=directory +# f=regular file +# h=hard link (*) +# l=symbolic link (*) +# +# (*) With hard links and symbolic links, the owner field becomes the +# source pathname, while the group and permissions are ignored. +# +# File flags: +# No flag means the flag is not active. +# p=preserve existing file, do not replace (postfix-install). +# u=update owner/group/mode (post-install upgrade-permissions). +# c=create missing directory (post-install create-missing). +# r=apply owner/group recursively (post-install set/upgrade-permissions). +# o=obsolete, no longer part of Postfix +# 1=optional for non-default instance (config_dir != built-in default). +# +# Note: the "u" flag is for upgrading the permissions of existing files +# or directories after changes in Postfix architecture. For robustness +# it is a good idea to "u" all the files that have special ownership or +# permissions, so that running "make install" fixes any glitches. +# +# Note: order matters. Update shared libraries and database plugins +# before daemon/command-line programs. +$config_directory:d:root:-:755:u +$data_directory:d:$mail_owner:-:700:uc +$daemon_directory:d:root:-:755:u +$queue_directory:d:root:-:755:uc +$sample_directory:d:root:-:755:o +$readme_directory:d:root:-:755 +$html_directory:d:root:-:755 +$queue_directory/active:d:$mail_owner:-:700:ucr +$queue_directory/bounce:d:$mail_owner:-:700:ucr +$queue_directory/corrupt:d:$mail_owner:-:700:ucr +$queue_directory/defer:d:$mail_owner:-:700:ucr +$queue_directory/deferred:d:$mail_owner:-:700:ucr +$queue_directory/flush:d:$mail_owner:-:700:ucr +$queue_directory/hold:d:$mail_owner:-:700:ucr +$queue_directory/incoming:d:$mail_owner:-:700:ucr +$queue_directory/private:d:$mail_owner:-:700:uc +$queue_directory/maildrop:d:$mail_owner:$setgid_group:730:uc +$queue_directory/public:d:$mail_owner:$setgid_group:710:uc +$queue_directory/pid:d:root:-:755:uc +$queue_directory/saved:d:$mail_owner:-:700:ucr +$queue_directory/trace:d:$mail_owner:-:700:ucr +# Update shared libraries and plugins before daemon or command-line programs. +$shlib_directory/libpostfix-util.so:f:root:-:755 +$shlib_directory/libpostfix-global.so:f:root:-:755 +$shlib_directory/libpostfix-dns.so:f:root:-:755 +$shlib_directory/libpostfix-tls.so:f:root:-:755 +$shlib_directory/libpostfix-master.so:f:root:-:755 +$meta_directory/dynamicmaps.cf.d:d:root:-:755 +$meta_directory/dynamicmaps.cf:f:root:-:644 +$meta_directory/main.cf.proto:f:root:-:644 +$meta_directory/master.cf.proto:f:root:-:644 +$meta_directory/postfix-files.d:d:root:-:755 +$meta_directory/postfix-files:f:root:-:644 +$daemon_directory/anvil:f:root:-:755 +$daemon_directory/bounce:f:root:-:755 +$daemon_directory/cleanup:f:root:-:755 +$daemon_directory/discard:f:root:-:755 +$daemon_directory/dnsblog:f:root:-:755 +$daemon_directory/error:f:root:-:755 +$daemon_directory/flush:f:root:-:755 +$daemon_directory/local:f:root:-:755 +$daemon_directory/main.cf:f:root:-:644:o +$daemon_directory/master.cf:f:root:-:644:o +$daemon_directory/master:f:root:-:755 +$daemon_directory/oqmgr:f:root:-:755 +$daemon_directory/pickup:f:root:-:755 +$daemon_directory/pipe:f:root:-:755 +$daemon_directory/post-install:f:root:-:755 +# In case meta_directory == daemon_directory. +#$daemon_directory/postfix-files:f:root:-:644:o +#$daemon_directory/postfix-files.d:d:root:-:755:o +$daemon_directory/postfix-script:f:root:-:755 +$daemon_directory/postfix-tls-script:f:root:-:755 +$daemon_directory/postfix-wrapper:f:root:-:755 +$daemon_directory/postmulti-script:f:root:-:755 +$daemon_directory/postlogd:f:root:-:755 +$daemon_directory/postscreen:f:root:-:755 +$daemon_directory/proxymap:f:root:-:755 +$daemon_directory/qmgr:f:root:-:755 +$daemon_directory/qmqpd:f:root:-:755 +$daemon_directory/scache:f:root:-:755 +$daemon_directory/showq:f:root:-:755 +$daemon_directory/smtp:f:root:-:755 +$daemon_directory/smtpd:f:root:-:755 +$daemon_directory/spawn:f:root:-:755 +$daemon_directory/tlsproxy:f:root:-:755 +$daemon_directory/tlsmgr:f:root:-:755 +$daemon_directory/trivial-rewrite:f:root:-:755 +$daemon_directory/verify:f:root:-:755 +$daemon_directory/virtual:f:root:-:755 +$daemon_directory/nqmgr:h:$daemon_directory/qmgr +$daemon_directory/lmtp:h:$daemon_directory/smtp +$command_directory/postalias:f:root:-:755 +$command_directory/postcat:f:root:-:755 +$command_directory/postconf:f:root:-:755 +$command_directory/postfix:f:root:-:755 +$command_directory/postkick:f:root:-:755 +$command_directory/postlock:f:root:-:755 +$command_directory/postlog:f:root:-:755 +$command_directory/postmap:f:root:-:755 +$command_directory/postmulti:f:root:-:755 +$command_directory/postsuper:f:root:-:755 +$command_directory/postdrop:f:root:$setgid_group:2755:u +$command_directory/postqueue:f:root:$setgid_group:2755:u +$sendmail_path:f:root:-:755 +$newaliases_path:l:$sendmail_path +$mailq_path:l:$sendmail_path +$config_directory/access:f:root:-:644:p1 +$config_directory/canonical:f:root:-:644:p1 +$config_directory/cidr_table:f:root:-:644:o +$config_directory/generic:f:root:-:644:p1 +$config_directory/generics:f:root:-:644:o +$config_directory/header_checks:f:root:-:644:p1 +$config_directory/install.cf:f:root:-:644:o +$config_directory/main.cf:f:root:-:644:p +$config_directory/master.cf:f:root:-:644:p +$config_directory/pcre_table:f:root:-:644:o +$config_directory/regexp_table:f:root:-:644:o +$config_directory/relocated:f:root:-:644:p1 +$config_directory/tcp_table:f:root:-:644:o +$config_directory/transport:f:root:-:644:p1 +$config_directory/virtual:f:root:-:644:p1 +$config_directory/postfix-script:f:root:-:755:o +$config_directory/postfix-script-sgid:f:root:-:755:o +$config_directory/postfix-script-nosgid:f:root:-:755:o +$config_directory/post-install:f:root:-:755:o +$manpage_directory/man1/mailq.postfix.1.gz:f:root:-:644 +$manpage_directory/man1/newaliases.postfix.1.gz:f:root:-:644 +$manpage_directory/man1/postalias.1.gz:f:root:-:644 +$manpage_directory/man1/postcat.1.gz:f:root:-:644 +$manpage_directory/man1/postconf.1.gz:f:root:-:644 +$manpage_directory/man1/postdrop.1.gz:f:root:-:644 +$manpage_directory/man1/postfix.1.gz:f:root:-:644 +$manpage_directory/man1/postfix-tls.1.gz:f:root:-:644 +$manpage_directory/man1/postkick.1.gz:f:root:-:644 +$manpage_directory/man1/postlock.1.gz:f:root:-:644 +$manpage_directory/man1/postlog.1.gz:f:root:-:644 +$manpage_directory/man1/postmap.1.gz:f:root:-:644 +$manpage_directory/man1/postmulti.1.gz:f:root:-:644 +$manpage_directory/man1/postqueue.1.gz:f:root:-:644 +$manpage_directory/man1/postsuper.1.gz:f:root:-:644 +$manpage_directory/man1/sendmail.postfix.1.gz:f:root:-:644 +$manpage_directory/man5/access.5.gz:f:root:-:644 +$manpage_directory/man5/aliases.postfix.5.gz:f:root:-:644 +$manpage_directory/man5/body_checks.5.gz:f:root:-:644 +$manpage_directory/man5/bounce.5.gz:f:root:-:644 +$manpage_directory/man5/canonical.5.gz:f:root:-:644 +$manpage_directory/man5/cidr_table.5.gz:f:root:-:644 +$manpage_directory/man5/generics.5.gz:f:root:-:644:o +$manpage_directory/man5/generic.5.gz:f:root:-:644 +$manpage_directory/man5/header_checks.5.gz:f:root:-:644 +$manpage_directory/man5/master.5.gz:f:root:-:644 +$manpage_directory/man5/memcache_table.5.gz:f:root:-:644 +$manpage_directory/man5/socketmap_table.5.gz:f:root:-:644 +$manpage_directory/man5/nisplus_table.5.gz:f:root:-:644 +$manpage_directory/man5/postconf.5.gz:f:root:-:644 +$manpage_directory/man5/postfix-wrapper.5.gz:f:root:-:644 +$manpage_directory/man5/regexp_table.5.gz:f:root:-:644 +$manpage_directory/man5/relocated.5.gz:f:root:-:644 +$manpage_directory/man5/tcp_table.5.gz:f:root:-:644 +$manpage_directory/man5/transport.5.gz:f:root:-:644 +$manpage_directory/man5/virtual.5.gz:f:root:-:644 +$manpage_directory/man8/bounce.8.gz:f:root:-:644 +$manpage_directory/man8/cleanup.8.gz:f:root:-:644 +$manpage_directory/man8/anvil.8.gz:f:root:-:644 +$manpage_directory/man8/defer.8.gz:f:root:-:644 +$manpage_directory/man8/discard.8.gz:f:root:-:644 +$manpage_directory/man8/dnsblog.8.gz:f:root:-:644 +$manpage_directory/man8/error.8.gz:f:root:-:644 +$manpage_directory/man8/flush.8.gz:f:root:-:644 +$manpage_directory/man8/lmtp.8.gz:f:root:-:644 +$manpage_directory/man8/local.8.gz:f:root:-:644 +$manpage_directory/man8/master.8.gz:f:root:-:644 +$manpage_directory/man8/nqmgr.8.gz:f:root:-:644:o +$manpage_directory/man8/oqmgr.8.gz:f:root:-:644: +$manpage_directory/man8/pickup.8.gz:f:root:-:644 +$manpage_directory/man8/pipe.8.gz:f:root:-:644 +$manpage_directory/man8/postlogd.8.gz:f:root:-:644 +$manpage_directory/man8/postscreen.8.gz:f:root:-:644 +$manpage_directory/man8/proxymap.8.gz:f:root:-:644 +$manpage_directory/man8/qmgr.8.gz:f:root:-:644 +$manpage_directory/man8/qmqpd.8.gz:f:root:-:644 +$manpage_directory/man8/scache.8.gz:f:root:-:644 +$manpage_directory/man8/showq.8.gz:f:root:-:644 +$manpage_directory/man8/smtp.8.gz:f:root:-:644 +$manpage_directory/man8/smtpd.postfix.8.gz:f:root:-:644 +$manpage_directory/man8/spawn.8.gz:f:root:-:644 +$manpage_directory/man8/tlsproxy.8.gz:f:root:-:644 +$manpage_directory/man8/tlsmgr.8.gz:f:root:-:644 +$manpage_directory/man8/trace.8.gz:f:root:-:644 +$manpage_directory/man8/trivial-rewrite.8.gz:f:root:-:644 +$manpage_directory/man8/verify.8.gz:f:root:-:644 +$manpage_directory/man8/virtual.8.gz:f:root:-:644 +$sample_directory/sample-aliases.cf:f:root:-:644:o +$sample_directory/sample-auth.cf:f:root:-:644:o +$sample_directory/sample-canonical.cf:f:root:-:644:o +$sample_directory/sample-compatibility.cf:f:root:-:644:o +$sample_directory/sample-debug.cf:f:root:-:644:o +$sample_directory/sample-filter.cf:f:root:-:644:o +$sample_directory/sample-flush.cf:f:root:-:644:o +$sample_directory/sample-ipv6.cf:f:root:-:644:o +$sample_directory/sample-ldap.cf:f:root:-:644:o +$sample_directory/sample-lmtp.cf:f:root:-:644:o +$sample_directory/sample-local.cf:f:root:-:644:o +$sample_directory/sample-mime.cf:f:root:-:644:o +$sample_directory/sample-misc.cf:f:root:-:644:o +$sample_directory/sample-pcre-access.cf:f:root:-:644:o +$sample_directory/sample-pcre-body.cf:f:root:-:644:o +$sample_directory/sample-pcre-header.cf:f:root:-:644:o +$sample_directory/sample-pgsql-aliases.cf:f:root:-:644:o +$sample_directory/sample-qmqpd.cf:f:root:-:644:o +$sample_directory/sample-rate.cf:f:root:-:644:o +$sample_directory/sample-regexp-access.cf:f:root:-:644:o +$sample_directory/sample-regexp-body.cf:f:root:-:644:o +$sample_directory/sample-regexp-header.cf:f:root:-:644:o +$sample_directory/sample-relocated.cf:f:root:-:644:o +$sample_directory/sample-resource.cf:f:root:-:644:o +$sample_directory/sample-rewrite.cf:f:root:-:644:o +$sample_directory/sample-scheduler.cf:f:root:-:644:o +$sample_directory/sample-smtp.cf:f:root:-:644:o +$sample_directory/sample-smtpd.cf:f:root:-:644:o +$sample_directory/sample-tls.cf:f:root:-:644:o +$sample_directory/sample-transport.cf:f:root:-:644:o +$sample_directory/sample-verify.cf:f:root:-:644:o +$sample_directory/sample-virtual.cf:f:root:-:644:o +$readme_directory/AAAREADME:f:root:-:644 +$readme_directory/ADDRESS_CLASS_README:f:root:-:644 +$readme_directory/ADDRESS_REWRITING_README:f:root:-:644 +$readme_directory/ADDRESS_VERIFICATION_README:f:root:-:644 +$readme_directory/BACKSCATTER_README:f:root:-:644 +$readme_directory/BASIC_CONFIGURATION_README:f:root:-:644 +$readme_directory/BUILTIN_FILTER_README:f:root:-:644 +$readme_directory/COMPATIBILITY_README:f:root:-:644 +$readme_directory/CONNECTION_CACHE_README:f:root:-:644 +$readme_directory/CONTENT_INSPECTION_README:f:root:-:644 +$readme_directory/DATABASE_README:f:root:-:644 +$readme_directory/DB_README:f:root:-:644 +$readme_directory/DEBUG_README:f:root:-:644 +$readme_directory/DSN_README:f:root:-:644 +$readme_directory/ETRN_README:f:root:-:644 +$readme_directory/FILTER_README:f:root:-:644 +$readme_directory/FORWARD_SECRECY_README:f:root:-:644 +$readme_directory/HOSTING_README:f:root:-:644:o +$readme_directory/INSTALL:f:root:-:644 +$readme_directory/IPV6_README:f:root:-:644 +$readme_directory/LINUX_README:f:root:-:644 +$readme_directory/LOCAL_RECIPIENT_README:f:root:-:644 +$readme_directory/MACOSX_README:f:root:-:644:o +$readme_directory/MAILDROP_README:f:root:-:644 +$readme_directory/MEMCACHE_README:f:root:-:644 +$readme_directory/MILTER_README:f:root:-:644 +$readme_directory/MULTI_INSTANCE_README:f:root:-:644 +$readme_directory/NFS_README:f:root:-:644 +$readme_directory/OVERVIEW:f:root:-:644 +$readme_directory/PACKAGE_README:f:root:-:644 +$readme_directory/POSTSCREEN_README:f:root:-:644 +$readme_directory/QMQP_README:f:root:-:644:o +$readme_directory/QSHAPE_README:f:root:-:644 +$readme_directory/RELEASE_NOTES:f:root:-:644 +$readme_directory/RESTRICTION_CLASS_README:f:root:-:644 +$readme_directory/SASL_README:f:root:-:644 +$readme_directory/SCHEDULER_README:f:root:-:644 +$readme_directory/SMTPD_ACCESS_README:f:root:-:644 +$readme_directory/SMTPD_POLICY_README:f:root:-:644 +$readme_directory/SMTPD_PROXY_README:f:root:-:644 +$readme_directory/SOHO_README:f:root:-:644 +$readme_directory/STANDARD_CONFIGURATION_README:f:root:-:644 +$readme_directory/STRESS_README:f:root:-:644 +$readme_directory/TLS_LEGACY_README:f:root:-:644 +$readme_directory/TLS_README:f:root:-:644 +$readme_directory/TUNING_README:f:root:-:644 +$readme_directory/ULTRIX_README:f:root:-:644 +$readme_directory/UUCP_README:f:root:-:644 +$readme_directory/VERP_README:f:root:-:644 +$readme_directory/VIRTUAL_README:f:root:-:644 +$readme_directory/XCLIENT_README:f:root:-:644 +$readme_directory/XFORWARD_README:f:root:-:644 +$html_directory/ADDRESS_CLASS_README.html:f:root:-:644 +$html_directory/ADDRESS_REWRITING_README.html:f:root:-:644 +$html_directory/ADDRESS_VERIFICATION_README.html:f:root:-:644 +$html_directory/BACKSCATTER_README.html:f:root:-:644 +$html_directory/BASIC_CONFIGURATION_README.html:f:root:-:644 +$html_directory/BUILTIN_FILTER_README.html:f:root:-:644 +$html_directory/CDB_README.html:f:root:-:644 +$html_directory/COMPATIBILITY_README.html:f:root:-:644 +$html_directory/CONNECTION_CACHE_README.html:f:root:-:644 +$html_directory/CONTENT_INSPECTION_README.html:f:root:-:644 +$html_directory/CYRUS_README.html:f:root:-:644:o +$html_directory/DATABASE_README.html:f:root:-:644 +$html_directory/DB_README.html:f:root:-:644 +$html_directory/DEBUG_README.html:f:root:-:644 +$html_directory/DSN_README.html:f:root:-:644 +$html_directory/ETRN_README.html:f:root:-:644 +$html_directory/FILTER_README.html:f:root:-:644 +$html_directory/FORWARD_SECRECY_README.html:f:root:-:644 +$html_directory/INSTALL.html:f:root:-:644 +$html_directory/IPV6_README.html:f:root:-:644 +$html_directory/LDAP_README.html:f:root:-:644 +$html_directory/LINUX_README.html:f:root:-:644 +$html_directory/LMDB_README.html:f:root:-:644 +$html_directory/LOCAL_RECIPIENT_README.html:f:root:-:644 +$html_directory/MAILDROP_README.html:f:root:-:644 +$html_directory/MILTER_README.html:f:root:-:644 +$html_directory/MULTI_INSTANCE_README.html:f:root:-:644 +$html_directory/MYSQL_README.html:f:root:-:644 +$html_directory/SQLITE_README.html:f:root:-:644 +$html_directory/NFS_README.html:f:root:-:644 +$html_directory/OVERVIEW.html:f:root:-:644 +$html_directory/PACKAGE_README.html:f:root:-:644 +$html_directory/PCRE_README.html:f:root:-:644 +$html_directory/PGSQL_README.html:f:root:-:644 +$html_directory/POSTSCREEN_README.html:f:root:-:644 +$html_directory/QMQP_README.html:f:root:-:644:o +$html_directory/QSHAPE_README.html:f:root:-:644 +$html_directory/RESTRICTION_CLASS_README.html:f:root:-:644 +$html_directory/SASL_README.html:f:root:-:644 +$html_directory/SCHEDULER_README.html:f:root:-:644 +$html_directory/SMTPD_ACCESS_README.html:f:root:-:644 +$html_directory/SMTPD_POLICY_README.html:f:root:-:644 +$html_directory/SMTPD_PROXY_README.html:f:root:-:644 +$html_directory/SOHO_README.html:f:root:-:644 +$html_directory/STANDARD_CONFIGURATION_README.html:f:root:-:644 +$html_directory/STRESS_README.html:f:root:-:644 +$html_directory/TLS_LEGACY_README.html:f:root:-:644 +$html_directory/TLS_README.html:f:root:-:644 +$html_directory/TUNING_README.html:f:root:-:644 +$html_directory/ULTRIX_README.html:f:root:-:644:o +$html_directory/UUCP_README.html:f:root:-:644 +$html_directory/VERP_README.html:f:root:-:644 +$html_directory/VIRTUAL_README.html:f:root:-:644 +$html_directory/XCLIENT_README.html:f:root:-:644 +$html_directory/XFORWARD_README.html:f:root:-:644 +$html_directory/access.5.html:f:root:-:644 +$html_directory/aliases.5.html:f:root:-:644 +$html_directory/anvil.8.html:f:root:-:644 +$html_directory/bounce.8.html:f:root:-:644 +$html_directory/canonical.5.html:f:root:-:644 +$html_directory/cidr_table.5.html:f:root:-:644 +$html_directory/cleanup.8.html:f:root:-:644 +$html_directory/defer.8.html:h:$html_directory/bounce.8.html:-:644 +$html_directory/discard.8.html:f:root:-:644 +$html_directory/dnsblog.8.html:f:root:-:644 +$html_directory/error.8.html:f:root:-:644 +$html_directory/flush.8.html:f:root:-:644 +$html_directory/generics.5.html:f:root:-:644:o +$html_directory/generic.5.html:f:root:-:644 +$html_directory/header_checks.5.html:f:root:-:644 +$html_directory/index.html:f:root:-:644 +$html_directory/ldap_table.5.html:f:root:-:644 +$html_directory/lmtp.8.html:f:root:-:644 +$html_directory/local.8.html:f:root:-:644 +$html_directory/mailq.1.html:f:root:-:644 +$html_directory/master.5.html:f:root:-:644 +$html_directory/master.8.html:f:root:-:644 +$html_directory/memcache_table.5.html:f:root:-:644 +$html_directory/mysql_table.5.html:f:root:-:644 +$html_directory/sqlite_table.5.html:f:root:-:644 +$html_directory/nisplus_table.5.html:f:root:-:644 +$html_directory/newaliases.1.html:h:$html_directory/mailq.1.html:-:644 +$html_directory/oqmgr.8.html:f:root:-:644 +$html_directory/pcre_table.5.html:f:root:-:644 +$html_directory/pgsql_table.5.html:f:root:-:644 +$html_directory/pickup.8.html:f:root:-:644 +$html_directory/pipe.8.html:f:root:-:644 +$html_directory/postalias.1.html:f:root:-:644 +$html_directory/postcat.1.html:f:root:-:644 +$html_directory/postconf.1.html:f:root:-:644 +$html_directory/postconf.5.html:f:root:-:644 +$html_directory/postdrop.1.html:f:root:-:644 +$html_directory/postfix-logo.jpg:f:root:-:644 +$html_directory/postfix-manuals.html:f:root:-:644 +$html_directory/postfix-wrapper.5.html:f:root:-:644 +$html_directory/postfix.1.html:f:root:-:644 +$html_directory/postkick.1.html:f:root:-:644 +$html_directory/postlock.1.html:f:root:-:644 +$html_directory/postlog.1.html:f:root:-:644 +$html_directory/postmap.1.html:f:root:-:644 +$html_directory/postmulti.1.html:f:root:-:644 +$html_directory/postlogd.8.html:f:root:-:644 +$html_directory/postqueue.1.html:f:root:-:644 +$html_directory/postscreen.8.html:f:root:-:644 +$html_directory/postsuper.1.html:f:root:-:644 +$html_directory/qshape.1.html:f:root:-:644 +$html_directory/proxymap.8.html:f:root:-:644 +$html_directory/qmgr.8.html:f:root:-:644 +$html_directory/qmqp-sink.1.html:f:root:-:644 +$html_directory/qmqp-source.1.html:f:root:-:644 +$html_directory/qmqpd.8.html:f:root:-:644 +$html_directory/regexp_table.5.html:f:root:-:644 +$html_directory/relocated.5.html:f:root:-:644 +$html_directory/sendmail.1.html:h:$html_directory/mailq.1.html:-:644 +$html_directory/showq.8.html:f:root:-:644 +$html_directory/smtp-sink.1.html:f:root:-:644 +$html_directory/smtp-source.1.html:f:root:-:644 +$html_directory/smtp.8.html:h:$html_directory/lmtp.8.html:-:644 +$html_directory/smtpd.8.html:f:root:-:644 +$html_directory/spawn.8.html:f:root:-:644 +$html_directory/tlsproxy.8.html:f:root:-:644 +$html_directory/tcp_table.5.html:f:root:-:644 +$html_directory/trace.8.html:h:$html_directory/bounce.8.html:-:644 +$html_directory/transport.5.html:f:root:-:644 +$html_directory/trivial-rewrite.8.html:f:root:-:644 +$html_directory/verify.8.html:f:root:-:644 +$html_directory/virtual.5.html:f:root:-:644 +$html_directory/virtual.8.html:f:root:-:644 diff --git a/templates/Fedora/38/etc/postfix/postfix-files.d/ldap b/templates/Fedora/38/etc/postfix/postfix-files.d/ldap new file mode 100644 index 0000000..684b05d --- /dev/null +++ b/templates/Fedora/38/etc/postfix/postfix-files.d/ldap @@ -0,0 +1,3 @@ +$shlib_directory/postfix-ldap.so:f:root:-:755 +$manpage_directory/man5/ldap_table.5.gz:f:root:-:644 +$readme_directory/LDAP_README:f:root:-:644 diff --git a/templates/Fedora/38/etc/postfix/postfix-files.d/mysql b/templates/Fedora/38/etc/postfix/postfix-files.d/mysql new file mode 100644 index 0000000..8e41d61 --- /dev/null +++ b/templates/Fedora/38/etc/postfix/postfix-files.d/mysql @@ -0,0 +1,3 @@ +$shlib_directory/postfix-mysql.so:f:root:-:755 +$manpage_directory/man5/mysql_table.5.gz:f:root:-:644 +$readme_directory/MYSQL_README:f:root:-:644 diff --git a/templates/Fedora/38/etc/postfix/postfix-files.d/pcre b/templates/Fedora/38/etc/postfix/postfix-files.d/pcre new file mode 100644 index 0000000..a34fd73 --- /dev/null +++ b/templates/Fedora/38/etc/postfix/postfix-files.d/pcre @@ -0,0 +1,3 @@ +$shlib_directory/postfix-pcre.so:f:root:-:755 +$manpage_directory/man5/pcre_table.5.gz:f:root:-:644 +$readme_directory/PCRE_README:f:root:-:644 diff --git a/templates/Fedora/38/etc/postfix/relocated b/templates/Fedora/38/etc/postfix/relocated new file mode 100644 index 0000000..e50edfd --- /dev/null +++ b/templates/Fedora/38/etc/postfix/relocated @@ -0,0 +1,176 @@ +# RELOCATED(5) RELOCATED(5) +# +# NAME +# relocated - Postfix relocated table format +# +# SYNOPSIS +# postmap /etc/postfix/relocated +# +# DESCRIPTION +# The optional relocated(5) table provides the information +# that is used in "user has moved to new_location" bounce +# messages. +# +# Normally, the relocated(5) table is specified as a text +# file that serves as input to the postmap(1) command. The +# result, an indexed file in dbm or db format, is used for +# fast searching by the mail system. Execute the command +# "postmap /etc/postfix/relocated" to rebuild an indexed +# file after changing the corresponding relocated table. +# +# When the table is provided via other means such as NIS, +# LDAP or SQL, the same lookups are done as for ordinary +# indexed files. +# +# Alternatively, the table can be provided as a regu- +# lar-expression map where patterns are given as regular +# expressions, or lookups can be directed to TCP-based +# server. In those case, the lookups are done in a slightly +# different way as described below under "REGULAR EXPRESSION +# TABLES" or "TCP-BASED TABLES". +# +# Table lookups are case insensitive. +# +# CASE FOLDING +# The search string is folded to lowercase before database +# lookup. As of Postfix 2.3, the search string is not case +# folded with database types such as regexp: or pcre: whose +# lookup fields can match both upper and lower case. +# +# TABLE FORMAT +# The input format for the postmap(1) command is as follows: +# +# o An entry has one of the following form: +# +# pattern new_location +# +# Where new_location specifies contact information +# such as an email address, or perhaps a street +# address or telephone number. +# +# o Empty lines and whitespace-only lines are ignored, +# as are lines whose first non-whitespace character +# is a `#'. +# +# o A logical line starts with non-whitespace text. A +# line that starts with whitespace continues a logi- +# cal line. +# +# TABLE SEARCH ORDER +# With lookups from indexed files such as DB or DBM, or from +# networked tables such as NIS, LDAP or SQL, patterns are +# tried in the order as listed below: +# +# user@domain +# Matches user@domain. This form has precedence over +# all other forms. +# +# user Matches user@site when site is $myorigin, when site +# is listed in $mydestination, or when site is listed +# in $inet_interfaces or $proxy_interfaces. +# +# @domain +# Matches other addresses in domain. This form has +# the lowest precedence. +# +# ADDRESS EXTENSION +# When a mail address localpart contains the optional recip- +# ient delimiter (e.g., user+foo@domain), the lookup order +# becomes: user+foo@domain, user@domain, user+foo, user, and +# @domain. +# +# REGULAR EXPRESSION TABLES +# This section describes how the table lookups change when +# the table is given in the form of regular expressions or +# when lookups are directed to a TCP-based server. For a +# description of regular expression lookup table syntax, see +# regexp_table(5) or pcre_table(5). For a description of the +# TCP client/server table lookup protocol, see tcp_table(5). +# This feature is not available up to and including Postfix +# version 2.4. +# +# Each pattern is a regular expression that is applied to +# the entire address being looked up. Thus, user@domain mail +# addresses are not broken up into their user and @domain +# constituent parts, nor is user+foo broken up into user and +# foo. +# +# Patterns are applied in the order as specified in the ta- +# ble, until a pattern is found that matches the search +# string. +# +# Results are the same as with indexed file lookups, with +# the additional feature that parenthesized substrings from +# the pattern can be interpolated as $1, $2 and so on. +# +# TCP-BASED TABLES +# This section describes how the table lookups change when +# lookups are directed to a TCP-based server. For a descrip- +# tion of the TCP client/server lookup protocol, see tcp_ta- +# ble(5). This feature is not available up to and including +# Postfix version 2.4. +# +# Each lookup operation uses the entire address once. Thus, +# user@domain mail addresses are not broken up into their +# user and @domain constituent parts, nor is user+foo broken +# up into user and foo. +# +# Results are the same as with indexed file lookups. +# +# BUGS +# The table format does not understand quoting conventions. +# +# CONFIGURATION PARAMETERS +# The following main.cf parameters are especially relevant. +# The text below provides only a parameter summary. See +# postconf(5) for more details including examples. +# +# relocated_maps +# List of lookup tables for relocated users or sites. +# +# Other parameters of interest: +# +# inet_interfaces +# The network interface addresses that this system +# receives mail on. You need to stop and start Post- +# fix when this parameter changes. +# +# mydestination +# List of domains that this mail system considers +# local. +# +# myorigin +# The domain that is appended to locally-posted mail. +# +# proxy_interfaces +# Other interfaces that this machine receives mail on +# by way of a proxy agent or network address transla- +# tor. +# +# SEE ALSO +# trivial-rewrite(8), address resolver +# postmap(1), Postfix lookup table manager +# postconf(5), configuration parameters +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# DATABASE_README, Postfix lookup table overview +# ADDRESS_REWRITING_README, address rewriting guide +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# RELOCATED(5) diff --git a/templates/Fedora/38/etc/postfix/transport b/templates/Fedora/38/etc/postfix/transport new file mode 100644 index 0000000..1dcd787 --- /dev/null +++ b/templates/Fedora/38/etc/postfix/transport @@ -0,0 +1,317 @@ +# TRANSPORT(5) TRANSPORT(5) +# +# NAME +# transport - Postfix transport table format +# +# SYNOPSIS +# postmap /etc/postfix/transport +# +# postmap -q "string" /etc/postfix/transport +# +# postmap -q - /etc/postfix/transport = 3.5): +# +# example.com smtp:bar.example, foo.example +# +# This tries to deliver to bar.example before trying to +# deliver to foo.example. +# +# The error mailer can be used to bounce mail: +# +# .example.com error:mail for *.example.com is not deliverable +# +# This causes all mail for user@anything.example.com to be +# bounced. +# +# REGULAR EXPRESSION TABLES +# This section describes how the table lookups change when +# the table is given in the form of regular expressions. For +# a description of regular expression lookup table syntax, +# see regexp_table(5) or pcre_table(5). +# +# Each pattern is a regular expression that is applied to +# the entire address being looked up. Thus, +# some.domain.hierarchy is not looked up via its parent +# domains, nor is user+foo@domain looked up as user@domain. +# +# Patterns are applied in the order as specified in the ta- +# ble, until a pattern is found that matches the search +# string. +# +# The trivial-rewrite(8) server disallows regular expression +# substitution of $1 etc. in regular expression lookup +# tables, because that could open a security hole (Postfix +# version 2.3 and later). +# +# TCP-BASED TABLES +# This section describes how the table lookups change when +# lookups are directed to a TCP-based server. For a descrip- +# tion of the TCP client/server lookup protocol, see tcp_ta- +# ble(5). This feature is not available up to and including +# Postfix version 2.4. +# +# Each lookup operation uses the entire recipient address +# once. Thus, some.domain.hierarchy is not looked up via +# its parent domains, nor is user+foo@domain looked up as +# user@domain. +# +# Results are the same as with indexed file lookups. +# +# CONFIGURATION PARAMETERS +# The following main.cf parameters are especially relevant. +# The text below provides only a parameter summary. See +# postconf(5) for more details including examples. +# +# empty_address_recipient (MAILER-DAEMON) +# The recipient of mail addressed to the null +# address. +# +# parent_domain_matches_subdomains (see 'postconf -d' out- +# put) +# A list of Postfix features where the pattern "exam- +# ple.com" also matches subdomains of example.com, +# instead of requiring an explicit ".example.com" +# pattern. +# +# transport_maps (empty) +# Optional lookup tables with mappings from recipient +# address to (message delivery transport, next-hop +# destination). +# +# SEE ALSO +# trivial-rewrite(8), rewrite and resolve addresses +# master(5), master.cf file format +# postconf(5), configuration parameters +# postmap(1), Postfix lookup table manager +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# ADDRESS_REWRITING_README, address rewriting guide +# DATABASE_README, Postfix lookup table overview +# FILTER_README, external content filter +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# TRANSPORT(5) diff --git a/templates/Fedora/38/etc/postfix/virtual b/templates/Fedora/38/etc/postfix/virtual new file mode 100644 index 0000000..da9cd65 --- /dev/null +++ b/templates/Fedora/38/etc/postfix/virtual @@ -0,0 +1,324 @@ +# VIRTUAL(5) VIRTUAL(5) +# +# NAME +# virtual - Postfix virtual alias table format +# +# SYNOPSIS +# postmap /etc/postfix/virtual +# +# postmap -q "string" /etc/postfix/virtual +# +# postmap -q - /etc/postfix/virtual Date: Sun, 14 May 2023 20:43:09 -0500 Subject: [PATCH 32/47] Update OpenDKIM configuration --- templates/Fedora/38/etc/opendkim.conf | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/templates/Fedora/38/etc/opendkim.conf b/templates/Fedora/38/etc/opendkim.conf index 992e0b2..aefddf4 100644 --- a/templates/Fedora/38/etc/opendkim.conf +++ b/templates/Fedora/38/etc/opendkim.conf @@ -31,7 +31,7 @@ ## CONFIGURATION OPTIONS ## Specifies the path to the process ID file. -PidFile /run/opendkim/opendkim.pid +#PidFile /run/opendkim/opendkim.pid ## Selects operating modes. Valid modes are s (sign) and v (verify). Default is v. ## Must be changed to s (sign only) or sv (sign and verify) in order to sign outgoing @@ -53,7 +53,8 @@ LogWhy yes UserID opendkim:opendkim ## Create a socket through which your MTA can communicate. -Socket inet:8891@localhost +#Socket inet:8891@localhost +Socket local:/run/opendkim/opendkim.sock ## Required to use local socket with MTAs that access the socket as a non- ## privileged user (e.g. Postfix) @@ -131,4 +132,4 @@ OversignHeaders From ## policies retrieved from DNS, rather than relying on the nameserver for ## caching service. Useful if the nameserver being used by the filter is ## not local. -QueryCache yes +# QueryCache yes From d462b3b699bc54ade3efb075209d3653a596191b Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sun, 14 May 2023 20:45:40 -0500 Subject: [PATCH 33/47] Update OpenDMARC Configuration --- templates/Fedora/38/etc/opendmarc.conf | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/templates/Fedora/38/etc/opendmarc.conf b/templates/Fedora/38/etc/opendmarc.conf index cc1018d..7589033 100644 --- a/templates/Fedora/38/etc/opendmarc.conf +++ b/templates/Fedora/38/etc/opendmarc.conf @@ -360,7 +360,8 @@ RejectFailures true ## either in the configuration file or on the command line. If an IP ## address is used, it must be enclosed in square brackets. # -Socket inet:8893@localhost +# Socket inet:8893@localhost +Socket local:/run/opendmarc/opendmarc.sock ## SoftwareHeader { true | false } ## default "false" From 14db4fad956dfae0cdd9152c1e4ed36c50d7d58d Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sun, 14 May 2023 20:56:06 -0500 Subject: [PATCH 34/47] Update to Postfix 3.7 and local sockets for milters --- templates/Fedora/38/etc/postfix/access | 4 +- templates/Fedora/38/etc/postfix/canonical | 6 +- templates/Fedora/38/etc/postfix/generic | 62 +++++++++-------- templates/Fedora/38/etc/postfix/main.cf | 34 ++++++---- templates/Fedora/38/etc/postfix/main.cf.proto | 29 +++++--- templates/Fedora/38/etc/postfix/master.cf | 38 +++++++---- .../Fedora/38/etc/postfix/master.cf.proto | 36 ++++++---- templates/Fedora/38/etc/postfix/postfix-files | 19 +++++- templates/Fedora/38/etc/postfix/relocated | 68 ++++++++++--------- templates/Fedora/38/etc/postfix/transport | 2 +- templates/Fedora/38/etc/postfix/virtual | 18 ++--- vars/Fedora-38-default.yml | 10 ++- 12 files changed, 188 insertions(+), 138 deletions(-) diff --git a/templates/Fedora/38/etc/postfix/access b/templates/Fedora/38/etc/postfix/access index 257339b..97892eb 100644 --- a/templates/Fedora/38/etc/postfix/access +++ b/templates/Fedora/38/etc/postfix/access @@ -31,7 +31,7 @@ # # Alternatively, the table can be provided as a regu- # lar-expression map where patterns are given as regular -# expressions, or lookups can be directed to TCP-based +# expressions, or lookups can be directed to a TCP-based # server. In those cases, the lookups are done in a slightly # different way as described below under "REGULAR EXPRESSION # TABLES" or "TCP-BASED TABLES". @@ -232,7 +232,7 @@ # # DEFER_IF_PERMIT optional text... # Defer the request if some later restriction would -# result in a an explicit or implicit PERMIT action. +# result in an explicit or implicit PERMIT action. # Reply with "$access_map_defer_code 4.7.1 optional # text..." when the optional text is specified, oth- # erwise reply with a generic error response message. diff --git a/templates/Fedora/38/etc/postfix/canonical b/templates/Fedora/38/etc/postfix/canonical index 9881f4e..4957fcc 100644 --- a/templates/Fedora/38/etc/postfix/canonical +++ b/templates/Fedora/38/etc/postfix/canonical @@ -29,7 +29,7 @@ # # Alternatively, the table can be provided as a regu- # lar-expression map where patterns are given as regular -# expressions, or lookups can be directed to TCP-based +# expressions, or lookups can be directed to a TCP-based # server. In those cases, the lookups are done in a slightly # different way as described below under "REGULAR EXPRESSION # TABLES" or "TCP-BASED TABLES". @@ -252,8 +252,8 @@ # # masquerade_exceptions (empty) # Optional list of user names that are not subjected -# to address masquerading, even when their address -# matches $masquerade_domains. +# to address masquerading, even when their addresses +# match $masquerade_domains. # # mydestination ($myhostname, localhost.$mydomain, local- # host) diff --git a/templates/Fedora/38/etc/postfix/generic b/templates/Fedora/38/etc/postfix/generic index 9d29368..f371eb9 100644 --- a/templates/Fedora/38/etc/postfix/generic +++ b/templates/Fedora/38/etc/postfix/generic @@ -42,8 +42,8 @@ # # Alternatively, the table can be provided as a regu- # lar-expression map where patterns are given as regular -# expressions, or lookups can be directed to TCP-based -# server. In those case, the lookups are done in a slightly +# expressions, or lookups can be directed to a TCP-based +# server. In those cases, the lookups are done in a slightly # different way as described below under "REGULAR EXPRESSION # TABLES" or "TCP-BASED TABLES". # @@ -140,8 +140,8 @@ # This section describes how the table lookups change when # lookups are directed to a TCP-based server. For a descrip- # tion of the TCP client/server lookup protocol, see tcp_ta- -# ble(5). This feature is not available up to and including -# Postfix version 2.4. +# ble(5). This feature is available in Postfix 2.5 and +# later. # # Each lookup operation uses the entire address once. Thus, # user@domain mail addresses are not broken up into their @@ -180,40 +180,42 @@ # The text below provides only a parameter summary. See # postconf(5) for more details including examples. # -# smtp_generic_maps -# Address mapping lookup table for envelope and -# header sender and recipient addresses while deliv- -# ering mail via SMTP. +# smtp_generic_maps (empty) +# Optional lookup tables that perform address rewrit- +# ing in the Postfix SMTP client, typically to trans- +# form a locally valid address into a globally valid +# address when sending mail across the Internet. # -# propagate_unmatched_extensions -# A list of address rewriting or forwarding mecha- -# nisms that propagate an address extension from the -# original address to the result. Specify zero or -# more of canonical, virtual, alias, forward, -# include, or generic. +# propagate_unmatched_extensions (canonical, virtual) +# What address lookup tables copy an address exten- +# sion from the lookup key to the lookup result. # # Other parameters of interest: # -# inet_interfaces -# The network interface addresses that this system -# receives mail on. You need to stop and start Post- -# fix when this parameter changes. +# inet_interfaces (all) +# The network interface addresses that this mail sys- +# tem receives mail on. # -# proxy_interfaces -# Other interfaces that this machine receives mail on -# by way of a proxy agent or network address transla- -# tor. +# proxy_interfaces (empty) +# The network interface addresses that this mail sys- +# tem receives mail on by way of a proxy or network +# address translation unit. # -# mydestination -# List of domains that this mail system considers -# local. +# mydestination ($myhostname, localhost.$mydomain, local- +# host) +# The list of domains that are delivered via the +# $local_transport mail delivery transport. # -# myorigin -# The domain that is appended to locally-posted mail. +# myorigin ($myhostname) +# The domain name that locally-posted mail appears to +# come from, and that locally posted mail is deliv- +# ered to. # -# owner_request_special -# Give special treatment to owner-xxx and xxx-request -# addresses. +# owner_request_special (yes) +# Enable special treatment for owner-listname entries +# in the aliases(5) file, and don't split owner-list- +# name and listname-request address localparts when +# the recipient_delimiter is set to "-". # # SEE ALSO # postmap(1), Postfix lookup table manager diff --git a/templates/Fedora/38/etc/postfix/main.cf b/templates/Fedora/38/etc/postfix/main.cf index e26183d..98f02e6 100644 --- a/templates/Fedora/38/etc/postfix/main.cf +++ b/templates/Fedora/38/etc/postfix/main.cf @@ -2,6 +2,10 @@ # of all parameters. For the syntax, and for a complete parameter # list, see the postconf(5) manual page (command: "man 5 postconf"). # +# TIP: use the command "postconf -n" to view main.cf parameter +# settings, "postconf parametername" to view a specific parameter, +# and "postconf 'parametername=value'" to set a specific parameter. +# # For common configuration examples, see BASIC_CONFIGURATION_README # and STANDARD_CONFIGURATION_README. To find these documents, use # the command "postconf html_directory readme_directory", or go to @@ -27,7 +31,7 @@ # # The level below is what should be used with new (not upgrade) installs. # -compatibility_level = 3.6 +compatibility_level = 3.7 # SOFT BOUNCE # @@ -251,11 +255,14 @@ unknown_local_recipient_reject_code = 550 # You can specify the list of "trusted" network addresses by hand # or you can let Postfix do it for you (which is the default). # -# By default (mynetworks_style = subnet), Postfix "trusts" SMTP -# clients in the same IP subnetworks as the local machine. -# On Linux, this works correctly only with interfaces specified -# with the "ifconfig" command. +# By default (mynetworks_style = host), Postfix "trusts" only +# the local machine. # +# Specify "mynetworks_style = subnet" when Postfix should "trust" +# SMTP clients in the same IP subnetworks as the local machine. +# On Linux, this works correctly only with interfaces specified +# with the "ifconfig" or "ip" command. +# # Specify "mynetworks_style = class" when Postfix should "trust" SMTP # clients in the same IP class A/B/C networks as the local machine. # Don't do this with a dialup site - it would cause Postfix to "trust" @@ -285,14 +292,16 @@ unknown_local_recipient_reject_code = 550 #mynetworks = hash:/etc/postfix/network_table # The relay_domains parameter restricts what destinations this system will -# relay mail to. See the smtpd_recipient_restrictions description in -# postconf(5) for detailed information. +# relay mail to. See the smtpd_relay_restrictions and +# smtpd_recipient_restrictions descriptions in postconf(5) for detailed +# information. # # By default, Postfix relays mail -# - from "trusted" clients (IP address matches $mynetworks) to any destination, +# - from "trusted" clients (IP address matches $mynetworks, or is +# SASL authenticated) to any destination, # - from "untrusted" clients to destinations that match $relay_domains or # subdomains thereof, except addresses with sender-specified routing. -# The default relay_domains value is $mydestination. +# The default relay_domains value is empty. # # In addition to the above, the Postfix SMTP server by default accepts mail # that Postfix is final destination for: @@ -312,7 +321,7 @@ unknown_local_recipient_reject_code = 550 # list this system as their primary or backup MX host. See the # permit_mx_backup restriction description in postconf(5). # -#relay_domains = $mydestination +#relay_domains = # INTERNET OR INTRANET @@ -744,9 +753,9 @@ shlib_directory = /usr/lib64/postfix {% if ensure_postfix.milter_list is defined and ensure_postfix.milter_list is iterable %} # The Milter List {% for milter in ensure_postfix.milter_list %} -# -- {{ milter.description }} -- {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} +# -- {{ milter.description }} -- {{ milter.protocol }}:{{ milter.destination }} {% endfor %} -smtpd_milters = {% for milter in ensure_postfix.milter_list %} {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} {% endfor %} +smtpd_milters = {% for milter in ensure_postfix.milter_list %} {{ milter.protocol }}:{{ milter.destination }} {% endfor %} {% endif %} {% if postfix_domains is defined and postfix_domains is iterable %} @@ -763,4 +772,3 @@ message_size_limit = {{ postfix_message_size_limit }} smtpd_helo_restrictions = reject_unknown_helo_hostname smtpd_client_restrictions = reject_unknown_reverse_client_hostname reject_unauth_pipelining smtpd_discard_ehlo_keywords = silent-discard, dsn - diff --git a/templates/Fedora/38/etc/postfix/main.cf.proto b/templates/Fedora/38/etc/postfix/main.cf.proto index 9bef4f2..112c1f1 100644 --- a/templates/Fedora/38/etc/postfix/main.cf.proto +++ b/templates/Fedora/38/etc/postfix/main.cf.proto @@ -2,6 +2,10 @@ # of all parameters. For the syntax, and for a complete parameter # list, see the postconf(5) manual page (command: "man 5 postconf"). # +# TIP: use the command "postconf -n" to view main.cf parameter +# settings, "postconf parametername" to view a specific parameter, +# and "postconf 'parametername=value'" to set a specific parameter. +# # For common configuration examples, see BASIC_CONFIGURATION_README # and STANDARD_CONFIGURATION_README. To find these documents, use # the command "postconf html_directory readme_directory", or go to @@ -27,7 +31,7 @@ # # The level below is what should be used with new (not upgrade) installs. # -compatibility_level = 3.6 +compatibility_level = 3.7 # SOFT BOUNCE # @@ -251,11 +255,14 @@ unknown_local_recipient_reject_code = 550 # You can specify the list of "trusted" network addresses by hand # or you can let Postfix do it for you (which is the default). # -# By default (mynetworks_style = subnet), Postfix "trusts" SMTP -# clients in the same IP subnetworks as the local machine. -# On Linux, this works correctly only with interfaces specified -# with the "ifconfig" command. +# By default (mynetworks_style = host), Postfix "trusts" only +# the local machine. # +# Specify "mynetworks_style = subnet" when Postfix should "trust" +# SMTP clients in the same IP subnetworks as the local machine. +# On Linux, this works correctly only with interfaces specified +# with the "ifconfig" or "ip" command. +# # Specify "mynetworks_style = class" when Postfix should "trust" SMTP # clients in the same IP class A/B/C networks as the local machine. # Don't do this with a dialup site - it would cause Postfix to "trust" @@ -285,14 +292,16 @@ unknown_local_recipient_reject_code = 550 #mynetworks = hash:/etc/postfix/network_table # The relay_domains parameter restricts what destinations this system will -# relay mail to. See the smtpd_recipient_restrictions description in -# postconf(5) for detailed information. +# relay mail to. See the smtpd_relay_restrictions and +# smtpd_recipient_restrictions descriptions in postconf(5) for detailed +# information. # # By default, Postfix relays mail -# - from "trusted" clients (IP address matches $mynetworks) to any destination, +# - from "trusted" clients (IP address matches $mynetworks, or is +# SASL authenticated) to any destination, # - from "untrusted" clients to destinations that match $relay_domains or # subdomains thereof, except addresses with sender-specified routing. -# The default relay_domains value is $mydestination. +# The default relay_domains value is empty. # # In addition to the above, the Postfix SMTP server by default accepts mail # that Postfix is final destination for: @@ -312,7 +321,7 @@ unknown_local_recipient_reject_code = 550 # list this system as their primary or backup MX host. See the # permit_mx_backup restriction description in postconf(5). # -#relay_domains = $mydestination +#relay_domains = # INTERNET OR INTRANET diff --git a/templates/Fedora/38/etc/postfix/master.cf b/templates/Fedora/38/etc/postfix/master.cf index 4beb91f..bb0eae9 100644 --- a/templates/Fedora/38/etc/postfix/master.cf +++ b/templates/Fedora/38/etc/postfix/master.cf @@ -16,30 +16,38 @@ smtp inet n - n - - smtpd #tlsproxy unix - - n - 0 tlsproxy # Choose one: enable submission for loopback clients only, or for any client. #127.0.0.1:submission inet n - n - - smtpd -# submission inet n - n - - smtpd +#submission inet n - n - - smtpd # -o syslog_name=postfix/submission # -o smtpd_tls_security_level=encrypt # -o smtpd_sasl_auth_enable=yes # -o smtpd_tls_auth_only=yes # -o smtpd_reject_unlisted_recipient=no -# -o smtpd_client_restrictions=$mua_client_restrictions -# -o smtpd_helo_restrictions=$mua_helo_restrictions -# -o smtpd_sender_restrictions=$mua_sender_restrictions -# -o smtpd_recipient_restrictions= -# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject +# Instead of specifying complex smtpd__restrictions here, +# specify "smtpd__restrictions=$mua__restrictions" +# here, and specify mua__restrictions in main.cf (where +# "" is "client", "helo", "sender", "relay", or "recipient"). +# -o smtpd_client_restrictions= +# -o smtpd_helo_restrictions= +# -o smtpd_sender_restrictions= +# -o smtpd_relay_restrictions= +# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject # -o milter_macro_daemon_name=ORIGINATING -# Choose one: enable smtps for loopback clients only, or for any client. -#127.0.0.1:smtps inet n - n - - smtpd -# smtps inet n - n - - smtpd -# -o syslog_name=postfix/smtps +# Choose one: enable submissions for loopback clients only, or for any client. +#127.0.0.1:submissions inet n - n - - smtpd +#submissions inet n - n - - smtpd +# -o syslog_name=postfix/submissions # -o smtpd_tls_wrappermode=yes # -o smtpd_sasl_auth_enable=yes # -o smtpd_reject_unlisted_recipient=no -# -o smtpd_client_restrictions=$mua_client_restrictions -# -o smtpd_helo_restrictions=$mua_helo_restrictions -# -o smtpd_sender_restrictions=$mua_sender_restrictions -# -o smtpd_recipient_restrictions= -# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject +# Instead of specifying complex smtpd__restrictions here, +# specify "smtpd__restrictions=$mua__restrictions" +# here, and specify mua__restrictions in main.cf (where +# "" is "client", "helo", "sender", "relay", or "recipient"). +# -o smtpd_client_restrictions= +# -o smtpd_helo_restrictions= +# -o smtpd_sender_restrictions= +# -o smtpd_relay_restrictions= +# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject # -o milter_macro_daemon_name=ORIGINATING #628 inet n - n - - qmqpd pickup unix n - n 60 1 pickup diff --git a/templates/Fedora/38/etc/postfix/master.cf.proto b/templates/Fedora/38/etc/postfix/master.cf.proto index f33d9dd..bb0eae9 100644 --- a/templates/Fedora/38/etc/postfix/master.cf.proto +++ b/templates/Fedora/38/etc/postfix/master.cf.proto @@ -22,24 +22,32 @@ smtp inet n - n - - smtpd # -o smtpd_sasl_auth_enable=yes # -o smtpd_tls_auth_only=yes # -o smtpd_reject_unlisted_recipient=no -# -o smtpd_client_restrictions=$mua_client_restrictions -# -o smtpd_helo_restrictions=$mua_helo_restrictions -# -o smtpd_sender_restrictions=$mua_sender_restrictions -# -o smtpd_recipient_restrictions= -# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject +# Instead of specifying complex smtpd__restrictions here, +# specify "smtpd__restrictions=$mua__restrictions" +# here, and specify mua__restrictions in main.cf (where +# "" is "client", "helo", "sender", "relay", or "recipient"). +# -o smtpd_client_restrictions= +# -o smtpd_helo_restrictions= +# -o smtpd_sender_restrictions= +# -o smtpd_relay_restrictions= +# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject # -o milter_macro_daemon_name=ORIGINATING -# Choose one: enable smtps for loopback clients only, or for any client. -#127.0.0.1:smtps inet n - n - - smtpd -#smtps inet n - n - - smtpd -# -o syslog_name=postfix/smtps +# Choose one: enable submissions for loopback clients only, or for any client. +#127.0.0.1:submissions inet n - n - - smtpd +#submissions inet n - n - - smtpd +# -o syslog_name=postfix/submissions # -o smtpd_tls_wrappermode=yes # -o smtpd_sasl_auth_enable=yes # -o smtpd_reject_unlisted_recipient=no -# -o smtpd_client_restrictions=$mua_client_restrictions -# -o smtpd_helo_restrictions=$mua_helo_restrictions -# -o smtpd_sender_restrictions=$mua_sender_restrictions -# -o smtpd_recipient_restrictions= -# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject +# Instead of specifying complex smtpd__restrictions here, +# specify "smtpd__restrictions=$mua__restrictions" +# here, and specify mua__restrictions in main.cf (where +# "" is "client", "helo", "sender", "relay", or "recipient"). +# -o smtpd_client_restrictions= +# -o smtpd_helo_restrictions= +# -o smtpd_sender_restrictions= +# -o smtpd_relay_restrictions= +# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject # -o milter_macro_daemon_name=ORIGINATING #628 inet n - n - - qmqpd pickup unix n - n 60 1 pickup diff --git a/templates/Fedora/38/etc/postfix/postfix-files b/templates/Fedora/38/etc/postfix/postfix-files index 1eda0a3..b3ed234 100644 --- a/templates/Fedora/38/etc/postfix/postfix-files +++ b/templates/Fedora/38/etc/postfix/postfix-files @@ -123,7 +123,7 @@ $command_directory/postconf:f:root:-:755 $command_directory/postfix:f:root:-:755 $command_directory/postkick:f:root:-:755 $command_directory/postlock:f:root:-:755 -$command_directory/postlog:f:root:-:755 +$command_directory/postlog:f:root:$setgid_group:2755:u $command_directory/postmap:f:root:-:755 $command_directory/postmulti:f:root:-:755 $command_directory/postsuper:f:root:-:755 @@ -157,8 +157,8 @@ $manpage_directory/man1/postalias.1.gz:f:root:-:644 $manpage_directory/man1/postcat.1.gz:f:root:-:644 $manpage_directory/man1/postconf.1.gz:f:root:-:644 $manpage_directory/man1/postdrop.1.gz:f:root:-:644 -$manpage_directory/man1/postfix.1.gz:f:root:-:644 $manpage_directory/man1/postfix-tls.1.gz:f:root:-:644 +$manpage_directory/man1/postfix.1.gz:f:root:-:644 $manpage_directory/man1/postkick.1.gz:f:root:-:644 $manpage_directory/man1/postlock.1.gz:f:root:-:644 $manpage_directory/man1/postlog.1.gz:f:root:-:644 @@ -256,6 +256,7 @@ $readme_directory/ADDRESS_REWRITING_README:f:root:-:644 $readme_directory/ADDRESS_VERIFICATION_README:f:root:-:644 $readme_directory/BACKSCATTER_README:f:root:-:644 $readme_directory/BASIC_CONFIGURATION_README:f:root:-:644 +$readme_directory/BDAT_README:f:root:-:644 $readme_directory/BUILTIN_FILTER_README:f:root:-:644 $readme_directory/COMPATIBILITY_README:f:root:-:644 $readme_directory/CONNECTION_CACHE_README:f:root:-:644 @@ -274,12 +275,15 @@ $readme_directory/LINUX_README:f:root:-:644 $readme_directory/LOCAL_RECIPIENT_README:f:root:-:644 $readme_directory/MACOSX_README:f:root:-:644:o $readme_directory/MAILDROP_README:f:root:-:644 +$readme_directory/MAILLOG_README:f:root:-:644 $readme_directory/MEMCACHE_README:f:root:-:644 $readme_directory/MILTER_README:f:root:-:644 $readme_directory/MULTI_INSTANCE_README:f:root:-:644 +$readme_directory/SMTPUTF8_README:f:root:-:644 $readme_directory/NFS_README:f:root:-:644 $readme_directory/OVERVIEW:f:root:-:644 $readme_directory/PACKAGE_README:f:root:-:644 +$readme_directory/POSTSCREEN_3_5_README:f:root:-:644 $readme_directory/POSTSCREEN_README:f:root:-:644 $readme_directory/QMQP_README:f:root:-:644:o $readme_directory/QSHAPE_README:f:root:-:644 @@ -307,6 +311,7 @@ $html_directory/ADDRESS_REWRITING_README.html:f:root:-:644 $html_directory/ADDRESS_VERIFICATION_README.html:f:root:-:644 $html_directory/BACKSCATTER_README.html:f:root:-:644 $html_directory/BASIC_CONFIGURATION_README.html:f:root:-:644 +$html_directory/BDAT_README.html:f:root:-:644 $html_directory/BUILTIN_FILTER_README.html:f:root:-:644 $html_directory/CDB_README.html:f:root:-:644 $html_directory/COMPATIBILITY_README.html:f:root:-:644 @@ -327,15 +332,19 @@ $html_directory/LINUX_README.html:f:root:-:644 $html_directory/LMDB_README.html:f:root:-:644 $html_directory/LOCAL_RECIPIENT_README.html:f:root:-:644 $html_directory/MAILDROP_README.html:f:root:-:644 +$html_directory/MAILLOG_README.html:f:root:-:644 +$html_directory/MEMCACHE_README.html:f:root:-:644 $html_directory/MILTER_README.html:f:root:-:644 $html_directory/MULTI_INSTANCE_README.html:f:root:-:644 $html_directory/MYSQL_README.html:f:root:-:644 +$html_directory/SMTPUTF8_README.html:f:root:-:644 $html_directory/SQLITE_README.html:f:root:-:644 $html_directory/NFS_README.html:f:root:-:644 $html_directory/OVERVIEW.html:f:root:-:644 $html_directory/PACKAGE_README.html:f:root:-:644 $html_directory/PCRE_README.html:f:root:-:644 $html_directory/PGSQL_README.html:f:root:-:644 +$html_directory/POSTSCREEN_3_5_README.html:f:root:-:644 $html_directory/POSTSCREEN_README.html:f:root:-:644 $html_directory/QMQP_README.html:f:root:-:644:o $html_directory/QSHAPE_README.html:f:root:-:644 @@ -360,6 +369,7 @@ $html_directory/XFORWARD_README.html:f:root:-:644 $html_directory/access.5.html:f:root:-:644 $html_directory/aliases.5.html:f:root:-:644 $html_directory/anvil.8.html:f:root:-:644 +$html_directory/bounce.5.html:f:root:-:644 $html_directory/bounce.8.html:f:root:-:644 $html_directory/canonical.5.html:f:root:-:644 $html_directory/cidr_table.5.html:f:root:-:644 @@ -374,6 +384,7 @@ $html_directory/generic.5.html:f:root:-:644 $html_directory/header_checks.5.html:f:root:-:644 $html_directory/index.html:f:root:-:644 $html_directory/ldap_table.5.html:f:root:-:644 +$html_directory/lmdb_table.5.html:f:root:-:644 $html_directory/lmtp.8.html:f:root:-:644 $html_directory/local.8.html:f:root:-:644 $html_directory/mailq.1.html:f:root:-:644 @@ -396,6 +407,7 @@ $html_directory/postconf.5.html:f:root:-:644 $html_directory/postdrop.1.html:f:root:-:644 $html_directory/postfix-logo.jpg:f:root:-:644 $html_directory/postfix-manuals.html:f:root:-:644 +$html_directory/postfix-tls.1.html:f:root:-:644 $html_directory/postfix-wrapper.5.html:f:root:-:644 $html_directory/postfix.1.html:f:root:-:644 $html_directory/postkick.1.html:f:root:-:644 @@ -415,13 +427,16 @@ $html_directory/qmqp-source.1.html:f:root:-:644 $html_directory/qmqpd.8.html:f:root:-:644 $html_directory/regexp_table.5.html:f:root:-:644 $html_directory/relocated.5.html:f:root:-:644 +$html_directory/scache.8.html:f:root:-:644 $html_directory/sendmail.1.html:h:$html_directory/mailq.1.html:-:644 $html_directory/showq.8.html:f:root:-:644 $html_directory/smtp-sink.1.html:f:root:-:644 $html_directory/smtp-source.1.html:f:root:-:644 $html_directory/smtp.8.html:h:$html_directory/lmtp.8.html:-:644 $html_directory/smtpd.8.html:f:root:-:644 +$html_directory/socketmap_table.5.html:f:root:-:644 $html_directory/spawn.8.html:f:root:-:644 +$html_directory/tlsmgr.8.html:f:root:-:644 $html_directory/tlsproxy.8.html:f:root:-:644 $html_directory/tcp_table.5.html:f:root:-:644 $html_directory/trace.8.html:h:$html_directory/bounce.8.html:-:644 diff --git a/templates/Fedora/38/etc/postfix/relocated b/templates/Fedora/38/etc/postfix/relocated index e50edfd..90f63ec 100644 --- a/templates/Fedora/38/etc/postfix/relocated +++ b/templates/Fedora/38/etc/postfix/relocated @@ -24,7 +24,7 @@ # # Alternatively, the table can be provided as a regu- # lar-expression map where patterns are given as regular -# expressions, or lookups can be directed to TCP-based +# expressions, or lookups can be directed to a TCP-based # server. In those case, the lookups are done in a slightly # different way as described below under "REGULAR EXPRESSION # TABLES" or "TCP-BASED TABLES". @@ -86,66 +86,68 @@ # description of regular expression lookup table syntax, see # regexp_table(5) or pcre_table(5). For a description of the # TCP client/server table lookup protocol, see tcp_table(5). -# This feature is not available up to and including Postfix -# version 2.4. +# This feature is available in Postfix 2.5 and later. # -# Each pattern is a regular expression that is applied to +# Each pattern is a regular expression that is applied to # the entire address being looked up. Thus, user@domain mail -# addresses are not broken up into their user and @domain +# addresses are not broken up into their user and @domain # constituent parts, nor is user+foo broken up into user and # foo. # -# Patterns are applied in the order as specified in the ta- -# ble, until a pattern is found that matches the search +# Patterns are applied in the order as specified in the ta- +# ble, until a pattern is found that matches the search # string. # -# Results are the same as with indexed file lookups, with -# the additional feature that parenthesized substrings from +# Results are the same as with indexed file lookups, with +# the additional feature that parenthesized substrings from # the pattern can be interpolated as $1, $2 and so on. # # TCP-BASED TABLES -# This section describes how the table lookups change when +# This section describes how the table lookups change when # lookups are directed to a TCP-based server. For a descrip- # tion of the TCP client/server lookup protocol, see tcp_ta- -# ble(5). This feature is not available up to and including -# Postfix version 2.4. +# ble(5). This feature is available in Postfix 2.5 and +# later. # # Each lookup operation uses the entire address once. Thus, -# user@domain mail addresses are not broken up into their +# user@domain mail addresses are not broken up into their # user and @domain constituent parts, nor is user+foo broken # up into user and foo. # # Results are the same as with indexed file lookups. # # BUGS -# The table format does not understand quoting conventions. +# The table format does not understand quoting conventions. # # CONFIGURATION PARAMETERS -# The following main.cf parameters are especially relevant. -# The text below provides only a parameter summary. See +# The following main.cf parameters are especially relevant. +# The text below provides only a parameter summary. See # postconf(5) for more details including examples. # -# relocated_maps -# List of lookup tables for relocated users or sites. +# relocated_maps (empty) +# Optional lookup tables with new contact information +# for users or domains that no longer exist. # # Other parameters of interest: # -# inet_interfaces -# The network interface addresses that this system -# receives mail on. You need to stop and start Post- -# fix when this parameter changes. +# inet_interfaces (all) +# The network interface addresses that this mail sys- +# tem receives mail on. # -# mydestination -# List of domains that this mail system considers -# local. +# mydestination ($myhostname, localhost.$mydomain, local- +# host) +# The list of domains that are delivered via the +# $local_transport mail delivery transport. # -# myorigin -# The domain that is appended to locally-posted mail. +# myorigin ($myhostname) +# The domain name that locally-posted mail appears to +# come from, and that locally posted mail is deliv- +# ered to. # -# proxy_interfaces -# Other interfaces that this machine receives mail on -# by way of a proxy agent or network address transla- -# tor. +# proxy_interfaces (empty) +# The network interface addresses that this mail sys- +# tem receives mail on by way of a proxy or network +# address translation unit. # # SEE ALSO # trivial-rewrite(8), address resolver @@ -153,13 +155,13 @@ # postconf(5), configuration parameters # # README FILES -# Use "postconf readme_directory" or "postconf html_direc- +# Use "postconf readme_directory" or "postconf html_direc- # tory" to locate this information. # DATABASE_README, Postfix lookup table overview # ADDRESS_REWRITING_README, address rewriting guide # # LICENSE -# The Secure Mailer license must be distributed with this +# The Secure Mailer license must be distributed with this # software. # # AUTHOR(S) diff --git a/templates/Fedora/38/etc/postfix/transport b/templates/Fedora/38/etc/postfix/transport index 1dcd787..bad7739 100644 --- a/templates/Fedora/38/etc/postfix/transport +++ b/templates/Fedora/38/etc/postfix/transport @@ -61,7 +61,7 @@ # # Alternatively, the table can be provided as a regu- # lar-expression map where patterns are given as regular -# expressions, or lookups can be directed to TCP-based +# expressions, or lookups can be directed to a TCP-based # server. In those case, the lookups are done in a slightly # different way as described below under "REGULAR EXPRESSION # TABLES" or "TCP-BASED TABLES". diff --git a/templates/Fedora/38/etc/postfix/virtual b/templates/Fedora/38/etc/postfix/virtual index da9cd65..96390fe 100644 --- a/templates/Fedora/38/etc/postfix/virtual +++ b/templates/Fedora/38/etc/postfix/virtual @@ -51,7 +51,7 @@ # # Alternatively, the table can be provided as a regu- # lar-expression map where patterns are given as regular -# expressions, or lookups can be directed to TCP-based +# expressions, or lookups can be directed to a TCP-based # server. In those case, the lookups are done in a slightly # different way as described below under "REGULAR EXPRESSION # TABLES" or "TCP-BASED TABLES". @@ -99,8 +99,8 @@ # tination, or when it is listed in $inet_interfaces # or $proxy_interfaces. # -# This functionality overlaps with functionality of -# the local aliases(5) database. The difference is +# This functionality overlaps with the functionality +# of the local aliases(5) database. The difference is # that virtual(5) mapping can be applied to non-local # addresses. # @@ -155,7 +155,7 @@ # # The propagate_unmatched_extensions parameter controls # whether an unmatched address extension (+foo) is propa- -# gated to the result of table lookup. +# gated to the result of a table lookup. # # VIRTUAL ALIAS DOMAINS # Besides virtual aliases, the virtual alias table can also @@ -232,8 +232,8 @@ # This section describes how the table lookups change when # lookups are directed to a TCP-based server. For a descrip- # tion of the TCP client/server lookup protocol, see tcp_ta- -# ble(5). This feature is not available up to and including -# Postfix version 2.4. +# ble(5). This feature is available in Postfix 2.5 and +# later. # # Each lookup operation uses the entire address once. Thus, # user@domain mail addresses are not broken up into their @@ -254,11 +254,11 @@ # virtual_alias_maps ($virtual_maps) # Optional lookup tables that alias specific mail # addresses or domains to other local or remote -# address. +# addresses. # # virtual_alias_domains ($virtual_alias_maps) -# Postfix is final destination for the specified list -# of virtual alias domains, that is, domains for +# Postfix is the final destination for the specified +# list of virtual alias domains, that is, domains for # which all addresses are aliased to addresses in # other local or remote domains. # diff --git a/vars/Fedora-38-default.yml b/vars/Fedora-38-default.yml index d2f418d..c5a7a2f 100644 --- a/vars/Fedora-38-default.yml +++ b/vars/Fedora-38-default.yml @@ -2,13 +2,11 @@ # vars file for ensure_postfix milter_list: - description: 'OpenDKIM' - hostname: 'localhost' - port: '8891' - protocol: 'inet' + destination: '/run/opendkim/opendkim.sock' + protocol: 'local' - description: 'OpenDMARC' - hostname: 'localhost' - port: '8893' - protocol: 'inet' + hostname: '/run/opendmarc/opendmarc.sock' + protocol: 'local' package_list: - name: 'opendkim' state: 'present' From 7d418da8ca3cd229479d6ac37b7c18c4f7a3931e Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sun, 14 May 2023 21:29:45 -0500 Subject: [PATCH 35/47] Fix for milters on Fedora 38 --- vars/Fedora-38-default.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/vars/Fedora-38-default.yml b/vars/Fedora-38-default.yml index c5a7a2f..294cb3c 100644 --- a/vars/Fedora-38-default.yml +++ b/vars/Fedora-38-default.yml @@ -5,7 +5,7 @@ milter_list: destination: '/run/opendkim/opendkim.sock' protocol: 'local' - description: 'OpenDMARC' - hostname: '/run/opendmarc/opendmarc.sock' + destination: '/run/opendmarc/opendmarc.sock' protocol: 'local' package_list: - name: 'opendkim' From fe22263513d2cb90e5d38a6ce9a61ac85675e74c Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sun, 14 May 2023 22:26:19 -0500 Subject: [PATCH 36/47] Convert back to INET sockets for milters --- templates/Fedora/38/etc/opendkim.conf | 4 ++-- templates/Fedora/38/etc/opendmarc.conf | 4 ++-- templates/Fedora/38/etc/postfix/main.cf | 4 ++-- vars/Fedora-38-default.yml | 10 ++++++---- 4 files changed, 12 insertions(+), 10 deletions(-) diff --git a/templates/Fedora/38/etc/opendkim.conf b/templates/Fedora/38/etc/opendkim.conf index aefddf4..1e26622 100644 --- a/templates/Fedora/38/etc/opendkim.conf +++ b/templates/Fedora/38/etc/opendkim.conf @@ -53,8 +53,8 @@ LogWhy yes UserID opendkim:opendkim ## Create a socket through which your MTA can communicate. -#Socket inet:8891@localhost -Socket local:/run/opendkim/opendkim.sock +Socket inet:8891@localhost +#Socket local:/run/opendkim/opendkim.sock ## Required to use local socket with MTAs that access the socket as a non- ## privileged user (e.g. Postfix) diff --git a/templates/Fedora/38/etc/opendmarc.conf b/templates/Fedora/38/etc/opendmarc.conf index 7589033..19f6b7b 100644 --- a/templates/Fedora/38/etc/opendmarc.conf +++ b/templates/Fedora/38/etc/opendmarc.conf @@ -360,8 +360,8 @@ RejectFailures true ## either in the configuration file or on the command line. If an IP ## address is used, it must be enclosed in square brackets. # -# Socket inet:8893@localhost -Socket local:/run/opendmarc/opendmarc.sock +Socket inet:8893@localhost +#Socket local:/run/opendmarc/opendmarc.sock ## SoftwareHeader { true | false } ## default "false" diff --git a/templates/Fedora/38/etc/postfix/main.cf b/templates/Fedora/38/etc/postfix/main.cf index 98f02e6..e7c5ce2 100644 --- a/templates/Fedora/38/etc/postfix/main.cf +++ b/templates/Fedora/38/etc/postfix/main.cf @@ -753,9 +753,9 @@ shlib_directory = /usr/lib64/postfix {% if ensure_postfix.milter_list is defined and ensure_postfix.milter_list is iterable %} # The Milter List {% for milter in ensure_postfix.milter_list %} -# -- {{ milter.description }} -- {{ milter.protocol }}:{{ milter.destination }} +# -- {{ milter.description }} -- {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} {% endfor %} -smtpd_milters = {% for milter in ensure_postfix.milter_list %} {{ milter.protocol }}:{{ milter.destination }} {% endfor %} +smtpd_milters = {% for milter in ensure_postfix.milter_list %} {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} {% endfor %} {% endif %} {% if postfix_domains is defined and postfix_domains is iterable %} diff --git a/vars/Fedora-38-default.yml b/vars/Fedora-38-default.yml index 294cb3c..d2f418d 100644 --- a/vars/Fedora-38-default.yml +++ b/vars/Fedora-38-default.yml @@ -2,11 +2,13 @@ # vars file for ensure_postfix milter_list: - description: 'OpenDKIM' - destination: '/run/opendkim/opendkim.sock' - protocol: 'local' + hostname: 'localhost' + port: '8891' + protocol: 'inet' - description: 'OpenDMARC' - destination: '/run/opendmarc/opendmarc.sock' - protocol: 'local' + hostname: 'localhost' + port: '8893' + protocol: 'inet' package_list: - name: 'opendkim' state: 'present' From bd41187b0114e64f8ccdc1a1cddd7fb831f3b41a Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sat, 16 Mar 2024 21:04:11 -0500 Subject: [PATCH 37/47] Add Fedora 39 --- templates/Fedora/39/etc/opendkim.conf | 135 +++ templates/Fedora/39/etc/opendkim/KeyTable | 6 + templates/Fedora/39/etc/opendkim/SigningTable | 25 + templates/Fedora/39/etc/opendkim/TrustedHosts | 9 + templates/Fedora/39/etc/opendmarc.conf | 443 ++++++++++ templates/Fedora/39/etc/postfix/access | 484 +++++++++++ templates/Fedora/39/etc/postfix/canonical | 307 +++++++ .../Fedora/39/etc/postfix/dynamicmaps.cf | 1 + .../39/etc/postfix/dynamicmaps.cf.d/ldap | 1 + .../39/etc/postfix/dynamicmaps.cf.d/mysql | 1 + .../39/etc/postfix/dynamicmaps.cf.d/pcre | 1 + templates/Fedora/39/etc/postfix/generic | 252 ++++++ templates/Fedora/39/etc/postfix/header_checks | 549 +++++++++++++ templates/Fedora/39/etc/postfix/main.cf | 774 ++++++++++++++++++ templates/Fedora/39/etc/postfix/main.cf.proto | 745 +++++++++++++++++ templates/Fedora/39/etc/postfix/master.cf | 145 ++++ .../Fedora/39/etc/postfix/master.cf.proto | 145 ++++ templates/Fedora/39/etc/postfix/postfix-files | 447 ++++++++++ .../39/etc/postfix/postfix-files.d/ldap | 3 + .../39/etc/postfix/postfix-files.d/mysql | 3 + .../39/etc/postfix/postfix-files.d/pcre | 3 + templates/Fedora/39/etc/postfix/relocated | 178 ++++ templates/Fedora/39/etc/postfix/transport | 317 +++++++ templates/Fedora/39/etc/postfix/virtual | 324 ++++++++ .../systemd/system/postfix-copytls.service | 12 + .../lib/systemd/system/postfix-copytls.timer | 9 + vars/Fedora-39-defaults.yml | 110 +++ 27 files changed, 5429 insertions(+) create mode 100644 templates/Fedora/39/etc/opendkim.conf create mode 100644 templates/Fedora/39/etc/opendkim/KeyTable create mode 100644 templates/Fedora/39/etc/opendkim/SigningTable create mode 100644 templates/Fedora/39/etc/opendkim/TrustedHosts create mode 100644 templates/Fedora/39/etc/opendmarc.conf create mode 100644 templates/Fedora/39/etc/postfix/access create mode 100644 templates/Fedora/39/etc/postfix/canonical create mode 100644 templates/Fedora/39/etc/postfix/dynamicmaps.cf create mode 100644 templates/Fedora/39/etc/postfix/dynamicmaps.cf.d/ldap create mode 100644 templates/Fedora/39/etc/postfix/dynamicmaps.cf.d/mysql create mode 100644 templates/Fedora/39/etc/postfix/dynamicmaps.cf.d/pcre create mode 100644 templates/Fedora/39/etc/postfix/generic create mode 100644 templates/Fedora/39/etc/postfix/header_checks create mode 100644 templates/Fedora/39/etc/postfix/main.cf create mode 100644 templates/Fedora/39/etc/postfix/main.cf.proto create mode 100644 templates/Fedora/39/etc/postfix/master.cf create mode 100644 templates/Fedora/39/etc/postfix/master.cf.proto create mode 100644 templates/Fedora/39/etc/postfix/postfix-files create mode 100644 templates/Fedora/39/etc/postfix/postfix-files.d/ldap create mode 100644 templates/Fedora/39/etc/postfix/postfix-files.d/mysql create mode 100644 templates/Fedora/39/etc/postfix/postfix-files.d/pcre create mode 100644 templates/Fedora/39/etc/postfix/relocated create mode 100644 templates/Fedora/39/etc/postfix/transport create mode 100644 templates/Fedora/39/etc/postfix/virtual create mode 100644 templates/Fedora/39/usr/lib/systemd/system/postfix-copytls.service create mode 100644 templates/Fedora/39/usr/lib/systemd/system/postfix-copytls.timer create mode 100644 vars/Fedora-39-defaults.yml diff --git a/templates/Fedora/39/etc/opendkim.conf b/templates/Fedora/39/etc/opendkim.conf new file mode 100644 index 0000000..1e26622 --- /dev/null +++ b/templates/Fedora/39/etc/opendkim.conf @@ -0,0 +1,135 @@ +## BASIC OPENDKIM CONFIGURATION FILE +## See opendkim.conf(5) or /usr/share/doc/opendkim/opendkim.conf.sample for more + +## BEFORE running OpenDKIM you must: + +## - make your MTA (Postfix, Sendmail, etc.) aware of OpenDKIM +## - generate keys for your domain (if signing) +## - edit your DNS records to publish your public keys (if signing) + +## See /usr/share/doc/opendkim/INSTALL for detailed instructions. + +## DEPRECATED CONFIGURATION OPTIONS +## +## The following configuration options are no longer valid. They should be +## removed from your existing configuration file to prevent potential issues. +## Failure to do so may result in opendkim being unable to start. +## +## Removed in 2.10.0: +## AddAllSignatureResults +## ADSPAction +## ADSPNoSuchDomain +## BogusPolicy +## DisableADSP +## LDAPSoftStart +## LocalADSP +## NoDiscardableMailTo +## On-PolicyError +## SendADSPReports +## UnprotectedPolicy + +## CONFIGURATION OPTIONS + +## Specifies the path to the process ID file. +#PidFile /run/opendkim/opendkim.pid + +## Selects operating modes. Valid modes are s (sign) and v (verify). Default is v. +## Must be changed to s (sign only) or sv (sign and verify) in order to sign outgoing +## messages. +Mode v + +## Log activity to the system log. +Syslog yes + +## Log additional entries indicating successful signing or verification of messages. +SyslogSuccess yes + +## If logging is enabled, include detailed logging about why or why not a message was +## signed or verified. This causes an increase in the amount of log data generated +## for each message, so set this to No (or comment it out) if it gets too noisy. +LogWhy yes + +## Attempt to become the specified user before starting operations. +UserID opendkim:opendkim + +## Create a socket through which your MTA can communicate. +Socket inet:8891@localhost +#Socket local:/run/opendkim/opendkim.sock + +## Required to use local socket with MTAs that access the socket as a non- +## privileged user (e.g. Postfix) +Umask 002 + +## This specifies a text file in which to store DKIM transaction statistics. +## OpenDKIM must be manually compiled with --enable-stats to enable this feature. +# Statistics /var/spool/opendkim/stats.dat + +## Specifies whether or not the filter should generate report mail back +## to senders when verification fails and an address for such a purpose +## is provided. See opendkim.conf(5) for details. +SendReports yes + +## Specifies the sending address to be used on From: headers of outgoing +## failure reports. By default, the e-mail address of the user executing +## the filter is used (executing_user@hostname). +# ReportAddress "Example.com Postmaster" +ReportAddress "Postmaster" <{{ postmaster_email }}> + +## Add a DKIM-Filter header field to messages passing through this filter +## to identify messages it has processed. +SoftwareHeader yes + +## SIGNING OPTIONS + +## Selects the canonicalization method(s) to be used when signing messages. +Canonicalization relaxed/relaxed + +## Domain(s) whose mail should be signed by this filter. Mail from other domains will +## be verified rather than being signed. Uncomment and use your domain name. +## This parameter is not required if a SigningTable is in use. +# Domain example.com + +## Defines the name of the selector to be used when signing messages. +Selector default + +## Specifies the minimum number of key bits for acceptable keys and signatures. +MinimumKeyBits 1024 + +## Gives the location of a private key to be used for signing ALL messages. This +## directive is ignored if KeyTable is enabled. +# KeyFile /etc/opendkim/keys/default.private + +## Gives the location of a file mapping key names to signing keys. In simple terms, +## this tells OpenDKIM where to find your keys. If present, overrides any KeyFile +## directive in the configuration file. Requires SigningTable be enabled. +# KeyTable /etc/opendkim/KeyTable + +## Defines a table used to select one or more signatures to apply to a message based +## on the address found in the From: header field. In simple terms, this tells +## OpenDKIM how to use your keys. Requires KeyTable be enabled. +# SigningTable refile:/etc/opendkim/SigningTable + +## Identifies a set of "external" hosts that may send mail through the server as one +## of the signing domains without credentials as such. +# ExternalIgnoreList refile:/etc/opendkim/TrustedHosts + +## Identifies a set "internal" hosts whose mail should be signed rather than verified. +# InternalHosts refile:/etc/opendkim/TrustedHosts + +## Contains a list of IP addresses, CIDR blocks, hostnames or domain names +## whose mail should be neither signed nor verified by this filter. See man +## page for file format. +# PeerList X.X.X.X + +## Always oversign From (sign using actual From and a null From to prevent +## malicious signatures header fields (From and/or others) between the signer +## and the verifier. From is oversigned by default in the Fedora package +## because it is often the identity key used by reputation systems and thus +## somewhat security sensitive. +OversignHeaders From + +## Instructs the DKIM library to maintain its own local cache of keys and +## policies retrieved from DNS, rather than relying on the nameserver for +## caching service. Useful if the nameserver being used by the filter is +## not local. +# QueryCache yes diff --git a/templates/Fedora/39/etc/opendkim/KeyTable b/templates/Fedora/39/etc/opendkim/KeyTable new file mode 100644 index 0000000..e804d68 --- /dev/null +++ b/templates/Fedora/39/etc/opendkim/KeyTable @@ -0,0 +1,6 @@ +# OPENDKIM KEY TABLE +# To use this file, uncomment the #KeyTable option in /etc/opendkim.conf, +# then uncomment the following line and replace example.com with your domain +# name, then restart OpenDKIM. Additional keys may be added on separate lines. + +#default._domainkey.example.com example.com:default:/etc/opendkim/keys/default.private diff --git a/templates/Fedora/39/etc/opendkim/SigningTable b/templates/Fedora/39/etc/opendkim/SigningTable new file mode 100644 index 0000000..e8161a1 --- /dev/null +++ b/templates/Fedora/39/etc/opendkim/SigningTable @@ -0,0 +1,25 @@ +# OPENDKIM SIGNING TABLE +# This table controls how to apply one or more signatures to outgoing messages based +# on the address found in the From: header field. In simple terms, this tells +# OpenDKIM "how" to apply your keys. + +# To use this file, uncomment the SigningTable option in /etc/opendkim.conf, +# then uncomment one of the usage examples below and replace example.com with your +# domain name, then restart OpenDKIM. + +# WILDCARD EXAMPLE +# Enables signing for any address on the listed domain(s), but will work only if +# "refile:/etc/opendkim/SigningTable" is included in /etc/opendkim.conf. +# Create additional lines for additional domains. + +#*@example.com default._domainkey.example.com + +# NON-WILDCARD EXAMPLE +# If "file:" (instead of "refile:") is specified in /etc/opendkim.conf, then +# wildcards will not work. Instead, full user@host is checked first, then simply host, +# then user@.domain (with all superdomains checked in sequence, so "foo.example.com" +# would first check "user@foo.example.com", then "user@.example.com", then "user@.com"), +# then .domain, then user@*, and finally *. See the opendkim.conf(5) man page under +# "SigningTable" for more details. + +#example.com default._domainkey.example.com diff --git a/templates/Fedora/39/etc/opendkim/TrustedHosts b/templates/Fedora/39/etc/opendkim/TrustedHosts new file mode 100644 index 0000000..7a086d4 --- /dev/null +++ b/templates/Fedora/39/etc/opendkim/TrustedHosts @@ -0,0 +1,9 @@ +# OPENDKIM TRUSTED HOSTS +# To use this file, uncomment the #ExternalIgnoreList and/or the #InternalHosts +# option in /etc/opendkim.conf then restart OpenDKIM. Additional hosts +# may be added on separate lines (IP addresses, hostnames, or CIDR ranges). +# The localhost IP (127.0.0.1) should always be the first entry in this file. +127.0.0.1 +::1 +#host.example.com +#192.168.1.0/24 diff --git a/templates/Fedora/39/etc/opendmarc.conf b/templates/Fedora/39/etc/opendmarc.conf new file mode 100644 index 0000000..19f6b7b --- /dev/null +++ b/templates/Fedora/39/etc/opendmarc.conf @@ -0,0 +1,443 @@ +## opendmarc.conf -- configuration file for OpenDMARC filter +## +## Copyright (c) 2012-2015, 2018, 2021, The Trusted Domain Project. +## All rights reserved. + +## DEPRECATED CONFIGURATION OPTIONS +## +## The following configuration options are no longer valid. They should be +## removed from your existing configuration file to prevent potential issues. +## Failure to do so may result in opendmarc being unable to start. +## +## Renamed in 1.3.0: +## ForensicReports became FailureReports +## ForensicReportsBcc became FailureReportsBcc +## ForensicReportsOnNone became FailureReportsOnNone +## ForensicReportsSentBy became FailureReportsSentBy + +## CONFIGURATION OPTIONS + +## AuthservID (string) +## defaults to MTA name +## +## Sets the "authserv-id" to use when generating the Authentication-Results: +## header field after verifying a message. If the string "HOSTNAME" is +## provided, the name of the host running the filter (as returned by the +## gethostname(3) function) will be used. +# +# AuthservID name + +## AuthservIDWithJobID { true | false } +## default "false" +## +## If "true", requests that the authserv-id portion of the added +## Authentication-Results header fields contain the job ID of the message +## being evaluated. +# +# AuthservIDWithJobID false + +## AutoRestart { true | false } +## default "false" +## +## Automatically re-start on failures. Use with caution; if the filter fails +## instantly after it starts, this can cause a tight fork(2) loop. +# +# AutoRestart false + +## AutoRestartCount n +## default 0 +## +## Sets the maximum automatic restart count. After this number of automatic +## restarts, the filter will give up and terminate. A value of 0 implies no +## limit. +# +# AutoRestartCount 0 + +## AutoRestartRate n/t[u] +## default (no limit) +## +## Sets the maximum automatic restart rate. If the filter begins restarting +## faster than the rate defined here, it will give up and terminate. This +## is a string of the form n/t[u] where n is an integer limiting the count +## of restarts in the given interval and t[u] defines the time interval +## through which the rate is calculated; t is an integer and u defines the +## units thus represented ("s" or "S" for seconds, the default; "m" or "M" +## for minutes; "h" or "H" for hours; "d" or "D" for days). For example, a +## value of "10/1h" limits the restarts to 10 in one hour. There is no +## default, meaning restart rate is not limited. +# +# AutoRestartRate n/t[u] + +## Background { true | false } +## default "true" +## +## Causes opendmarc to fork and exits immediately, leaving the service +## running in the background. +# +# Background true + +## BaseDirectory (string) +## default (none) +## +## If set, instructs the filter to change to the specified directory using +## chdir(2) before doing anything else. This means any files referenced +## elsewhere in the configuration file can be specified relative to this +## directory. It's also useful for arranging that any crash dumps will be +## saved to a specific location. +# +# BaseDirectory /var/run/opendmarc + +## ChangeRootDirectory (string) +## default (none) +## +## Requests that the operating system change the effective root directory of +## the process to the one specified here prior to beginning execution. +## chroot(2) requires superuser access. A warning will be generated if +## UserID is not also set. +# +# ChangeRootDirectory /var/chroot/opendmarc + +## CopyFailuresTo (string) +## default (none) +## +## Requests addition of the specified email address to the envelope of +## any message that fails the DMARC evaluation. +# +# CopyFailuresTo postmaster@localhost + +## DomainWhitelist (string) +## default (none) +## +## A brief list of whitelisted domains for which ARC signature headers are +## trusted as determined by evaluating entries in the "arc.chain" field found +## in a locally generated Authentication-Results header. +## +## This list will be concatenated with DomainWhitelistFile (if provided). +## +# +# DomainWhitelist example.com + +## DomainWhitelistFile path +## default (none) +## +## A comprehensive list of whitelisted domains for which ARC signature headers +## are trusted as determined by evaluating entries in the "arc.chain" field +## found in a locally generated Authentication-Results header. +## +## This list will be concatenated with DomainWhitelist (if provided). +## +# +# DomainWhitelistFile /etc/opendmarc/whitelist.domains + +## DomainWhitelistSize +## default 3000 +## +## The maximum number of entries in the DomainWhitelist including both entries +## in the DomainWhitelist configuration parameter (above) and entries in the +## DomainWhitelistFile. This number will be increased by approximately 20% to +## increase the efficiency of the hashing algorithm. +## +# +# DomainWhitelistSize 3000 + +## DNSTimeout (integer) +## default 5 +## +## Sets the DNS timeout in seconds. A value of 0 causes an infinite wait. +## (NOT YET IMPLEMENTED) +# +# DNSTimeout 5 + +## EnableCoredumps { true | false } +## default "false" +## +## On systems that have such support, make an explicit request to the kernel +## to dump cores when the filter crashes for some reason. Some modern UNIX +## systems suppress core dumps during crashes for security reasons if the +## user ID has changed during the lifetime of the process. Currently only +## supported on Linux. +# +# EnableCoreDumps false + +## FailureReports { true | false } +## default "false" +## +## Enables generation of failure reports when the DMARC test fails and the +## purported sender of the message has requested such reports. Reports are +## formatted per RFC6591. +# +# FailureReports false + +## FailureReportsBcc (string) +## default (none) +## +## When failure reports are enabled and one is to be generated, always +## send one to the address(es) specified here. If a failure report is +## requested by the domain owner, the address(es) are added in a Bcc: field. +## If no request is made, they address(es) are used in a To: field. There +## is no default. +# +# FailureReportsBcc postmaster@example.coom +FailureReportsBcc {{ postmaster_email }} + +## FailureReportsOnNone { true | false } +## default "false" +## +## Supplements the "FailureReports" setting by generating reports for +## domains that advertise "none" policies. By default, reports are only +## generated (when enabled) for sending domains advertising a "quarantine" +## or "reject" policy. +# +# FailureReportsOnNone false + +## FailureReportsSentBy string +## default "USER@HOSTNAME" +## +## Specifies the email address to use in the From: field of failure +## reports generated by the filter. The default is to use the userid of +## the user running the filter and the local hostname to construct an +## email address. "postmaster" is used in place of the userid if a name +## could not be determined. +# +# FailureReportsSentBy USER@HOSTNAME +FailureReportsSentBy {{ postmaster_email }} + +## HistoryFile path +## default (none) +## +## If set, specifies the location of a text file to which records are written +## that can be used to generate DMARC aggregate reports. Records are groups +## of rows containing information about a single received message, and +## include all relevant information needed to generate a DMARC aggregate +## report. It is expected that this will not be used in its raw form, but +## rather periodically imported into a relational database from which the +## aggregate reports can be extracted by a tool such as opendmarc-import(8). +# +# HistoryFile /var/spool/opendmarc/opendmarc.dat + +## HoldQuarantinedMessages { true | false } +## default "false" +## +## If set, the milter will signal to the mta that messages with +## p=quarantine, which fail dmarc authentication, should be held in +## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. +## If false, messsages will be accepted and passed along with the +## regular mail flow, and the quarantine will be left up to downstream +## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, +## including the Authentication-Results header added by OpenDMARC +# +# HoldQuarantinedMessages false + +## IgnoreAuthenticatedClients { true | false } +## default "false" +## +## If set, causes mail from authenticated clients (i.e., those that used +## SMTP AUTH) to be ignored by the filter. +# +# IgnoreAuthenticatedClients false + +## HoldQuarantinedMessages { true | false } +## default "false" +## +## If set, the milter will signal to the mta that messages with +## p=quarantine, which fail dmarc authentication, should be held in +## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. +## If false, messsages will be accepted and passed along with the +## regular mail flow, and the quarantine will be left up to downstream +## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, +## including the Authentication-Results header added by OpenDMARC +# +# HoldQuarantinedMessages false + + +## IgnoreHosts path +## default (internal) +## +## Specifies the path to a file that contains a list of hostnames, IP +## addresses, and/or CIDR expressions identifying hosts whose SMTP +## connections are to be ignored by the filter. If not specified, defaults +## to "127.0.0.1" only. +# +# IgnoreHosts /etc/opendmarc/ignore.hosts + +## IgnoreMailFrom domain[,...] +## default (none) +## +## Gives a list of domain names whose mail (based on the From: domain) is to +## be ignored by the filter. The list should be comma-separated. Matching +## against this list is case-insensitive. The default is an empty list, +## meaning no mail is ignored. +# +# IgnoreMailFrom example.com + +## MilterDebug (integer) +## default 0 +## +## Sets the debug level to be requested from the milter library. +# +# MilterDebug 0 + +## PidFile path +## default (none) +## +## Specifies the path to a file that should be created at process start +## containing the process ID. +# +# PidFile /var/run/opendmarc.pid + +## PublicSuffixList path +## default (none) +## +## Specifies the path to a file that contains top-level domains (TLDs) that +## will be used to compute the Organizational Domain for a given domain name, +## as described in the DMARC specification. If not provided, the filter will +## not be able to determine the Organizational Domain and only the presented +## domain will be evaluated. This file should be periodically updated. +## One location to retrieve the file from is https://publicsuffix.org/list/ +# +# PublicSuffixList path + +## RecordAllMessages { true | false } +## default "false" +## +## If set and "HistoryFile" is in use, all received messages are recorded +## to the history file. If not set (the default), only messages for which +## the From: domain published a DMARC record will be recorded in the +## history file. +# +# RecordAllMessages false + +## RejectFailures { true | false } +## default "false" +## +## If set, messages will be rejected if they fail the DMARC evaluation, or +## temp-failed if evaluation could not be completed. By default, no message +## will be rejected or temp-failed regardless of the outcome of the DMARC +## evaluation of the message. Instead, an Authentication-Results header +## field will be added. +# +# RejectFailures false +RejectFailures true + +## RejectMultiValueFrom { true | false } +## default "false" +## +## If set, messages with multiple addresses in the From: field of the message +## will be rejected unless all domains in the field are the same. They will +## otherwise be ignored by the filter (the default). +# +# RejectMultiValueFrom false + +## ReportCommand string +## default "/usr/sbin/sendmail -t" +## +## Indicates the shell command to which failure reports should be passed for +## delivery when "FailureReports" is enabled. +# +# ReportCommand /usr/sbin/sendmail -t + +## RequiredHeaders { true | false } +## default "false" +## +## If set, the filter will ensure the header of the message conforms to the +## basic header field count restrictions laid out in RFC5322, Section 3.6. +## Messages failing this test are rejected without further processing. A +## From: field from which no domain name could be extracted will also be +## rejected. +# +# RequiredHeaders false + +## Socket socketspec +## default (none) +## +## Specifies the socket that should be established by the filter to receive +## connections from sendmail(8) in order to provide service. socketspec is +## in one of two forms: local:path, which creates a UNIX domain socket at +## the specified path, or inet:port[@host] or inet6:port[@host] which creates +## a TCP socket on the specified port for the appropriate protocol family. +## If the host is not given as either a hostname or an IP address, the +## socket will be listening on all interfaces. This option is mandatory +## either in the configuration file or on the command line. If an IP +## address is used, it must be enclosed in square brackets. +# +Socket inet:8893@localhost +#Socket local:/run/opendmarc/opendmarc.sock + +## SoftwareHeader { true | false } +## default "false" +## +## Causes the filter to add a "DMARC-Filter" header field indicating the +## presence of this filter in the path of the message from injection to +## delivery. The product's name, version, and the job ID are included in +## the header field's contents. +# +SoftwareHeader true + +## SPFIgnoreResults { true | false } +## default "false" +## +## Causes the filter to ignore any SPF results in the header of the +## message. This is useful if you want the filter to perform SPF checks +## itself, or because you don't trust the arriving header. +# +SPFIgnoreResults true + +## SPFSelfValidate { true | false } +## default false +## +## Enable internal spf checking with --with-spf +## To use libspf2 instead: --with-spf --with-spf2-include=path --with-spf2-lib=path +## +## Causes the filter to perform a fallback SPF check itself when +## it can find no SPF results in the message header. If SPFIgnoreResults +## is also set, it never looks for SPF results in headers and +## always performs the SPF check itself when this is set. +# +SPFSelfValidate true + +## Syslog { true | false } +## default "false" +## +## Log via calls to syslog(3) any interesting activity. +# +Syslog true + +## SyslogFacility facility-name +## default "mail" +## +## Log via calls to syslog(3) using the named facility. The facility names +## are the same as the ones allowed in syslog.conf(5). +# +# SyslogFacility mail + +## TrustedAuthservIDs string +## default HOSTNAME +## +## Specifies one or more "authserv-id" values to trust as relaying true +## upstream DKIM and SPF results. The default is to use the name of +## the MTA processing the message. To specify a list, separate each entry +## with a comma. The key word "HOSTNAME" will be replaced by the name of +## the host running the filter as reported by the gethostname(3) function. +# +# TrustedAuthservIDs HOSTNAME + +## UMask mask +## default (none) +## +## Requests a specific permissions mask to be used for file creation. This +## only really applies to creation of the socket when Socket specifies a +## UNIX domain socket, and to the HistoryFile and PidFile (if any); temporary +## files are normally created by the mkstemp(3) function that enforces a +## specific file mode on creation regardless of the process umask. See +## umask(2) for more information. +# +UMask 007 + +## UserID user[:group] +## default (none) +## +## Attempts to become the specified userid before starting operations. +## The process will be assigned all of the groups and primary group ID of +## the named userid unless an alternate group is specified. +# +UserID opendmarc:mail diff --git a/templates/Fedora/39/etc/postfix/access b/templates/Fedora/39/etc/postfix/access new file mode 100644 index 0000000..97892eb --- /dev/null +++ b/templates/Fedora/39/etc/postfix/access @@ -0,0 +1,484 @@ +# ACCESS(5) ACCESS(5) +# +# NAME +# access - Postfix SMTP server access table +# +# SYNOPSIS +# postmap /etc/postfix/access +# +# postmap -q "string" /etc/postfix/access +# +# postmap -q - /etc/postfix/access as the lookup key for such addresses. The value is +# specified with the smtpd_null_access_lookup_key parameter +# in the Postfix main.cf file. +# +# EMAIL ADDRESS EXTENSION +# When a mail address localpart contains the optional recip- +# ient delimiter (e.g., user+foo@domain), the lookup order +# becomes: user+foo@domain, user@domain, domain, user+foo@, +# and user@. +# +# HOST NAME/ADDRESS PATTERNS +# With lookups from indexed files such as DB or DBM, or from +# networked tables such as NIS, LDAP or SQL, the following +# lookup patterns are examined in the order as listed: +# +# domain.tld +# Matches domain.tld. +# +# The pattern domain.tld also matches subdomains, but +# only when the string smtpd_access_maps is listed in +# the Postfix parent_domain_matches_subdomains con- +# figuration setting. +# +# .domain.tld +# Matches subdomains of domain.tld, but only when the +# string smtpd_access_maps is not listed in the Post- +# fix parent_domain_matches_subdomains configuration +# setting. +# +# net.work.addr.ess +# +# net.work.addr +# +# net.work +# +# net Matches a remote IPv4 host address or network +# address range. Specify one to four decimal octets +# separated by ".". Do not specify "[]" , "/", lead- +# ing zeros, or hexadecimal forms. +# +# Network ranges are matched by repeatedly truncating +# the last ".octet" from a remote IPv4 host address +# string, until a match is found in the access table, +# or until further truncation is not possible. +# +# NOTE: use the cidr lookup table type to specify +# network/netmask patterns. See cidr_table(5) for +# details. +# +# net:work:addr:ess +# +# net:work:addr +# +# net:work +# +# net Matches a remote IPv6 host address or network +# address range. Specify three to eight hexadecimal +# octet pairs separated by ":", using the compressed +# form "::" for a sequence of zero-valued octet +# pairs. Do not specify "[]", "/", leading zeros, or +# non-compressed forms. +# +# A network range is matched by repeatedly truncating +# the last ":octetpair" from the compressed-form +# remote IPv6 host address string, until a match is +# found in the access table, or until further trunca- +# tion is not possible. +# +# NOTE: use the cidr lookup table type to specify +# network/netmask patterns. See cidr_table(5) for +# details. +# +# IPv6 support is available in Postfix 2.2 and later. +# +# ACCEPT ACTIONS +# OK Accept the address etc. that matches the pattern. +# +# all-numerical +# An all-numerical result is treated as OK. This for- +# mat is generated by address-based relay authoriza- +# tion schemes such as pop-before-smtp. +# +# For other accept actions, see "OTHER ACTIONS" below. +# +# REJECT ACTIONS +# Postfix version 2.3 and later support enhanced status +# codes as defined in RFC 3463. When no code is specified +# at the beginning of the text below, Postfix inserts a +# default enhanced status code of "5.7.1" in the case of +# reject actions, and "4.7.1" in the case of defer actions. +# See "ENHANCED STATUS CODES" below. +# +# 4NN text +# +# 5NN text +# Reject the address etc. that matches the pattern, +# and respond with the numerical three-digit code and +# text. 4NN means "try again later", while 5NN means +# "do not try again". +# +# The following responses have special meaning for +# the Postfix SMTP server: +# +# 421 text (Postfix 2.3 and later) +# +# 521 text (Postfix 2.6 and later) +# After responding with the numerical +# three-digit code and text, disconnect imme- +# diately from the SMTP client. This frees up +# SMTP server resources so that they can be +# made available to another SMTP client. +# +# Note: The "521" response should be used only +# with botnets and other malware where inter- +# operability is of no concern. The "send 521 +# and disconnect" behavior is NOT defined in +# the SMTP standard. +# +# REJECT optional text... +# Reject the address etc. that matches the pattern. +# Reply with "$access_map_reject_code optional +# text..." when the optional text is specified, oth- +# erwise reply with a generic error response message. +# +# DEFER optional text... +# Reject the address etc. that matches the pattern. +# Reply with "$access_map_defer_code optional +# text..." when the optional text is specified, oth- +# erwise reply with a generic error response message. +# +# This feature is available in Postfix 2.6 and later. +# +# DEFER_IF_REJECT optional text... +# Defer the request if some later restriction would +# result in a REJECT action. Reply with +# "$access_map_defer_code 4.7.1 optional text..." +# when the optional text is specified, otherwise +# reply with a generic error response message. +# +# Prior to Postfix 2.6, the SMTP reply code is 450. +# +# This feature is available in Postfix 2.1 and later. +# +# DEFER_IF_PERMIT optional text... +# Defer the request if some later restriction would +# result in an explicit or implicit PERMIT action. +# Reply with "$access_map_defer_code 4.7.1 optional +# text..." when the optional text is specified, oth- +# erwise reply with a generic error response message. +# +# Prior to Postfix 2.6, the SMTP reply code is 450. +# +# This feature is available in Postfix 2.1 and later. +# +# For other reject actions, see "OTHER ACTIONS" below. +# +# OTHER ACTIONS +# restriction... +# Apply the named UCE restriction(s) (permit, reject, +# reject_unauth_destination, and so on). +# +# BCC user@domain +# Send one copy of the message to the specified +# recipient. +# +# If multiple BCC actions are specified within the +# same SMTP MAIL transaction, with Postfix 3.0 only +# the last action will be used. +# +# This feature is available in Postfix 3.0 and later. +# +# DISCARD optional text... +# Claim successful delivery and silently discard the +# message. Log the optional text if specified, oth- +# erwise log a generic message. +# +# Note: this action currently affects all recipients +# of the message. To discard only one recipient +# without discarding the entire message, use the +# transport(5) table to direct mail to the discard(8) +# service. +# +# This feature is available in Postfix 2.0 and later. +# +# DUNNO Pretend that the lookup key was not found. This +# prevents Postfix from trying substrings of the +# lookup key (such as a subdomain name, or a network +# address subnetwork). +# +# This feature is available in Postfix 2.0 and later. +# +# FILTER transport:destination +# After the message is queued, send the entire mes- +# sage through the specified external content filter. +# The transport name specifies the first field of a +# mail delivery agent definition in master.cf; the +# syntax of the next-hop destination is described in +# the manual page of the corresponding delivery +# agent. More information about external content +# filters is in the Postfix FILTER_README file. +# +# Note 1: do not use $number regular expression sub- +# stitutions for transport or destination unless you +# know that the information has a trusted origin. +# +# Note 2: this action overrides the main.cf con- +# tent_filter setting, and affects all recipients of +# the message. In the case that multiple FILTER +# actions fire, only the last one is executed. +# +# Note 3: the purpose of the FILTER command is to +# override message routing. To override the recipi- +# ent's transport but not the next-hop destination, +# specify an empty filter destination (Postfix 2.7 +# and later), or specify a transport:destination that +# delivers through a different Postfix instance +# (Postfix 2.6 and earlier). Other options are using +# the recipient-dependent transport_maps or the sen- +# der-dependent sender_dependent_default_transport- +# _maps features. +# +# This feature is available in Postfix 2.0 and later. +# +# HOLD optional text... +# Place the message on the hold queue, where it will +# sit until someone either deletes it or releases it +# for delivery. Log the optional text if specified, +# otherwise log a generic message. +# +# Mail that is placed on hold can be examined with +# the postcat(1) command, and can be destroyed or +# released with the postsuper(1) command. +# +# Note: use "postsuper -r" to release mail that was +# kept on hold for a significant fraction of $maxi- +# mal_queue_lifetime or $bounce_queue_lifetime, or +# longer. Use "postsuper -H" only for mail that will +# not expire within a few delivery attempts. +# +# Note: this action currently affects all recipients +# of the message. +# +# This feature is available in Postfix 2.0 and later. +# +# PREPEND headername: headervalue +# Prepend the specified message header to the mes- +# sage. When more than one PREPEND action executes, +# the first prepended header appears before the sec- +# ond etc. prepended header. +# +# Note: this action must execute before the message +# content is received; it cannot execute in the con- +# text of smtpd_end_of_data_restrictions. +# +# This feature is available in Postfix 2.1 and later. +# +# REDIRECT user@domain +# After the message is queued, send the message to +# the specified address instead of the intended +# recipient(s). When multiple REDIRECT actions fire, +# only the last one takes effect. +# +# Note: this action overrides the FILTER action, and +# currently overrides all recipients of the message. +# +# This feature is available in Postfix 2.1 and later. +# +# INFO optional text... +# Log an informational record with the optional text, +# together with client information and if available, +# with helo, sender, recipient and protocol informa- +# tion. +# +# This feature is available in Postfix 3.0 and later. +# +# WARN optional text... +# Log a warning with the optional text, together with +# client information and if available, with helo, +# sender, recipient and protocol information. +# +# This feature is available in Postfix 2.1 and later. +# +# ENHANCED STATUS CODES +# Postfix version 2.3 and later support enhanced status +# codes as defined in RFC 3463. When an enhanced status +# code is specified in an access table, it is subject to +# modification. The following transformations are needed +# when the same access table is used for client, helo, +# sender, or recipient access restrictions; they happen +# regardless of whether Postfix replies to a MAIL FROM, RCPT +# TO or other SMTP command. +# +# o When a sender address matches a REJECT action, the +# Postfix SMTP server will transform a recipient DSN +# status (e.g., 4.1.1-4.1.6) into the corresponding +# sender DSN status, and vice versa. +# +# o When non-address information matches a REJECT +# action (such as the HELO command argument or the +# client hostname/address), the Postfix SMTP server +# will transform a sender or recipient DSN status +# into a generic non-address DSN status (e.g., +# 4.0.0). +# +# REGULAR EXPRESSION TABLES +# This section describes how the table lookups change when +# the table is given in the form of regular expressions. For +# a description of regular expression lookup table syntax, +# see regexp_table(5) or pcre_table(5). +# +# Each pattern is a regular expression that is applied to +# the entire string being looked up. Depending on the appli- +# cation, that string is an entire client hostname, an +# entire client IP address, or an entire mail address. Thus, +# no parent domain or parent network search is done, +# user@domain mail addresses are not broken up into their +# user@ and domain constituent parts, nor is user+foo broken +# up into user and foo. +# +# Patterns are applied in the order as specified in the ta- +# ble, until a pattern is found that matches the search +# string. +# +# Actions are the same as with indexed file lookups, with +# the additional feature that parenthesized substrings from +# the pattern can be interpolated as $1, $2 and so on. +# +# TCP-BASED TABLES +# This section describes how the table lookups change when +# lookups are directed to a TCP-based server. For a descrip- +# tion of the TCP client/server lookup protocol, see tcp_ta- +# ble(5). This feature is not available up to and including +# Postfix version 2.4. +# +# Each lookup operation uses the entire query string once. +# Depending on the application, that string is an entire +# client hostname, an entire client IP address, or an entire +# mail address. Thus, no parent domain or parent network +# search is done, user@domain mail addresses are not broken +# up into their user@ and domain constituent parts, nor is +# user+foo broken up into user and foo. +# +# Actions are the same as with indexed file lookups. +# +# EXAMPLE +# The following example uses an indexed file, so that the +# order of table entries does not matter. The example per- +# mits access by the client at address 1.2.3.4 but rejects +# all other clients in 1.2.3.0/24. Instead of hash lookup +# tables, some systems use dbm. Use the command "postconf +# -m" to find out what lookup tables Postfix supports on +# your system. +# +# /etc/postfix/main.cf: +# smtpd_client_restrictions = +# check_client_access hash:/etc/postfix/access +# +# /etc/postfix/access: +# 1.2.3 REJECT +# 1.2.3.4 OK +# +# Execute the command "postmap /etc/postfix/access" after +# editing the file. +# +# BUGS +# The table format does not understand quoting conventions. +# +# SEE ALSO +# postmap(1), Postfix lookup table manager +# smtpd(8), SMTP server +# postconf(5), configuration parameters +# transport(5), transport:nexthop syntax +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# SMTPD_ACCESS_README, built-in SMTP server access control +# DATABASE_README, Postfix lookup table overview +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# ACCESS(5) diff --git a/templates/Fedora/39/etc/postfix/canonical b/templates/Fedora/39/etc/postfix/canonical new file mode 100644 index 0000000..4957fcc --- /dev/null +++ b/templates/Fedora/39/etc/postfix/canonical @@ -0,0 +1,307 @@ +# CANONICAL(5) CANONICAL(5) +# +# NAME +# canonical - Postfix canonical table format +# +# SYNOPSIS +# postmap /etc/postfix/canonical +# +# postmap -q "string" /etc/postfix/canonical +# +# postmap -q - /etc/postfix/canonical $/ +# REJECT IFRAME vulnerability exploit +# +# SEE ALSO +# cleanup(8), canonicalize and enqueue Postfix message +# pcre_table(5), format of PCRE lookup tables +# regexp_table(5), format of POSIX regular expression tables +# postconf(1), Postfix configuration utility +# postmap(1), Postfix lookup table management +# postsuper(1), Postfix janitor +# postcat(1), show Postfix queue file contents +# RFC 2045, base64 and quoted-printable encoding rules +# RFC 2047, message header encoding for non-ASCII text +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# DATABASE_README, Postfix lookup table overview +# CONTENT_INSPECTION_README, Postfix content inspection overview +# BUILTIN_FILTER_README, Postfix built-in content inspection +# BACKSCATTER_README, blocking returned forged mail +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# HEADER_CHECKS(5) diff --git a/templates/Fedora/39/etc/postfix/main.cf b/templates/Fedora/39/etc/postfix/main.cf new file mode 100644 index 0000000..e7c5ce2 --- /dev/null +++ b/templates/Fedora/39/etc/postfix/main.cf @@ -0,0 +1,774 @@ +# Global Postfix configuration file. This file lists only a subset +# of all parameters. For the syntax, and for a complete parameter +# list, see the postconf(5) manual page (command: "man 5 postconf"). +# +# TIP: use the command "postconf -n" to view main.cf parameter +# settings, "postconf parametername" to view a specific parameter, +# and "postconf 'parametername=value'" to set a specific parameter. +# +# For common configuration examples, see BASIC_CONFIGURATION_README +# and STANDARD_CONFIGURATION_README. To find these documents, use +# the command "postconf html_directory readme_directory", or go to +# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. +# +# For best results, change no more than 2-3 parameters at a time, +# and test if Postfix still works after every change. + +# COMPATIBILITY +# +# The compatibility_level determines what default settings Postfix +# will use for main.cf and master.cf settings. These defaults will +# change over time. +# +# To avoid breaking things, Postfix will use backwards-compatible +# default settings and log where it uses those old backwards-compatible +# default settings, until the system administrator has determined +# if any backwards-compatible default settings need to be made +# permanent in main.cf or master.cf. +# +# When this review is complete, update the compatibility_level setting +# below as recommended in the RELEASE_NOTES file. +# +# The level below is what should be used with new (not upgrade) installs. +# +compatibility_level = 3.7 + +# SOFT BOUNCE +# +# The soft_bounce parameter provides a limited safety net for +# testing. When soft_bounce is enabled, mail will remain queued that +# would otherwise bounce. This parameter disables locally-generated +# bounces, and prevents the SMTP server from rejecting mail permanently +# (by changing 5xx replies into 4xx replies). However, soft_bounce +# is no cure for address rewriting mistakes or mail routing mistakes. +# +#soft_bounce = no + +# LOCAL PATHNAME INFORMATION +# +# The queue_directory specifies the location of the Postfix queue. +# This is also the root directory of Postfix daemons that run chrooted. +# See the files in examples/chroot-setup for setting up Postfix chroot +# environments on different UNIX systems. +# +queue_directory = /var/spool/postfix + +# The command_directory parameter specifies the location of all +# postXXX commands. +# +command_directory = /usr/sbin + +# The daemon_directory parameter specifies the location of all Postfix +# daemon programs (i.e. programs listed in the master.cf file). This +# directory must be owned by root. +# +daemon_directory = /usr/libexec/postfix + +# The data_directory parameter specifies the location of Postfix-writable +# data files (caches, random numbers). This directory must be owned +# by the mail_owner account (see below). +# +data_directory = /var/lib/postfix + +# QUEUE AND PROCESS OWNERSHIP +# +# The mail_owner parameter specifies the owner of the Postfix queue +# and of most Postfix daemon processes. Specify the name of a user +# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS +# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In +# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED +# USER. +# +mail_owner = postfix + +# The default_privs parameter specifies the default rights used by +# the local delivery agent for delivery to external file or command. +# These rights are used in the absence of a recipient user context. +# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. +# +#default_privs = nobody + +# INTERNET HOST AND DOMAIN NAMES +# +# The myhostname parameter specifies the internet hostname of this +# mail system. The default is to use the fully-qualified domain name +# from gethostname(). $myhostname is used as a default value for many +# other configuration parameters. +# +#myhostname = host.domain.tld +#myhostname = virtual.domain.tld + +# The mydomain parameter specifies the local internet domain name. +# The default is to use $myhostname minus the first component. +# $mydomain is used as a default value for many other configuration +# parameters. +# +#mydomain = domain.tld + +# SENDING MAIL +# +# The myorigin parameter specifies the domain that locally-posted +# mail appears to come from. The default is to append $myhostname, +# which is fine for small sites. If you run a domain with multiple +# machines, you should (1) change this to $mydomain and (2) set up +# a domain-wide alias database that aliases each user to +# user@that.users.mailhost. +# +# For the sake of consistency between sender and recipient addresses, +# myorigin also specifies the default domain name that is appended +# to recipient addresses that have no @domain part. +# +#myorigin = $myhostname +#myorigin = $mydomain + +# RECEIVING MAIL + +# The inet_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on. By default, +# the software claims all active interfaces on the machine. The +# parameter also controls delivery of mail to user@[ip.address]. +# +# See also the proxy_interfaces parameter, for network addresses that +# are forwarded to us via a proxy or network address translator. +# +# Note: you need to stop/start Postfix when this parameter changes. +# +inet_interfaces = all +#inet_interfaces = $myhostname +#inet_interfaces = $myhostname, localhost +#inet_interfaces = localhost + +# Enable IPv4, and IPv6 if supported +inet_protocols = all + +# The proxy_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on by way of a +# proxy or network address translation unit. This setting extends +# the address list specified with the inet_interfaces parameter. +# +# You must specify your proxy/NAT addresses when your system is a +# backup MX host for other domains, otherwise mail delivery loops +# will happen when the primary MX host is down. +# +#proxy_interfaces = +#proxy_interfaces = 1.2.3.4 + +# The mydestination parameter specifies the list of domains that this +# machine considers itself the final destination for. +# +# These domains are routed to the delivery agent specified with the +# local_transport parameter setting. By default, that is the UNIX +# compatible delivery agent that lookups all recipients in /etc/passwd +# and /etc/aliases or their equivalent. +# +# The default is $myhostname + localhost.$mydomain + localhost. On +# a mail domain gateway, you should also include $mydomain. +# +# Do not specify the names of virtual domains - those domains are +# specified elsewhere (see VIRTUAL_README). +# +# Do not specify the names of domains that this machine is backup MX +# host for. Specify those names via the relay_domains settings for +# the SMTP server, or use permit_mx_backup if you are lazy (see +# STANDARD_CONFIGURATION_README). +# +# The local machine is always the final destination for mail addressed +# to user@[the.net.work.address] of an interface that the mail system +# receives mail on (see the inet_interfaces parameter). +# +# Specify a list of host or domain names, /file/name or type:table +# patterns, separated by commas and/or whitespace. A /file/name +# pattern is replaced by its contents; a type:table is matched when +# a name matches a lookup key (the right-hand side is ignored). +# Continue long lines by starting the next line with whitespace. +# +# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". +# +mydestination = $myhostname, localhost.$mydomain, localhost +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, +# mail.$mydomain, www.$mydomain, ftp.$mydomain + +# REJECTING MAIL FOR UNKNOWN LOCAL USERS +# +# The local_recipient_maps parameter specifies optional lookup tables +# with all names or addresses of users that are local with respect +# to $mydestination, $inet_interfaces or $proxy_interfaces. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown local users. This parameter is defined by default. +# +# To turn off local recipient checking in the SMTP server, specify +# local_recipient_maps = (i.e. empty). +# +# The default setting assumes that you use the default Postfix local +# delivery agent for local delivery. You need to update the +# local_recipient_maps setting if: +# +# - You define $mydestination domain recipients in files other than +# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. +# For example, you define $mydestination domain recipients in +# the $virtual_mailbox_maps files. +# +# - You redefine the local delivery agent in master.cf. +# +# - You redefine the "local_transport" setting in main.cf. +# +# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" +# feature of the Postfix local delivery agent (see local(8)). +# +# Details are described in the LOCAL_RECIPIENT_README file. +# +# Beware: if the Postfix SMTP server runs chrooted, you probably have +# to access the passwd file via the proxymap service, in order to +# overcome chroot restrictions. The alternative, having a copy of +# the system passwd file in the chroot jail is just not practical. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify a bare username, an @domain.tld +# wild-card, or specify a user@domain.tld address. +# +#local_recipient_maps = unix:passwd.byname $alias_maps +#local_recipient_maps = proxy:unix:passwd.byname $alias_maps +#local_recipient_maps = + +# The unknown_local_recipient_reject_code specifies the SMTP server +# response code when a recipient domain matches $mydestination or +# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty +# and the recipient address or address local-part is not found. +# +# The default setting is 550 (reject mail) but it is safer to start +# with 450 (try again later) until you are certain that your +# local_recipient_maps settings are OK. +# +unknown_local_recipient_reject_code = 550 + +# TRUST AND RELAY CONTROL + +# The mynetworks parameter specifies the list of "trusted" SMTP +# clients that have more privileges than "strangers". +# +# In particular, "trusted" SMTP clients are allowed to relay mail +# through Postfix. See the smtpd_recipient_restrictions parameter +# in postconf(5). +# +# You can specify the list of "trusted" network addresses by hand +# or you can let Postfix do it for you (which is the default). +# +# By default (mynetworks_style = host), Postfix "trusts" only +# the local machine. +# +# Specify "mynetworks_style = subnet" when Postfix should "trust" +# SMTP clients in the same IP subnetworks as the local machine. +# On Linux, this works correctly only with interfaces specified +# with the "ifconfig" or "ip" command. +# +# Specify "mynetworks_style = class" when Postfix should "trust" SMTP +# clients in the same IP class A/B/C networks as the local machine. +# Don't do this with a dialup site - it would cause Postfix to "trust" +# your entire provider's network. Instead, specify an explicit +# mynetworks list by hand, as described below. +# +# Specify "mynetworks_style = host" when Postfix should "trust" +# only the local machine. +# +#mynetworks_style = class +#mynetworks_style = subnet +#mynetworks_style = host + +# Alternatively, you can specify the mynetworks list by hand, in +# which case Postfix ignores the mynetworks_style setting. +# +# Specify an explicit list of network/netmask patterns, where the +# mask specifies the number of bits in the network part of a host +# address. +# +# You can also specify the absolute pathname of a pattern file instead +# of listing the patterns here. Specify type:table for table-based lookups +# (the value on the table right-hand side is not used). +# +#mynetworks = 168.100.3.0/28, 127.0.0.0/8 +#mynetworks = $config_directory/mynetworks +#mynetworks = hash:/etc/postfix/network_table + +# The relay_domains parameter restricts what destinations this system will +# relay mail to. See the smtpd_relay_restrictions and +# smtpd_recipient_restrictions descriptions in postconf(5) for detailed +# information. +# +# By default, Postfix relays mail +# - from "trusted" clients (IP address matches $mynetworks, or is +# SASL authenticated) to any destination, +# - from "untrusted" clients to destinations that match $relay_domains or +# subdomains thereof, except addresses with sender-specified routing. +# The default relay_domains value is empty. +# +# In addition to the above, the Postfix SMTP server by default accepts mail +# that Postfix is final destination for: +# - destinations that match $inet_interfaces or $proxy_interfaces, +# - destinations that match $mydestination +# - destinations that match $virtual_alias_domains, +# - destinations that match $virtual_mailbox_domains. +# These destinations do not need to be listed in $relay_domains. +# +# Specify a list of hosts or domains, /file/name patterns or type:name +# lookup tables, separated by commas and/or whitespace. Continue +# long lines by starting the next line with whitespace. A file name +# is replaced by its contents; a type:name table is matched when a +# (parent) domain appears as lookup key. +# +# NOTE: Postfix will not automatically forward mail for domains that +# list this system as their primary or backup MX host. See the +# permit_mx_backup restriction description in postconf(5). +# +#relay_domains = + +# INTERNET OR INTRANET + +# The relayhost parameter specifies the default host to send mail to +# when no entry is matched in the optional transport(5) table. When +# no relayhost is given, mail is routed directly to the destination. +# +# On an intranet, specify the organizational domain name. If your +# internal DNS uses no MX records, specify the name of the intranet +# gateway host instead. +# +# In the case of SMTP, specify a domain, host, host:port, [host]:port, +# [address] or [address]:port; the form [host] turns off MX lookups. +# +# If you're connected via UUCP, see also the default_transport parameter. +# +#relayhost = $mydomain +#relayhost = [gateway.my.domain] +#relayhost = [mailserver.isp.tld] +#relayhost = uucphost +#relayhost = [an.ip.add.ress] + +# REJECTING UNKNOWN RELAY USERS +# +# The relay_recipient_maps parameter specifies optional lookup tables +# with all addresses in the domains that match $relay_domains. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown relay users. This feature is off by default. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify an @domain.tld wild-card, or specify +# a user@domain.tld address. +# +#relay_recipient_maps = hash:/etc/postfix/relay_recipients + +# INPUT RATE CONTROL +# +# The in_flow_delay configuration parameter implements mail input +# flow control. This feature is turned on by default, although it +# still needs further development (it's disabled on SCO UNIX due +# to an SCO bug). +# +# A Postfix process will pause for $in_flow_delay seconds before +# accepting a new message, when the message arrival rate exceeds the +# message delivery rate. With the default 100 SMTP server process +# limit, this limits the mail inflow to 100 messages a second more +# than the number of messages delivered per second. +# +# Specify 0 to disable the feature. Valid delays are 0..10. +# +#in_flow_delay = 1s + +# ADDRESS REWRITING +# +# The ADDRESS_REWRITING_README document gives information about +# address masquerading or other forms of address rewriting including +# username->Firstname.Lastname mapping. + +# ADDRESS REDIRECTION (VIRTUAL DOMAIN) +# +# The VIRTUAL_README document gives information about the many forms +# of domain hosting that Postfix supports. + +# "USER HAS MOVED" BOUNCE MESSAGES +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# TRANSPORT MAP +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# ALIAS DATABASE +# +# The alias_maps parameter specifies the list of alias databases used +# by the local delivery agent. The default list is system dependent. +# +# On systems with NIS, the default is to search the local alias +# database, then the NIS alias database. See aliases(5) for syntax +# details. +# +# If you change the alias database, run "postalias /etc/aliases" (or +# wherever your system stores the mail alias file), or simply run +# "newaliases" to build the necessary DBM or DB file. +# +# It will take a minute or so before changes become visible. Use +# "postfix reload" to eliminate the delay. +# +#alias_maps = dbm:/etc/aliases +alias_maps = hash:/etc/aliases +#alias_maps = hash:/etc/aliases, nis:mail.aliases +#alias_maps = netinfo:/aliases + +# The alias_database parameter specifies the alias database(s) that +# are built with "newaliases" or "sendmail -bi". This is a separate +# configuration parameter, because alias_maps (see above) may specify +# tables that are not necessarily all under control by Postfix. +# +#alias_database = dbm:/etc/aliases +#alias_database = dbm:/etc/mail/aliases +alias_database = hash:/etc/aliases +#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases + +# ADDRESS EXTENSIONS (e.g., user+foo) +# +# The recipient_delimiter parameter specifies the separator between +# user names and address extensions (user+foo). See canonical(5), +# local(8), relocated(5) and virtual(5) for the effects this has on +# aliases, canonical, virtual, relocated and .forward file lookups. +# Basically, the software tries user+foo and .forward+foo before +# trying user and .forward. +# +#recipient_delimiter = + + +# DELIVERY TO MAILBOX +# +# The home_mailbox parameter specifies the optional pathname of a +# mailbox file relative to a user's home directory. The default +# mailbox file is /var/spool/mail/user or /var/mail/user. Specify +# "Maildir/" for qmail-style delivery (the / is required). +# +#home_mailbox = Mailbox +#home_mailbox = Maildir/ + +# The mail_spool_directory parameter specifies the directory where +# UNIX-style mailboxes are kept. The default setting depends on the +# system type. +# +#mail_spool_directory = /var/mail +#mail_spool_directory = /var/spool/mail + +# The mailbox_command parameter specifies the optional external +# command to use instead of mailbox delivery. The command is run as +# the recipient with proper HOME, SHELL and LOGNAME environment settings. +# Exception: delivery for root is done as $default_user. +# +# Other environment variables of interest: USER (recipient username), +# EXTENSION (address extension), DOMAIN (domain part of address), +# and LOCAL (the address localpart). +# +# Unlike other Postfix configuration parameters, the mailbox_command +# parameter is not subjected to $parameter substitutions. This is to +# make it easier to specify shell syntax (see example below). +# +# Avoid shell meta characters because they will force Postfix to run +# an expensive shell process. Procmail alone is expensive enough. +# +# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN +# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. +# +#mailbox_command = /some/where/procmail +#mailbox_command = /some/where/procmail -a "$EXTENSION" + +# The mailbox_transport specifies the optional transport in master.cf +# to use after processing aliases and .forward files. This parameter +# has precedence over the mailbox_command, fallback_transport and +# luser_relay parameters. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" +# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. +#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp +mailbox_transport = lmtp:inet:localhost:24 +virtual_transport = lmtp:inet:localhost:24 + +# If using the cyrus-imapd IMAP server deliver local mail to the IMAP +# server using LMTP (Local Mail Transport Protocol), this is prefered +# over the older cyrus deliver program by setting the +# mailbox_transport as below: +# +# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp +# +# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via +# these settings. +# +# local_destination_recipient_limit = 300 +# local_destination_concurrency_limit = 5 +# +# Of course you should adjust these settings as appropriate for the +# capacity of the hardware you are using. The recipient limit setting +# can be used to take advantage of the single instance message store +# capability of Cyrus. The concurrency limit can be used to control +# how many simultaneous LMTP sessions will be permitted to the Cyrus +# message store. +# +# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and +# subsequent line in master.cf. +#mailbox_transport = cyrus + +# The fallback_transport specifies the optional transport in master.cf +# to use for recipients that are not found in the UNIX passwd database. +# This parameter has precedence over the luser_relay parameter. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp +#fallback_transport = + +# The luser_relay parameter specifies an optional destination address +# for unknown recipients. By default, mail for unknown@$mydestination, +# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned +# as undeliverable. +# +# The following expansions are done on luser_relay: $user (recipient +# username), $shell (recipient shell), $home (recipient home directory), +# $recipient (full recipient address), $extension (recipient address +# extension), $domain (recipient domain), $local (entire recipient +# localpart), $recipient_delimiter. Specify ${name?value} or +# ${name:value} to expand value only when $name does (does not) exist. +# +# luser_relay works only for the default Postfix local delivery agent. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must specify "local_recipient_maps =" (i.e. empty) in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#luser_relay = $user@other.host +#luser_relay = $local@other.host +#luser_relay = admin+$local + +# JUNK MAIL CONTROLS +# +# The controls listed here are only a very small subset. The file +# SMTPD_ACCESS_README provides an overview. + +# The header_checks parameter specifies an optional table with patterns +# that each logical message header is matched against, including +# headers that span multiple physical lines. +# +# By default, these patterns also apply to MIME headers and to the +# headers of attached messages. With older Postfix versions, MIME and +# attached message headers were treated as body text. +# +# For details, see "man header_checks". +# +#header_checks = regexp:/etc/postfix/header_checks + +# FAST ETRN SERVICE +# +# Postfix maintains per-destination logfiles with information about +# deferred mail, so that mail can be flushed quickly with the SMTP +# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". +# See the ETRN_README document for a detailed description. +# +# The fast_flush_domains parameter controls what destinations are +# eligible for this service. By default, they are all domains that +# this server is willing to relay mail to. +# +#fast_flush_domains = $relay_domains + +# SHOW SOFTWARE VERSION OR NOT +# +# The smtpd_banner parameter specifies the text that follows the 220 +# code in the SMTP server's greeting banner. Some people like to see +# the mail version advertised. By default, Postfix shows no version. +# +# You MUST specify $myhostname at the start of the text. That is an +# RFC requirement. Postfix itself does not care. +# +#smtpd_banner = $myhostname ESMTP $mail_name +#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) + +# PARALLEL DELIVERY TO THE SAME DESTINATION +# +# How many parallel deliveries to the same user or domain? With local +# delivery, it does not make sense to do massively parallel delivery +# to the same user, because mailbox updates must happen sequentially, +# and expensive pipelines in .forward files can cause disasters when +# too many are run at the same time. With SMTP deliveries, 10 +# simultaneous connections to the same domain could be sufficient to +# raise eyebrows. +# +# Each message delivery transport has its XXX_destination_concurrency_limit +# parameter. The default is $default_destination_concurrency_limit for +# most delivery transports. For the local delivery agent the default is 2. + +#local_destination_concurrency_limit = 2 +#default_destination_concurrency_limit = 20 + +# DEBUGGING CONTROL +# +# The debug_peer_level parameter specifies the increment in verbose +# logging level when an SMTP client or server host name or address +# matches a pattern in the debug_peer_list parameter. +# +debug_peer_level = 2 + +# The debug_peer_list parameter specifies an optional list of domain +# or network patterns, /file/name patterns or type:name tables. When +# an SMTP client or server host name or address matches a pattern, +# increase the verbose logging level by the amount specified in the +# debug_peer_level parameter. +# +#debug_peer_list = 127.0.0.1 +#debug_peer_list = some.domain + +# The debugger_command specifies the external command that is executed +# when a Postfix daemon program is run with the -D option. +# +# Use "command .. & sleep 5" so that the debugger can attach before +# the process marches on. If you use an X-based debugger, be sure to +# set up your XAUTHORITY environment variable before starting Postfix. +# +debugger_command = + PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin + ddd $daemon_directory/$process_name $process_id & sleep 5 + +# If you can't use X, use this to capture the call stack when a +# daemon crashes. The result is in a file in the configuration +# directory, and is named after the process name and the process ID. +# +# debugger_command = +# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; +# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 +# >$config_directory/$process_name.$process_id.log & sleep 5 +# +# Another possibility is to run gdb under a detached screen session. +# To attach to the screen session, su root and run "screen -r +# " where uniquely matches one of the detached +# sessions (from "screen -list"). +# +# debugger_command = +# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen +# -dmS $process_name gdb $daemon_directory/$process_name +# $process_id & sleep 1 + +# INSTALL-TIME CONFIGURATION INFORMATION +# +# The following parameters are used when installing a new Postfix version. +# +# sendmail_path: The full pathname of the Postfix sendmail command. +# This is the Sendmail-compatible mail posting interface. +# +sendmail_path = /usr/sbin/sendmail.postfix + +# newaliases_path: The full pathname of the Postfix newaliases command. +# This is the Sendmail-compatible command to build alias databases. +# +newaliases_path = /usr/bin/newaliases.postfix + +# mailq_path: The full pathname of the Postfix mailq command. This +# is the Sendmail-compatible mail queue listing command. +# +mailq_path = /usr/bin/mailq.postfix + +# setgid_group: The group for mail submission and queue management +# commands. This must be a group name with a numerical group ID that +# is not shared with other accounts, not even with the Postfix account. +# +setgid_group = postdrop + +# html_directory: The location of the Postfix HTML documentation. +# +html_directory = no + +# manpage_directory: The location of the Postfix on-line manual pages. +# +manpage_directory = /usr/share/man + +# sample_directory: The location of the Postfix sample configuration files. +# This parameter is obsolete as of Postfix 2.1. +# +sample_directory = /usr/share/doc/postfix/samples + +# readme_directory: The location of the Postfix README files. +# +readme_directory = /usr/share/doc/postfix/README_FILES + +# TLS CONFIGURATION +# +# Basic Postfix TLS configuration by default with self-signed certificate +# for inbound SMTP and also opportunistic TLS for outbound SMTP. + +# The full pathname of a file with the Postfix SMTP server RSA certificate +# in PEM format. Intermediate certificates should be included in general, +# the server certificate first, then the issuing CA(s) (bottom-up order). +# +# smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem +smtpd_tls_cert_file = /etc/postfix/certificates/pubcert.pem + +# The full pathname of a file with the Postfix SMTP server RSA private key +# in PEM format. The private key must be accessible without a pass-phrase, +# i.e. it must not be encrypted. +# +# smtpd_tls_key_file = /etc/pki/tls/private/postfix.key +smtpd_tls_key_file = /etc/postfix/certificates/privkey.pem + +# Announce STARTTLS support to remote SMTP clients, but do not require that +# clients use TLS encryption (opportunistic TLS inbound). +# +smtpd_tls_security_level = may + +# Directory with PEM format Certification Authority certificates that the +# Postfix SMTP client uses to verify a remote SMTP server certificate. +# +smtp_tls_CApath = /etc/pki/tls/certs + +# The full pathname of a file containing CA certificates of root CAs +# trusted to sign either remote SMTP server certificates or intermediate CA +# certificates. +# +smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt + +# Use TLS if this is supported by the remote SMTP server, otherwise use +# plaintext (opportunistic TLS outbound). +# +smtp_tls_security_level = may +meta_directory = /etc/postfix +shlib_directory = /usr/lib64/postfix + +{% if ensure_postfix.milter_list is defined and ensure_postfix.milter_list is iterable %} +# The Milter List +{% for milter in ensure_postfix.milter_list %} +# -- {{ milter.description }} -- {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} +{% endfor %} +smtpd_milters = {% for milter in ensure_postfix.milter_list %} {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} {% endfor %} +{% endif %} + +{% if postfix_domains is defined and postfix_domains is iterable %} +virtual_mailbox_domains = {% for domain in postfix_domains %} {{ domain }} {% endfor %} +{% endif %} + +2bounce_notice_recipient = {{ postmaster_email }} +bounce_notice_recipient = {{ postmaster_email }} +delay_notice_recipient = {{ postmaster_email }} +error_notice_recipient = {{ postmaster_email }} +smtpd_helo_required = yes +disable_vrfy_command = yes +message_size_limit = {{ postfix_message_size_limit }} +smtpd_helo_restrictions = reject_unknown_helo_hostname +smtpd_client_restrictions = reject_unknown_reverse_client_hostname reject_unauth_pipelining +smtpd_discard_ehlo_keywords = silent-discard, dsn diff --git a/templates/Fedora/39/etc/postfix/main.cf.proto b/templates/Fedora/39/etc/postfix/main.cf.proto new file mode 100644 index 0000000..112c1f1 --- /dev/null +++ b/templates/Fedora/39/etc/postfix/main.cf.proto @@ -0,0 +1,745 @@ +# Global Postfix configuration file. This file lists only a subset +# of all parameters. For the syntax, and for a complete parameter +# list, see the postconf(5) manual page (command: "man 5 postconf"). +# +# TIP: use the command "postconf -n" to view main.cf parameter +# settings, "postconf parametername" to view a specific parameter, +# and "postconf 'parametername=value'" to set a specific parameter. +# +# For common configuration examples, see BASIC_CONFIGURATION_README +# and STANDARD_CONFIGURATION_README. To find these documents, use +# the command "postconf html_directory readme_directory", or go to +# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. +# +# For best results, change no more than 2-3 parameters at a time, +# and test if Postfix still works after every change. + +# COMPATIBILITY +# +# The compatibility_level determines what default settings Postfix +# will use for main.cf and master.cf settings. These defaults will +# change over time. +# +# To avoid breaking things, Postfix will use backwards-compatible +# default settings and log where it uses those old backwards-compatible +# default settings, until the system administrator has determined +# if any backwards-compatible default settings need to be made +# permanent in main.cf or master.cf. +# +# When this review is complete, update the compatibility_level setting +# below as recommended in the RELEASE_NOTES file. +# +# The level below is what should be used with new (not upgrade) installs. +# +compatibility_level = 3.7 + +# SOFT BOUNCE +# +# The soft_bounce parameter provides a limited safety net for +# testing. When soft_bounce is enabled, mail will remain queued that +# would otherwise bounce. This parameter disables locally-generated +# bounces, and prevents the SMTP server from rejecting mail permanently +# (by changing 5xx replies into 4xx replies). However, soft_bounce +# is no cure for address rewriting mistakes or mail routing mistakes. +# +#soft_bounce = no + +# LOCAL PATHNAME INFORMATION +# +# The queue_directory specifies the location of the Postfix queue. +# This is also the root directory of Postfix daemons that run chrooted. +# See the files in examples/chroot-setup for setting up Postfix chroot +# environments on different UNIX systems. +# +queue_directory = /var/spool/postfix + +# The command_directory parameter specifies the location of all +# postXXX commands. +# +command_directory = /usr/sbin + +# The daemon_directory parameter specifies the location of all Postfix +# daemon programs (i.e. programs listed in the master.cf file). This +# directory must be owned by root. +# +daemon_directory = /usr/libexec/postfix + +# The data_directory parameter specifies the location of Postfix-writable +# data files (caches, random numbers). This directory must be owned +# by the mail_owner account (see below). +# +data_directory = /var/lib/postfix + +# QUEUE AND PROCESS OWNERSHIP +# +# The mail_owner parameter specifies the owner of the Postfix queue +# and of most Postfix daemon processes. Specify the name of a user +# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS +# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In +# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED +# USER. +# +mail_owner = postfix + +# The default_privs parameter specifies the default rights used by +# the local delivery agent for delivery to external file or command. +# These rights are used in the absence of a recipient user context. +# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. +# +#default_privs = nobody + +# INTERNET HOST AND DOMAIN NAMES +# +# The myhostname parameter specifies the internet hostname of this +# mail system. The default is to use the fully-qualified domain name +# from gethostname(). $myhostname is used as a default value for many +# other configuration parameters. +# +#myhostname = host.domain.tld +#myhostname = virtual.domain.tld + +# The mydomain parameter specifies the local internet domain name. +# The default is to use $myhostname minus the first component. +# $mydomain is used as a default value for many other configuration +# parameters. +# +#mydomain = domain.tld + +# SENDING MAIL +# +# The myorigin parameter specifies the domain that locally-posted +# mail appears to come from. The default is to append $myhostname, +# which is fine for small sites. If you run a domain with multiple +# machines, you should (1) change this to $mydomain and (2) set up +# a domain-wide alias database that aliases each user to +# user@that.users.mailhost. +# +# For the sake of consistency between sender and recipient addresses, +# myorigin also specifies the default domain name that is appended +# to recipient addresses that have no @domain part. +# +#myorigin = $myhostname +#myorigin = $mydomain + +# RECEIVING MAIL + +# The inet_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on. By default, +# the software claims all active interfaces on the machine. The +# parameter also controls delivery of mail to user@[ip.address]. +# +# See also the proxy_interfaces parameter, for network addresses that +# are forwarded to us via a proxy or network address translator. +# +# Note: you need to stop/start Postfix when this parameter changes. +# +#inet_interfaces = all +#inet_interfaces = $myhostname +#inet_interfaces = $myhostname, localhost +inet_interfaces = localhost + +# Enable IPv4, and IPv6 if supported +inet_protocols = all + +# The proxy_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on by way of a +# proxy or network address translation unit. This setting extends +# the address list specified with the inet_interfaces parameter. +# +# You must specify your proxy/NAT addresses when your system is a +# backup MX host for other domains, otherwise mail delivery loops +# will happen when the primary MX host is down. +# +#proxy_interfaces = +#proxy_interfaces = 1.2.3.4 + +# The mydestination parameter specifies the list of domains that this +# machine considers itself the final destination for. +# +# These domains are routed to the delivery agent specified with the +# local_transport parameter setting. By default, that is the UNIX +# compatible delivery agent that lookups all recipients in /etc/passwd +# and /etc/aliases or their equivalent. +# +# The default is $myhostname + localhost.$mydomain + localhost. On +# a mail domain gateway, you should also include $mydomain. +# +# Do not specify the names of virtual domains - those domains are +# specified elsewhere (see VIRTUAL_README). +# +# Do not specify the names of domains that this machine is backup MX +# host for. Specify those names via the relay_domains settings for +# the SMTP server, or use permit_mx_backup if you are lazy (see +# STANDARD_CONFIGURATION_README). +# +# The local machine is always the final destination for mail addressed +# to user@[the.net.work.address] of an interface that the mail system +# receives mail on (see the inet_interfaces parameter). +# +# Specify a list of host or domain names, /file/name or type:table +# patterns, separated by commas and/or whitespace. A /file/name +# pattern is replaced by its contents; a type:table is matched when +# a name matches a lookup key (the right-hand side is ignored). +# Continue long lines by starting the next line with whitespace. +# +# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". +# +mydestination = $myhostname, localhost.$mydomain, localhost +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, +# mail.$mydomain, www.$mydomain, ftp.$mydomain + +# REJECTING MAIL FOR UNKNOWN LOCAL USERS +# +# The local_recipient_maps parameter specifies optional lookup tables +# with all names or addresses of users that are local with respect +# to $mydestination, $inet_interfaces or $proxy_interfaces. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown local users. This parameter is defined by default. +# +# To turn off local recipient checking in the SMTP server, specify +# local_recipient_maps = (i.e. empty). +# +# The default setting assumes that you use the default Postfix local +# delivery agent for local delivery. You need to update the +# local_recipient_maps setting if: +# +# - You define $mydestination domain recipients in files other than +# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. +# For example, you define $mydestination domain recipients in +# the $virtual_mailbox_maps files. +# +# - You redefine the local delivery agent in master.cf. +# +# - You redefine the "local_transport" setting in main.cf. +# +# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" +# feature of the Postfix local delivery agent (see local(8)). +# +# Details are described in the LOCAL_RECIPIENT_README file. +# +# Beware: if the Postfix SMTP server runs chrooted, you probably have +# to access the passwd file via the proxymap service, in order to +# overcome chroot restrictions. The alternative, having a copy of +# the system passwd file in the chroot jail is just not practical. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify a bare username, an @domain.tld +# wild-card, or specify a user@domain.tld address. +# +#local_recipient_maps = unix:passwd.byname $alias_maps +#local_recipient_maps = proxy:unix:passwd.byname $alias_maps +#local_recipient_maps = + +# The unknown_local_recipient_reject_code specifies the SMTP server +# response code when a recipient domain matches $mydestination or +# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty +# and the recipient address or address local-part is not found. +# +# The default setting is 550 (reject mail) but it is safer to start +# with 450 (try again later) until you are certain that your +# local_recipient_maps settings are OK. +# +unknown_local_recipient_reject_code = 550 + +# TRUST AND RELAY CONTROL + +# The mynetworks parameter specifies the list of "trusted" SMTP +# clients that have more privileges than "strangers". +# +# In particular, "trusted" SMTP clients are allowed to relay mail +# through Postfix. See the smtpd_recipient_restrictions parameter +# in postconf(5). +# +# You can specify the list of "trusted" network addresses by hand +# or you can let Postfix do it for you (which is the default). +# +# By default (mynetworks_style = host), Postfix "trusts" only +# the local machine. +# +# Specify "mynetworks_style = subnet" when Postfix should "trust" +# SMTP clients in the same IP subnetworks as the local machine. +# On Linux, this works correctly only with interfaces specified +# with the "ifconfig" or "ip" command. +# +# Specify "mynetworks_style = class" when Postfix should "trust" SMTP +# clients in the same IP class A/B/C networks as the local machine. +# Don't do this with a dialup site - it would cause Postfix to "trust" +# your entire provider's network. Instead, specify an explicit +# mynetworks list by hand, as described below. +# +# Specify "mynetworks_style = host" when Postfix should "trust" +# only the local machine. +# +#mynetworks_style = class +#mynetworks_style = subnet +#mynetworks_style = host + +# Alternatively, you can specify the mynetworks list by hand, in +# which case Postfix ignores the mynetworks_style setting. +# +# Specify an explicit list of network/netmask patterns, where the +# mask specifies the number of bits in the network part of a host +# address. +# +# You can also specify the absolute pathname of a pattern file instead +# of listing the patterns here. Specify type:table for table-based lookups +# (the value on the table right-hand side is not used). +# +#mynetworks = 168.100.3.0/28, 127.0.0.0/8 +#mynetworks = $config_directory/mynetworks +#mynetworks = hash:/etc/postfix/network_table + +# The relay_domains parameter restricts what destinations this system will +# relay mail to. See the smtpd_relay_restrictions and +# smtpd_recipient_restrictions descriptions in postconf(5) for detailed +# information. +# +# By default, Postfix relays mail +# - from "trusted" clients (IP address matches $mynetworks, or is +# SASL authenticated) to any destination, +# - from "untrusted" clients to destinations that match $relay_domains or +# subdomains thereof, except addresses with sender-specified routing. +# The default relay_domains value is empty. +# +# In addition to the above, the Postfix SMTP server by default accepts mail +# that Postfix is final destination for: +# - destinations that match $inet_interfaces or $proxy_interfaces, +# - destinations that match $mydestination +# - destinations that match $virtual_alias_domains, +# - destinations that match $virtual_mailbox_domains. +# These destinations do not need to be listed in $relay_domains. +# +# Specify a list of hosts or domains, /file/name patterns or type:name +# lookup tables, separated by commas and/or whitespace. Continue +# long lines by starting the next line with whitespace. A file name +# is replaced by its contents; a type:name table is matched when a +# (parent) domain appears as lookup key. +# +# NOTE: Postfix will not automatically forward mail for domains that +# list this system as their primary or backup MX host. See the +# permit_mx_backup restriction description in postconf(5). +# +#relay_domains = + +# INTERNET OR INTRANET + +# The relayhost parameter specifies the default host to send mail to +# when no entry is matched in the optional transport(5) table. When +# no relayhost is given, mail is routed directly to the destination. +# +# On an intranet, specify the organizational domain name. If your +# internal DNS uses no MX records, specify the name of the intranet +# gateway host instead. +# +# In the case of SMTP, specify a domain, host, host:port, [host]:port, +# [address] or [address]:port; the form [host] turns off MX lookups. +# +# If you're connected via UUCP, see also the default_transport parameter. +# +#relayhost = $mydomain +#relayhost = [gateway.my.domain] +#relayhost = [mailserver.isp.tld] +#relayhost = uucphost +#relayhost = [an.ip.add.ress] + +# REJECTING UNKNOWN RELAY USERS +# +# The relay_recipient_maps parameter specifies optional lookup tables +# with all addresses in the domains that match $relay_domains. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown relay users. This feature is off by default. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify an @domain.tld wild-card, or specify +# a user@domain.tld address. +# +#relay_recipient_maps = hash:/etc/postfix/relay_recipients + +# INPUT RATE CONTROL +# +# The in_flow_delay configuration parameter implements mail input +# flow control. This feature is turned on by default, although it +# still needs further development (it's disabled on SCO UNIX due +# to an SCO bug). +# +# A Postfix process will pause for $in_flow_delay seconds before +# accepting a new message, when the message arrival rate exceeds the +# message delivery rate. With the default 100 SMTP server process +# limit, this limits the mail inflow to 100 messages a second more +# than the number of messages delivered per second. +# +# Specify 0 to disable the feature. Valid delays are 0..10. +# +#in_flow_delay = 1s + +# ADDRESS REWRITING +# +# The ADDRESS_REWRITING_README document gives information about +# address masquerading or other forms of address rewriting including +# username->Firstname.Lastname mapping. + +# ADDRESS REDIRECTION (VIRTUAL DOMAIN) +# +# The VIRTUAL_README document gives information about the many forms +# of domain hosting that Postfix supports. + +# "USER HAS MOVED" BOUNCE MESSAGES +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# TRANSPORT MAP +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# ALIAS DATABASE +# +# The alias_maps parameter specifies the list of alias databases used +# by the local delivery agent. The default list is system dependent. +# +# On systems with NIS, the default is to search the local alias +# database, then the NIS alias database. See aliases(5) for syntax +# details. +# +# If you change the alias database, run "postalias /etc/aliases" (or +# wherever your system stores the mail alias file), or simply run +# "newaliases" to build the necessary DBM or DB file. +# +# It will take a minute or so before changes become visible. Use +# "postfix reload" to eliminate the delay. +# +#alias_maps = dbm:/etc/aliases +alias_maps = hash:/etc/aliases +#alias_maps = hash:/etc/aliases, nis:mail.aliases +#alias_maps = netinfo:/aliases + +# The alias_database parameter specifies the alias database(s) that +# are built with "newaliases" or "sendmail -bi". This is a separate +# configuration parameter, because alias_maps (see above) may specify +# tables that are not necessarily all under control by Postfix. +# +#alias_database = dbm:/etc/aliases +#alias_database = dbm:/etc/mail/aliases +alias_database = hash:/etc/aliases +#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases + +# ADDRESS EXTENSIONS (e.g., user+foo) +# +# The recipient_delimiter parameter specifies the separator between +# user names and address extensions (user+foo). See canonical(5), +# local(8), relocated(5) and virtual(5) for the effects this has on +# aliases, canonical, virtual, relocated and .forward file lookups. +# Basically, the software tries user+foo and .forward+foo before +# trying user and .forward. +# +#recipient_delimiter = + + +# DELIVERY TO MAILBOX +# +# The home_mailbox parameter specifies the optional pathname of a +# mailbox file relative to a user's home directory. The default +# mailbox file is /var/spool/mail/user or /var/mail/user. Specify +# "Maildir/" for qmail-style delivery (the / is required). +# +#home_mailbox = Mailbox +#home_mailbox = Maildir/ + +# The mail_spool_directory parameter specifies the directory where +# UNIX-style mailboxes are kept. The default setting depends on the +# system type. +# +#mail_spool_directory = /var/mail +#mail_spool_directory = /var/spool/mail + +# The mailbox_command parameter specifies the optional external +# command to use instead of mailbox delivery. The command is run as +# the recipient with proper HOME, SHELL and LOGNAME environment settings. +# Exception: delivery for root is done as $default_user. +# +# Other environment variables of interest: USER (recipient username), +# EXTENSION (address extension), DOMAIN (domain part of address), +# and LOCAL (the address localpart). +# +# Unlike other Postfix configuration parameters, the mailbox_command +# parameter is not subjected to $parameter substitutions. This is to +# make it easier to specify shell syntax (see example below). +# +# Avoid shell meta characters because they will force Postfix to run +# an expensive shell process. Procmail alone is expensive enough. +# +# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN +# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. +# +#mailbox_command = /some/where/procmail +#mailbox_command = /some/where/procmail -a "$EXTENSION" + +# The mailbox_transport specifies the optional transport in master.cf +# to use after processing aliases and .forward files. This parameter +# has precedence over the mailbox_command, fallback_transport and +# luser_relay parameters. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" +# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. +#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp + +# If using the cyrus-imapd IMAP server deliver local mail to the IMAP +# server using LMTP (Local Mail Transport Protocol), this is prefered +# over the older cyrus deliver program by setting the +# mailbox_transport as below: +# +# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp +# +# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via +# these settings. +# +# local_destination_recipient_limit = 300 +# local_destination_concurrency_limit = 5 +# +# Of course you should adjust these settings as appropriate for the +# capacity of the hardware you are using. The recipient limit setting +# can be used to take advantage of the single instance message store +# capability of Cyrus. The concurrency limit can be used to control +# how many simultaneous LMTP sessions will be permitted to the Cyrus +# message store. +# +# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and +# subsequent line in master.cf. +#mailbox_transport = cyrus + +# The fallback_transport specifies the optional transport in master.cf +# to use for recipients that are not found in the UNIX passwd database. +# This parameter has precedence over the luser_relay parameter. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp +#fallback_transport = + +# The luser_relay parameter specifies an optional destination address +# for unknown recipients. By default, mail for unknown@$mydestination, +# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned +# as undeliverable. +# +# The following expansions are done on luser_relay: $user (recipient +# username), $shell (recipient shell), $home (recipient home directory), +# $recipient (full recipient address), $extension (recipient address +# extension), $domain (recipient domain), $local (entire recipient +# localpart), $recipient_delimiter. Specify ${name?value} or +# ${name:value} to expand value only when $name does (does not) exist. +# +# luser_relay works only for the default Postfix local delivery agent. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must specify "local_recipient_maps =" (i.e. empty) in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#luser_relay = $user@other.host +#luser_relay = $local@other.host +#luser_relay = admin+$local + +# JUNK MAIL CONTROLS +# +# The controls listed here are only a very small subset. The file +# SMTPD_ACCESS_README provides an overview. + +# The header_checks parameter specifies an optional table with patterns +# that each logical message header is matched against, including +# headers that span multiple physical lines. +# +# By default, these patterns also apply to MIME headers and to the +# headers of attached messages. With older Postfix versions, MIME and +# attached message headers were treated as body text. +# +# For details, see "man header_checks". +# +#header_checks = regexp:/etc/postfix/header_checks + +# FAST ETRN SERVICE +# +# Postfix maintains per-destination logfiles with information about +# deferred mail, so that mail can be flushed quickly with the SMTP +# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". +# See the ETRN_README document for a detailed description. +# +# The fast_flush_domains parameter controls what destinations are +# eligible for this service. By default, they are all domains that +# this server is willing to relay mail to. +# +#fast_flush_domains = $relay_domains + +# SHOW SOFTWARE VERSION OR NOT +# +# The smtpd_banner parameter specifies the text that follows the 220 +# code in the SMTP server's greeting banner. Some people like to see +# the mail version advertised. By default, Postfix shows no version. +# +# You MUST specify $myhostname at the start of the text. That is an +# RFC requirement. Postfix itself does not care. +# +#smtpd_banner = $myhostname ESMTP $mail_name +#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) + +# PARALLEL DELIVERY TO THE SAME DESTINATION +# +# How many parallel deliveries to the same user or domain? With local +# delivery, it does not make sense to do massively parallel delivery +# to the same user, because mailbox updates must happen sequentially, +# and expensive pipelines in .forward files can cause disasters when +# too many are run at the same time. With SMTP deliveries, 10 +# simultaneous connections to the same domain could be sufficient to +# raise eyebrows. +# +# Each message delivery transport has its XXX_destination_concurrency_limit +# parameter. The default is $default_destination_concurrency_limit for +# most delivery transports. For the local delivery agent the default is 2. + +#local_destination_concurrency_limit = 2 +#default_destination_concurrency_limit = 20 + +# DEBUGGING CONTROL +# +# The debug_peer_level parameter specifies the increment in verbose +# logging level when an SMTP client or server host name or address +# matches a pattern in the debug_peer_list parameter. +# +debug_peer_level = 2 + +# The debug_peer_list parameter specifies an optional list of domain +# or network patterns, /file/name patterns or type:name tables. When +# an SMTP client or server host name or address matches a pattern, +# increase the verbose logging level by the amount specified in the +# debug_peer_level parameter. +# +#debug_peer_list = 127.0.0.1 +#debug_peer_list = some.domain + +# The debugger_command specifies the external command that is executed +# when a Postfix daemon program is run with the -D option. +# +# Use "command .. & sleep 5" so that the debugger can attach before +# the process marches on. If you use an X-based debugger, be sure to +# set up your XAUTHORITY environment variable before starting Postfix. +# +debugger_command = + PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin + ddd $daemon_directory/$process_name $process_id & sleep 5 + +# If you can't use X, use this to capture the call stack when a +# daemon crashes. The result is in a file in the configuration +# directory, and is named after the process name and the process ID. +# +# debugger_command = +# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; +# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 +# >$config_directory/$process_name.$process_id.log & sleep 5 +# +# Another possibility is to run gdb under a detached screen session. +# To attach to the screen session, su root and run "screen -r +# " where uniquely matches one of the detached +# sessions (from "screen -list"). +# +# debugger_command = +# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen +# -dmS $process_name gdb $daemon_directory/$process_name +# $process_id & sleep 1 + +# INSTALL-TIME CONFIGURATION INFORMATION +# +# The following parameters are used when installing a new Postfix version. +# +# sendmail_path: The full pathname of the Postfix sendmail command. +# This is the Sendmail-compatible mail posting interface. +# +sendmail_path = + +# newaliases_path: The full pathname of the Postfix newaliases command. +# This is the Sendmail-compatible command to build alias databases. +# +newaliases_path = + +# mailq_path: The full pathname of the Postfix mailq command. This +# is the Sendmail-compatible mail queue listing command. +# +mailq_path = + +# setgid_group: The group for mail submission and queue management +# commands. This must be a group name with a numerical group ID that +# is not shared with other accounts, not even with the Postfix account. +# +setgid_group = + +# html_directory: The location of the Postfix HTML documentation. +# +html_directory = + +# manpage_directory: The location of the Postfix on-line manual pages. +# +manpage_directory = + +# sample_directory: The location of the Postfix sample configuration files. +# This parameter is obsolete as of Postfix 2.1. +# +sample_directory = + +# readme_directory: The location of the Postfix README files. +# +readme_directory = + +# TLS CONFIGURATION +# +# Basic Postfix TLS configuration by default with self-signed certificate +# for inbound SMTP and also opportunistic TLS for outbound SMTP. + +# The full pathname of a file with the Postfix SMTP server RSA certificate +# in PEM format. Intermediate certificates should be included in general, +# the server certificate first, then the issuing CA(s) (bottom-up order). +# +smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem + +# The full pathname of a file with the Postfix SMTP server RSA private key +# in PEM format. The private key must be accessible without a pass-phrase, +# i.e. it must not be encrypted. +# +smtpd_tls_key_file = /etc/pki/tls/private/postfix.key + +# Announce STARTTLS support to remote SMTP clients, but do not require that +# clients use TLS encryption (opportunistic TLS inbound). +# +smtpd_tls_security_level = may + +# Directory with PEM format Certification Authority certificates that the +# Postfix SMTP client uses to verify a remote SMTP server certificate. +# +smtp_tls_CApath = /etc/pki/tls/certs + +# The full pathname of a file containing CA certificates of root CAs +# trusted to sign either remote SMTP server certificates or intermediate CA +# certificates. +# +smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt + +# Use TLS if this is supported by the remote SMTP server, otherwise use +# plaintext (opportunistic TLS outbound). +# +smtp_tls_security_level = may diff --git a/templates/Fedora/39/etc/postfix/master.cf b/templates/Fedora/39/etc/postfix/master.cf new file mode 100644 index 0000000..bb0eae9 --- /dev/null +++ b/templates/Fedora/39/etc/postfix/master.cf @@ -0,0 +1,145 @@ +# +# Postfix master process configuration file. For details on the format +# of the file, see the master(5) manual page (command: "man 5 master" or +# on-line: http://www.postfix.org/master.5.html). +# +# Do not forget to execute "postfix reload" after editing this file. +# +# ========================================================================== +# service type private unpriv chroot wakeup maxproc command + args +# (yes) (yes) (no) (never) (100) +# ========================================================================== +smtp inet n - n - - smtpd +#smtp inet n - n - 1 postscreen +#smtpd pass - - n - - smtpd +#dnsblog unix - - n - 0 dnsblog +#tlsproxy unix - - n - 0 tlsproxy +# Choose one: enable submission for loopback clients only, or for any client. +#127.0.0.1:submission inet n - n - - smtpd +#submission inet n - n - - smtpd +# -o syslog_name=postfix/submission +# -o smtpd_tls_security_level=encrypt +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_tls_auth_only=yes +# -o smtpd_reject_unlisted_recipient=no +# Instead of specifying complex smtpd__restrictions here, +# specify "smtpd__restrictions=$mua__restrictions" +# here, and specify mua__restrictions in main.cf (where +# "" is "client", "helo", "sender", "relay", or "recipient"). +# -o smtpd_client_restrictions= +# -o smtpd_helo_restrictions= +# -o smtpd_sender_restrictions= +# -o smtpd_relay_restrictions= +# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +# Choose one: enable submissions for loopback clients only, or for any client. +#127.0.0.1:submissions inet n - n - - smtpd +#submissions inet n - n - - smtpd +# -o syslog_name=postfix/submissions +# -o smtpd_tls_wrappermode=yes +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_reject_unlisted_recipient=no +# Instead of specifying complex smtpd__restrictions here, +# specify "smtpd__restrictions=$mua__restrictions" +# here, and specify mua__restrictions in main.cf (where +# "" is "client", "helo", "sender", "relay", or "recipient"). +# -o smtpd_client_restrictions= +# -o smtpd_helo_restrictions= +# -o smtpd_sender_restrictions= +# -o smtpd_relay_restrictions= +# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +#628 inet n - n - - qmqpd +pickup unix n - n 60 1 pickup +cleanup unix n - n - 0 cleanup +qmgr unix n - n 300 1 qmgr +#qmgr unix n - n 300 1 oqmgr +tlsmgr unix - - n 1000? 1 tlsmgr +rewrite unix - - n - - trivial-rewrite +bounce unix - - n - 0 bounce +defer unix - - n - 0 bounce +trace unix - - n - 0 bounce +verify unix - - n - 1 verify +flush unix n - n 1000? 0 flush +proxymap unix - - n - - proxymap +proxywrite unix - - n - 1 proxymap +smtp unix - - n - - smtp +relay unix - - n - - smtp + -o syslog_name=postfix/$service_name +# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 +showq unix n - n - - showq +error unix - - n - - error +retry unix - - n - - error +discard unix - - n - - discard +local unix - n n - - local +virtual unix - n n - - virtual +lmtp unix - - n - - lmtp +anvil unix - - n - 1 anvil +scache unix - - n - 1 scache +postlog unix-dgram n - n - 1 postlogd +# +# ==================================================================== +# Interfaces to non-Postfix software. Be sure to examine the manual +# pages of the non-Postfix software to find out what options it wants. +# +# Many of the following services use the Postfix pipe(8) delivery +# agent. See the pipe(8) man page for information about ${recipient} +# and other message envelope options. +# ==================================================================== +# +# maildrop. See the Postfix MAILDROP_README file for details. +# Also specify in main.cf: maildrop_destination_recipient_limit=1 +# +#maildrop unix - n n - - pipe +# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} +# +# ==================================================================== +# +# Recent Cyrus versions can use the existing "lmtp" master.cf entry. +# +# Specify in cyrus.conf: +# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 +# +# Specify in main.cf one or more of the following: +# mailbox_transport = lmtp:inet:localhost +# virtual_transport = lmtp:inet:localhost +# +# ==================================================================== +# +# Cyrus 2.1.5 (Amos Gouaux) +# Also specify in main.cf: cyrus_destination_recipient_limit=1 +# +#cyrus unix - n n - - pipe +# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} +# +# ==================================================================== +# +# Old example of delivery via Cyrus. +# +#old-cyrus unix - n n - - pipe +# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} +# +# ==================================================================== +# +# See the Postfix UUCP_README file for configuration details. +# +#uucp unix - n n - - pipe +# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) +# +# ==================================================================== +# +# Other external delivery methods. +# +#ifmail unix - n n - - pipe +# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) +# +#bsmtp unix - n n - - pipe +# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient +# +#scalemail-backend unix - n n - 2 pipe +# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store +# ${nexthop} ${user} ${extension} +# +#mailman unix - n n - - pipe +# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py +# ${nexthop} ${user} diff --git a/templates/Fedora/39/etc/postfix/master.cf.proto b/templates/Fedora/39/etc/postfix/master.cf.proto new file mode 100644 index 0000000..bb0eae9 --- /dev/null +++ b/templates/Fedora/39/etc/postfix/master.cf.proto @@ -0,0 +1,145 @@ +# +# Postfix master process configuration file. For details on the format +# of the file, see the master(5) manual page (command: "man 5 master" or +# on-line: http://www.postfix.org/master.5.html). +# +# Do not forget to execute "postfix reload" after editing this file. +# +# ========================================================================== +# service type private unpriv chroot wakeup maxproc command + args +# (yes) (yes) (no) (never) (100) +# ========================================================================== +smtp inet n - n - - smtpd +#smtp inet n - n - 1 postscreen +#smtpd pass - - n - - smtpd +#dnsblog unix - - n - 0 dnsblog +#tlsproxy unix - - n - 0 tlsproxy +# Choose one: enable submission for loopback clients only, or for any client. +#127.0.0.1:submission inet n - n - - smtpd +#submission inet n - n - - smtpd +# -o syslog_name=postfix/submission +# -o smtpd_tls_security_level=encrypt +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_tls_auth_only=yes +# -o smtpd_reject_unlisted_recipient=no +# Instead of specifying complex smtpd__restrictions here, +# specify "smtpd__restrictions=$mua__restrictions" +# here, and specify mua__restrictions in main.cf (where +# "" is "client", "helo", "sender", "relay", or "recipient"). +# -o smtpd_client_restrictions= +# -o smtpd_helo_restrictions= +# -o smtpd_sender_restrictions= +# -o smtpd_relay_restrictions= +# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +# Choose one: enable submissions for loopback clients only, or for any client. +#127.0.0.1:submissions inet n - n - - smtpd +#submissions inet n - n - - smtpd +# -o syslog_name=postfix/submissions +# -o smtpd_tls_wrappermode=yes +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_reject_unlisted_recipient=no +# Instead of specifying complex smtpd__restrictions here, +# specify "smtpd__restrictions=$mua__restrictions" +# here, and specify mua__restrictions in main.cf (where +# "" is "client", "helo", "sender", "relay", or "recipient"). +# -o smtpd_client_restrictions= +# -o smtpd_helo_restrictions= +# -o smtpd_sender_restrictions= +# -o smtpd_relay_restrictions= +# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +#628 inet n - n - - qmqpd +pickup unix n - n 60 1 pickup +cleanup unix n - n - 0 cleanup +qmgr unix n - n 300 1 qmgr +#qmgr unix n - n 300 1 oqmgr +tlsmgr unix - - n 1000? 1 tlsmgr +rewrite unix - - n - - trivial-rewrite +bounce unix - - n - 0 bounce +defer unix - - n - 0 bounce +trace unix - - n - 0 bounce +verify unix - - n - 1 verify +flush unix n - n 1000? 0 flush +proxymap unix - - n - - proxymap +proxywrite unix - - n - 1 proxymap +smtp unix - - n - - smtp +relay unix - - n - - smtp + -o syslog_name=postfix/$service_name +# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 +showq unix n - n - - showq +error unix - - n - - error +retry unix - - n - - error +discard unix - - n - - discard +local unix - n n - - local +virtual unix - n n - - virtual +lmtp unix - - n - - lmtp +anvil unix - - n - 1 anvil +scache unix - - n - 1 scache +postlog unix-dgram n - n - 1 postlogd +# +# ==================================================================== +# Interfaces to non-Postfix software. Be sure to examine the manual +# pages of the non-Postfix software to find out what options it wants. +# +# Many of the following services use the Postfix pipe(8) delivery +# agent. See the pipe(8) man page for information about ${recipient} +# and other message envelope options. +# ==================================================================== +# +# maildrop. See the Postfix MAILDROP_README file for details. +# Also specify in main.cf: maildrop_destination_recipient_limit=1 +# +#maildrop unix - n n - - pipe +# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} +# +# ==================================================================== +# +# Recent Cyrus versions can use the existing "lmtp" master.cf entry. +# +# Specify in cyrus.conf: +# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 +# +# Specify in main.cf one or more of the following: +# mailbox_transport = lmtp:inet:localhost +# virtual_transport = lmtp:inet:localhost +# +# ==================================================================== +# +# Cyrus 2.1.5 (Amos Gouaux) +# Also specify in main.cf: cyrus_destination_recipient_limit=1 +# +#cyrus unix - n n - - pipe +# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} +# +# ==================================================================== +# +# Old example of delivery via Cyrus. +# +#old-cyrus unix - n n - - pipe +# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} +# +# ==================================================================== +# +# See the Postfix UUCP_README file for configuration details. +# +#uucp unix - n n - - pipe +# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) +# +# ==================================================================== +# +# Other external delivery methods. +# +#ifmail unix - n n - - pipe +# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) +# +#bsmtp unix - n n - - pipe +# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient +# +#scalemail-backend unix - n n - 2 pipe +# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store +# ${nexthop} ${user} ${extension} +# +#mailman unix - n n - - pipe +# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py +# ${nexthop} ${user} diff --git a/templates/Fedora/39/etc/postfix/postfix-files b/templates/Fedora/39/etc/postfix/postfix-files new file mode 100644 index 0000000..b3ed234 --- /dev/null +++ b/templates/Fedora/39/etc/postfix/postfix-files @@ -0,0 +1,447 @@ +# +# Do not edit this file. +# +# This file controls the postfix-install script for installation of +# Postfix programs, configuration files and documentation, as well +# as the post-install script for setting permissions and for updating +# Postfix configuration files. See the respective manual pages within +# the script files. +# +# Do not list $command_directory or $shlib_directory in this file, +# or it will be blown away by a future Postfix uninstallation +# procedure. You would not want to lose all files in /usr/sbin or +# /usr/local/lib. +# +# Each record in this file describes one file or directory. +# Fields are separated by ":". Specify a null field as "-". +# Missing fields or separators at the end are OK. +# +# File format: +# name:type:owner:group:permission:flags +# No group means don't change group ownership. +# +# File types: +# d=directory +# f=regular file +# h=hard link (*) +# l=symbolic link (*) +# +# (*) With hard links and symbolic links, the owner field becomes the +# source pathname, while the group and permissions are ignored. +# +# File flags: +# No flag means the flag is not active. +# p=preserve existing file, do not replace (postfix-install). +# u=update owner/group/mode (post-install upgrade-permissions). +# c=create missing directory (post-install create-missing). +# r=apply owner/group recursively (post-install set/upgrade-permissions). +# o=obsolete, no longer part of Postfix +# 1=optional for non-default instance (config_dir != built-in default). +# +# Note: the "u" flag is for upgrading the permissions of existing files +# or directories after changes in Postfix architecture. For robustness +# it is a good idea to "u" all the files that have special ownership or +# permissions, so that running "make install" fixes any glitches. +# +# Note: order matters. Update shared libraries and database plugins +# before daemon/command-line programs. +$config_directory:d:root:-:755:u +$data_directory:d:$mail_owner:-:700:uc +$daemon_directory:d:root:-:755:u +$queue_directory:d:root:-:755:uc +$sample_directory:d:root:-:755:o +$readme_directory:d:root:-:755 +$html_directory:d:root:-:755 +$queue_directory/active:d:$mail_owner:-:700:ucr +$queue_directory/bounce:d:$mail_owner:-:700:ucr +$queue_directory/corrupt:d:$mail_owner:-:700:ucr +$queue_directory/defer:d:$mail_owner:-:700:ucr +$queue_directory/deferred:d:$mail_owner:-:700:ucr +$queue_directory/flush:d:$mail_owner:-:700:ucr +$queue_directory/hold:d:$mail_owner:-:700:ucr +$queue_directory/incoming:d:$mail_owner:-:700:ucr +$queue_directory/private:d:$mail_owner:-:700:uc +$queue_directory/maildrop:d:$mail_owner:$setgid_group:730:uc +$queue_directory/public:d:$mail_owner:$setgid_group:710:uc +$queue_directory/pid:d:root:-:755:uc +$queue_directory/saved:d:$mail_owner:-:700:ucr +$queue_directory/trace:d:$mail_owner:-:700:ucr +# Update shared libraries and plugins before daemon or command-line programs. +$shlib_directory/libpostfix-util.so:f:root:-:755 +$shlib_directory/libpostfix-global.so:f:root:-:755 +$shlib_directory/libpostfix-dns.so:f:root:-:755 +$shlib_directory/libpostfix-tls.so:f:root:-:755 +$shlib_directory/libpostfix-master.so:f:root:-:755 +$meta_directory/dynamicmaps.cf.d:d:root:-:755 +$meta_directory/dynamicmaps.cf:f:root:-:644 +$meta_directory/main.cf.proto:f:root:-:644 +$meta_directory/master.cf.proto:f:root:-:644 +$meta_directory/postfix-files.d:d:root:-:755 +$meta_directory/postfix-files:f:root:-:644 +$daemon_directory/anvil:f:root:-:755 +$daemon_directory/bounce:f:root:-:755 +$daemon_directory/cleanup:f:root:-:755 +$daemon_directory/discard:f:root:-:755 +$daemon_directory/dnsblog:f:root:-:755 +$daemon_directory/error:f:root:-:755 +$daemon_directory/flush:f:root:-:755 +$daemon_directory/local:f:root:-:755 +$daemon_directory/main.cf:f:root:-:644:o +$daemon_directory/master.cf:f:root:-:644:o +$daemon_directory/master:f:root:-:755 +$daemon_directory/oqmgr:f:root:-:755 +$daemon_directory/pickup:f:root:-:755 +$daemon_directory/pipe:f:root:-:755 +$daemon_directory/post-install:f:root:-:755 +# In case meta_directory == daemon_directory. +#$daemon_directory/postfix-files:f:root:-:644:o +#$daemon_directory/postfix-files.d:d:root:-:755:o +$daemon_directory/postfix-script:f:root:-:755 +$daemon_directory/postfix-tls-script:f:root:-:755 +$daemon_directory/postfix-wrapper:f:root:-:755 +$daemon_directory/postmulti-script:f:root:-:755 +$daemon_directory/postlogd:f:root:-:755 +$daemon_directory/postscreen:f:root:-:755 +$daemon_directory/proxymap:f:root:-:755 +$daemon_directory/qmgr:f:root:-:755 +$daemon_directory/qmqpd:f:root:-:755 +$daemon_directory/scache:f:root:-:755 +$daemon_directory/showq:f:root:-:755 +$daemon_directory/smtp:f:root:-:755 +$daemon_directory/smtpd:f:root:-:755 +$daemon_directory/spawn:f:root:-:755 +$daemon_directory/tlsproxy:f:root:-:755 +$daemon_directory/tlsmgr:f:root:-:755 +$daemon_directory/trivial-rewrite:f:root:-:755 +$daemon_directory/verify:f:root:-:755 +$daemon_directory/virtual:f:root:-:755 +$daemon_directory/nqmgr:h:$daemon_directory/qmgr +$daemon_directory/lmtp:h:$daemon_directory/smtp +$command_directory/postalias:f:root:-:755 +$command_directory/postcat:f:root:-:755 +$command_directory/postconf:f:root:-:755 +$command_directory/postfix:f:root:-:755 +$command_directory/postkick:f:root:-:755 +$command_directory/postlock:f:root:-:755 +$command_directory/postlog:f:root:$setgid_group:2755:u +$command_directory/postmap:f:root:-:755 +$command_directory/postmulti:f:root:-:755 +$command_directory/postsuper:f:root:-:755 +$command_directory/postdrop:f:root:$setgid_group:2755:u +$command_directory/postqueue:f:root:$setgid_group:2755:u +$sendmail_path:f:root:-:755 +$newaliases_path:l:$sendmail_path +$mailq_path:l:$sendmail_path +$config_directory/access:f:root:-:644:p1 +$config_directory/canonical:f:root:-:644:p1 +$config_directory/cidr_table:f:root:-:644:o +$config_directory/generic:f:root:-:644:p1 +$config_directory/generics:f:root:-:644:o +$config_directory/header_checks:f:root:-:644:p1 +$config_directory/install.cf:f:root:-:644:o +$config_directory/main.cf:f:root:-:644:p +$config_directory/master.cf:f:root:-:644:p +$config_directory/pcre_table:f:root:-:644:o +$config_directory/regexp_table:f:root:-:644:o +$config_directory/relocated:f:root:-:644:p1 +$config_directory/tcp_table:f:root:-:644:o +$config_directory/transport:f:root:-:644:p1 +$config_directory/virtual:f:root:-:644:p1 +$config_directory/postfix-script:f:root:-:755:o +$config_directory/postfix-script-sgid:f:root:-:755:o +$config_directory/postfix-script-nosgid:f:root:-:755:o +$config_directory/post-install:f:root:-:755:o +$manpage_directory/man1/mailq.postfix.1.gz:f:root:-:644 +$manpage_directory/man1/newaliases.postfix.1.gz:f:root:-:644 +$manpage_directory/man1/postalias.1.gz:f:root:-:644 +$manpage_directory/man1/postcat.1.gz:f:root:-:644 +$manpage_directory/man1/postconf.1.gz:f:root:-:644 +$manpage_directory/man1/postdrop.1.gz:f:root:-:644 +$manpage_directory/man1/postfix-tls.1.gz:f:root:-:644 +$manpage_directory/man1/postfix.1.gz:f:root:-:644 +$manpage_directory/man1/postkick.1.gz:f:root:-:644 +$manpage_directory/man1/postlock.1.gz:f:root:-:644 +$manpage_directory/man1/postlog.1.gz:f:root:-:644 +$manpage_directory/man1/postmap.1.gz:f:root:-:644 +$manpage_directory/man1/postmulti.1.gz:f:root:-:644 +$manpage_directory/man1/postqueue.1.gz:f:root:-:644 +$manpage_directory/man1/postsuper.1.gz:f:root:-:644 +$manpage_directory/man1/sendmail.postfix.1.gz:f:root:-:644 +$manpage_directory/man5/access.5.gz:f:root:-:644 +$manpage_directory/man5/aliases.postfix.5.gz:f:root:-:644 +$manpage_directory/man5/body_checks.5.gz:f:root:-:644 +$manpage_directory/man5/bounce.5.gz:f:root:-:644 +$manpage_directory/man5/canonical.5.gz:f:root:-:644 +$manpage_directory/man5/cidr_table.5.gz:f:root:-:644 +$manpage_directory/man5/generics.5.gz:f:root:-:644:o +$manpage_directory/man5/generic.5.gz:f:root:-:644 +$manpage_directory/man5/header_checks.5.gz:f:root:-:644 +$manpage_directory/man5/master.5.gz:f:root:-:644 +$manpage_directory/man5/memcache_table.5.gz:f:root:-:644 +$manpage_directory/man5/socketmap_table.5.gz:f:root:-:644 +$manpage_directory/man5/nisplus_table.5.gz:f:root:-:644 +$manpage_directory/man5/postconf.5.gz:f:root:-:644 +$manpage_directory/man5/postfix-wrapper.5.gz:f:root:-:644 +$manpage_directory/man5/regexp_table.5.gz:f:root:-:644 +$manpage_directory/man5/relocated.5.gz:f:root:-:644 +$manpage_directory/man5/tcp_table.5.gz:f:root:-:644 +$manpage_directory/man5/transport.5.gz:f:root:-:644 +$manpage_directory/man5/virtual.5.gz:f:root:-:644 +$manpage_directory/man8/bounce.8.gz:f:root:-:644 +$manpage_directory/man8/cleanup.8.gz:f:root:-:644 +$manpage_directory/man8/anvil.8.gz:f:root:-:644 +$manpage_directory/man8/defer.8.gz:f:root:-:644 +$manpage_directory/man8/discard.8.gz:f:root:-:644 +$manpage_directory/man8/dnsblog.8.gz:f:root:-:644 +$manpage_directory/man8/error.8.gz:f:root:-:644 +$manpage_directory/man8/flush.8.gz:f:root:-:644 +$manpage_directory/man8/lmtp.8.gz:f:root:-:644 +$manpage_directory/man8/local.8.gz:f:root:-:644 +$manpage_directory/man8/master.8.gz:f:root:-:644 +$manpage_directory/man8/nqmgr.8.gz:f:root:-:644:o +$manpage_directory/man8/oqmgr.8.gz:f:root:-:644: +$manpage_directory/man8/pickup.8.gz:f:root:-:644 +$manpage_directory/man8/pipe.8.gz:f:root:-:644 +$manpage_directory/man8/postlogd.8.gz:f:root:-:644 +$manpage_directory/man8/postscreen.8.gz:f:root:-:644 +$manpage_directory/man8/proxymap.8.gz:f:root:-:644 +$manpage_directory/man8/qmgr.8.gz:f:root:-:644 +$manpage_directory/man8/qmqpd.8.gz:f:root:-:644 +$manpage_directory/man8/scache.8.gz:f:root:-:644 +$manpage_directory/man8/showq.8.gz:f:root:-:644 +$manpage_directory/man8/smtp.8.gz:f:root:-:644 +$manpage_directory/man8/smtpd.postfix.8.gz:f:root:-:644 +$manpage_directory/man8/spawn.8.gz:f:root:-:644 +$manpage_directory/man8/tlsproxy.8.gz:f:root:-:644 +$manpage_directory/man8/tlsmgr.8.gz:f:root:-:644 +$manpage_directory/man8/trace.8.gz:f:root:-:644 +$manpage_directory/man8/trivial-rewrite.8.gz:f:root:-:644 +$manpage_directory/man8/verify.8.gz:f:root:-:644 +$manpage_directory/man8/virtual.8.gz:f:root:-:644 +$sample_directory/sample-aliases.cf:f:root:-:644:o +$sample_directory/sample-auth.cf:f:root:-:644:o +$sample_directory/sample-canonical.cf:f:root:-:644:o +$sample_directory/sample-compatibility.cf:f:root:-:644:o +$sample_directory/sample-debug.cf:f:root:-:644:o +$sample_directory/sample-filter.cf:f:root:-:644:o +$sample_directory/sample-flush.cf:f:root:-:644:o +$sample_directory/sample-ipv6.cf:f:root:-:644:o +$sample_directory/sample-ldap.cf:f:root:-:644:o +$sample_directory/sample-lmtp.cf:f:root:-:644:o +$sample_directory/sample-local.cf:f:root:-:644:o +$sample_directory/sample-mime.cf:f:root:-:644:o +$sample_directory/sample-misc.cf:f:root:-:644:o +$sample_directory/sample-pcre-access.cf:f:root:-:644:o +$sample_directory/sample-pcre-body.cf:f:root:-:644:o +$sample_directory/sample-pcre-header.cf:f:root:-:644:o +$sample_directory/sample-pgsql-aliases.cf:f:root:-:644:o +$sample_directory/sample-qmqpd.cf:f:root:-:644:o +$sample_directory/sample-rate.cf:f:root:-:644:o +$sample_directory/sample-regexp-access.cf:f:root:-:644:o +$sample_directory/sample-regexp-body.cf:f:root:-:644:o +$sample_directory/sample-regexp-header.cf:f:root:-:644:o +$sample_directory/sample-relocated.cf:f:root:-:644:o +$sample_directory/sample-resource.cf:f:root:-:644:o +$sample_directory/sample-rewrite.cf:f:root:-:644:o +$sample_directory/sample-scheduler.cf:f:root:-:644:o +$sample_directory/sample-smtp.cf:f:root:-:644:o +$sample_directory/sample-smtpd.cf:f:root:-:644:o +$sample_directory/sample-tls.cf:f:root:-:644:o +$sample_directory/sample-transport.cf:f:root:-:644:o +$sample_directory/sample-verify.cf:f:root:-:644:o +$sample_directory/sample-virtual.cf:f:root:-:644:o +$readme_directory/AAAREADME:f:root:-:644 +$readme_directory/ADDRESS_CLASS_README:f:root:-:644 +$readme_directory/ADDRESS_REWRITING_README:f:root:-:644 +$readme_directory/ADDRESS_VERIFICATION_README:f:root:-:644 +$readme_directory/BACKSCATTER_README:f:root:-:644 +$readme_directory/BASIC_CONFIGURATION_README:f:root:-:644 +$readme_directory/BDAT_README:f:root:-:644 +$readme_directory/BUILTIN_FILTER_README:f:root:-:644 +$readme_directory/COMPATIBILITY_README:f:root:-:644 +$readme_directory/CONNECTION_CACHE_README:f:root:-:644 +$readme_directory/CONTENT_INSPECTION_README:f:root:-:644 +$readme_directory/DATABASE_README:f:root:-:644 +$readme_directory/DB_README:f:root:-:644 +$readme_directory/DEBUG_README:f:root:-:644 +$readme_directory/DSN_README:f:root:-:644 +$readme_directory/ETRN_README:f:root:-:644 +$readme_directory/FILTER_README:f:root:-:644 +$readme_directory/FORWARD_SECRECY_README:f:root:-:644 +$readme_directory/HOSTING_README:f:root:-:644:o +$readme_directory/INSTALL:f:root:-:644 +$readme_directory/IPV6_README:f:root:-:644 +$readme_directory/LINUX_README:f:root:-:644 +$readme_directory/LOCAL_RECIPIENT_README:f:root:-:644 +$readme_directory/MACOSX_README:f:root:-:644:o +$readme_directory/MAILDROP_README:f:root:-:644 +$readme_directory/MAILLOG_README:f:root:-:644 +$readme_directory/MEMCACHE_README:f:root:-:644 +$readme_directory/MILTER_README:f:root:-:644 +$readme_directory/MULTI_INSTANCE_README:f:root:-:644 +$readme_directory/SMTPUTF8_README:f:root:-:644 +$readme_directory/NFS_README:f:root:-:644 +$readme_directory/OVERVIEW:f:root:-:644 +$readme_directory/PACKAGE_README:f:root:-:644 +$readme_directory/POSTSCREEN_3_5_README:f:root:-:644 +$readme_directory/POSTSCREEN_README:f:root:-:644 +$readme_directory/QMQP_README:f:root:-:644:o +$readme_directory/QSHAPE_README:f:root:-:644 +$readme_directory/RELEASE_NOTES:f:root:-:644 +$readme_directory/RESTRICTION_CLASS_README:f:root:-:644 +$readme_directory/SASL_README:f:root:-:644 +$readme_directory/SCHEDULER_README:f:root:-:644 +$readme_directory/SMTPD_ACCESS_README:f:root:-:644 +$readme_directory/SMTPD_POLICY_README:f:root:-:644 +$readme_directory/SMTPD_PROXY_README:f:root:-:644 +$readme_directory/SOHO_README:f:root:-:644 +$readme_directory/STANDARD_CONFIGURATION_README:f:root:-:644 +$readme_directory/STRESS_README:f:root:-:644 +$readme_directory/TLS_LEGACY_README:f:root:-:644 +$readme_directory/TLS_README:f:root:-:644 +$readme_directory/TUNING_README:f:root:-:644 +$readme_directory/ULTRIX_README:f:root:-:644 +$readme_directory/UUCP_README:f:root:-:644 +$readme_directory/VERP_README:f:root:-:644 +$readme_directory/VIRTUAL_README:f:root:-:644 +$readme_directory/XCLIENT_README:f:root:-:644 +$readme_directory/XFORWARD_README:f:root:-:644 +$html_directory/ADDRESS_CLASS_README.html:f:root:-:644 +$html_directory/ADDRESS_REWRITING_README.html:f:root:-:644 +$html_directory/ADDRESS_VERIFICATION_README.html:f:root:-:644 +$html_directory/BACKSCATTER_README.html:f:root:-:644 +$html_directory/BASIC_CONFIGURATION_README.html:f:root:-:644 +$html_directory/BDAT_README.html:f:root:-:644 +$html_directory/BUILTIN_FILTER_README.html:f:root:-:644 +$html_directory/CDB_README.html:f:root:-:644 +$html_directory/COMPATIBILITY_README.html:f:root:-:644 +$html_directory/CONNECTION_CACHE_README.html:f:root:-:644 +$html_directory/CONTENT_INSPECTION_README.html:f:root:-:644 +$html_directory/CYRUS_README.html:f:root:-:644:o +$html_directory/DATABASE_README.html:f:root:-:644 +$html_directory/DB_README.html:f:root:-:644 +$html_directory/DEBUG_README.html:f:root:-:644 +$html_directory/DSN_README.html:f:root:-:644 +$html_directory/ETRN_README.html:f:root:-:644 +$html_directory/FILTER_README.html:f:root:-:644 +$html_directory/FORWARD_SECRECY_README.html:f:root:-:644 +$html_directory/INSTALL.html:f:root:-:644 +$html_directory/IPV6_README.html:f:root:-:644 +$html_directory/LDAP_README.html:f:root:-:644 +$html_directory/LINUX_README.html:f:root:-:644 +$html_directory/LMDB_README.html:f:root:-:644 +$html_directory/LOCAL_RECIPIENT_README.html:f:root:-:644 +$html_directory/MAILDROP_README.html:f:root:-:644 +$html_directory/MAILLOG_README.html:f:root:-:644 +$html_directory/MEMCACHE_README.html:f:root:-:644 +$html_directory/MILTER_README.html:f:root:-:644 +$html_directory/MULTI_INSTANCE_README.html:f:root:-:644 +$html_directory/MYSQL_README.html:f:root:-:644 +$html_directory/SMTPUTF8_README.html:f:root:-:644 +$html_directory/SQLITE_README.html:f:root:-:644 +$html_directory/NFS_README.html:f:root:-:644 +$html_directory/OVERVIEW.html:f:root:-:644 +$html_directory/PACKAGE_README.html:f:root:-:644 +$html_directory/PCRE_README.html:f:root:-:644 +$html_directory/PGSQL_README.html:f:root:-:644 +$html_directory/POSTSCREEN_3_5_README.html:f:root:-:644 +$html_directory/POSTSCREEN_README.html:f:root:-:644 +$html_directory/QMQP_README.html:f:root:-:644:o +$html_directory/QSHAPE_README.html:f:root:-:644 +$html_directory/RESTRICTION_CLASS_README.html:f:root:-:644 +$html_directory/SASL_README.html:f:root:-:644 +$html_directory/SCHEDULER_README.html:f:root:-:644 +$html_directory/SMTPD_ACCESS_README.html:f:root:-:644 +$html_directory/SMTPD_POLICY_README.html:f:root:-:644 +$html_directory/SMTPD_PROXY_README.html:f:root:-:644 +$html_directory/SOHO_README.html:f:root:-:644 +$html_directory/STANDARD_CONFIGURATION_README.html:f:root:-:644 +$html_directory/STRESS_README.html:f:root:-:644 +$html_directory/TLS_LEGACY_README.html:f:root:-:644 +$html_directory/TLS_README.html:f:root:-:644 +$html_directory/TUNING_README.html:f:root:-:644 +$html_directory/ULTRIX_README.html:f:root:-:644:o +$html_directory/UUCP_README.html:f:root:-:644 +$html_directory/VERP_README.html:f:root:-:644 +$html_directory/VIRTUAL_README.html:f:root:-:644 +$html_directory/XCLIENT_README.html:f:root:-:644 +$html_directory/XFORWARD_README.html:f:root:-:644 +$html_directory/access.5.html:f:root:-:644 +$html_directory/aliases.5.html:f:root:-:644 +$html_directory/anvil.8.html:f:root:-:644 +$html_directory/bounce.5.html:f:root:-:644 +$html_directory/bounce.8.html:f:root:-:644 +$html_directory/canonical.5.html:f:root:-:644 +$html_directory/cidr_table.5.html:f:root:-:644 +$html_directory/cleanup.8.html:f:root:-:644 +$html_directory/defer.8.html:h:$html_directory/bounce.8.html:-:644 +$html_directory/discard.8.html:f:root:-:644 +$html_directory/dnsblog.8.html:f:root:-:644 +$html_directory/error.8.html:f:root:-:644 +$html_directory/flush.8.html:f:root:-:644 +$html_directory/generics.5.html:f:root:-:644:o +$html_directory/generic.5.html:f:root:-:644 +$html_directory/header_checks.5.html:f:root:-:644 +$html_directory/index.html:f:root:-:644 +$html_directory/ldap_table.5.html:f:root:-:644 +$html_directory/lmdb_table.5.html:f:root:-:644 +$html_directory/lmtp.8.html:f:root:-:644 +$html_directory/local.8.html:f:root:-:644 +$html_directory/mailq.1.html:f:root:-:644 +$html_directory/master.5.html:f:root:-:644 +$html_directory/master.8.html:f:root:-:644 +$html_directory/memcache_table.5.html:f:root:-:644 +$html_directory/mysql_table.5.html:f:root:-:644 +$html_directory/sqlite_table.5.html:f:root:-:644 +$html_directory/nisplus_table.5.html:f:root:-:644 +$html_directory/newaliases.1.html:h:$html_directory/mailq.1.html:-:644 +$html_directory/oqmgr.8.html:f:root:-:644 +$html_directory/pcre_table.5.html:f:root:-:644 +$html_directory/pgsql_table.5.html:f:root:-:644 +$html_directory/pickup.8.html:f:root:-:644 +$html_directory/pipe.8.html:f:root:-:644 +$html_directory/postalias.1.html:f:root:-:644 +$html_directory/postcat.1.html:f:root:-:644 +$html_directory/postconf.1.html:f:root:-:644 +$html_directory/postconf.5.html:f:root:-:644 +$html_directory/postdrop.1.html:f:root:-:644 +$html_directory/postfix-logo.jpg:f:root:-:644 +$html_directory/postfix-manuals.html:f:root:-:644 +$html_directory/postfix-tls.1.html:f:root:-:644 +$html_directory/postfix-wrapper.5.html:f:root:-:644 +$html_directory/postfix.1.html:f:root:-:644 +$html_directory/postkick.1.html:f:root:-:644 +$html_directory/postlock.1.html:f:root:-:644 +$html_directory/postlog.1.html:f:root:-:644 +$html_directory/postmap.1.html:f:root:-:644 +$html_directory/postmulti.1.html:f:root:-:644 +$html_directory/postlogd.8.html:f:root:-:644 +$html_directory/postqueue.1.html:f:root:-:644 +$html_directory/postscreen.8.html:f:root:-:644 +$html_directory/postsuper.1.html:f:root:-:644 +$html_directory/qshape.1.html:f:root:-:644 +$html_directory/proxymap.8.html:f:root:-:644 +$html_directory/qmgr.8.html:f:root:-:644 +$html_directory/qmqp-sink.1.html:f:root:-:644 +$html_directory/qmqp-source.1.html:f:root:-:644 +$html_directory/qmqpd.8.html:f:root:-:644 +$html_directory/regexp_table.5.html:f:root:-:644 +$html_directory/relocated.5.html:f:root:-:644 +$html_directory/scache.8.html:f:root:-:644 +$html_directory/sendmail.1.html:h:$html_directory/mailq.1.html:-:644 +$html_directory/showq.8.html:f:root:-:644 +$html_directory/smtp-sink.1.html:f:root:-:644 +$html_directory/smtp-source.1.html:f:root:-:644 +$html_directory/smtp.8.html:h:$html_directory/lmtp.8.html:-:644 +$html_directory/smtpd.8.html:f:root:-:644 +$html_directory/socketmap_table.5.html:f:root:-:644 +$html_directory/spawn.8.html:f:root:-:644 +$html_directory/tlsmgr.8.html:f:root:-:644 +$html_directory/tlsproxy.8.html:f:root:-:644 +$html_directory/tcp_table.5.html:f:root:-:644 +$html_directory/trace.8.html:h:$html_directory/bounce.8.html:-:644 +$html_directory/transport.5.html:f:root:-:644 +$html_directory/trivial-rewrite.8.html:f:root:-:644 +$html_directory/verify.8.html:f:root:-:644 +$html_directory/virtual.5.html:f:root:-:644 +$html_directory/virtual.8.html:f:root:-:644 diff --git a/templates/Fedora/39/etc/postfix/postfix-files.d/ldap b/templates/Fedora/39/etc/postfix/postfix-files.d/ldap new file mode 100644 index 0000000..684b05d --- /dev/null +++ b/templates/Fedora/39/etc/postfix/postfix-files.d/ldap @@ -0,0 +1,3 @@ +$shlib_directory/postfix-ldap.so:f:root:-:755 +$manpage_directory/man5/ldap_table.5.gz:f:root:-:644 +$readme_directory/LDAP_README:f:root:-:644 diff --git a/templates/Fedora/39/etc/postfix/postfix-files.d/mysql b/templates/Fedora/39/etc/postfix/postfix-files.d/mysql new file mode 100644 index 0000000..8e41d61 --- /dev/null +++ b/templates/Fedora/39/etc/postfix/postfix-files.d/mysql @@ -0,0 +1,3 @@ +$shlib_directory/postfix-mysql.so:f:root:-:755 +$manpage_directory/man5/mysql_table.5.gz:f:root:-:644 +$readme_directory/MYSQL_README:f:root:-:644 diff --git a/templates/Fedora/39/etc/postfix/postfix-files.d/pcre b/templates/Fedora/39/etc/postfix/postfix-files.d/pcre new file mode 100644 index 0000000..a34fd73 --- /dev/null +++ b/templates/Fedora/39/etc/postfix/postfix-files.d/pcre @@ -0,0 +1,3 @@ +$shlib_directory/postfix-pcre.so:f:root:-:755 +$manpage_directory/man5/pcre_table.5.gz:f:root:-:644 +$readme_directory/PCRE_README:f:root:-:644 diff --git a/templates/Fedora/39/etc/postfix/relocated b/templates/Fedora/39/etc/postfix/relocated new file mode 100644 index 0000000..90f63ec --- /dev/null +++ b/templates/Fedora/39/etc/postfix/relocated @@ -0,0 +1,178 @@ +# RELOCATED(5) RELOCATED(5) +# +# NAME +# relocated - Postfix relocated table format +# +# SYNOPSIS +# postmap /etc/postfix/relocated +# +# DESCRIPTION +# The optional relocated(5) table provides the information +# that is used in "user has moved to new_location" bounce +# messages. +# +# Normally, the relocated(5) table is specified as a text +# file that serves as input to the postmap(1) command. The +# result, an indexed file in dbm or db format, is used for +# fast searching by the mail system. Execute the command +# "postmap /etc/postfix/relocated" to rebuild an indexed +# file after changing the corresponding relocated table. +# +# When the table is provided via other means such as NIS, +# LDAP or SQL, the same lookups are done as for ordinary +# indexed files. +# +# Alternatively, the table can be provided as a regu- +# lar-expression map where patterns are given as regular +# expressions, or lookups can be directed to a TCP-based +# server. In those case, the lookups are done in a slightly +# different way as described below under "REGULAR EXPRESSION +# TABLES" or "TCP-BASED TABLES". +# +# Table lookups are case insensitive. +# +# CASE FOLDING +# The search string is folded to lowercase before database +# lookup. As of Postfix 2.3, the search string is not case +# folded with database types such as regexp: or pcre: whose +# lookup fields can match both upper and lower case. +# +# TABLE FORMAT +# The input format for the postmap(1) command is as follows: +# +# o An entry has one of the following form: +# +# pattern new_location +# +# Where new_location specifies contact information +# such as an email address, or perhaps a street +# address or telephone number. +# +# o Empty lines and whitespace-only lines are ignored, +# as are lines whose first non-whitespace character +# is a `#'. +# +# o A logical line starts with non-whitespace text. A +# line that starts with whitespace continues a logi- +# cal line. +# +# TABLE SEARCH ORDER +# With lookups from indexed files such as DB or DBM, or from +# networked tables such as NIS, LDAP or SQL, patterns are +# tried in the order as listed below: +# +# user@domain +# Matches user@domain. This form has precedence over +# all other forms. +# +# user Matches user@site when site is $myorigin, when site +# is listed in $mydestination, or when site is listed +# in $inet_interfaces or $proxy_interfaces. +# +# @domain +# Matches other addresses in domain. This form has +# the lowest precedence. +# +# ADDRESS EXTENSION +# When a mail address localpart contains the optional recip- +# ient delimiter (e.g., user+foo@domain), the lookup order +# becomes: user+foo@domain, user@domain, user+foo, user, and +# @domain. +# +# REGULAR EXPRESSION TABLES +# This section describes how the table lookups change when +# the table is given in the form of regular expressions or +# when lookups are directed to a TCP-based server. For a +# description of regular expression lookup table syntax, see +# regexp_table(5) or pcre_table(5). For a description of the +# TCP client/server table lookup protocol, see tcp_table(5). +# This feature is available in Postfix 2.5 and later. +# +# Each pattern is a regular expression that is applied to +# the entire address being looked up. Thus, user@domain mail +# addresses are not broken up into their user and @domain +# constituent parts, nor is user+foo broken up into user and +# foo. +# +# Patterns are applied in the order as specified in the ta- +# ble, until a pattern is found that matches the search +# string. +# +# Results are the same as with indexed file lookups, with +# the additional feature that parenthesized substrings from +# the pattern can be interpolated as $1, $2 and so on. +# +# TCP-BASED TABLES +# This section describes how the table lookups change when +# lookups are directed to a TCP-based server. For a descrip- +# tion of the TCP client/server lookup protocol, see tcp_ta- +# ble(5). This feature is available in Postfix 2.5 and +# later. +# +# Each lookup operation uses the entire address once. Thus, +# user@domain mail addresses are not broken up into their +# user and @domain constituent parts, nor is user+foo broken +# up into user and foo. +# +# Results are the same as with indexed file lookups. +# +# BUGS +# The table format does not understand quoting conventions. +# +# CONFIGURATION PARAMETERS +# The following main.cf parameters are especially relevant. +# The text below provides only a parameter summary. See +# postconf(5) for more details including examples. +# +# relocated_maps (empty) +# Optional lookup tables with new contact information +# for users or domains that no longer exist. +# +# Other parameters of interest: +# +# inet_interfaces (all) +# The network interface addresses that this mail sys- +# tem receives mail on. +# +# mydestination ($myhostname, localhost.$mydomain, local- +# host) +# The list of domains that are delivered via the +# $local_transport mail delivery transport. +# +# myorigin ($myhostname) +# The domain name that locally-posted mail appears to +# come from, and that locally posted mail is deliv- +# ered to. +# +# proxy_interfaces (empty) +# The network interface addresses that this mail sys- +# tem receives mail on by way of a proxy or network +# address translation unit. +# +# SEE ALSO +# trivial-rewrite(8), address resolver +# postmap(1), Postfix lookup table manager +# postconf(5), configuration parameters +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# DATABASE_README, Postfix lookup table overview +# ADDRESS_REWRITING_README, address rewriting guide +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# RELOCATED(5) diff --git a/templates/Fedora/39/etc/postfix/transport b/templates/Fedora/39/etc/postfix/transport new file mode 100644 index 0000000..bad7739 --- /dev/null +++ b/templates/Fedora/39/etc/postfix/transport @@ -0,0 +1,317 @@ +# TRANSPORT(5) TRANSPORT(5) +# +# NAME +# transport - Postfix transport table format +# +# SYNOPSIS +# postmap /etc/postfix/transport +# +# postmap -q "string" /etc/postfix/transport +# +# postmap -q - /etc/postfix/transport = 3.5): +# +# example.com smtp:bar.example, foo.example +# +# This tries to deliver to bar.example before trying to +# deliver to foo.example. +# +# The error mailer can be used to bounce mail: +# +# .example.com error:mail for *.example.com is not deliverable +# +# This causes all mail for user@anything.example.com to be +# bounced. +# +# REGULAR EXPRESSION TABLES +# This section describes how the table lookups change when +# the table is given in the form of regular expressions. For +# a description of regular expression lookup table syntax, +# see regexp_table(5) or pcre_table(5). +# +# Each pattern is a regular expression that is applied to +# the entire address being looked up. Thus, +# some.domain.hierarchy is not looked up via its parent +# domains, nor is user+foo@domain looked up as user@domain. +# +# Patterns are applied in the order as specified in the ta- +# ble, until a pattern is found that matches the search +# string. +# +# The trivial-rewrite(8) server disallows regular expression +# substitution of $1 etc. in regular expression lookup +# tables, because that could open a security hole (Postfix +# version 2.3 and later). +# +# TCP-BASED TABLES +# This section describes how the table lookups change when +# lookups are directed to a TCP-based server. For a descrip- +# tion of the TCP client/server lookup protocol, see tcp_ta- +# ble(5). This feature is not available up to and including +# Postfix version 2.4. +# +# Each lookup operation uses the entire recipient address +# once. Thus, some.domain.hierarchy is not looked up via +# its parent domains, nor is user+foo@domain looked up as +# user@domain. +# +# Results are the same as with indexed file lookups. +# +# CONFIGURATION PARAMETERS +# The following main.cf parameters are especially relevant. +# The text below provides only a parameter summary. See +# postconf(5) for more details including examples. +# +# empty_address_recipient (MAILER-DAEMON) +# The recipient of mail addressed to the null +# address. +# +# parent_domain_matches_subdomains (see 'postconf -d' out- +# put) +# A list of Postfix features where the pattern "exam- +# ple.com" also matches subdomains of example.com, +# instead of requiring an explicit ".example.com" +# pattern. +# +# transport_maps (empty) +# Optional lookup tables with mappings from recipient +# address to (message delivery transport, next-hop +# destination). +# +# SEE ALSO +# trivial-rewrite(8), rewrite and resolve addresses +# master(5), master.cf file format +# postconf(5), configuration parameters +# postmap(1), Postfix lookup table manager +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# ADDRESS_REWRITING_README, address rewriting guide +# DATABASE_README, Postfix lookup table overview +# FILTER_README, external content filter +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# TRANSPORT(5) diff --git a/templates/Fedora/39/etc/postfix/virtual b/templates/Fedora/39/etc/postfix/virtual new file mode 100644 index 0000000..96390fe --- /dev/null +++ b/templates/Fedora/39/etc/postfix/virtual @@ -0,0 +1,324 @@ +# VIRTUAL(5) VIRTUAL(5) +# +# NAME +# virtual - Postfix virtual alias table format +# +# SYNOPSIS +# postmap /etc/postfix/virtual +# +# postmap -q "string" /etc/postfix/virtual +# +# postmap -q - /etc/postfix/virtual Date: Sun, 2 Jun 2024 12:25:02 -0500 Subject: [PATCH 38/47] Fix Fedora 39 support Signed-off-by: Jason Rothstein --- vars/{Fedora-39-defaults.yml => Fedora-39-default.yml} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename vars/{Fedora-39-defaults.yml => Fedora-39-default.yml} (100%) diff --git a/vars/Fedora-39-defaults.yml b/vars/Fedora-39-default.yml similarity index 100% rename from vars/Fedora-39-defaults.yml rename to vars/Fedora-39-default.yml From e936ecdc5cc648b8f2445096d89a34b841aa5e02 Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sun, 2 Jun 2024 12:25:14 -0500 Subject: [PATCH 39/47] Fedora 40 support Signed-off-by: Jason Rothstein --- templates/Fedora/40/etc/opendkim.conf | 135 +++ templates/Fedora/40/etc/opendkim/KeyTable | 6 + templates/Fedora/40/etc/opendkim/SigningTable | 25 + templates/Fedora/40/etc/opendkim/TrustedHosts | 9 + templates/Fedora/40/etc/opendmarc.conf | 443 ++++++++++ templates/Fedora/40/etc/postfix/access | 484 +++++++++++ templates/Fedora/40/etc/postfix/canonical | 307 +++++++ .../Fedora/40/etc/postfix/dynamicmaps.cf | 1 + .../40/etc/postfix/dynamicmaps.cf.d/ldap | 1 + .../40/etc/postfix/dynamicmaps.cf.d/mysql | 1 + .../40/etc/postfix/dynamicmaps.cf.d/pcre | 1 + templates/Fedora/40/etc/postfix/generic | 252 ++++++ templates/Fedora/40/etc/postfix/header_checks | 549 +++++++++++++ templates/Fedora/40/etc/postfix/main.cf | 774 ++++++++++++++++++ templates/Fedora/40/etc/postfix/main.cf.proto | 745 +++++++++++++++++ templates/Fedora/40/etc/postfix/master.cf | 145 ++++ .../Fedora/40/etc/postfix/master.cf.proto | 145 ++++ templates/Fedora/40/etc/postfix/postfix-files | 447 ++++++++++ .../40/etc/postfix/postfix-files.d/ldap | 3 + .../40/etc/postfix/postfix-files.d/mysql | 3 + .../40/etc/postfix/postfix-files.d/pcre | 3 + templates/Fedora/40/etc/postfix/relocated | 178 ++++ templates/Fedora/40/etc/postfix/transport | 317 +++++++ templates/Fedora/40/etc/postfix/virtual | 324 ++++++++ .../systemd/system/postfix-copytls.service | 12 + .../lib/systemd/system/postfix-copytls.timer | 9 + vars/Fedora-40-default.yml | 110 +++ 27 files changed, 5429 insertions(+) create mode 100644 templates/Fedora/40/etc/opendkim.conf create mode 100644 templates/Fedora/40/etc/opendkim/KeyTable create mode 100644 templates/Fedora/40/etc/opendkim/SigningTable create mode 100644 templates/Fedora/40/etc/opendkim/TrustedHosts create mode 100644 templates/Fedora/40/etc/opendmarc.conf create mode 100644 templates/Fedora/40/etc/postfix/access create mode 100644 templates/Fedora/40/etc/postfix/canonical create mode 100644 templates/Fedora/40/etc/postfix/dynamicmaps.cf create mode 100644 templates/Fedora/40/etc/postfix/dynamicmaps.cf.d/ldap create mode 100644 templates/Fedora/40/etc/postfix/dynamicmaps.cf.d/mysql create mode 100644 templates/Fedora/40/etc/postfix/dynamicmaps.cf.d/pcre create mode 100644 templates/Fedora/40/etc/postfix/generic create mode 100644 templates/Fedora/40/etc/postfix/header_checks create mode 100644 templates/Fedora/40/etc/postfix/main.cf create mode 100644 templates/Fedora/40/etc/postfix/main.cf.proto create mode 100644 templates/Fedora/40/etc/postfix/master.cf create mode 100644 templates/Fedora/40/etc/postfix/master.cf.proto create mode 100644 templates/Fedora/40/etc/postfix/postfix-files create mode 100644 templates/Fedora/40/etc/postfix/postfix-files.d/ldap create mode 100644 templates/Fedora/40/etc/postfix/postfix-files.d/mysql create mode 100644 templates/Fedora/40/etc/postfix/postfix-files.d/pcre create mode 100644 templates/Fedora/40/etc/postfix/relocated create mode 100644 templates/Fedora/40/etc/postfix/transport create mode 100644 templates/Fedora/40/etc/postfix/virtual create mode 100644 templates/Fedora/40/usr/lib/systemd/system/postfix-copytls.service create mode 100644 templates/Fedora/40/usr/lib/systemd/system/postfix-copytls.timer create mode 100644 vars/Fedora-40-default.yml diff --git a/templates/Fedora/40/etc/opendkim.conf b/templates/Fedora/40/etc/opendkim.conf new file mode 100644 index 0000000..1e26622 --- /dev/null +++ b/templates/Fedora/40/etc/opendkim.conf @@ -0,0 +1,135 @@ +## BASIC OPENDKIM CONFIGURATION FILE +## See opendkim.conf(5) or /usr/share/doc/opendkim/opendkim.conf.sample for more + +## BEFORE running OpenDKIM you must: + +## - make your MTA (Postfix, Sendmail, etc.) aware of OpenDKIM +## - generate keys for your domain (if signing) +## - edit your DNS records to publish your public keys (if signing) + +## See /usr/share/doc/opendkim/INSTALL for detailed instructions. + +## DEPRECATED CONFIGURATION OPTIONS +## +## The following configuration options are no longer valid. They should be +## removed from your existing configuration file to prevent potential issues. +## Failure to do so may result in opendkim being unable to start. +## +## Removed in 2.10.0: +## AddAllSignatureResults +## ADSPAction +## ADSPNoSuchDomain +## BogusPolicy +## DisableADSP +## LDAPSoftStart +## LocalADSP +## NoDiscardableMailTo +## On-PolicyError +## SendADSPReports +## UnprotectedPolicy + +## CONFIGURATION OPTIONS + +## Specifies the path to the process ID file. +#PidFile /run/opendkim/opendkim.pid + +## Selects operating modes. Valid modes are s (sign) and v (verify). Default is v. +## Must be changed to s (sign only) or sv (sign and verify) in order to sign outgoing +## messages. +Mode v + +## Log activity to the system log. +Syslog yes + +## Log additional entries indicating successful signing or verification of messages. +SyslogSuccess yes + +## If logging is enabled, include detailed logging about why or why not a message was +## signed or verified. This causes an increase in the amount of log data generated +## for each message, so set this to No (or comment it out) if it gets too noisy. +LogWhy yes + +## Attempt to become the specified user before starting operations. +UserID opendkim:opendkim + +## Create a socket through which your MTA can communicate. +Socket inet:8891@localhost +#Socket local:/run/opendkim/opendkim.sock + +## Required to use local socket with MTAs that access the socket as a non- +## privileged user (e.g. Postfix) +Umask 002 + +## This specifies a text file in which to store DKIM transaction statistics. +## OpenDKIM must be manually compiled with --enable-stats to enable this feature. +# Statistics /var/spool/opendkim/stats.dat + +## Specifies whether or not the filter should generate report mail back +## to senders when verification fails and an address for such a purpose +## is provided. See opendkim.conf(5) for details. +SendReports yes + +## Specifies the sending address to be used on From: headers of outgoing +## failure reports. By default, the e-mail address of the user executing +## the filter is used (executing_user@hostname). +# ReportAddress "Example.com Postmaster" +ReportAddress "Postmaster" <{{ postmaster_email }}> + +## Add a DKIM-Filter header field to messages passing through this filter +## to identify messages it has processed. +SoftwareHeader yes + +## SIGNING OPTIONS + +## Selects the canonicalization method(s) to be used when signing messages. +Canonicalization relaxed/relaxed + +## Domain(s) whose mail should be signed by this filter. Mail from other domains will +## be verified rather than being signed. Uncomment and use your domain name. +## This parameter is not required if a SigningTable is in use. +# Domain example.com + +## Defines the name of the selector to be used when signing messages. +Selector default + +## Specifies the minimum number of key bits for acceptable keys and signatures. +MinimumKeyBits 1024 + +## Gives the location of a private key to be used for signing ALL messages. This +## directive is ignored if KeyTable is enabled. +# KeyFile /etc/opendkim/keys/default.private + +## Gives the location of a file mapping key names to signing keys. In simple terms, +## this tells OpenDKIM where to find your keys. If present, overrides any KeyFile +## directive in the configuration file. Requires SigningTable be enabled. +# KeyTable /etc/opendkim/KeyTable + +## Defines a table used to select one or more signatures to apply to a message based +## on the address found in the From: header field. In simple terms, this tells +## OpenDKIM how to use your keys. Requires KeyTable be enabled. +# SigningTable refile:/etc/opendkim/SigningTable + +## Identifies a set of "external" hosts that may send mail through the server as one +## of the signing domains without credentials as such. +# ExternalIgnoreList refile:/etc/opendkim/TrustedHosts + +## Identifies a set "internal" hosts whose mail should be signed rather than verified. +# InternalHosts refile:/etc/opendkim/TrustedHosts + +## Contains a list of IP addresses, CIDR blocks, hostnames or domain names +## whose mail should be neither signed nor verified by this filter. See man +## page for file format. +# PeerList X.X.X.X + +## Always oversign From (sign using actual From and a null From to prevent +## malicious signatures header fields (From and/or others) between the signer +## and the verifier. From is oversigned by default in the Fedora package +## because it is often the identity key used by reputation systems and thus +## somewhat security sensitive. +OversignHeaders From + +## Instructs the DKIM library to maintain its own local cache of keys and +## policies retrieved from DNS, rather than relying on the nameserver for +## caching service. Useful if the nameserver being used by the filter is +## not local. +# QueryCache yes diff --git a/templates/Fedora/40/etc/opendkim/KeyTable b/templates/Fedora/40/etc/opendkim/KeyTable new file mode 100644 index 0000000..e804d68 --- /dev/null +++ b/templates/Fedora/40/etc/opendkim/KeyTable @@ -0,0 +1,6 @@ +# OPENDKIM KEY TABLE +# To use this file, uncomment the #KeyTable option in /etc/opendkim.conf, +# then uncomment the following line and replace example.com with your domain +# name, then restart OpenDKIM. Additional keys may be added on separate lines. + +#default._domainkey.example.com example.com:default:/etc/opendkim/keys/default.private diff --git a/templates/Fedora/40/etc/opendkim/SigningTable b/templates/Fedora/40/etc/opendkim/SigningTable new file mode 100644 index 0000000..e8161a1 --- /dev/null +++ b/templates/Fedora/40/etc/opendkim/SigningTable @@ -0,0 +1,25 @@ +# OPENDKIM SIGNING TABLE +# This table controls how to apply one or more signatures to outgoing messages based +# on the address found in the From: header field. In simple terms, this tells +# OpenDKIM "how" to apply your keys. + +# To use this file, uncomment the SigningTable option in /etc/opendkim.conf, +# then uncomment one of the usage examples below and replace example.com with your +# domain name, then restart OpenDKIM. + +# WILDCARD EXAMPLE +# Enables signing for any address on the listed domain(s), but will work only if +# "refile:/etc/opendkim/SigningTable" is included in /etc/opendkim.conf. +# Create additional lines for additional domains. + +#*@example.com default._domainkey.example.com + +# NON-WILDCARD EXAMPLE +# If "file:" (instead of "refile:") is specified in /etc/opendkim.conf, then +# wildcards will not work. Instead, full user@host is checked first, then simply host, +# then user@.domain (with all superdomains checked in sequence, so "foo.example.com" +# would first check "user@foo.example.com", then "user@.example.com", then "user@.com"), +# then .domain, then user@*, and finally *. See the opendkim.conf(5) man page under +# "SigningTable" for more details. + +#example.com default._domainkey.example.com diff --git a/templates/Fedora/40/etc/opendkim/TrustedHosts b/templates/Fedora/40/etc/opendkim/TrustedHosts new file mode 100644 index 0000000..7a086d4 --- /dev/null +++ b/templates/Fedora/40/etc/opendkim/TrustedHosts @@ -0,0 +1,9 @@ +# OPENDKIM TRUSTED HOSTS +# To use this file, uncomment the #ExternalIgnoreList and/or the #InternalHosts +# option in /etc/opendkim.conf then restart OpenDKIM. Additional hosts +# may be added on separate lines (IP addresses, hostnames, or CIDR ranges). +# The localhost IP (127.0.0.1) should always be the first entry in this file. +127.0.0.1 +::1 +#host.example.com +#192.168.1.0/24 diff --git a/templates/Fedora/40/etc/opendmarc.conf b/templates/Fedora/40/etc/opendmarc.conf new file mode 100644 index 0000000..19f6b7b --- /dev/null +++ b/templates/Fedora/40/etc/opendmarc.conf @@ -0,0 +1,443 @@ +## opendmarc.conf -- configuration file for OpenDMARC filter +## +## Copyright (c) 2012-2015, 2018, 2021, The Trusted Domain Project. +## All rights reserved. + +## DEPRECATED CONFIGURATION OPTIONS +## +## The following configuration options are no longer valid. They should be +## removed from your existing configuration file to prevent potential issues. +## Failure to do so may result in opendmarc being unable to start. +## +## Renamed in 1.3.0: +## ForensicReports became FailureReports +## ForensicReportsBcc became FailureReportsBcc +## ForensicReportsOnNone became FailureReportsOnNone +## ForensicReportsSentBy became FailureReportsSentBy + +## CONFIGURATION OPTIONS + +## AuthservID (string) +## defaults to MTA name +## +## Sets the "authserv-id" to use when generating the Authentication-Results: +## header field after verifying a message. If the string "HOSTNAME" is +## provided, the name of the host running the filter (as returned by the +## gethostname(3) function) will be used. +# +# AuthservID name + +## AuthservIDWithJobID { true | false } +## default "false" +## +## If "true", requests that the authserv-id portion of the added +## Authentication-Results header fields contain the job ID of the message +## being evaluated. +# +# AuthservIDWithJobID false + +## AutoRestart { true | false } +## default "false" +## +## Automatically re-start on failures. Use with caution; if the filter fails +## instantly after it starts, this can cause a tight fork(2) loop. +# +# AutoRestart false + +## AutoRestartCount n +## default 0 +## +## Sets the maximum automatic restart count. After this number of automatic +## restarts, the filter will give up and terminate. A value of 0 implies no +## limit. +# +# AutoRestartCount 0 + +## AutoRestartRate n/t[u] +## default (no limit) +## +## Sets the maximum automatic restart rate. If the filter begins restarting +## faster than the rate defined here, it will give up and terminate. This +## is a string of the form n/t[u] where n is an integer limiting the count +## of restarts in the given interval and t[u] defines the time interval +## through which the rate is calculated; t is an integer and u defines the +## units thus represented ("s" or "S" for seconds, the default; "m" or "M" +## for minutes; "h" or "H" for hours; "d" or "D" for days). For example, a +## value of "10/1h" limits the restarts to 10 in one hour. There is no +## default, meaning restart rate is not limited. +# +# AutoRestartRate n/t[u] + +## Background { true | false } +## default "true" +## +## Causes opendmarc to fork and exits immediately, leaving the service +## running in the background. +# +# Background true + +## BaseDirectory (string) +## default (none) +## +## If set, instructs the filter to change to the specified directory using +## chdir(2) before doing anything else. This means any files referenced +## elsewhere in the configuration file can be specified relative to this +## directory. It's also useful for arranging that any crash dumps will be +## saved to a specific location. +# +# BaseDirectory /var/run/opendmarc + +## ChangeRootDirectory (string) +## default (none) +## +## Requests that the operating system change the effective root directory of +## the process to the one specified here prior to beginning execution. +## chroot(2) requires superuser access. A warning will be generated if +## UserID is not also set. +# +# ChangeRootDirectory /var/chroot/opendmarc + +## CopyFailuresTo (string) +## default (none) +## +## Requests addition of the specified email address to the envelope of +## any message that fails the DMARC evaluation. +# +# CopyFailuresTo postmaster@localhost + +## DomainWhitelist (string) +## default (none) +## +## A brief list of whitelisted domains for which ARC signature headers are +## trusted as determined by evaluating entries in the "arc.chain" field found +## in a locally generated Authentication-Results header. +## +## This list will be concatenated with DomainWhitelistFile (if provided). +## +# +# DomainWhitelist example.com + +## DomainWhitelistFile path +## default (none) +## +## A comprehensive list of whitelisted domains for which ARC signature headers +## are trusted as determined by evaluating entries in the "arc.chain" field +## found in a locally generated Authentication-Results header. +## +## This list will be concatenated with DomainWhitelist (if provided). +## +# +# DomainWhitelistFile /etc/opendmarc/whitelist.domains + +## DomainWhitelistSize +## default 3000 +## +## The maximum number of entries in the DomainWhitelist including both entries +## in the DomainWhitelist configuration parameter (above) and entries in the +## DomainWhitelistFile. This number will be increased by approximately 20% to +## increase the efficiency of the hashing algorithm. +## +# +# DomainWhitelistSize 3000 + +## DNSTimeout (integer) +## default 5 +## +## Sets the DNS timeout in seconds. A value of 0 causes an infinite wait. +## (NOT YET IMPLEMENTED) +# +# DNSTimeout 5 + +## EnableCoredumps { true | false } +## default "false" +## +## On systems that have such support, make an explicit request to the kernel +## to dump cores when the filter crashes for some reason. Some modern UNIX +## systems suppress core dumps during crashes for security reasons if the +## user ID has changed during the lifetime of the process. Currently only +## supported on Linux. +# +# EnableCoreDumps false + +## FailureReports { true | false } +## default "false" +## +## Enables generation of failure reports when the DMARC test fails and the +## purported sender of the message has requested such reports. Reports are +## formatted per RFC6591. +# +# FailureReports false + +## FailureReportsBcc (string) +## default (none) +## +## When failure reports are enabled and one is to be generated, always +## send one to the address(es) specified here. If a failure report is +## requested by the domain owner, the address(es) are added in a Bcc: field. +## If no request is made, they address(es) are used in a To: field. There +## is no default. +# +# FailureReportsBcc postmaster@example.coom +FailureReportsBcc {{ postmaster_email }} + +## FailureReportsOnNone { true | false } +## default "false" +## +## Supplements the "FailureReports" setting by generating reports for +## domains that advertise "none" policies. By default, reports are only +## generated (when enabled) for sending domains advertising a "quarantine" +## or "reject" policy. +# +# FailureReportsOnNone false + +## FailureReportsSentBy string +## default "USER@HOSTNAME" +## +## Specifies the email address to use in the From: field of failure +## reports generated by the filter. The default is to use the userid of +## the user running the filter and the local hostname to construct an +## email address. "postmaster" is used in place of the userid if a name +## could not be determined. +# +# FailureReportsSentBy USER@HOSTNAME +FailureReportsSentBy {{ postmaster_email }} + +## HistoryFile path +## default (none) +## +## If set, specifies the location of a text file to which records are written +## that can be used to generate DMARC aggregate reports. Records are groups +## of rows containing information about a single received message, and +## include all relevant information needed to generate a DMARC aggregate +## report. It is expected that this will not be used in its raw form, but +## rather periodically imported into a relational database from which the +## aggregate reports can be extracted by a tool such as opendmarc-import(8). +# +# HistoryFile /var/spool/opendmarc/opendmarc.dat + +## HoldQuarantinedMessages { true | false } +## default "false" +## +## If set, the milter will signal to the mta that messages with +## p=quarantine, which fail dmarc authentication, should be held in +## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. +## If false, messsages will be accepted and passed along with the +## regular mail flow, and the quarantine will be left up to downstream +## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, +## including the Authentication-Results header added by OpenDMARC +# +# HoldQuarantinedMessages false + +## IgnoreAuthenticatedClients { true | false } +## default "false" +## +## If set, causes mail from authenticated clients (i.e., those that used +## SMTP AUTH) to be ignored by the filter. +# +# IgnoreAuthenticatedClients false + +## HoldQuarantinedMessages { true | false } +## default "false" +## +## If set, the milter will signal to the mta that messages with +## p=quarantine, which fail dmarc authentication, should be held in +## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. +## If false, messsages will be accepted and passed along with the +## regular mail flow, and the quarantine will be left up to downstream +## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, +## including the Authentication-Results header added by OpenDMARC +# +# HoldQuarantinedMessages false + + +## IgnoreHosts path +## default (internal) +## +## Specifies the path to a file that contains a list of hostnames, IP +## addresses, and/or CIDR expressions identifying hosts whose SMTP +## connections are to be ignored by the filter. If not specified, defaults +## to "127.0.0.1" only. +# +# IgnoreHosts /etc/opendmarc/ignore.hosts + +## IgnoreMailFrom domain[,...] +## default (none) +## +## Gives a list of domain names whose mail (based on the From: domain) is to +## be ignored by the filter. The list should be comma-separated. Matching +## against this list is case-insensitive. The default is an empty list, +## meaning no mail is ignored. +# +# IgnoreMailFrom example.com + +## MilterDebug (integer) +## default 0 +## +## Sets the debug level to be requested from the milter library. +# +# MilterDebug 0 + +## PidFile path +## default (none) +## +## Specifies the path to a file that should be created at process start +## containing the process ID. +# +# PidFile /var/run/opendmarc.pid + +## PublicSuffixList path +## default (none) +## +## Specifies the path to a file that contains top-level domains (TLDs) that +## will be used to compute the Organizational Domain for a given domain name, +## as described in the DMARC specification. If not provided, the filter will +## not be able to determine the Organizational Domain and only the presented +## domain will be evaluated. This file should be periodically updated. +## One location to retrieve the file from is https://publicsuffix.org/list/ +# +# PublicSuffixList path + +## RecordAllMessages { true | false } +## default "false" +## +## If set and "HistoryFile" is in use, all received messages are recorded +## to the history file. If not set (the default), only messages for which +## the From: domain published a DMARC record will be recorded in the +## history file. +# +# RecordAllMessages false + +## RejectFailures { true | false } +## default "false" +## +## If set, messages will be rejected if they fail the DMARC evaluation, or +## temp-failed if evaluation could not be completed. By default, no message +## will be rejected or temp-failed regardless of the outcome of the DMARC +## evaluation of the message. Instead, an Authentication-Results header +## field will be added. +# +# RejectFailures false +RejectFailures true + +## RejectMultiValueFrom { true | false } +## default "false" +## +## If set, messages with multiple addresses in the From: field of the message +## will be rejected unless all domains in the field are the same. They will +## otherwise be ignored by the filter (the default). +# +# RejectMultiValueFrom false + +## ReportCommand string +## default "/usr/sbin/sendmail -t" +## +## Indicates the shell command to which failure reports should be passed for +## delivery when "FailureReports" is enabled. +# +# ReportCommand /usr/sbin/sendmail -t + +## RequiredHeaders { true | false } +## default "false" +## +## If set, the filter will ensure the header of the message conforms to the +## basic header field count restrictions laid out in RFC5322, Section 3.6. +## Messages failing this test are rejected without further processing. A +## From: field from which no domain name could be extracted will also be +## rejected. +# +# RequiredHeaders false + +## Socket socketspec +## default (none) +## +## Specifies the socket that should be established by the filter to receive +## connections from sendmail(8) in order to provide service. socketspec is +## in one of two forms: local:path, which creates a UNIX domain socket at +## the specified path, or inet:port[@host] or inet6:port[@host] which creates +## a TCP socket on the specified port for the appropriate protocol family. +## If the host is not given as either a hostname or an IP address, the +## socket will be listening on all interfaces. This option is mandatory +## either in the configuration file or on the command line. If an IP +## address is used, it must be enclosed in square brackets. +# +Socket inet:8893@localhost +#Socket local:/run/opendmarc/opendmarc.sock + +## SoftwareHeader { true | false } +## default "false" +## +## Causes the filter to add a "DMARC-Filter" header field indicating the +## presence of this filter in the path of the message from injection to +## delivery. The product's name, version, and the job ID are included in +## the header field's contents. +# +SoftwareHeader true + +## SPFIgnoreResults { true | false } +## default "false" +## +## Causes the filter to ignore any SPF results in the header of the +## message. This is useful if you want the filter to perform SPF checks +## itself, or because you don't trust the arriving header. +# +SPFIgnoreResults true + +## SPFSelfValidate { true | false } +## default false +## +## Enable internal spf checking with --with-spf +## To use libspf2 instead: --with-spf --with-spf2-include=path --with-spf2-lib=path +## +## Causes the filter to perform a fallback SPF check itself when +## it can find no SPF results in the message header. If SPFIgnoreResults +## is also set, it never looks for SPF results in headers and +## always performs the SPF check itself when this is set. +# +SPFSelfValidate true + +## Syslog { true | false } +## default "false" +## +## Log via calls to syslog(3) any interesting activity. +# +Syslog true + +## SyslogFacility facility-name +## default "mail" +## +## Log via calls to syslog(3) using the named facility. The facility names +## are the same as the ones allowed in syslog.conf(5). +# +# SyslogFacility mail + +## TrustedAuthservIDs string +## default HOSTNAME +## +## Specifies one or more "authserv-id" values to trust as relaying true +## upstream DKIM and SPF results. The default is to use the name of +## the MTA processing the message. To specify a list, separate each entry +## with a comma. The key word "HOSTNAME" will be replaced by the name of +## the host running the filter as reported by the gethostname(3) function. +# +# TrustedAuthservIDs HOSTNAME + +## UMask mask +## default (none) +## +## Requests a specific permissions mask to be used for file creation. This +## only really applies to creation of the socket when Socket specifies a +## UNIX domain socket, and to the HistoryFile and PidFile (if any); temporary +## files are normally created by the mkstemp(3) function that enforces a +## specific file mode on creation regardless of the process umask. See +## umask(2) for more information. +# +UMask 007 + +## UserID user[:group] +## default (none) +## +## Attempts to become the specified userid before starting operations. +## The process will be assigned all of the groups and primary group ID of +## the named userid unless an alternate group is specified. +# +UserID opendmarc:mail diff --git a/templates/Fedora/40/etc/postfix/access b/templates/Fedora/40/etc/postfix/access new file mode 100644 index 0000000..97892eb --- /dev/null +++ b/templates/Fedora/40/etc/postfix/access @@ -0,0 +1,484 @@ +# ACCESS(5) ACCESS(5) +# +# NAME +# access - Postfix SMTP server access table +# +# SYNOPSIS +# postmap /etc/postfix/access +# +# postmap -q "string" /etc/postfix/access +# +# postmap -q - /etc/postfix/access as the lookup key for such addresses. The value is +# specified with the smtpd_null_access_lookup_key parameter +# in the Postfix main.cf file. +# +# EMAIL ADDRESS EXTENSION +# When a mail address localpart contains the optional recip- +# ient delimiter (e.g., user+foo@domain), the lookup order +# becomes: user+foo@domain, user@domain, domain, user+foo@, +# and user@. +# +# HOST NAME/ADDRESS PATTERNS +# With lookups from indexed files such as DB or DBM, or from +# networked tables such as NIS, LDAP or SQL, the following +# lookup patterns are examined in the order as listed: +# +# domain.tld +# Matches domain.tld. +# +# The pattern domain.tld also matches subdomains, but +# only when the string smtpd_access_maps is listed in +# the Postfix parent_domain_matches_subdomains con- +# figuration setting. +# +# .domain.tld +# Matches subdomains of domain.tld, but only when the +# string smtpd_access_maps is not listed in the Post- +# fix parent_domain_matches_subdomains configuration +# setting. +# +# net.work.addr.ess +# +# net.work.addr +# +# net.work +# +# net Matches a remote IPv4 host address or network +# address range. Specify one to four decimal octets +# separated by ".". Do not specify "[]" , "/", lead- +# ing zeros, or hexadecimal forms. +# +# Network ranges are matched by repeatedly truncating +# the last ".octet" from a remote IPv4 host address +# string, until a match is found in the access table, +# or until further truncation is not possible. +# +# NOTE: use the cidr lookup table type to specify +# network/netmask patterns. See cidr_table(5) for +# details. +# +# net:work:addr:ess +# +# net:work:addr +# +# net:work +# +# net Matches a remote IPv6 host address or network +# address range. Specify three to eight hexadecimal +# octet pairs separated by ":", using the compressed +# form "::" for a sequence of zero-valued octet +# pairs. Do not specify "[]", "/", leading zeros, or +# non-compressed forms. +# +# A network range is matched by repeatedly truncating +# the last ":octetpair" from the compressed-form +# remote IPv6 host address string, until a match is +# found in the access table, or until further trunca- +# tion is not possible. +# +# NOTE: use the cidr lookup table type to specify +# network/netmask patterns. See cidr_table(5) for +# details. +# +# IPv6 support is available in Postfix 2.2 and later. +# +# ACCEPT ACTIONS +# OK Accept the address etc. that matches the pattern. +# +# all-numerical +# An all-numerical result is treated as OK. This for- +# mat is generated by address-based relay authoriza- +# tion schemes such as pop-before-smtp. +# +# For other accept actions, see "OTHER ACTIONS" below. +# +# REJECT ACTIONS +# Postfix version 2.3 and later support enhanced status +# codes as defined in RFC 3463. When no code is specified +# at the beginning of the text below, Postfix inserts a +# default enhanced status code of "5.7.1" in the case of +# reject actions, and "4.7.1" in the case of defer actions. +# See "ENHANCED STATUS CODES" below. +# +# 4NN text +# +# 5NN text +# Reject the address etc. that matches the pattern, +# and respond with the numerical three-digit code and +# text. 4NN means "try again later", while 5NN means +# "do not try again". +# +# The following responses have special meaning for +# the Postfix SMTP server: +# +# 421 text (Postfix 2.3 and later) +# +# 521 text (Postfix 2.6 and later) +# After responding with the numerical +# three-digit code and text, disconnect imme- +# diately from the SMTP client. This frees up +# SMTP server resources so that they can be +# made available to another SMTP client. +# +# Note: The "521" response should be used only +# with botnets and other malware where inter- +# operability is of no concern. The "send 521 +# and disconnect" behavior is NOT defined in +# the SMTP standard. +# +# REJECT optional text... +# Reject the address etc. that matches the pattern. +# Reply with "$access_map_reject_code optional +# text..." when the optional text is specified, oth- +# erwise reply with a generic error response message. +# +# DEFER optional text... +# Reject the address etc. that matches the pattern. +# Reply with "$access_map_defer_code optional +# text..." when the optional text is specified, oth- +# erwise reply with a generic error response message. +# +# This feature is available in Postfix 2.6 and later. +# +# DEFER_IF_REJECT optional text... +# Defer the request if some later restriction would +# result in a REJECT action. Reply with +# "$access_map_defer_code 4.7.1 optional text..." +# when the optional text is specified, otherwise +# reply with a generic error response message. +# +# Prior to Postfix 2.6, the SMTP reply code is 450. +# +# This feature is available in Postfix 2.1 and later. +# +# DEFER_IF_PERMIT optional text... +# Defer the request if some later restriction would +# result in an explicit or implicit PERMIT action. +# Reply with "$access_map_defer_code 4.7.1 optional +# text..." when the optional text is specified, oth- +# erwise reply with a generic error response message. +# +# Prior to Postfix 2.6, the SMTP reply code is 450. +# +# This feature is available in Postfix 2.1 and later. +# +# For other reject actions, see "OTHER ACTIONS" below. +# +# OTHER ACTIONS +# restriction... +# Apply the named UCE restriction(s) (permit, reject, +# reject_unauth_destination, and so on). +# +# BCC user@domain +# Send one copy of the message to the specified +# recipient. +# +# If multiple BCC actions are specified within the +# same SMTP MAIL transaction, with Postfix 3.0 only +# the last action will be used. +# +# This feature is available in Postfix 3.0 and later. +# +# DISCARD optional text... +# Claim successful delivery and silently discard the +# message. Log the optional text if specified, oth- +# erwise log a generic message. +# +# Note: this action currently affects all recipients +# of the message. To discard only one recipient +# without discarding the entire message, use the +# transport(5) table to direct mail to the discard(8) +# service. +# +# This feature is available in Postfix 2.0 and later. +# +# DUNNO Pretend that the lookup key was not found. This +# prevents Postfix from trying substrings of the +# lookup key (such as a subdomain name, or a network +# address subnetwork). +# +# This feature is available in Postfix 2.0 and later. +# +# FILTER transport:destination +# After the message is queued, send the entire mes- +# sage through the specified external content filter. +# The transport name specifies the first field of a +# mail delivery agent definition in master.cf; the +# syntax of the next-hop destination is described in +# the manual page of the corresponding delivery +# agent. More information about external content +# filters is in the Postfix FILTER_README file. +# +# Note 1: do not use $number regular expression sub- +# stitutions for transport or destination unless you +# know that the information has a trusted origin. +# +# Note 2: this action overrides the main.cf con- +# tent_filter setting, and affects all recipients of +# the message. In the case that multiple FILTER +# actions fire, only the last one is executed. +# +# Note 3: the purpose of the FILTER command is to +# override message routing. To override the recipi- +# ent's transport but not the next-hop destination, +# specify an empty filter destination (Postfix 2.7 +# and later), or specify a transport:destination that +# delivers through a different Postfix instance +# (Postfix 2.6 and earlier). Other options are using +# the recipient-dependent transport_maps or the sen- +# der-dependent sender_dependent_default_transport- +# _maps features. +# +# This feature is available in Postfix 2.0 and later. +# +# HOLD optional text... +# Place the message on the hold queue, where it will +# sit until someone either deletes it or releases it +# for delivery. Log the optional text if specified, +# otherwise log a generic message. +# +# Mail that is placed on hold can be examined with +# the postcat(1) command, and can be destroyed or +# released with the postsuper(1) command. +# +# Note: use "postsuper -r" to release mail that was +# kept on hold for a significant fraction of $maxi- +# mal_queue_lifetime or $bounce_queue_lifetime, or +# longer. Use "postsuper -H" only for mail that will +# not expire within a few delivery attempts. +# +# Note: this action currently affects all recipients +# of the message. +# +# This feature is available in Postfix 2.0 and later. +# +# PREPEND headername: headervalue +# Prepend the specified message header to the mes- +# sage. When more than one PREPEND action executes, +# the first prepended header appears before the sec- +# ond etc. prepended header. +# +# Note: this action must execute before the message +# content is received; it cannot execute in the con- +# text of smtpd_end_of_data_restrictions. +# +# This feature is available in Postfix 2.1 and later. +# +# REDIRECT user@domain +# After the message is queued, send the message to +# the specified address instead of the intended +# recipient(s). When multiple REDIRECT actions fire, +# only the last one takes effect. +# +# Note: this action overrides the FILTER action, and +# currently overrides all recipients of the message. +# +# This feature is available in Postfix 2.1 and later. +# +# INFO optional text... +# Log an informational record with the optional text, +# together with client information and if available, +# with helo, sender, recipient and protocol informa- +# tion. +# +# This feature is available in Postfix 3.0 and later. +# +# WARN optional text... +# Log a warning with the optional text, together with +# client information and if available, with helo, +# sender, recipient and protocol information. +# +# This feature is available in Postfix 2.1 and later. +# +# ENHANCED STATUS CODES +# Postfix version 2.3 and later support enhanced status +# codes as defined in RFC 3463. When an enhanced status +# code is specified in an access table, it is subject to +# modification. The following transformations are needed +# when the same access table is used for client, helo, +# sender, or recipient access restrictions; they happen +# regardless of whether Postfix replies to a MAIL FROM, RCPT +# TO or other SMTP command. +# +# o When a sender address matches a REJECT action, the +# Postfix SMTP server will transform a recipient DSN +# status (e.g., 4.1.1-4.1.6) into the corresponding +# sender DSN status, and vice versa. +# +# o When non-address information matches a REJECT +# action (such as the HELO command argument or the +# client hostname/address), the Postfix SMTP server +# will transform a sender or recipient DSN status +# into a generic non-address DSN status (e.g., +# 4.0.0). +# +# REGULAR EXPRESSION TABLES +# This section describes how the table lookups change when +# the table is given in the form of regular expressions. For +# a description of regular expression lookup table syntax, +# see regexp_table(5) or pcre_table(5). +# +# Each pattern is a regular expression that is applied to +# the entire string being looked up. Depending on the appli- +# cation, that string is an entire client hostname, an +# entire client IP address, or an entire mail address. Thus, +# no parent domain or parent network search is done, +# user@domain mail addresses are not broken up into their +# user@ and domain constituent parts, nor is user+foo broken +# up into user and foo. +# +# Patterns are applied in the order as specified in the ta- +# ble, until a pattern is found that matches the search +# string. +# +# Actions are the same as with indexed file lookups, with +# the additional feature that parenthesized substrings from +# the pattern can be interpolated as $1, $2 and so on. +# +# TCP-BASED TABLES +# This section describes how the table lookups change when +# lookups are directed to a TCP-based server. For a descrip- +# tion of the TCP client/server lookup protocol, see tcp_ta- +# ble(5). This feature is not available up to and including +# Postfix version 2.4. +# +# Each lookup operation uses the entire query string once. +# Depending on the application, that string is an entire +# client hostname, an entire client IP address, or an entire +# mail address. Thus, no parent domain or parent network +# search is done, user@domain mail addresses are not broken +# up into their user@ and domain constituent parts, nor is +# user+foo broken up into user and foo. +# +# Actions are the same as with indexed file lookups. +# +# EXAMPLE +# The following example uses an indexed file, so that the +# order of table entries does not matter. The example per- +# mits access by the client at address 1.2.3.4 but rejects +# all other clients in 1.2.3.0/24. Instead of hash lookup +# tables, some systems use dbm. Use the command "postconf +# -m" to find out what lookup tables Postfix supports on +# your system. +# +# /etc/postfix/main.cf: +# smtpd_client_restrictions = +# check_client_access hash:/etc/postfix/access +# +# /etc/postfix/access: +# 1.2.3 REJECT +# 1.2.3.4 OK +# +# Execute the command "postmap /etc/postfix/access" after +# editing the file. +# +# BUGS +# The table format does not understand quoting conventions. +# +# SEE ALSO +# postmap(1), Postfix lookup table manager +# smtpd(8), SMTP server +# postconf(5), configuration parameters +# transport(5), transport:nexthop syntax +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# SMTPD_ACCESS_README, built-in SMTP server access control +# DATABASE_README, Postfix lookup table overview +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# ACCESS(5) diff --git a/templates/Fedora/40/etc/postfix/canonical b/templates/Fedora/40/etc/postfix/canonical new file mode 100644 index 0000000..4957fcc --- /dev/null +++ b/templates/Fedora/40/etc/postfix/canonical @@ -0,0 +1,307 @@ +# CANONICAL(5) CANONICAL(5) +# +# NAME +# canonical - Postfix canonical table format +# +# SYNOPSIS +# postmap /etc/postfix/canonical +# +# postmap -q "string" /etc/postfix/canonical +# +# postmap -q - /etc/postfix/canonical $/ +# REJECT IFRAME vulnerability exploit +# +# SEE ALSO +# cleanup(8), canonicalize and enqueue Postfix message +# pcre_table(5), format of PCRE lookup tables +# regexp_table(5), format of POSIX regular expression tables +# postconf(1), Postfix configuration utility +# postmap(1), Postfix lookup table management +# postsuper(1), Postfix janitor +# postcat(1), show Postfix queue file contents +# RFC 2045, base64 and quoted-printable encoding rules +# RFC 2047, message header encoding for non-ASCII text +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# DATABASE_README, Postfix lookup table overview +# CONTENT_INSPECTION_README, Postfix content inspection overview +# BUILTIN_FILTER_README, Postfix built-in content inspection +# BACKSCATTER_README, blocking returned forged mail +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# HEADER_CHECKS(5) diff --git a/templates/Fedora/40/etc/postfix/main.cf b/templates/Fedora/40/etc/postfix/main.cf new file mode 100644 index 0000000..e7c5ce2 --- /dev/null +++ b/templates/Fedora/40/etc/postfix/main.cf @@ -0,0 +1,774 @@ +# Global Postfix configuration file. This file lists only a subset +# of all parameters. For the syntax, and for a complete parameter +# list, see the postconf(5) manual page (command: "man 5 postconf"). +# +# TIP: use the command "postconf -n" to view main.cf parameter +# settings, "postconf parametername" to view a specific parameter, +# and "postconf 'parametername=value'" to set a specific parameter. +# +# For common configuration examples, see BASIC_CONFIGURATION_README +# and STANDARD_CONFIGURATION_README. To find these documents, use +# the command "postconf html_directory readme_directory", or go to +# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. +# +# For best results, change no more than 2-3 parameters at a time, +# and test if Postfix still works after every change. + +# COMPATIBILITY +# +# The compatibility_level determines what default settings Postfix +# will use for main.cf and master.cf settings. These defaults will +# change over time. +# +# To avoid breaking things, Postfix will use backwards-compatible +# default settings and log where it uses those old backwards-compatible +# default settings, until the system administrator has determined +# if any backwards-compatible default settings need to be made +# permanent in main.cf or master.cf. +# +# When this review is complete, update the compatibility_level setting +# below as recommended in the RELEASE_NOTES file. +# +# The level below is what should be used with new (not upgrade) installs. +# +compatibility_level = 3.7 + +# SOFT BOUNCE +# +# The soft_bounce parameter provides a limited safety net for +# testing. When soft_bounce is enabled, mail will remain queued that +# would otherwise bounce. This parameter disables locally-generated +# bounces, and prevents the SMTP server from rejecting mail permanently +# (by changing 5xx replies into 4xx replies). However, soft_bounce +# is no cure for address rewriting mistakes or mail routing mistakes. +# +#soft_bounce = no + +# LOCAL PATHNAME INFORMATION +# +# The queue_directory specifies the location of the Postfix queue. +# This is also the root directory of Postfix daemons that run chrooted. +# See the files in examples/chroot-setup for setting up Postfix chroot +# environments on different UNIX systems. +# +queue_directory = /var/spool/postfix + +# The command_directory parameter specifies the location of all +# postXXX commands. +# +command_directory = /usr/sbin + +# The daemon_directory parameter specifies the location of all Postfix +# daemon programs (i.e. programs listed in the master.cf file). This +# directory must be owned by root. +# +daemon_directory = /usr/libexec/postfix + +# The data_directory parameter specifies the location of Postfix-writable +# data files (caches, random numbers). This directory must be owned +# by the mail_owner account (see below). +# +data_directory = /var/lib/postfix + +# QUEUE AND PROCESS OWNERSHIP +# +# The mail_owner parameter specifies the owner of the Postfix queue +# and of most Postfix daemon processes. Specify the name of a user +# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS +# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In +# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED +# USER. +# +mail_owner = postfix + +# The default_privs parameter specifies the default rights used by +# the local delivery agent for delivery to external file or command. +# These rights are used in the absence of a recipient user context. +# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. +# +#default_privs = nobody + +# INTERNET HOST AND DOMAIN NAMES +# +# The myhostname parameter specifies the internet hostname of this +# mail system. The default is to use the fully-qualified domain name +# from gethostname(). $myhostname is used as a default value for many +# other configuration parameters. +# +#myhostname = host.domain.tld +#myhostname = virtual.domain.tld + +# The mydomain parameter specifies the local internet domain name. +# The default is to use $myhostname minus the first component. +# $mydomain is used as a default value for many other configuration +# parameters. +# +#mydomain = domain.tld + +# SENDING MAIL +# +# The myorigin parameter specifies the domain that locally-posted +# mail appears to come from. The default is to append $myhostname, +# which is fine for small sites. If you run a domain with multiple +# machines, you should (1) change this to $mydomain and (2) set up +# a domain-wide alias database that aliases each user to +# user@that.users.mailhost. +# +# For the sake of consistency between sender and recipient addresses, +# myorigin also specifies the default domain name that is appended +# to recipient addresses that have no @domain part. +# +#myorigin = $myhostname +#myorigin = $mydomain + +# RECEIVING MAIL + +# The inet_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on. By default, +# the software claims all active interfaces on the machine. The +# parameter also controls delivery of mail to user@[ip.address]. +# +# See also the proxy_interfaces parameter, for network addresses that +# are forwarded to us via a proxy or network address translator. +# +# Note: you need to stop/start Postfix when this parameter changes. +# +inet_interfaces = all +#inet_interfaces = $myhostname +#inet_interfaces = $myhostname, localhost +#inet_interfaces = localhost + +# Enable IPv4, and IPv6 if supported +inet_protocols = all + +# The proxy_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on by way of a +# proxy or network address translation unit. This setting extends +# the address list specified with the inet_interfaces parameter. +# +# You must specify your proxy/NAT addresses when your system is a +# backup MX host for other domains, otherwise mail delivery loops +# will happen when the primary MX host is down. +# +#proxy_interfaces = +#proxy_interfaces = 1.2.3.4 + +# The mydestination parameter specifies the list of domains that this +# machine considers itself the final destination for. +# +# These domains are routed to the delivery agent specified with the +# local_transport parameter setting. By default, that is the UNIX +# compatible delivery agent that lookups all recipients in /etc/passwd +# and /etc/aliases or their equivalent. +# +# The default is $myhostname + localhost.$mydomain + localhost. On +# a mail domain gateway, you should also include $mydomain. +# +# Do not specify the names of virtual domains - those domains are +# specified elsewhere (see VIRTUAL_README). +# +# Do not specify the names of domains that this machine is backup MX +# host for. Specify those names via the relay_domains settings for +# the SMTP server, or use permit_mx_backup if you are lazy (see +# STANDARD_CONFIGURATION_README). +# +# The local machine is always the final destination for mail addressed +# to user@[the.net.work.address] of an interface that the mail system +# receives mail on (see the inet_interfaces parameter). +# +# Specify a list of host or domain names, /file/name or type:table +# patterns, separated by commas and/or whitespace. A /file/name +# pattern is replaced by its contents; a type:table is matched when +# a name matches a lookup key (the right-hand side is ignored). +# Continue long lines by starting the next line with whitespace. +# +# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". +# +mydestination = $myhostname, localhost.$mydomain, localhost +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, +# mail.$mydomain, www.$mydomain, ftp.$mydomain + +# REJECTING MAIL FOR UNKNOWN LOCAL USERS +# +# The local_recipient_maps parameter specifies optional lookup tables +# with all names or addresses of users that are local with respect +# to $mydestination, $inet_interfaces or $proxy_interfaces. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown local users. This parameter is defined by default. +# +# To turn off local recipient checking in the SMTP server, specify +# local_recipient_maps = (i.e. empty). +# +# The default setting assumes that you use the default Postfix local +# delivery agent for local delivery. You need to update the +# local_recipient_maps setting if: +# +# - You define $mydestination domain recipients in files other than +# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. +# For example, you define $mydestination domain recipients in +# the $virtual_mailbox_maps files. +# +# - You redefine the local delivery agent in master.cf. +# +# - You redefine the "local_transport" setting in main.cf. +# +# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" +# feature of the Postfix local delivery agent (see local(8)). +# +# Details are described in the LOCAL_RECIPIENT_README file. +# +# Beware: if the Postfix SMTP server runs chrooted, you probably have +# to access the passwd file via the proxymap service, in order to +# overcome chroot restrictions. The alternative, having a copy of +# the system passwd file in the chroot jail is just not practical. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify a bare username, an @domain.tld +# wild-card, or specify a user@domain.tld address. +# +#local_recipient_maps = unix:passwd.byname $alias_maps +#local_recipient_maps = proxy:unix:passwd.byname $alias_maps +#local_recipient_maps = + +# The unknown_local_recipient_reject_code specifies the SMTP server +# response code when a recipient domain matches $mydestination or +# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty +# and the recipient address or address local-part is not found. +# +# The default setting is 550 (reject mail) but it is safer to start +# with 450 (try again later) until you are certain that your +# local_recipient_maps settings are OK. +# +unknown_local_recipient_reject_code = 550 + +# TRUST AND RELAY CONTROL + +# The mynetworks parameter specifies the list of "trusted" SMTP +# clients that have more privileges than "strangers". +# +# In particular, "trusted" SMTP clients are allowed to relay mail +# through Postfix. See the smtpd_recipient_restrictions parameter +# in postconf(5). +# +# You can specify the list of "trusted" network addresses by hand +# or you can let Postfix do it for you (which is the default). +# +# By default (mynetworks_style = host), Postfix "trusts" only +# the local machine. +# +# Specify "mynetworks_style = subnet" when Postfix should "trust" +# SMTP clients in the same IP subnetworks as the local machine. +# On Linux, this works correctly only with interfaces specified +# with the "ifconfig" or "ip" command. +# +# Specify "mynetworks_style = class" when Postfix should "trust" SMTP +# clients in the same IP class A/B/C networks as the local machine. +# Don't do this with a dialup site - it would cause Postfix to "trust" +# your entire provider's network. Instead, specify an explicit +# mynetworks list by hand, as described below. +# +# Specify "mynetworks_style = host" when Postfix should "trust" +# only the local machine. +# +#mynetworks_style = class +#mynetworks_style = subnet +#mynetworks_style = host + +# Alternatively, you can specify the mynetworks list by hand, in +# which case Postfix ignores the mynetworks_style setting. +# +# Specify an explicit list of network/netmask patterns, where the +# mask specifies the number of bits in the network part of a host +# address. +# +# You can also specify the absolute pathname of a pattern file instead +# of listing the patterns here. Specify type:table for table-based lookups +# (the value on the table right-hand side is not used). +# +#mynetworks = 168.100.3.0/28, 127.0.0.0/8 +#mynetworks = $config_directory/mynetworks +#mynetworks = hash:/etc/postfix/network_table + +# The relay_domains parameter restricts what destinations this system will +# relay mail to. See the smtpd_relay_restrictions and +# smtpd_recipient_restrictions descriptions in postconf(5) for detailed +# information. +# +# By default, Postfix relays mail +# - from "trusted" clients (IP address matches $mynetworks, or is +# SASL authenticated) to any destination, +# - from "untrusted" clients to destinations that match $relay_domains or +# subdomains thereof, except addresses with sender-specified routing. +# The default relay_domains value is empty. +# +# In addition to the above, the Postfix SMTP server by default accepts mail +# that Postfix is final destination for: +# - destinations that match $inet_interfaces or $proxy_interfaces, +# - destinations that match $mydestination +# - destinations that match $virtual_alias_domains, +# - destinations that match $virtual_mailbox_domains. +# These destinations do not need to be listed in $relay_domains. +# +# Specify a list of hosts or domains, /file/name patterns or type:name +# lookup tables, separated by commas and/or whitespace. Continue +# long lines by starting the next line with whitespace. A file name +# is replaced by its contents; a type:name table is matched when a +# (parent) domain appears as lookup key. +# +# NOTE: Postfix will not automatically forward mail for domains that +# list this system as their primary or backup MX host. See the +# permit_mx_backup restriction description in postconf(5). +# +#relay_domains = + +# INTERNET OR INTRANET + +# The relayhost parameter specifies the default host to send mail to +# when no entry is matched in the optional transport(5) table. When +# no relayhost is given, mail is routed directly to the destination. +# +# On an intranet, specify the organizational domain name. If your +# internal DNS uses no MX records, specify the name of the intranet +# gateway host instead. +# +# In the case of SMTP, specify a domain, host, host:port, [host]:port, +# [address] or [address]:port; the form [host] turns off MX lookups. +# +# If you're connected via UUCP, see also the default_transport parameter. +# +#relayhost = $mydomain +#relayhost = [gateway.my.domain] +#relayhost = [mailserver.isp.tld] +#relayhost = uucphost +#relayhost = [an.ip.add.ress] + +# REJECTING UNKNOWN RELAY USERS +# +# The relay_recipient_maps parameter specifies optional lookup tables +# with all addresses in the domains that match $relay_domains. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown relay users. This feature is off by default. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify an @domain.tld wild-card, or specify +# a user@domain.tld address. +# +#relay_recipient_maps = hash:/etc/postfix/relay_recipients + +# INPUT RATE CONTROL +# +# The in_flow_delay configuration parameter implements mail input +# flow control. This feature is turned on by default, although it +# still needs further development (it's disabled on SCO UNIX due +# to an SCO bug). +# +# A Postfix process will pause for $in_flow_delay seconds before +# accepting a new message, when the message arrival rate exceeds the +# message delivery rate. With the default 100 SMTP server process +# limit, this limits the mail inflow to 100 messages a second more +# than the number of messages delivered per second. +# +# Specify 0 to disable the feature. Valid delays are 0..10. +# +#in_flow_delay = 1s + +# ADDRESS REWRITING +# +# The ADDRESS_REWRITING_README document gives information about +# address masquerading or other forms of address rewriting including +# username->Firstname.Lastname mapping. + +# ADDRESS REDIRECTION (VIRTUAL DOMAIN) +# +# The VIRTUAL_README document gives information about the many forms +# of domain hosting that Postfix supports. + +# "USER HAS MOVED" BOUNCE MESSAGES +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# TRANSPORT MAP +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# ALIAS DATABASE +# +# The alias_maps parameter specifies the list of alias databases used +# by the local delivery agent. The default list is system dependent. +# +# On systems with NIS, the default is to search the local alias +# database, then the NIS alias database. See aliases(5) for syntax +# details. +# +# If you change the alias database, run "postalias /etc/aliases" (or +# wherever your system stores the mail alias file), or simply run +# "newaliases" to build the necessary DBM or DB file. +# +# It will take a minute or so before changes become visible. Use +# "postfix reload" to eliminate the delay. +# +#alias_maps = dbm:/etc/aliases +alias_maps = hash:/etc/aliases +#alias_maps = hash:/etc/aliases, nis:mail.aliases +#alias_maps = netinfo:/aliases + +# The alias_database parameter specifies the alias database(s) that +# are built with "newaliases" or "sendmail -bi". This is a separate +# configuration parameter, because alias_maps (see above) may specify +# tables that are not necessarily all under control by Postfix. +# +#alias_database = dbm:/etc/aliases +#alias_database = dbm:/etc/mail/aliases +alias_database = hash:/etc/aliases +#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases + +# ADDRESS EXTENSIONS (e.g., user+foo) +# +# The recipient_delimiter parameter specifies the separator between +# user names and address extensions (user+foo). See canonical(5), +# local(8), relocated(5) and virtual(5) for the effects this has on +# aliases, canonical, virtual, relocated and .forward file lookups. +# Basically, the software tries user+foo and .forward+foo before +# trying user and .forward. +# +#recipient_delimiter = + + +# DELIVERY TO MAILBOX +# +# The home_mailbox parameter specifies the optional pathname of a +# mailbox file relative to a user's home directory. The default +# mailbox file is /var/spool/mail/user or /var/mail/user. Specify +# "Maildir/" for qmail-style delivery (the / is required). +# +#home_mailbox = Mailbox +#home_mailbox = Maildir/ + +# The mail_spool_directory parameter specifies the directory where +# UNIX-style mailboxes are kept. The default setting depends on the +# system type. +# +#mail_spool_directory = /var/mail +#mail_spool_directory = /var/spool/mail + +# The mailbox_command parameter specifies the optional external +# command to use instead of mailbox delivery. The command is run as +# the recipient with proper HOME, SHELL and LOGNAME environment settings. +# Exception: delivery for root is done as $default_user. +# +# Other environment variables of interest: USER (recipient username), +# EXTENSION (address extension), DOMAIN (domain part of address), +# and LOCAL (the address localpart). +# +# Unlike other Postfix configuration parameters, the mailbox_command +# parameter is not subjected to $parameter substitutions. This is to +# make it easier to specify shell syntax (see example below). +# +# Avoid shell meta characters because they will force Postfix to run +# an expensive shell process. Procmail alone is expensive enough. +# +# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN +# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. +# +#mailbox_command = /some/where/procmail +#mailbox_command = /some/where/procmail -a "$EXTENSION" + +# The mailbox_transport specifies the optional transport in master.cf +# to use after processing aliases and .forward files. This parameter +# has precedence over the mailbox_command, fallback_transport and +# luser_relay parameters. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" +# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. +#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp +mailbox_transport = lmtp:inet:localhost:24 +virtual_transport = lmtp:inet:localhost:24 + +# If using the cyrus-imapd IMAP server deliver local mail to the IMAP +# server using LMTP (Local Mail Transport Protocol), this is prefered +# over the older cyrus deliver program by setting the +# mailbox_transport as below: +# +# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp +# +# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via +# these settings. +# +# local_destination_recipient_limit = 300 +# local_destination_concurrency_limit = 5 +# +# Of course you should adjust these settings as appropriate for the +# capacity of the hardware you are using. The recipient limit setting +# can be used to take advantage of the single instance message store +# capability of Cyrus. The concurrency limit can be used to control +# how many simultaneous LMTP sessions will be permitted to the Cyrus +# message store. +# +# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and +# subsequent line in master.cf. +#mailbox_transport = cyrus + +# The fallback_transport specifies the optional transport in master.cf +# to use for recipients that are not found in the UNIX passwd database. +# This parameter has precedence over the luser_relay parameter. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp +#fallback_transport = + +# The luser_relay parameter specifies an optional destination address +# for unknown recipients. By default, mail for unknown@$mydestination, +# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned +# as undeliverable. +# +# The following expansions are done on luser_relay: $user (recipient +# username), $shell (recipient shell), $home (recipient home directory), +# $recipient (full recipient address), $extension (recipient address +# extension), $domain (recipient domain), $local (entire recipient +# localpart), $recipient_delimiter. Specify ${name?value} or +# ${name:value} to expand value only when $name does (does not) exist. +# +# luser_relay works only for the default Postfix local delivery agent. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must specify "local_recipient_maps =" (i.e. empty) in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#luser_relay = $user@other.host +#luser_relay = $local@other.host +#luser_relay = admin+$local + +# JUNK MAIL CONTROLS +# +# The controls listed here are only a very small subset. The file +# SMTPD_ACCESS_README provides an overview. + +# The header_checks parameter specifies an optional table with patterns +# that each logical message header is matched against, including +# headers that span multiple physical lines. +# +# By default, these patterns also apply to MIME headers and to the +# headers of attached messages. With older Postfix versions, MIME and +# attached message headers were treated as body text. +# +# For details, see "man header_checks". +# +#header_checks = regexp:/etc/postfix/header_checks + +# FAST ETRN SERVICE +# +# Postfix maintains per-destination logfiles with information about +# deferred mail, so that mail can be flushed quickly with the SMTP +# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". +# See the ETRN_README document for a detailed description. +# +# The fast_flush_domains parameter controls what destinations are +# eligible for this service. By default, they are all domains that +# this server is willing to relay mail to. +# +#fast_flush_domains = $relay_domains + +# SHOW SOFTWARE VERSION OR NOT +# +# The smtpd_banner parameter specifies the text that follows the 220 +# code in the SMTP server's greeting banner. Some people like to see +# the mail version advertised. By default, Postfix shows no version. +# +# You MUST specify $myhostname at the start of the text. That is an +# RFC requirement. Postfix itself does not care. +# +#smtpd_banner = $myhostname ESMTP $mail_name +#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) + +# PARALLEL DELIVERY TO THE SAME DESTINATION +# +# How many parallel deliveries to the same user or domain? With local +# delivery, it does not make sense to do massively parallel delivery +# to the same user, because mailbox updates must happen sequentially, +# and expensive pipelines in .forward files can cause disasters when +# too many are run at the same time. With SMTP deliveries, 10 +# simultaneous connections to the same domain could be sufficient to +# raise eyebrows. +# +# Each message delivery transport has its XXX_destination_concurrency_limit +# parameter. The default is $default_destination_concurrency_limit for +# most delivery transports. For the local delivery agent the default is 2. + +#local_destination_concurrency_limit = 2 +#default_destination_concurrency_limit = 20 + +# DEBUGGING CONTROL +# +# The debug_peer_level parameter specifies the increment in verbose +# logging level when an SMTP client or server host name or address +# matches a pattern in the debug_peer_list parameter. +# +debug_peer_level = 2 + +# The debug_peer_list parameter specifies an optional list of domain +# or network patterns, /file/name patterns or type:name tables. When +# an SMTP client or server host name or address matches a pattern, +# increase the verbose logging level by the amount specified in the +# debug_peer_level parameter. +# +#debug_peer_list = 127.0.0.1 +#debug_peer_list = some.domain + +# The debugger_command specifies the external command that is executed +# when a Postfix daemon program is run with the -D option. +# +# Use "command .. & sleep 5" so that the debugger can attach before +# the process marches on. If you use an X-based debugger, be sure to +# set up your XAUTHORITY environment variable before starting Postfix. +# +debugger_command = + PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin + ddd $daemon_directory/$process_name $process_id & sleep 5 + +# If you can't use X, use this to capture the call stack when a +# daemon crashes. The result is in a file in the configuration +# directory, and is named after the process name and the process ID. +# +# debugger_command = +# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; +# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 +# >$config_directory/$process_name.$process_id.log & sleep 5 +# +# Another possibility is to run gdb under a detached screen session. +# To attach to the screen session, su root and run "screen -r +# " where uniquely matches one of the detached +# sessions (from "screen -list"). +# +# debugger_command = +# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen +# -dmS $process_name gdb $daemon_directory/$process_name +# $process_id & sleep 1 + +# INSTALL-TIME CONFIGURATION INFORMATION +# +# The following parameters are used when installing a new Postfix version. +# +# sendmail_path: The full pathname of the Postfix sendmail command. +# This is the Sendmail-compatible mail posting interface. +# +sendmail_path = /usr/sbin/sendmail.postfix + +# newaliases_path: The full pathname of the Postfix newaliases command. +# This is the Sendmail-compatible command to build alias databases. +# +newaliases_path = /usr/bin/newaliases.postfix + +# mailq_path: The full pathname of the Postfix mailq command. This +# is the Sendmail-compatible mail queue listing command. +# +mailq_path = /usr/bin/mailq.postfix + +# setgid_group: The group for mail submission and queue management +# commands. This must be a group name with a numerical group ID that +# is not shared with other accounts, not even with the Postfix account. +# +setgid_group = postdrop + +# html_directory: The location of the Postfix HTML documentation. +# +html_directory = no + +# manpage_directory: The location of the Postfix on-line manual pages. +# +manpage_directory = /usr/share/man + +# sample_directory: The location of the Postfix sample configuration files. +# This parameter is obsolete as of Postfix 2.1. +# +sample_directory = /usr/share/doc/postfix/samples + +# readme_directory: The location of the Postfix README files. +# +readme_directory = /usr/share/doc/postfix/README_FILES + +# TLS CONFIGURATION +# +# Basic Postfix TLS configuration by default with self-signed certificate +# for inbound SMTP and also opportunistic TLS for outbound SMTP. + +# The full pathname of a file with the Postfix SMTP server RSA certificate +# in PEM format. Intermediate certificates should be included in general, +# the server certificate first, then the issuing CA(s) (bottom-up order). +# +# smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem +smtpd_tls_cert_file = /etc/postfix/certificates/pubcert.pem + +# The full pathname of a file with the Postfix SMTP server RSA private key +# in PEM format. The private key must be accessible without a pass-phrase, +# i.e. it must not be encrypted. +# +# smtpd_tls_key_file = /etc/pki/tls/private/postfix.key +smtpd_tls_key_file = /etc/postfix/certificates/privkey.pem + +# Announce STARTTLS support to remote SMTP clients, but do not require that +# clients use TLS encryption (opportunistic TLS inbound). +# +smtpd_tls_security_level = may + +# Directory with PEM format Certification Authority certificates that the +# Postfix SMTP client uses to verify a remote SMTP server certificate. +# +smtp_tls_CApath = /etc/pki/tls/certs + +# The full pathname of a file containing CA certificates of root CAs +# trusted to sign either remote SMTP server certificates or intermediate CA +# certificates. +# +smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt + +# Use TLS if this is supported by the remote SMTP server, otherwise use +# plaintext (opportunistic TLS outbound). +# +smtp_tls_security_level = may +meta_directory = /etc/postfix +shlib_directory = /usr/lib64/postfix + +{% if ensure_postfix.milter_list is defined and ensure_postfix.milter_list is iterable %} +# The Milter List +{% for milter in ensure_postfix.milter_list %} +# -- {{ milter.description }} -- {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} +{% endfor %} +smtpd_milters = {% for milter in ensure_postfix.milter_list %} {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} {% endfor %} +{% endif %} + +{% if postfix_domains is defined and postfix_domains is iterable %} +virtual_mailbox_domains = {% for domain in postfix_domains %} {{ domain }} {% endfor %} +{% endif %} + +2bounce_notice_recipient = {{ postmaster_email }} +bounce_notice_recipient = {{ postmaster_email }} +delay_notice_recipient = {{ postmaster_email }} +error_notice_recipient = {{ postmaster_email }} +smtpd_helo_required = yes +disable_vrfy_command = yes +message_size_limit = {{ postfix_message_size_limit }} +smtpd_helo_restrictions = reject_unknown_helo_hostname +smtpd_client_restrictions = reject_unknown_reverse_client_hostname reject_unauth_pipelining +smtpd_discard_ehlo_keywords = silent-discard, dsn diff --git a/templates/Fedora/40/etc/postfix/main.cf.proto b/templates/Fedora/40/etc/postfix/main.cf.proto new file mode 100644 index 0000000..112c1f1 --- /dev/null +++ b/templates/Fedora/40/etc/postfix/main.cf.proto @@ -0,0 +1,745 @@ +# Global Postfix configuration file. This file lists only a subset +# of all parameters. For the syntax, and for a complete parameter +# list, see the postconf(5) manual page (command: "man 5 postconf"). +# +# TIP: use the command "postconf -n" to view main.cf parameter +# settings, "postconf parametername" to view a specific parameter, +# and "postconf 'parametername=value'" to set a specific parameter. +# +# For common configuration examples, see BASIC_CONFIGURATION_README +# and STANDARD_CONFIGURATION_README. To find these documents, use +# the command "postconf html_directory readme_directory", or go to +# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. +# +# For best results, change no more than 2-3 parameters at a time, +# and test if Postfix still works after every change. + +# COMPATIBILITY +# +# The compatibility_level determines what default settings Postfix +# will use for main.cf and master.cf settings. These defaults will +# change over time. +# +# To avoid breaking things, Postfix will use backwards-compatible +# default settings and log where it uses those old backwards-compatible +# default settings, until the system administrator has determined +# if any backwards-compatible default settings need to be made +# permanent in main.cf or master.cf. +# +# When this review is complete, update the compatibility_level setting +# below as recommended in the RELEASE_NOTES file. +# +# The level below is what should be used with new (not upgrade) installs. +# +compatibility_level = 3.7 + +# SOFT BOUNCE +# +# The soft_bounce parameter provides a limited safety net for +# testing. When soft_bounce is enabled, mail will remain queued that +# would otherwise bounce. This parameter disables locally-generated +# bounces, and prevents the SMTP server from rejecting mail permanently +# (by changing 5xx replies into 4xx replies). However, soft_bounce +# is no cure for address rewriting mistakes or mail routing mistakes. +# +#soft_bounce = no + +# LOCAL PATHNAME INFORMATION +# +# The queue_directory specifies the location of the Postfix queue. +# This is also the root directory of Postfix daemons that run chrooted. +# See the files in examples/chroot-setup for setting up Postfix chroot +# environments on different UNIX systems. +# +queue_directory = /var/spool/postfix + +# The command_directory parameter specifies the location of all +# postXXX commands. +# +command_directory = /usr/sbin + +# The daemon_directory parameter specifies the location of all Postfix +# daemon programs (i.e. programs listed in the master.cf file). This +# directory must be owned by root. +# +daemon_directory = /usr/libexec/postfix + +# The data_directory parameter specifies the location of Postfix-writable +# data files (caches, random numbers). This directory must be owned +# by the mail_owner account (see below). +# +data_directory = /var/lib/postfix + +# QUEUE AND PROCESS OWNERSHIP +# +# The mail_owner parameter specifies the owner of the Postfix queue +# and of most Postfix daemon processes. Specify the name of a user +# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS +# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In +# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED +# USER. +# +mail_owner = postfix + +# The default_privs parameter specifies the default rights used by +# the local delivery agent for delivery to external file or command. +# These rights are used in the absence of a recipient user context. +# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. +# +#default_privs = nobody + +# INTERNET HOST AND DOMAIN NAMES +# +# The myhostname parameter specifies the internet hostname of this +# mail system. The default is to use the fully-qualified domain name +# from gethostname(). $myhostname is used as a default value for many +# other configuration parameters. +# +#myhostname = host.domain.tld +#myhostname = virtual.domain.tld + +# The mydomain parameter specifies the local internet domain name. +# The default is to use $myhostname minus the first component. +# $mydomain is used as a default value for many other configuration +# parameters. +# +#mydomain = domain.tld + +# SENDING MAIL +# +# The myorigin parameter specifies the domain that locally-posted +# mail appears to come from. The default is to append $myhostname, +# which is fine for small sites. If you run a domain with multiple +# machines, you should (1) change this to $mydomain and (2) set up +# a domain-wide alias database that aliases each user to +# user@that.users.mailhost. +# +# For the sake of consistency between sender and recipient addresses, +# myorigin also specifies the default domain name that is appended +# to recipient addresses that have no @domain part. +# +#myorigin = $myhostname +#myorigin = $mydomain + +# RECEIVING MAIL + +# The inet_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on. By default, +# the software claims all active interfaces on the machine. The +# parameter also controls delivery of mail to user@[ip.address]. +# +# See also the proxy_interfaces parameter, for network addresses that +# are forwarded to us via a proxy or network address translator. +# +# Note: you need to stop/start Postfix when this parameter changes. +# +#inet_interfaces = all +#inet_interfaces = $myhostname +#inet_interfaces = $myhostname, localhost +inet_interfaces = localhost + +# Enable IPv4, and IPv6 if supported +inet_protocols = all + +# The proxy_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on by way of a +# proxy or network address translation unit. This setting extends +# the address list specified with the inet_interfaces parameter. +# +# You must specify your proxy/NAT addresses when your system is a +# backup MX host for other domains, otherwise mail delivery loops +# will happen when the primary MX host is down. +# +#proxy_interfaces = +#proxy_interfaces = 1.2.3.4 + +# The mydestination parameter specifies the list of domains that this +# machine considers itself the final destination for. +# +# These domains are routed to the delivery agent specified with the +# local_transport parameter setting. By default, that is the UNIX +# compatible delivery agent that lookups all recipients in /etc/passwd +# and /etc/aliases or their equivalent. +# +# The default is $myhostname + localhost.$mydomain + localhost. On +# a mail domain gateway, you should also include $mydomain. +# +# Do not specify the names of virtual domains - those domains are +# specified elsewhere (see VIRTUAL_README). +# +# Do not specify the names of domains that this machine is backup MX +# host for. Specify those names via the relay_domains settings for +# the SMTP server, or use permit_mx_backup if you are lazy (see +# STANDARD_CONFIGURATION_README). +# +# The local machine is always the final destination for mail addressed +# to user@[the.net.work.address] of an interface that the mail system +# receives mail on (see the inet_interfaces parameter). +# +# Specify a list of host or domain names, /file/name or type:table +# patterns, separated by commas and/or whitespace. A /file/name +# pattern is replaced by its contents; a type:table is matched when +# a name matches a lookup key (the right-hand side is ignored). +# Continue long lines by starting the next line with whitespace. +# +# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". +# +mydestination = $myhostname, localhost.$mydomain, localhost +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, +# mail.$mydomain, www.$mydomain, ftp.$mydomain + +# REJECTING MAIL FOR UNKNOWN LOCAL USERS +# +# The local_recipient_maps parameter specifies optional lookup tables +# with all names or addresses of users that are local with respect +# to $mydestination, $inet_interfaces or $proxy_interfaces. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown local users. This parameter is defined by default. +# +# To turn off local recipient checking in the SMTP server, specify +# local_recipient_maps = (i.e. empty). +# +# The default setting assumes that you use the default Postfix local +# delivery agent for local delivery. You need to update the +# local_recipient_maps setting if: +# +# - You define $mydestination domain recipients in files other than +# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. +# For example, you define $mydestination domain recipients in +# the $virtual_mailbox_maps files. +# +# - You redefine the local delivery agent in master.cf. +# +# - You redefine the "local_transport" setting in main.cf. +# +# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" +# feature of the Postfix local delivery agent (see local(8)). +# +# Details are described in the LOCAL_RECIPIENT_README file. +# +# Beware: if the Postfix SMTP server runs chrooted, you probably have +# to access the passwd file via the proxymap service, in order to +# overcome chroot restrictions. The alternative, having a copy of +# the system passwd file in the chroot jail is just not practical. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify a bare username, an @domain.tld +# wild-card, or specify a user@domain.tld address. +# +#local_recipient_maps = unix:passwd.byname $alias_maps +#local_recipient_maps = proxy:unix:passwd.byname $alias_maps +#local_recipient_maps = + +# The unknown_local_recipient_reject_code specifies the SMTP server +# response code when a recipient domain matches $mydestination or +# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty +# and the recipient address or address local-part is not found. +# +# The default setting is 550 (reject mail) but it is safer to start +# with 450 (try again later) until you are certain that your +# local_recipient_maps settings are OK. +# +unknown_local_recipient_reject_code = 550 + +# TRUST AND RELAY CONTROL + +# The mynetworks parameter specifies the list of "trusted" SMTP +# clients that have more privileges than "strangers". +# +# In particular, "trusted" SMTP clients are allowed to relay mail +# through Postfix. See the smtpd_recipient_restrictions parameter +# in postconf(5). +# +# You can specify the list of "trusted" network addresses by hand +# or you can let Postfix do it for you (which is the default). +# +# By default (mynetworks_style = host), Postfix "trusts" only +# the local machine. +# +# Specify "mynetworks_style = subnet" when Postfix should "trust" +# SMTP clients in the same IP subnetworks as the local machine. +# On Linux, this works correctly only with interfaces specified +# with the "ifconfig" or "ip" command. +# +# Specify "mynetworks_style = class" when Postfix should "trust" SMTP +# clients in the same IP class A/B/C networks as the local machine. +# Don't do this with a dialup site - it would cause Postfix to "trust" +# your entire provider's network. Instead, specify an explicit +# mynetworks list by hand, as described below. +# +# Specify "mynetworks_style = host" when Postfix should "trust" +# only the local machine. +# +#mynetworks_style = class +#mynetworks_style = subnet +#mynetworks_style = host + +# Alternatively, you can specify the mynetworks list by hand, in +# which case Postfix ignores the mynetworks_style setting. +# +# Specify an explicit list of network/netmask patterns, where the +# mask specifies the number of bits in the network part of a host +# address. +# +# You can also specify the absolute pathname of a pattern file instead +# of listing the patterns here. Specify type:table for table-based lookups +# (the value on the table right-hand side is not used). +# +#mynetworks = 168.100.3.0/28, 127.0.0.0/8 +#mynetworks = $config_directory/mynetworks +#mynetworks = hash:/etc/postfix/network_table + +# The relay_domains parameter restricts what destinations this system will +# relay mail to. See the smtpd_relay_restrictions and +# smtpd_recipient_restrictions descriptions in postconf(5) for detailed +# information. +# +# By default, Postfix relays mail +# - from "trusted" clients (IP address matches $mynetworks, or is +# SASL authenticated) to any destination, +# - from "untrusted" clients to destinations that match $relay_domains or +# subdomains thereof, except addresses with sender-specified routing. +# The default relay_domains value is empty. +# +# In addition to the above, the Postfix SMTP server by default accepts mail +# that Postfix is final destination for: +# - destinations that match $inet_interfaces or $proxy_interfaces, +# - destinations that match $mydestination +# - destinations that match $virtual_alias_domains, +# - destinations that match $virtual_mailbox_domains. +# These destinations do not need to be listed in $relay_domains. +# +# Specify a list of hosts or domains, /file/name patterns or type:name +# lookup tables, separated by commas and/or whitespace. Continue +# long lines by starting the next line with whitespace. A file name +# is replaced by its contents; a type:name table is matched when a +# (parent) domain appears as lookup key. +# +# NOTE: Postfix will not automatically forward mail for domains that +# list this system as their primary or backup MX host. See the +# permit_mx_backup restriction description in postconf(5). +# +#relay_domains = + +# INTERNET OR INTRANET + +# The relayhost parameter specifies the default host to send mail to +# when no entry is matched in the optional transport(5) table. When +# no relayhost is given, mail is routed directly to the destination. +# +# On an intranet, specify the organizational domain name. If your +# internal DNS uses no MX records, specify the name of the intranet +# gateway host instead. +# +# In the case of SMTP, specify a domain, host, host:port, [host]:port, +# [address] or [address]:port; the form [host] turns off MX lookups. +# +# If you're connected via UUCP, see also the default_transport parameter. +# +#relayhost = $mydomain +#relayhost = [gateway.my.domain] +#relayhost = [mailserver.isp.tld] +#relayhost = uucphost +#relayhost = [an.ip.add.ress] + +# REJECTING UNKNOWN RELAY USERS +# +# The relay_recipient_maps parameter specifies optional lookup tables +# with all addresses in the domains that match $relay_domains. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown relay users. This feature is off by default. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify an @domain.tld wild-card, or specify +# a user@domain.tld address. +# +#relay_recipient_maps = hash:/etc/postfix/relay_recipients + +# INPUT RATE CONTROL +# +# The in_flow_delay configuration parameter implements mail input +# flow control. This feature is turned on by default, although it +# still needs further development (it's disabled on SCO UNIX due +# to an SCO bug). +# +# A Postfix process will pause for $in_flow_delay seconds before +# accepting a new message, when the message arrival rate exceeds the +# message delivery rate. With the default 100 SMTP server process +# limit, this limits the mail inflow to 100 messages a second more +# than the number of messages delivered per second. +# +# Specify 0 to disable the feature. Valid delays are 0..10. +# +#in_flow_delay = 1s + +# ADDRESS REWRITING +# +# The ADDRESS_REWRITING_README document gives information about +# address masquerading or other forms of address rewriting including +# username->Firstname.Lastname mapping. + +# ADDRESS REDIRECTION (VIRTUAL DOMAIN) +# +# The VIRTUAL_README document gives information about the many forms +# of domain hosting that Postfix supports. + +# "USER HAS MOVED" BOUNCE MESSAGES +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# TRANSPORT MAP +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# ALIAS DATABASE +# +# The alias_maps parameter specifies the list of alias databases used +# by the local delivery agent. The default list is system dependent. +# +# On systems with NIS, the default is to search the local alias +# database, then the NIS alias database. See aliases(5) for syntax +# details. +# +# If you change the alias database, run "postalias /etc/aliases" (or +# wherever your system stores the mail alias file), or simply run +# "newaliases" to build the necessary DBM or DB file. +# +# It will take a minute or so before changes become visible. Use +# "postfix reload" to eliminate the delay. +# +#alias_maps = dbm:/etc/aliases +alias_maps = hash:/etc/aliases +#alias_maps = hash:/etc/aliases, nis:mail.aliases +#alias_maps = netinfo:/aliases + +# The alias_database parameter specifies the alias database(s) that +# are built with "newaliases" or "sendmail -bi". This is a separate +# configuration parameter, because alias_maps (see above) may specify +# tables that are not necessarily all under control by Postfix. +# +#alias_database = dbm:/etc/aliases +#alias_database = dbm:/etc/mail/aliases +alias_database = hash:/etc/aliases +#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases + +# ADDRESS EXTENSIONS (e.g., user+foo) +# +# The recipient_delimiter parameter specifies the separator between +# user names and address extensions (user+foo). See canonical(5), +# local(8), relocated(5) and virtual(5) for the effects this has on +# aliases, canonical, virtual, relocated and .forward file lookups. +# Basically, the software tries user+foo and .forward+foo before +# trying user and .forward. +# +#recipient_delimiter = + + +# DELIVERY TO MAILBOX +# +# The home_mailbox parameter specifies the optional pathname of a +# mailbox file relative to a user's home directory. The default +# mailbox file is /var/spool/mail/user or /var/mail/user. Specify +# "Maildir/" for qmail-style delivery (the / is required). +# +#home_mailbox = Mailbox +#home_mailbox = Maildir/ + +# The mail_spool_directory parameter specifies the directory where +# UNIX-style mailboxes are kept. The default setting depends on the +# system type. +# +#mail_spool_directory = /var/mail +#mail_spool_directory = /var/spool/mail + +# The mailbox_command parameter specifies the optional external +# command to use instead of mailbox delivery. The command is run as +# the recipient with proper HOME, SHELL and LOGNAME environment settings. +# Exception: delivery for root is done as $default_user. +# +# Other environment variables of interest: USER (recipient username), +# EXTENSION (address extension), DOMAIN (domain part of address), +# and LOCAL (the address localpart). +# +# Unlike other Postfix configuration parameters, the mailbox_command +# parameter is not subjected to $parameter substitutions. This is to +# make it easier to specify shell syntax (see example below). +# +# Avoid shell meta characters because they will force Postfix to run +# an expensive shell process. Procmail alone is expensive enough. +# +# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN +# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. +# +#mailbox_command = /some/where/procmail +#mailbox_command = /some/where/procmail -a "$EXTENSION" + +# The mailbox_transport specifies the optional transport in master.cf +# to use after processing aliases and .forward files. This parameter +# has precedence over the mailbox_command, fallback_transport and +# luser_relay parameters. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" +# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. +#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp + +# If using the cyrus-imapd IMAP server deliver local mail to the IMAP +# server using LMTP (Local Mail Transport Protocol), this is prefered +# over the older cyrus deliver program by setting the +# mailbox_transport as below: +# +# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp +# +# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via +# these settings. +# +# local_destination_recipient_limit = 300 +# local_destination_concurrency_limit = 5 +# +# Of course you should adjust these settings as appropriate for the +# capacity of the hardware you are using. The recipient limit setting +# can be used to take advantage of the single instance message store +# capability of Cyrus. The concurrency limit can be used to control +# how many simultaneous LMTP sessions will be permitted to the Cyrus +# message store. +# +# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and +# subsequent line in master.cf. +#mailbox_transport = cyrus + +# The fallback_transport specifies the optional transport in master.cf +# to use for recipients that are not found in the UNIX passwd database. +# This parameter has precedence over the luser_relay parameter. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp +#fallback_transport = + +# The luser_relay parameter specifies an optional destination address +# for unknown recipients. By default, mail for unknown@$mydestination, +# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned +# as undeliverable. +# +# The following expansions are done on luser_relay: $user (recipient +# username), $shell (recipient shell), $home (recipient home directory), +# $recipient (full recipient address), $extension (recipient address +# extension), $domain (recipient domain), $local (entire recipient +# localpart), $recipient_delimiter. Specify ${name?value} or +# ${name:value} to expand value only when $name does (does not) exist. +# +# luser_relay works only for the default Postfix local delivery agent. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must specify "local_recipient_maps =" (i.e. empty) in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#luser_relay = $user@other.host +#luser_relay = $local@other.host +#luser_relay = admin+$local + +# JUNK MAIL CONTROLS +# +# The controls listed here are only a very small subset. The file +# SMTPD_ACCESS_README provides an overview. + +# The header_checks parameter specifies an optional table with patterns +# that each logical message header is matched against, including +# headers that span multiple physical lines. +# +# By default, these patterns also apply to MIME headers and to the +# headers of attached messages. With older Postfix versions, MIME and +# attached message headers were treated as body text. +# +# For details, see "man header_checks". +# +#header_checks = regexp:/etc/postfix/header_checks + +# FAST ETRN SERVICE +# +# Postfix maintains per-destination logfiles with information about +# deferred mail, so that mail can be flushed quickly with the SMTP +# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". +# See the ETRN_README document for a detailed description. +# +# The fast_flush_domains parameter controls what destinations are +# eligible for this service. By default, they are all domains that +# this server is willing to relay mail to. +# +#fast_flush_domains = $relay_domains + +# SHOW SOFTWARE VERSION OR NOT +# +# The smtpd_banner parameter specifies the text that follows the 220 +# code in the SMTP server's greeting banner. Some people like to see +# the mail version advertised. By default, Postfix shows no version. +# +# You MUST specify $myhostname at the start of the text. That is an +# RFC requirement. Postfix itself does not care. +# +#smtpd_banner = $myhostname ESMTP $mail_name +#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) + +# PARALLEL DELIVERY TO THE SAME DESTINATION +# +# How many parallel deliveries to the same user or domain? With local +# delivery, it does not make sense to do massively parallel delivery +# to the same user, because mailbox updates must happen sequentially, +# and expensive pipelines in .forward files can cause disasters when +# too many are run at the same time. With SMTP deliveries, 10 +# simultaneous connections to the same domain could be sufficient to +# raise eyebrows. +# +# Each message delivery transport has its XXX_destination_concurrency_limit +# parameter. The default is $default_destination_concurrency_limit for +# most delivery transports. For the local delivery agent the default is 2. + +#local_destination_concurrency_limit = 2 +#default_destination_concurrency_limit = 20 + +# DEBUGGING CONTROL +# +# The debug_peer_level parameter specifies the increment in verbose +# logging level when an SMTP client or server host name or address +# matches a pattern in the debug_peer_list parameter. +# +debug_peer_level = 2 + +# The debug_peer_list parameter specifies an optional list of domain +# or network patterns, /file/name patterns or type:name tables. When +# an SMTP client or server host name or address matches a pattern, +# increase the verbose logging level by the amount specified in the +# debug_peer_level parameter. +# +#debug_peer_list = 127.0.0.1 +#debug_peer_list = some.domain + +# The debugger_command specifies the external command that is executed +# when a Postfix daemon program is run with the -D option. +# +# Use "command .. & sleep 5" so that the debugger can attach before +# the process marches on. If you use an X-based debugger, be sure to +# set up your XAUTHORITY environment variable before starting Postfix. +# +debugger_command = + PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin + ddd $daemon_directory/$process_name $process_id & sleep 5 + +# If you can't use X, use this to capture the call stack when a +# daemon crashes. The result is in a file in the configuration +# directory, and is named after the process name and the process ID. +# +# debugger_command = +# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; +# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 +# >$config_directory/$process_name.$process_id.log & sleep 5 +# +# Another possibility is to run gdb under a detached screen session. +# To attach to the screen session, su root and run "screen -r +# " where uniquely matches one of the detached +# sessions (from "screen -list"). +# +# debugger_command = +# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen +# -dmS $process_name gdb $daemon_directory/$process_name +# $process_id & sleep 1 + +# INSTALL-TIME CONFIGURATION INFORMATION +# +# The following parameters are used when installing a new Postfix version. +# +# sendmail_path: The full pathname of the Postfix sendmail command. +# This is the Sendmail-compatible mail posting interface. +# +sendmail_path = + +# newaliases_path: The full pathname of the Postfix newaliases command. +# This is the Sendmail-compatible command to build alias databases. +# +newaliases_path = + +# mailq_path: The full pathname of the Postfix mailq command. This +# is the Sendmail-compatible mail queue listing command. +# +mailq_path = + +# setgid_group: The group for mail submission and queue management +# commands. This must be a group name with a numerical group ID that +# is not shared with other accounts, not even with the Postfix account. +# +setgid_group = + +# html_directory: The location of the Postfix HTML documentation. +# +html_directory = + +# manpage_directory: The location of the Postfix on-line manual pages. +# +manpage_directory = + +# sample_directory: The location of the Postfix sample configuration files. +# This parameter is obsolete as of Postfix 2.1. +# +sample_directory = + +# readme_directory: The location of the Postfix README files. +# +readme_directory = + +# TLS CONFIGURATION +# +# Basic Postfix TLS configuration by default with self-signed certificate +# for inbound SMTP and also opportunistic TLS for outbound SMTP. + +# The full pathname of a file with the Postfix SMTP server RSA certificate +# in PEM format. Intermediate certificates should be included in general, +# the server certificate first, then the issuing CA(s) (bottom-up order). +# +smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem + +# The full pathname of a file with the Postfix SMTP server RSA private key +# in PEM format. The private key must be accessible without a pass-phrase, +# i.e. it must not be encrypted. +# +smtpd_tls_key_file = /etc/pki/tls/private/postfix.key + +# Announce STARTTLS support to remote SMTP clients, but do not require that +# clients use TLS encryption (opportunistic TLS inbound). +# +smtpd_tls_security_level = may + +# Directory with PEM format Certification Authority certificates that the +# Postfix SMTP client uses to verify a remote SMTP server certificate. +# +smtp_tls_CApath = /etc/pki/tls/certs + +# The full pathname of a file containing CA certificates of root CAs +# trusted to sign either remote SMTP server certificates or intermediate CA +# certificates. +# +smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt + +# Use TLS if this is supported by the remote SMTP server, otherwise use +# plaintext (opportunistic TLS outbound). +# +smtp_tls_security_level = may diff --git a/templates/Fedora/40/etc/postfix/master.cf b/templates/Fedora/40/etc/postfix/master.cf new file mode 100644 index 0000000..bb0eae9 --- /dev/null +++ b/templates/Fedora/40/etc/postfix/master.cf @@ -0,0 +1,145 @@ +# +# Postfix master process configuration file. For details on the format +# of the file, see the master(5) manual page (command: "man 5 master" or +# on-line: http://www.postfix.org/master.5.html). +# +# Do not forget to execute "postfix reload" after editing this file. +# +# ========================================================================== +# service type private unpriv chroot wakeup maxproc command + args +# (yes) (yes) (no) (never) (100) +# ========================================================================== +smtp inet n - n - - smtpd +#smtp inet n - n - 1 postscreen +#smtpd pass - - n - - smtpd +#dnsblog unix - - n - 0 dnsblog +#tlsproxy unix - - n - 0 tlsproxy +# Choose one: enable submission for loopback clients only, or for any client. +#127.0.0.1:submission inet n - n - - smtpd +#submission inet n - n - - smtpd +# -o syslog_name=postfix/submission +# -o smtpd_tls_security_level=encrypt +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_tls_auth_only=yes +# -o smtpd_reject_unlisted_recipient=no +# Instead of specifying complex smtpd__restrictions here, +# specify "smtpd__restrictions=$mua__restrictions" +# here, and specify mua__restrictions in main.cf (where +# "" is "client", "helo", "sender", "relay", or "recipient"). +# -o smtpd_client_restrictions= +# -o smtpd_helo_restrictions= +# -o smtpd_sender_restrictions= +# -o smtpd_relay_restrictions= +# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +# Choose one: enable submissions for loopback clients only, or for any client. +#127.0.0.1:submissions inet n - n - - smtpd +#submissions inet n - n - - smtpd +# -o syslog_name=postfix/submissions +# -o smtpd_tls_wrappermode=yes +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_reject_unlisted_recipient=no +# Instead of specifying complex smtpd__restrictions here, +# specify "smtpd__restrictions=$mua__restrictions" +# here, and specify mua__restrictions in main.cf (where +# "" is "client", "helo", "sender", "relay", or "recipient"). +# -o smtpd_client_restrictions= +# -o smtpd_helo_restrictions= +# -o smtpd_sender_restrictions= +# -o smtpd_relay_restrictions= +# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +#628 inet n - n - - qmqpd +pickup unix n - n 60 1 pickup +cleanup unix n - n - 0 cleanup +qmgr unix n - n 300 1 qmgr +#qmgr unix n - n 300 1 oqmgr +tlsmgr unix - - n 1000? 1 tlsmgr +rewrite unix - - n - - trivial-rewrite +bounce unix - - n - 0 bounce +defer unix - - n - 0 bounce +trace unix - - n - 0 bounce +verify unix - - n - 1 verify +flush unix n - n 1000? 0 flush +proxymap unix - - n - - proxymap +proxywrite unix - - n - 1 proxymap +smtp unix - - n - - smtp +relay unix - - n - - smtp + -o syslog_name=postfix/$service_name +# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 +showq unix n - n - - showq +error unix - - n - - error +retry unix - - n - - error +discard unix - - n - - discard +local unix - n n - - local +virtual unix - n n - - virtual +lmtp unix - - n - - lmtp +anvil unix - - n - 1 anvil +scache unix - - n - 1 scache +postlog unix-dgram n - n - 1 postlogd +# +# ==================================================================== +# Interfaces to non-Postfix software. Be sure to examine the manual +# pages of the non-Postfix software to find out what options it wants. +# +# Many of the following services use the Postfix pipe(8) delivery +# agent. See the pipe(8) man page for information about ${recipient} +# and other message envelope options. +# ==================================================================== +# +# maildrop. See the Postfix MAILDROP_README file for details. +# Also specify in main.cf: maildrop_destination_recipient_limit=1 +# +#maildrop unix - n n - - pipe +# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} +# +# ==================================================================== +# +# Recent Cyrus versions can use the existing "lmtp" master.cf entry. +# +# Specify in cyrus.conf: +# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 +# +# Specify in main.cf one or more of the following: +# mailbox_transport = lmtp:inet:localhost +# virtual_transport = lmtp:inet:localhost +# +# ==================================================================== +# +# Cyrus 2.1.5 (Amos Gouaux) +# Also specify in main.cf: cyrus_destination_recipient_limit=1 +# +#cyrus unix - n n - - pipe +# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} +# +# ==================================================================== +# +# Old example of delivery via Cyrus. +# +#old-cyrus unix - n n - - pipe +# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} +# +# ==================================================================== +# +# See the Postfix UUCP_README file for configuration details. +# +#uucp unix - n n - - pipe +# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) +# +# ==================================================================== +# +# Other external delivery methods. +# +#ifmail unix - n n - - pipe +# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) +# +#bsmtp unix - n n - - pipe +# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient +# +#scalemail-backend unix - n n - 2 pipe +# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store +# ${nexthop} ${user} ${extension} +# +#mailman unix - n n - - pipe +# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py +# ${nexthop} ${user} diff --git a/templates/Fedora/40/etc/postfix/master.cf.proto b/templates/Fedora/40/etc/postfix/master.cf.proto new file mode 100644 index 0000000..bb0eae9 --- /dev/null +++ b/templates/Fedora/40/etc/postfix/master.cf.proto @@ -0,0 +1,145 @@ +# +# Postfix master process configuration file. For details on the format +# of the file, see the master(5) manual page (command: "man 5 master" or +# on-line: http://www.postfix.org/master.5.html). +# +# Do not forget to execute "postfix reload" after editing this file. +# +# ========================================================================== +# service type private unpriv chroot wakeup maxproc command + args +# (yes) (yes) (no) (never) (100) +# ========================================================================== +smtp inet n - n - - smtpd +#smtp inet n - n - 1 postscreen +#smtpd pass - - n - - smtpd +#dnsblog unix - - n - 0 dnsblog +#tlsproxy unix - - n - 0 tlsproxy +# Choose one: enable submission for loopback clients only, or for any client. +#127.0.0.1:submission inet n - n - - smtpd +#submission inet n - n - - smtpd +# -o syslog_name=postfix/submission +# -o smtpd_tls_security_level=encrypt +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_tls_auth_only=yes +# -o smtpd_reject_unlisted_recipient=no +# Instead of specifying complex smtpd__restrictions here, +# specify "smtpd__restrictions=$mua__restrictions" +# here, and specify mua__restrictions in main.cf (where +# "" is "client", "helo", "sender", "relay", or "recipient"). +# -o smtpd_client_restrictions= +# -o smtpd_helo_restrictions= +# -o smtpd_sender_restrictions= +# -o smtpd_relay_restrictions= +# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +# Choose one: enable submissions for loopback clients only, or for any client. +#127.0.0.1:submissions inet n - n - - smtpd +#submissions inet n - n - - smtpd +# -o syslog_name=postfix/submissions +# -o smtpd_tls_wrappermode=yes +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_reject_unlisted_recipient=no +# Instead of specifying complex smtpd__restrictions here, +# specify "smtpd__restrictions=$mua__restrictions" +# here, and specify mua__restrictions in main.cf (where +# "" is "client", "helo", "sender", "relay", or "recipient"). +# -o smtpd_client_restrictions= +# -o smtpd_helo_restrictions= +# -o smtpd_sender_restrictions= +# -o smtpd_relay_restrictions= +# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +#628 inet n - n - - qmqpd +pickup unix n - n 60 1 pickup +cleanup unix n - n - 0 cleanup +qmgr unix n - n 300 1 qmgr +#qmgr unix n - n 300 1 oqmgr +tlsmgr unix - - n 1000? 1 tlsmgr +rewrite unix - - n - - trivial-rewrite +bounce unix - - n - 0 bounce +defer unix - - n - 0 bounce +trace unix - - n - 0 bounce +verify unix - - n - 1 verify +flush unix n - n 1000? 0 flush +proxymap unix - - n - - proxymap +proxywrite unix - - n - 1 proxymap +smtp unix - - n - - smtp +relay unix - - n - - smtp + -o syslog_name=postfix/$service_name +# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 +showq unix n - n - - showq +error unix - - n - - error +retry unix - - n - - error +discard unix - - n - - discard +local unix - n n - - local +virtual unix - n n - - virtual +lmtp unix - - n - - lmtp +anvil unix - - n - 1 anvil +scache unix - - n - 1 scache +postlog unix-dgram n - n - 1 postlogd +# +# ==================================================================== +# Interfaces to non-Postfix software. Be sure to examine the manual +# pages of the non-Postfix software to find out what options it wants. +# +# Many of the following services use the Postfix pipe(8) delivery +# agent. See the pipe(8) man page for information about ${recipient} +# and other message envelope options. +# ==================================================================== +# +# maildrop. See the Postfix MAILDROP_README file for details. +# Also specify in main.cf: maildrop_destination_recipient_limit=1 +# +#maildrop unix - n n - - pipe +# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} +# +# ==================================================================== +# +# Recent Cyrus versions can use the existing "lmtp" master.cf entry. +# +# Specify in cyrus.conf: +# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 +# +# Specify in main.cf one or more of the following: +# mailbox_transport = lmtp:inet:localhost +# virtual_transport = lmtp:inet:localhost +# +# ==================================================================== +# +# Cyrus 2.1.5 (Amos Gouaux) +# Also specify in main.cf: cyrus_destination_recipient_limit=1 +# +#cyrus unix - n n - - pipe +# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} +# +# ==================================================================== +# +# Old example of delivery via Cyrus. +# +#old-cyrus unix - n n - - pipe +# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} +# +# ==================================================================== +# +# See the Postfix UUCP_README file for configuration details. +# +#uucp unix - n n - - pipe +# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) +# +# ==================================================================== +# +# Other external delivery methods. +# +#ifmail unix - n n - - pipe +# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) +# +#bsmtp unix - n n - - pipe +# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient +# +#scalemail-backend unix - n n - 2 pipe +# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store +# ${nexthop} ${user} ${extension} +# +#mailman unix - n n - - pipe +# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py +# ${nexthop} ${user} diff --git a/templates/Fedora/40/etc/postfix/postfix-files b/templates/Fedora/40/etc/postfix/postfix-files new file mode 100644 index 0000000..b3ed234 --- /dev/null +++ b/templates/Fedora/40/etc/postfix/postfix-files @@ -0,0 +1,447 @@ +# +# Do not edit this file. +# +# This file controls the postfix-install script for installation of +# Postfix programs, configuration files and documentation, as well +# as the post-install script for setting permissions and for updating +# Postfix configuration files. See the respective manual pages within +# the script files. +# +# Do not list $command_directory or $shlib_directory in this file, +# or it will be blown away by a future Postfix uninstallation +# procedure. You would not want to lose all files in /usr/sbin or +# /usr/local/lib. +# +# Each record in this file describes one file or directory. +# Fields are separated by ":". Specify a null field as "-". +# Missing fields or separators at the end are OK. +# +# File format: +# name:type:owner:group:permission:flags +# No group means don't change group ownership. +# +# File types: +# d=directory +# f=regular file +# h=hard link (*) +# l=symbolic link (*) +# +# (*) With hard links and symbolic links, the owner field becomes the +# source pathname, while the group and permissions are ignored. +# +# File flags: +# No flag means the flag is not active. +# p=preserve existing file, do not replace (postfix-install). +# u=update owner/group/mode (post-install upgrade-permissions). +# c=create missing directory (post-install create-missing). +# r=apply owner/group recursively (post-install set/upgrade-permissions). +# o=obsolete, no longer part of Postfix +# 1=optional for non-default instance (config_dir != built-in default). +# +# Note: the "u" flag is for upgrading the permissions of existing files +# or directories after changes in Postfix architecture. For robustness +# it is a good idea to "u" all the files that have special ownership or +# permissions, so that running "make install" fixes any glitches. +# +# Note: order matters. Update shared libraries and database plugins +# before daemon/command-line programs. +$config_directory:d:root:-:755:u +$data_directory:d:$mail_owner:-:700:uc +$daemon_directory:d:root:-:755:u +$queue_directory:d:root:-:755:uc +$sample_directory:d:root:-:755:o +$readme_directory:d:root:-:755 +$html_directory:d:root:-:755 +$queue_directory/active:d:$mail_owner:-:700:ucr +$queue_directory/bounce:d:$mail_owner:-:700:ucr +$queue_directory/corrupt:d:$mail_owner:-:700:ucr +$queue_directory/defer:d:$mail_owner:-:700:ucr +$queue_directory/deferred:d:$mail_owner:-:700:ucr +$queue_directory/flush:d:$mail_owner:-:700:ucr +$queue_directory/hold:d:$mail_owner:-:700:ucr +$queue_directory/incoming:d:$mail_owner:-:700:ucr +$queue_directory/private:d:$mail_owner:-:700:uc +$queue_directory/maildrop:d:$mail_owner:$setgid_group:730:uc +$queue_directory/public:d:$mail_owner:$setgid_group:710:uc +$queue_directory/pid:d:root:-:755:uc +$queue_directory/saved:d:$mail_owner:-:700:ucr +$queue_directory/trace:d:$mail_owner:-:700:ucr +# Update shared libraries and plugins before daemon or command-line programs. +$shlib_directory/libpostfix-util.so:f:root:-:755 +$shlib_directory/libpostfix-global.so:f:root:-:755 +$shlib_directory/libpostfix-dns.so:f:root:-:755 +$shlib_directory/libpostfix-tls.so:f:root:-:755 +$shlib_directory/libpostfix-master.so:f:root:-:755 +$meta_directory/dynamicmaps.cf.d:d:root:-:755 +$meta_directory/dynamicmaps.cf:f:root:-:644 +$meta_directory/main.cf.proto:f:root:-:644 +$meta_directory/master.cf.proto:f:root:-:644 +$meta_directory/postfix-files.d:d:root:-:755 +$meta_directory/postfix-files:f:root:-:644 +$daemon_directory/anvil:f:root:-:755 +$daemon_directory/bounce:f:root:-:755 +$daemon_directory/cleanup:f:root:-:755 +$daemon_directory/discard:f:root:-:755 +$daemon_directory/dnsblog:f:root:-:755 +$daemon_directory/error:f:root:-:755 +$daemon_directory/flush:f:root:-:755 +$daemon_directory/local:f:root:-:755 +$daemon_directory/main.cf:f:root:-:644:o +$daemon_directory/master.cf:f:root:-:644:o +$daemon_directory/master:f:root:-:755 +$daemon_directory/oqmgr:f:root:-:755 +$daemon_directory/pickup:f:root:-:755 +$daemon_directory/pipe:f:root:-:755 +$daemon_directory/post-install:f:root:-:755 +# In case meta_directory == daemon_directory. +#$daemon_directory/postfix-files:f:root:-:644:o +#$daemon_directory/postfix-files.d:d:root:-:755:o +$daemon_directory/postfix-script:f:root:-:755 +$daemon_directory/postfix-tls-script:f:root:-:755 +$daemon_directory/postfix-wrapper:f:root:-:755 +$daemon_directory/postmulti-script:f:root:-:755 +$daemon_directory/postlogd:f:root:-:755 +$daemon_directory/postscreen:f:root:-:755 +$daemon_directory/proxymap:f:root:-:755 +$daemon_directory/qmgr:f:root:-:755 +$daemon_directory/qmqpd:f:root:-:755 +$daemon_directory/scache:f:root:-:755 +$daemon_directory/showq:f:root:-:755 +$daemon_directory/smtp:f:root:-:755 +$daemon_directory/smtpd:f:root:-:755 +$daemon_directory/spawn:f:root:-:755 +$daemon_directory/tlsproxy:f:root:-:755 +$daemon_directory/tlsmgr:f:root:-:755 +$daemon_directory/trivial-rewrite:f:root:-:755 +$daemon_directory/verify:f:root:-:755 +$daemon_directory/virtual:f:root:-:755 +$daemon_directory/nqmgr:h:$daemon_directory/qmgr +$daemon_directory/lmtp:h:$daemon_directory/smtp +$command_directory/postalias:f:root:-:755 +$command_directory/postcat:f:root:-:755 +$command_directory/postconf:f:root:-:755 +$command_directory/postfix:f:root:-:755 +$command_directory/postkick:f:root:-:755 +$command_directory/postlock:f:root:-:755 +$command_directory/postlog:f:root:$setgid_group:2755:u +$command_directory/postmap:f:root:-:755 +$command_directory/postmulti:f:root:-:755 +$command_directory/postsuper:f:root:-:755 +$command_directory/postdrop:f:root:$setgid_group:2755:u +$command_directory/postqueue:f:root:$setgid_group:2755:u +$sendmail_path:f:root:-:755 +$newaliases_path:l:$sendmail_path +$mailq_path:l:$sendmail_path +$config_directory/access:f:root:-:644:p1 +$config_directory/canonical:f:root:-:644:p1 +$config_directory/cidr_table:f:root:-:644:o +$config_directory/generic:f:root:-:644:p1 +$config_directory/generics:f:root:-:644:o +$config_directory/header_checks:f:root:-:644:p1 +$config_directory/install.cf:f:root:-:644:o +$config_directory/main.cf:f:root:-:644:p +$config_directory/master.cf:f:root:-:644:p +$config_directory/pcre_table:f:root:-:644:o +$config_directory/regexp_table:f:root:-:644:o +$config_directory/relocated:f:root:-:644:p1 +$config_directory/tcp_table:f:root:-:644:o +$config_directory/transport:f:root:-:644:p1 +$config_directory/virtual:f:root:-:644:p1 +$config_directory/postfix-script:f:root:-:755:o +$config_directory/postfix-script-sgid:f:root:-:755:o +$config_directory/postfix-script-nosgid:f:root:-:755:o +$config_directory/post-install:f:root:-:755:o +$manpage_directory/man1/mailq.postfix.1.gz:f:root:-:644 +$manpage_directory/man1/newaliases.postfix.1.gz:f:root:-:644 +$manpage_directory/man1/postalias.1.gz:f:root:-:644 +$manpage_directory/man1/postcat.1.gz:f:root:-:644 +$manpage_directory/man1/postconf.1.gz:f:root:-:644 +$manpage_directory/man1/postdrop.1.gz:f:root:-:644 +$manpage_directory/man1/postfix-tls.1.gz:f:root:-:644 +$manpage_directory/man1/postfix.1.gz:f:root:-:644 +$manpage_directory/man1/postkick.1.gz:f:root:-:644 +$manpage_directory/man1/postlock.1.gz:f:root:-:644 +$manpage_directory/man1/postlog.1.gz:f:root:-:644 +$manpage_directory/man1/postmap.1.gz:f:root:-:644 +$manpage_directory/man1/postmulti.1.gz:f:root:-:644 +$manpage_directory/man1/postqueue.1.gz:f:root:-:644 +$manpage_directory/man1/postsuper.1.gz:f:root:-:644 +$manpage_directory/man1/sendmail.postfix.1.gz:f:root:-:644 +$manpage_directory/man5/access.5.gz:f:root:-:644 +$manpage_directory/man5/aliases.postfix.5.gz:f:root:-:644 +$manpage_directory/man5/body_checks.5.gz:f:root:-:644 +$manpage_directory/man5/bounce.5.gz:f:root:-:644 +$manpage_directory/man5/canonical.5.gz:f:root:-:644 +$manpage_directory/man5/cidr_table.5.gz:f:root:-:644 +$manpage_directory/man5/generics.5.gz:f:root:-:644:o +$manpage_directory/man5/generic.5.gz:f:root:-:644 +$manpage_directory/man5/header_checks.5.gz:f:root:-:644 +$manpage_directory/man5/master.5.gz:f:root:-:644 +$manpage_directory/man5/memcache_table.5.gz:f:root:-:644 +$manpage_directory/man5/socketmap_table.5.gz:f:root:-:644 +$manpage_directory/man5/nisplus_table.5.gz:f:root:-:644 +$manpage_directory/man5/postconf.5.gz:f:root:-:644 +$manpage_directory/man5/postfix-wrapper.5.gz:f:root:-:644 +$manpage_directory/man5/regexp_table.5.gz:f:root:-:644 +$manpage_directory/man5/relocated.5.gz:f:root:-:644 +$manpage_directory/man5/tcp_table.5.gz:f:root:-:644 +$manpage_directory/man5/transport.5.gz:f:root:-:644 +$manpage_directory/man5/virtual.5.gz:f:root:-:644 +$manpage_directory/man8/bounce.8.gz:f:root:-:644 +$manpage_directory/man8/cleanup.8.gz:f:root:-:644 +$manpage_directory/man8/anvil.8.gz:f:root:-:644 +$manpage_directory/man8/defer.8.gz:f:root:-:644 +$manpage_directory/man8/discard.8.gz:f:root:-:644 +$manpage_directory/man8/dnsblog.8.gz:f:root:-:644 +$manpage_directory/man8/error.8.gz:f:root:-:644 +$manpage_directory/man8/flush.8.gz:f:root:-:644 +$manpage_directory/man8/lmtp.8.gz:f:root:-:644 +$manpage_directory/man8/local.8.gz:f:root:-:644 +$manpage_directory/man8/master.8.gz:f:root:-:644 +$manpage_directory/man8/nqmgr.8.gz:f:root:-:644:o +$manpage_directory/man8/oqmgr.8.gz:f:root:-:644: +$manpage_directory/man8/pickup.8.gz:f:root:-:644 +$manpage_directory/man8/pipe.8.gz:f:root:-:644 +$manpage_directory/man8/postlogd.8.gz:f:root:-:644 +$manpage_directory/man8/postscreen.8.gz:f:root:-:644 +$manpage_directory/man8/proxymap.8.gz:f:root:-:644 +$manpage_directory/man8/qmgr.8.gz:f:root:-:644 +$manpage_directory/man8/qmqpd.8.gz:f:root:-:644 +$manpage_directory/man8/scache.8.gz:f:root:-:644 +$manpage_directory/man8/showq.8.gz:f:root:-:644 +$manpage_directory/man8/smtp.8.gz:f:root:-:644 +$manpage_directory/man8/smtpd.postfix.8.gz:f:root:-:644 +$manpage_directory/man8/spawn.8.gz:f:root:-:644 +$manpage_directory/man8/tlsproxy.8.gz:f:root:-:644 +$manpage_directory/man8/tlsmgr.8.gz:f:root:-:644 +$manpage_directory/man8/trace.8.gz:f:root:-:644 +$manpage_directory/man8/trivial-rewrite.8.gz:f:root:-:644 +$manpage_directory/man8/verify.8.gz:f:root:-:644 +$manpage_directory/man8/virtual.8.gz:f:root:-:644 +$sample_directory/sample-aliases.cf:f:root:-:644:o +$sample_directory/sample-auth.cf:f:root:-:644:o +$sample_directory/sample-canonical.cf:f:root:-:644:o +$sample_directory/sample-compatibility.cf:f:root:-:644:o +$sample_directory/sample-debug.cf:f:root:-:644:o +$sample_directory/sample-filter.cf:f:root:-:644:o +$sample_directory/sample-flush.cf:f:root:-:644:o +$sample_directory/sample-ipv6.cf:f:root:-:644:o +$sample_directory/sample-ldap.cf:f:root:-:644:o +$sample_directory/sample-lmtp.cf:f:root:-:644:o +$sample_directory/sample-local.cf:f:root:-:644:o +$sample_directory/sample-mime.cf:f:root:-:644:o +$sample_directory/sample-misc.cf:f:root:-:644:o +$sample_directory/sample-pcre-access.cf:f:root:-:644:o +$sample_directory/sample-pcre-body.cf:f:root:-:644:o +$sample_directory/sample-pcre-header.cf:f:root:-:644:o +$sample_directory/sample-pgsql-aliases.cf:f:root:-:644:o +$sample_directory/sample-qmqpd.cf:f:root:-:644:o +$sample_directory/sample-rate.cf:f:root:-:644:o +$sample_directory/sample-regexp-access.cf:f:root:-:644:o +$sample_directory/sample-regexp-body.cf:f:root:-:644:o +$sample_directory/sample-regexp-header.cf:f:root:-:644:o +$sample_directory/sample-relocated.cf:f:root:-:644:o +$sample_directory/sample-resource.cf:f:root:-:644:o +$sample_directory/sample-rewrite.cf:f:root:-:644:o +$sample_directory/sample-scheduler.cf:f:root:-:644:o +$sample_directory/sample-smtp.cf:f:root:-:644:o +$sample_directory/sample-smtpd.cf:f:root:-:644:o +$sample_directory/sample-tls.cf:f:root:-:644:o +$sample_directory/sample-transport.cf:f:root:-:644:o +$sample_directory/sample-verify.cf:f:root:-:644:o +$sample_directory/sample-virtual.cf:f:root:-:644:o +$readme_directory/AAAREADME:f:root:-:644 +$readme_directory/ADDRESS_CLASS_README:f:root:-:644 +$readme_directory/ADDRESS_REWRITING_README:f:root:-:644 +$readme_directory/ADDRESS_VERIFICATION_README:f:root:-:644 +$readme_directory/BACKSCATTER_README:f:root:-:644 +$readme_directory/BASIC_CONFIGURATION_README:f:root:-:644 +$readme_directory/BDAT_README:f:root:-:644 +$readme_directory/BUILTIN_FILTER_README:f:root:-:644 +$readme_directory/COMPATIBILITY_README:f:root:-:644 +$readme_directory/CONNECTION_CACHE_README:f:root:-:644 +$readme_directory/CONTENT_INSPECTION_README:f:root:-:644 +$readme_directory/DATABASE_README:f:root:-:644 +$readme_directory/DB_README:f:root:-:644 +$readme_directory/DEBUG_README:f:root:-:644 +$readme_directory/DSN_README:f:root:-:644 +$readme_directory/ETRN_README:f:root:-:644 +$readme_directory/FILTER_README:f:root:-:644 +$readme_directory/FORWARD_SECRECY_README:f:root:-:644 +$readme_directory/HOSTING_README:f:root:-:644:o +$readme_directory/INSTALL:f:root:-:644 +$readme_directory/IPV6_README:f:root:-:644 +$readme_directory/LINUX_README:f:root:-:644 +$readme_directory/LOCAL_RECIPIENT_README:f:root:-:644 +$readme_directory/MACOSX_README:f:root:-:644:o +$readme_directory/MAILDROP_README:f:root:-:644 +$readme_directory/MAILLOG_README:f:root:-:644 +$readme_directory/MEMCACHE_README:f:root:-:644 +$readme_directory/MILTER_README:f:root:-:644 +$readme_directory/MULTI_INSTANCE_README:f:root:-:644 +$readme_directory/SMTPUTF8_README:f:root:-:644 +$readme_directory/NFS_README:f:root:-:644 +$readme_directory/OVERVIEW:f:root:-:644 +$readme_directory/PACKAGE_README:f:root:-:644 +$readme_directory/POSTSCREEN_3_5_README:f:root:-:644 +$readme_directory/POSTSCREEN_README:f:root:-:644 +$readme_directory/QMQP_README:f:root:-:644:o +$readme_directory/QSHAPE_README:f:root:-:644 +$readme_directory/RELEASE_NOTES:f:root:-:644 +$readme_directory/RESTRICTION_CLASS_README:f:root:-:644 +$readme_directory/SASL_README:f:root:-:644 +$readme_directory/SCHEDULER_README:f:root:-:644 +$readme_directory/SMTPD_ACCESS_README:f:root:-:644 +$readme_directory/SMTPD_POLICY_README:f:root:-:644 +$readme_directory/SMTPD_PROXY_README:f:root:-:644 +$readme_directory/SOHO_README:f:root:-:644 +$readme_directory/STANDARD_CONFIGURATION_README:f:root:-:644 +$readme_directory/STRESS_README:f:root:-:644 +$readme_directory/TLS_LEGACY_README:f:root:-:644 +$readme_directory/TLS_README:f:root:-:644 +$readme_directory/TUNING_README:f:root:-:644 +$readme_directory/ULTRIX_README:f:root:-:644 +$readme_directory/UUCP_README:f:root:-:644 +$readme_directory/VERP_README:f:root:-:644 +$readme_directory/VIRTUAL_README:f:root:-:644 +$readme_directory/XCLIENT_README:f:root:-:644 +$readme_directory/XFORWARD_README:f:root:-:644 +$html_directory/ADDRESS_CLASS_README.html:f:root:-:644 +$html_directory/ADDRESS_REWRITING_README.html:f:root:-:644 +$html_directory/ADDRESS_VERIFICATION_README.html:f:root:-:644 +$html_directory/BACKSCATTER_README.html:f:root:-:644 +$html_directory/BASIC_CONFIGURATION_README.html:f:root:-:644 +$html_directory/BDAT_README.html:f:root:-:644 +$html_directory/BUILTIN_FILTER_README.html:f:root:-:644 +$html_directory/CDB_README.html:f:root:-:644 +$html_directory/COMPATIBILITY_README.html:f:root:-:644 +$html_directory/CONNECTION_CACHE_README.html:f:root:-:644 +$html_directory/CONTENT_INSPECTION_README.html:f:root:-:644 +$html_directory/CYRUS_README.html:f:root:-:644:o +$html_directory/DATABASE_README.html:f:root:-:644 +$html_directory/DB_README.html:f:root:-:644 +$html_directory/DEBUG_README.html:f:root:-:644 +$html_directory/DSN_README.html:f:root:-:644 +$html_directory/ETRN_README.html:f:root:-:644 +$html_directory/FILTER_README.html:f:root:-:644 +$html_directory/FORWARD_SECRECY_README.html:f:root:-:644 +$html_directory/INSTALL.html:f:root:-:644 +$html_directory/IPV6_README.html:f:root:-:644 +$html_directory/LDAP_README.html:f:root:-:644 +$html_directory/LINUX_README.html:f:root:-:644 +$html_directory/LMDB_README.html:f:root:-:644 +$html_directory/LOCAL_RECIPIENT_README.html:f:root:-:644 +$html_directory/MAILDROP_README.html:f:root:-:644 +$html_directory/MAILLOG_README.html:f:root:-:644 +$html_directory/MEMCACHE_README.html:f:root:-:644 +$html_directory/MILTER_README.html:f:root:-:644 +$html_directory/MULTI_INSTANCE_README.html:f:root:-:644 +$html_directory/MYSQL_README.html:f:root:-:644 +$html_directory/SMTPUTF8_README.html:f:root:-:644 +$html_directory/SQLITE_README.html:f:root:-:644 +$html_directory/NFS_README.html:f:root:-:644 +$html_directory/OVERVIEW.html:f:root:-:644 +$html_directory/PACKAGE_README.html:f:root:-:644 +$html_directory/PCRE_README.html:f:root:-:644 +$html_directory/PGSQL_README.html:f:root:-:644 +$html_directory/POSTSCREEN_3_5_README.html:f:root:-:644 +$html_directory/POSTSCREEN_README.html:f:root:-:644 +$html_directory/QMQP_README.html:f:root:-:644:o +$html_directory/QSHAPE_README.html:f:root:-:644 +$html_directory/RESTRICTION_CLASS_README.html:f:root:-:644 +$html_directory/SASL_README.html:f:root:-:644 +$html_directory/SCHEDULER_README.html:f:root:-:644 +$html_directory/SMTPD_ACCESS_README.html:f:root:-:644 +$html_directory/SMTPD_POLICY_README.html:f:root:-:644 +$html_directory/SMTPD_PROXY_README.html:f:root:-:644 +$html_directory/SOHO_README.html:f:root:-:644 +$html_directory/STANDARD_CONFIGURATION_README.html:f:root:-:644 +$html_directory/STRESS_README.html:f:root:-:644 +$html_directory/TLS_LEGACY_README.html:f:root:-:644 +$html_directory/TLS_README.html:f:root:-:644 +$html_directory/TUNING_README.html:f:root:-:644 +$html_directory/ULTRIX_README.html:f:root:-:644:o +$html_directory/UUCP_README.html:f:root:-:644 +$html_directory/VERP_README.html:f:root:-:644 +$html_directory/VIRTUAL_README.html:f:root:-:644 +$html_directory/XCLIENT_README.html:f:root:-:644 +$html_directory/XFORWARD_README.html:f:root:-:644 +$html_directory/access.5.html:f:root:-:644 +$html_directory/aliases.5.html:f:root:-:644 +$html_directory/anvil.8.html:f:root:-:644 +$html_directory/bounce.5.html:f:root:-:644 +$html_directory/bounce.8.html:f:root:-:644 +$html_directory/canonical.5.html:f:root:-:644 +$html_directory/cidr_table.5.html:f:root:-:644 +$html_directory/cleanup.8.html:f:root:-:644 +$html_directory/defer.8.html:h:$html_directory/bounce.8.html:-:644 +$html_directory/discard.8.html:f:root:-:644 +$html_directory/dnsblog.8.html:f:root:-:644 +$html_directory/error.8.html:f:root:-:644 +$html_directory/flush.8.html:f:root:-:644 +$html_directory/generics.5.html:f:root:-:644:o +$html_directory/generic.5.html:f:root:-:644 +$html_directory/header_checks.5.html:f:root:-:644 +$html_directory/index.html:f:root:-:644 +$html_directory/ldap_table.5.html:f:root:-:644 +$html_directory/lmdb_table.5.html:f:root:-:644 +$html_directory/lmtp.8.html:f:root:-:644 +$html_directory/local.8.html:f:root:-:644 +$html_directory/mailq.1.html:f:root:-:644 +$html_directory/master.5.html:f:root:-:644 +$html_directory/master.8.html:f:root:-:644 +$html_directory/memcache_table.5.html:f:root:-:644 +$html_directory/mysql_table.5.html:f:root:-:644 +$html_directory/sqlite_table.5.html:f:root:-:644 +$html_directory/nisplus_table.5.html:f:root:-:644 +$html_directory/newaliases.1.html:h:$html_directory/mailq.1.html:-:644 +$html_directory/oqmgr.8.html:f:root:-:644 +$html_directory/pcre_table.5.html:f:root:-:644 +$html_directory/pgsql_table.5.html:f:root:-:644 +$html_directory/pickup.8.html:f:root:-:644 +$html_directory/pipe.8.html:f:root:-:644 +$html_directory/postalias.1.html:f:root:-:644 +$html_directory/postcat.1.html:f:root:-:644 +$html_directory/postconf.1.html:f:root:-:644 +$html_directory/postconf.5.html:f:root:-:644 +$html_directory/postdrop.1.html:f:root:-:644 +$html_directory/postfix-logo.jpg:f:root:-:644 +$html_directory/postfix-manuals.html:f:root:-:644 +$html_directory/postfix-tls.1.html:f:root:-:644 +$html_directory/postfix-wrapper.5.html:f:root:-:644 +$html_directory/postfix.1.html:f:root:-:644 +$html_directory/postkick.1.html:f:root:-:644 +$html_directory/postlock.1.html:f:root:-:644 +$html_directory/postlog.1.html:f:root:-:644 +$html_directory/postmap.1.html:f:root:-:644 +$html_directory/postmulti.1.html:f:root:-:644 +$html_directory/postlogd.8.html:f:root:-:644 +$html_directory/postqueue.1.html:f:root:-:644 +$html_directory/postscreen.8.html:f:root:-:644 +$html_directory/postsuper.1.html:f:root:-:644 +$html_directory/qshape.1.html:f:root:-:644 +$html_directory/proxymap.8.html:f:root:-:644 +$html_directory/qmgr.8.html:f:root:-:644 +$html_directory/qmqp-sink.1.html:f:root:-:644 +$html_directory/qmqp-source.1.html:f:root:-:644 +$html_directory/qmqpd.8.html:f:root:-:644 +$html_directory/regexp_table.5.html:f:root:-:644 +$html_directory/relocated.5.html:f:root:-:644 +$html_directory/scache.8.html:f:root:-:644 +$html_directory/sendmail.1.html:h:$html_directory/mailq.1.html:-:644 +$html_directory/showq.8.html:f:root:-:644 +$html_directory/smtp-sink.1.html:f:root:-:644 +$html_directory/smtp-source.1.html:f:root:-:644 +$html_directory/smtp.8.html:h:$html_directory/lmtp.8.html:-:644 +$html_directory/smtpd.8.html:f:root:-:644 +$html_directory/socketmap_table.5.html:f:root:-:644 +$html_directory/spawn.8.html:f:root:-:644 +$html_directory/tlsmgr.8.html:f:root:-:644 +$html_directory/tlsproxy.8.html:f:root:-:644 +$html_directory/tcp_table.5.html:f:root:-:644 +$html_directory/trace.8.html:h:$html_directory/bounce.8.html:-:644 +$html_directory/transport.5.html:f:root:-:644 +$html_directory/trivial-rewrite.8.html:f:root:-:644 +$html_directory/verify.8.html:f:root:-:644 +$html_directory/virtual.5.html:f:root:-:644 +$html_directory/virtual.8.html:f:root:-:644 diff --git a/templates/Fedora/40/etc/postfix/postfix-files.d/ldap b/templates/Fedora/40/etc/postfix/postfix-files.d/ldap new file mode 100644 index 0000000..684b05d --- /dev/null +++ b/templates/Fedora/40/etc/postfix/postfix-files.d/ldap @@ -0,0 +1,3 @@ +$shlib_directory/postfix-ldap.so:f:root:-:755 +$manpage_directory/man5/ldap_table.5.gz:f:root:-:644 +$readme_directory/LDAP_README:f:root:-:644 diff --git a/templates/Fedora/40/etc/postfix/postfix-files.d/mysql b/templates/Fedora/40/etc/postfix/postfix-files.d/mysql new file mode 100644 index 0000000..8e41d61 --- /dev/null +++ b/templates/Fedora/40/etc/postfix/postfix-files.d/mysql @@ -0,0 +1,3 @@ +$shlib_directory/postfix-mysql.so:f:root:-:755 +$manpage_directory/man5/mysql_table.5.gz:f:root:-:644 +$readme_directory/MYSQL_README:f:root:-:644 diff --git a/templates/Fedora/40/etc/postfix/postfix-files.d/pcre b/templates/Fedora/40/etc/postfix/postfix-files.d/pcre new file mode 100644 index 0000000..a34fd73 --- /dev/null +++ b/templates/Fedora/40/etc/postfix/postfix-files.d/pcre @@ -0,0 +1,3 @@ +$shlib_directory/postfix-pcre.so:f:root:-:755 +$manpage_directory/man5/pcre_table.5.gz:f:root:-:644 +$readme_directory/PCRE_README:f:root:-:644 diff --git a/templates/Fedora/40/etc/postfix/relocated b/templates/Fedora/40/etc/postfix/relocated new file mode 100644 index 0000000..90f63ec --- /dev/null +++ b/templates/Fedora/40/etc/postfix/relocated @@ -0,0 +1,178 @@ +# RELOCATED(5) RELOCATED(5) +# +# NAME +# relocated - Postfix relocated table format +# +# SYNOPSIS +# postmap /etc/postfix/relocated +# +# DESCRIPTION +# The optional relocated(5) table provides the information +# that is used in "user has moved to new_location" bounce +# messages. +# +# Normally, the relocated(5) table is specified as a text +# file that serves as input to the postmap(1) command. The +# result, an indexed file in dbm or db format, is used for +# fast searching by the mail system. Execute the command +# "postmap /etc/postfix/relocated" to rebuild an indexed +# file after changing the corresponding relocated table. +# +# When the table is provided via other means such as NIS, +# LDAP or SQL, the same lookups are done as for ordinary +# indexed files. +# +# Alternatively, the table can be provided as a regu- +# lar-expression map where patterns are given as regular +# expressions, or lookups can be directed to a TCP-based +# server. In those case, the lookups are done in a slightly +# different way as described below under "REGULAR EXPRESSION +# TABLES" or "TCP-BASED TABLES". +# +# Table lookups are case insensitive. +# +# CASE FOLDING +# The search string is folded to lowercase before database +# lookup. As of Postfix 2.3, the search string is not case +# folded with database types such as regexp: or pcre: whose +# lookup fields can match both upper and lower case. +# +# TABLE FORMAT +# The input format for the postmap(1) command is as follows: +# +# o An entry has one of the following form: +# +# pattern new_location +# +# Where new_location specifies contact information +# such as an email address, or perhaps a street +# address or telephone number. +# +# o Empty lines and whitespace-only lines are ignored, +# as are lines whose first non-whitespace character +# is a `#'. +# +# o A logical line starts with non-whitespace text. A +# line that starts with whitespace continues a logi- +# cal line. +# +# TABLE SEARCH ORDER +# With lookups from indexed files such as DB or DBM, or from +# networked tables such as NIS, LDAP or SQL, patterns are +# tried in the order as listed below: +# +# user@domain +# Matches user@domain. This form has precedence over +# all other forms. +# +# user Matches user@site when site is $myorigin, when site +# is listed in $mydestination, or when site is listed +# in $inet_interfaces or $proxy_interfaces. +# +# @domain +# Matches other addresses in domain. This form has +# the lowest precedence. +# +# ADDRESS EXTENSION +# When a mail address localpart contains the optional recip- +# ient delimiter (e.g., user+foo@domain), the lookup order +# becomes: user+foo@domain, user@domain, user+foo, user, and +# @domain. +# +# REGULAR EXPRESSION TABLES +# This section describes how the table lookups change when +# the table is given in the form of regular expressions or +# when lookups are directed to a TCP-based server. For a +# description of regular expression lookup table syntax, see +# regexp_table(5) or pcre_table(5). For a description of the +# TCP client/server table lookup protocol, see tcp_table(5). +# This feature is available in Postfix 2.5 and later. +# +# Each pattern is a regular expression that is applied to +# the entire address being looked up. Thus, user@domain mail +# addresses are not broken up into their user and @domain +# constituent parts, nor is user+foo broken up into user and +# foo. +# +# Patterns are applied in the order as specified in the ta- +# ble, until a pattern is found that matches the search +# string. +# +# Results are the same as with indexed file lookups, with +# the additional feature that parenthesized substrings from +# the pattern can be interpolated as $1, $2 and so on. +# +# TCP-BASED TABLES +# This section describes how the table lookups change when +# lookups are directed to a TCP-based server. For a descrip- +# tion of the TCP client/server lookup protocol, see tcp_ta- +# ble(5). This feature is available in Postfix 2.5 and +# later. +# +# Each lookup operation uses the entire address once. Thus, +# user@domain mail addresses are not broken up into their +# user and @domain constituent parts, nor is user+foo broken +# up into user and foo. +# +# Results are the same as with indexed file lookups. +# +# BUGS +# The table format does not understand quoting conventions. +# +# CONFIGURATION PARAMETERS +# The following main.cf parameters are especially relevant. +# The text below provides only a parameter summary. See +# postconf(5) for more details including examples. +# +# relocated_maps (empty) +# Optional lookup tables with new contact information +# for users or domains that no longer exist. +# +# Other parameters of interest: +# +# inet_interfaces (all) +# The network interface addresses that this mail sys- +# tem receives mail on. +# +# mydestination ($myhostname, localhost.$mydomain, local- +# host) +# The list of domains that are delivered via the +# $local_transport mail delivery transport. +# +# myorigin ($myhostname) +# The domain name that locally-posted mail appears to +# come from, and that locally posted mail is deliv- +# ered to. +# +# proxy_interfaces (empty) +# The network interface addresses that this mail sys- +# tem receives mail on by way of a proxy or network +# address translation unit. +# +# SEE ALSO +# trivial-rewrite(8), address resolver +# postmap(1), Postfix lookup table manager +# postconf(5), configuration parameters +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# DATABASE_README, Postfix lookup table overview +# ADDRESS_REWRITING_README, address rewriting guide +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# RELOCATED(5) diff --git a/templates/Fedora/40/etc/postfix/transport b/templates/Fedora/40/etc/postfix/transport new file mode 100644 index 0000000..bad7739 --- /dev/null +++ b/templates/Fedora/40/etc/postfix/transport @@ -0,0 +1,317 @@ +# TRANSPORT(5) TRANSPORT(5) +# +# NAME +# transport - Postfix transport table format +# +# SYNOPSIS +# postmap /etc/postfix/transport +# +# postmap -q "string" /etc/postfix/transport +# +# postmap -q - /etc/postfix/transport = 3.5): +# +# example.com smtp:bar.example, foo.example +# +# This tries to deliver to bar.example before trying to +# deliver to foo.example. +# +# The error mailer can be used to bounce mail: +# +# .example.com error:mail for *.example.com is not deliverable +# +# This causes all mail for user@anything.example.com to be +# bounced. +# +# REGULAR EXPRESSION TABLES +# This section describes how the table lookups change when +# the table is given in the form of regular expressions. For +# a description of regular expression lookup table syntax, +# see regexp_table(5) or pcre_table(5). +# +# Each pattern is a regular expression that is applied to +# the entire address being looked up. Thus, +# some.domain.hierarchy is not looked up via its parent +# domains, nor is user+foo@domain looked up as user@domain. +# +# Patterns are applied in the order as specified in the ta- +# ble, until a pattern is found that matches the search +# string. +# +# The trivial-rewrite(8) server disallows regular expression +# substitution of $1 etc. in regular expression lookup +# tables, because that could open a security hole (Postfix +# version 2.3 and later). +# +# TCP-BASED TABLES +# This section describes how the table lookups change when +# lookups are directed to a TCP-based server. For a descrip- +# tion of the TCP client/server lookup protocol, see tcp_ta- +# ble(5). This feature is not available up to and including +# Postfix version 2.4. +# +# Each lookup operation uses the entire recipient address +# once. Thus, some.domain.hierarchy is not looked up via +# its parent domains, nor is user+foo@domain looked up as +# user@domain. +# +# Results are the same as with indexed file lookups. +# +# CONFIGURATION PARAMETERS +# The following main.cf parameters are especially relevant. +# The text below provides only a parameter summary. See +# postconf(5) for more details including examples. +# +# empty_address_recipient (MAILER-DAEMON) +# The recipient of mail addressed to the null +# address. +# +# parent_domain_matches_subdomains (see 'postconf -d' out- +# put) +# A list of Postfix features where the pattern "exam- +# ple.com" also matches subdomains of example.com, +# instead of requiring an explicit ".example.com" +# pattern. +# +# transport_maps (empty) +# Optional lookup tables with mappings from recipient +# address to (message delivery transport, next-hop +# destination). +# +# SEE ALSO +# trivial-rewrite(8), rewrite and resolve addresses +# master(5), master.cf file format +# postconf(5), configuration parameters +# postmap(1), Postfix lookup table manager +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# ADDRESS_REWRITING_README, address rewriting guide +# DATABASE_README, Postfix lookup table overview +# FILTER_README, external content filter +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# TRANSPORT(5) diff --git a/templates/Fedora/40/etc/postfix/virtual b/templates/Fedora/40/etc/postfix/virtual new file mode 100644 index 0000000..96390fe --- /dev/null +++ b/templates/Fedora/40/etc/postfix/virtual @@ -0,0 +1,324 @@ +# VIRTUAL(5) VIRTUAL(5) +# +# NAME +# virtual - Postfix virtual alias table format +# +# SYNOPSIS +# postmap /etc/postfix/virtual +# +# postmap -q "string" /etc/postfix/virtual +# +# postmap -q - /etc/postfix/virtual Date: Fri, 27 Dec 2024 20:47:43 -0600 Subject: [PATCH 40/47] Fedora 41 Signed-off-by: Jason Rothstein --- templates/Fedora/41/etc/opendkim.conf | 135 +++ templates/Fedora/41/etc/opendkim/KeyTable | 6 + templates/Fedora/41/etc/opendkim/SigningTable | 25 + templates/Fedora/41/etc/opendkim/TrustedHosts | 9 + templates/Fedora/41/etc/opendmarc.conf | 443 ++++++++++ templates/Fedora/41/etc/postfix/access | 484 +++++++++++ templates/Fedora/41/etc/postfix/canonical | 307 +++++++ .../Fedora/41/etc/postfix/dynamicmaps.cf | 1 + .../41/etc/postfix/dynamicmaps.cf.d/ldap | 1 + .../41/etc/postfix/dynamicmaps.cf.d/mysql | 1 + .../41/etc/postfix/dynamicmaps.cf.d/pcre | 1 + templates/Fedora/41/etc/postfix/generic | 252 ++++++ templates/Fedora/41/etc/postfix/header_checks | 549 +++++++++++++ templates/Fedora/41/etc/postfix/main.cf | 774 ++++++++++++++++++ templates/Fedora/41/etc/postfix/main.cf.proto | 745 +++++++++++++++++ templates/Fedora/41/etc/postfix/master.cf | 145 ++++ .../Fedora/41/etc/postfix/master.cf.proto | 145 ++++ templates/Fedora/41/etc/postfix/postfix-files | 447 ++++++++++ .../41/etc/postfix/postfix-files.d/ldap | 3 + .../41/etc/postfix/postfix-files.d/mysql | 3 + .../41/etc/postfix/postfix-files.d/pcre | 3 + templates/Fedora/41/etc/postfix/relocated | 178 ++++ templates/Fedora/41/etc/postfix/transport | 317 +++++++ templates/Fedora/41/etc/postfix/virtual | 324 ++++++++ .../systemd/system/postfix-copytls.service | 12 + .../lib/systemd/system/postfix-copytls.timer | 9 + vars/Fedora-41-default.yml | 110 +++ 27 files changed, 5429 insertions(+) create mode 100644 templates/Fedora/41/etc/opendkim.conf create mode 100644 templates/Fedora/41/etc/opendkim/KeyTable create mode 100644 templates/Fedora/41/etc/opendkim/SigningTable create mode 100644 templates/Fedora/41/etc/opendkim/TrustedHosts create mode 100644 templates/Fedora/41/etc/opendmarc.conf create mode 100644 templates/Fedora/41/etc/postfix/access create mode 100644 templates/Fedora/41/etc/postfix/canonical create mode 100644 templates/Fedora/41/etc/postfix/dynamicmaps.cf create mode 100644 templates/Fedora/41/etc/postfix/dynamicmaps.cf.d/ldap create mode 100644 templates/Fedora/41/etc/postfix/dynamicmaps.cf.d/mysql create mode 100644 templates/Fedora/41/etc/postfix/dynamicmaps.cf.d/pcre create mode 100644 templates/Fedora/41/etc/postfix/generic create mode 100644 templates/Fedora/41/etc/postfix/header_checks create mode 100644 templates/Fedora/41/etc/postfix/main.cf create mode 100644 templates/Fedora/41/etc/postfix/main.cf.proto create mode 100644 templates/Fedora/41/etc/postfix/master.cf create mode 100644 templates/Fedora/41/etc/postfix/master.cf.proto create mode 100644 templates/Fedora/41/etc/postfix/postfix-files create mode 100644 templates/Fedora/41/etc/postfix/postfix-files.d/ldap create mode 100644 templates/Fedora/41/etc/postfix/postfix-files.d/mysql create mode 100644 templates/Fedora/41/etc/postfix/postfix-files.d/pcre create mode 100644 templates/Fedora/41/etc/postfix/relocated create mode 100644 templates/Fedora/41/etc/postfix/transport create mode 100644 templates/Fedora/41/etc/postfix/virtual create mode 100644 templates/Fedora/41/usr/lib/systemd/system/postfix-copytls.service create mode 100644 templates/Fedora/41/usr/lib/systemd/system/postfix-copytls.timer create mode 100644 vars/Fedora-41-default.yml diff --git a/templates/Fedora/41/etc/opendkim.conf b/templates/Fedora/41/etc/opendkim.conf new file mode 100644 index 0000000..1e26622 --- /dev/null +++ b/templates/Fedora/41/etc/opendkim.conf @@ -0,0 +1,135 @@ +## BASIC OPENDKIM CONFIGURATION FILE +## See opendkim.conf(5) or /usr/share/doc/opendkim/opendkim.conf.sample for more + +## BEFORE running OpenDKIM you must: + +## - make your MTA (Postfix, Sendmail, etc.) aware of OpenDKIM +## - generate keys for your domain (if signing) +## - edit your DNS records to publish your public keys (if signing) + +## See /usr/share/doc/opendkim/INSTALL for detailed instructions. + +## DEPRECATED CONFIGURATION OPTIONS +## +## The following configuration options are no longer valid. They should be +## removed from your existing configuration file to prevent potential issues. +## Failure to do so may result in opendkim being unable to start. +## +## Removed in 2.10.0: +## AddAllSignatureResults +## ADSPAction +## ADSPNoSuchDomain +## BogusPolicy +## DisableADSP +## LDAPSoftStart +## LocalADSP +## NoDiscardableMailTo +## On-PolicyError +## SendADSPReports +## UnprotectedPolicy + +## CONFIGURATION OPTIONS + +## Specifies the path to the process ID file. +#PidFile /run/opendkim/opendkim.pid + +## Selects operating modes. Valid modes are s (sign) and v (verify). Default is v. +## Must be changed to s (sign only) or sv (sign and verify) in order to sign outgoing +## messages. +Mode v + +## Log activity to the system log. +Syslog yes + +## Log additional entries indicating successful signing or verification of messages. +SyslogSuccess yes + +## If logging is enabled, include detailed logging about why or why not a message was +## signed or verified. This causes an increase in the amount of log data generated +## for each message, so set this to No (or comment it out) if it gets too noisy. +LogWhy yes + +## Attempt to become the specified user before starting operations. +UserID opendkim:opendkim + +## Create a socket through which your MTA can communicate. +Socket inet:8891@localhost +#Socket local:/run/opendkim/opendkim.sock + +## Required to use local socket with MTAs that access the socket as a non- +## privileged user (e.g. Postfix) +Umask 002 + +## This specifies a text file in which to store DKIM transaction statistics. +## OpenDKIM must be manually compiled with --enable-stats to enable this feature. +# Statistics /var/spool/opendkim/stats.dat + +## Specifies whether or not the filter should generate report mail back +## to senders when verification fails and an address for such a purpose +## is provided. See opendkim.conf(5) for details. +SendReports yes + +## Specifies the sending address to be used on From: headers of outgoing +## failure reports. By default, the e-mail address of the user executing +## the filter is used (executing_user@hostname). +# ReportAddress "Example.com Postmaster" +ReportAddress "Postmaster" <{{ postmaster_email }}> + +## Add a DKIM-Filter header field to messages passing through this filter +## to identify messages it has processed. +SoftwareHeader yes + +## SIGNING OPTIONS + +## Selects the canonicalization method(s) to be used when signing messages. +Canonicalization relaxed/relaxed + +## Domain(s) whose mail should be signed by this filter. Mail from other domains will +## be verified rather than being signed. Uncomment and use your domain name. +## This parameter is not required if a SigningTable is in use. +# Domain example.com + +## Defines the name of the selector to be used when signing messages. +Selector default + +## Specifies the minimum number of key bits for acceptable keys and signatures. +MinimumKeyBits 1024 + +## Gives the location of a private key to be used for signing ALL messages. This +## directive is ignored if KeyTable is enabled. +# KeyFile /etc/opendkim/keys/default.private + +## Gives the location of a file mapping key names to signing keys. In simple terms, +## this tells OpenDKIM where to find your keys. If present, overrides any KeyFile +## directive in the configuration file. Requires SigningTable be enabled. +# KeyTable /etc/opendkim/KeyTable + +## Defines a table used to select one or more signatures to apply to a message based +## on the address found in the From: header field. In simple terms, this tells +## OpenDKIM how to use your keys. Requires KeyTable be enabled. +# SigningTable refile:/etc/opendkim/SigningTable + +## Identifies a set of "external" hosts that may send mail through the server as one +## of the signing domains without credentials as such. +# ExternalIgnoreList refile:/etc/opendkim/TrustedHosts + +## Identifies a set "internal" hosts whose mail should be signed rather than verified. +# InternalHosts refile:/etc/opendkim/TrustedHosts + +## Contains a list of IP addresses, CIDR blocks, hostnames or domain names +## whose mail should be neither signed nor verified by this filter. See man +## page for file format. +# PeerList X.X.X.X + +## Always oversign From (sign using actual From and a null From to prevent +## malicious signatures header fields (From and/or others) between the signer +## and the verifier. From is oversigned by default in the Fedora package +## because it is often the identity key used by reputation systems and thus +## somewhat security sensitive. +OversignHeaders From + +## Instructs the DKIM library to maintain its own local cache of keys and +## policies retrieved from DNS, rather than relying on the nameserver for +## caching service. Useful if the nameserver being used by the filter is +## not local. +# QueryCache yes diff --git a/templates/Fedora/41/etc/opendkim/KeyTable b/templates/Fedora/41/etc/opendkim/KeyTable new file mode 100644 index 0000000..e804d68 --- /dev/null +++ b/templates/Fedora/41/etc/opendkim/KeyTable @@ -0,0 +1,6 @@ +# OPENDKIM KEY TABLE +# To use this file, uncomment the #KeyTable option in /etc/opendkim.conf, +# then uncomment the following line and replace example.com with your domain +# name, then restart OpenDKIM. Additional keys may be added on separate lines. + +#default._domainkey.example.com example.com:default:/etc/opendkim/keys/default.private diff --git a/templates/Fedora/41/etc/opendkim/SigningTable b/templates/Fedora/41/etc/opendkim/SigningTable new file mode 100644 index 0000000..e8161a1 --- /dev/null +++ b/templates/Fedora/41/etc/opendkim/SigningTable @@ -0,0 +1,25 @@ +# OPENDKIM SIGNING TABLE +# This table controls how to apply one or more signatures to outgoing messages based +# on the address found in the From: header field. In simple terms, this tells +# OpenDKIM "how" to apply your keys. + +# To use this file, uncomment the SigningTable option in /etc/opendkim.conf, +# then uncomment one of the usage examples below and replace example.com with your +# domain name, then restart OpenDKIM. + +# WILDCARD EXAMPLE +# Enables signing for any address on the listed domain(s), but will work only if +# "refile:/etc/opendkim/SigningTable" is included in /etc/opendkim.conf. +# Create additional lines for additional domains. + +#*@example.com default._domainkey.example.com + +# NON-WILDCARD EXAMPLE +# If "file:" (instead of "refile:") is specified in /etc/opendkim.conf, then +# wildcards will not work. Instead, full user@host is checked first, then simply host, +# then user@.domain (with all superdomains checked in sequence, so "foo.example.com" +# would first check "user@foo.example.com", then "user@.example.com", then "user@.com"), +# then .domain, then user@*, and finally *. See the opendkim.conf(5) man page under +# "SigningTable" for more details. + +#example.com default._domainkey.example.com diff --git a/templates/Fedora/41/etc/opendkim/TrustedHosts b/templates/Fedora/41/etc/opendkim/TrustedHosts new file mode 100644 index 0000000..7a086d4 --- /dev/null +++ b/templates/Fedora/41/etc/opendkim/TrustedHosts @@ -0,0 +1,9 @@ +# OPENDKIM TRUSTED HOSTS +# To use this file, uncomment the #ExternalIgnoreList and/or the #InternalHosts +# option in /etc/opendkim.conf then restart OpenDKIM. Additional hosts +# may be added on separate lines (IP addresses, hostnames, or CIDR ranges). +# The localhost IP (127.0.0.1) should always be the first entry in this file. +127.0.0.1 +::1 +#host.example.com +#192.168.1.0/24 diff --git a/templates/Fedora/41/etc/opendmarc.conf b/templates/Fedora/41/etc/opendmarc.conf new file mode 100644 index 0000000..19f6b7b --- /dev/null +++ b/templates/Fedora/41/etc/opendmarc.conf @@ -0,0 +1,443 @@ +## opendmarc.conf -- configuration file for OpenDMARC filter +## +## Copyright (c) 2012-2015, 2018, 2021, The Trusted Domain Project. +## All rights reserved. + +## DEPRECATED CONFIGURATION OPTIONS +## +## The following configuration options are no longer valid. They should be +## removed from your existing configuration file to prevent potential issues. +## Failure to do so may result in opendmarc being unable to start. +## +## Renamed in 1.3.0: +## ForensicReports became FailureReports +## ForensicReportsBcc became FailureReportsBcc +## ForensicReportsOnNone became FailureReportsOnNone +## ForensicReportsSentBy became FailureReportsSentBy + +## CONFIGURATION OPTIONS + +## AuthservID (string) +## defaults to MTA name +## +## Sets the "authserv-id" to use when generating the Authentication-Results: +## header field after verifying a message. If the string "HOSTNAME" is +## provided, the name of the host running the filter (as returned by the +## gethostname(3) function) will be used. +# +# AuthservID name + +## AuthservIDWithJobID { true | false } +## default "false" +## +## If "true", requests that the authserv-id portion of the added +## Authentication-Results header fields contain the job ID of the message +## being evaluated. +# +# AuthservIDWithJobID false + +## AutoRestart { true | false } +## default "false" +## +## Automatically re-start on failures. Use with caution; if the filter fails +## instantly after it starts, this can cause a tight fork(2) loop. +# +# AutoRestart false + +## AutoRestartCount n +## default 0 +## +## Sets the maximum automatic restart count. After this number of automatic +## restarts, the filter will give up and terminate. A value of 0 implies no +## limit. +# +# AutoRestartCount 0 + +## AutoRestartRate n/t[u] +## default (no limit) +## +## Sets the maximum automatic restart rate. If the filter begins restarting +## faster than the rate defined here, it will give up and terminate. This +## is a string of the form n/t[u] where n is an integer limiting the count +## of restarts in the given interval and t[u] defines the time interval +## through which the rate is calculated; t is an integer and u defines the +## units thus represented ("s" or "S" for seconds, the default; "m" or "M" +## for minutes; "h" or "H" for hours; "d" or "D" for days). For example, a +## value of "10/1h" limits the restarts to 10 in one hour. There is no +## default, meaning restart rate is not limited. +# +# AutoRestartRate n/t[u] + +## Background { true | false } +## default "true" +## +## Causes opendmarc to fork and exits immediately, leaving the service +## running in the background. +# +# Background true + +## BaseDirectory (string) +## default (none) +## +## If set, instructs the filter to change to the specified directory using +## chdir(2) before doing anything else. This means any files referenced +## elsewhere in the configuration file can be specified relative to this +## directory. It's also useful for arranging that any crash dumps will be +## saved to a specific location. +# +# BaseDirectory /var/run/opendmarc + +## ChangeRootDirectory (string) +## default (none) +## +## Requests that the operating system change the effective root directory of +## the process to the one specified here prior to beginning execution. +## chroot(2) requires superuser access. A warning will be generated if +## UserID is not also set. +# +# ChangeRootDirectory /var/chroot/opendmarc + +## CopyFailuresTo (string) +## default (none) +## +## Requests addition of the specified email address to the envelope of +## any message that fails the DMARC evaluation. +# +# CopyFailuresTo postmaster@localhost + +## DomainWhitelist (string) +## default (none) +## +## A brief list of whitelisted domains for which ARC signature headers are +## trusted as determined by evaluating entries in the "arc.chain" field found +## in a locally generated Authentication-Results header. +## +## This list will be concatenated with DomainWhitelistFile (if provided). +## +# +# DomainWhitelist example.com + +## DomainWhitelistFile path +## default (none) +## +## A comprehensive list of whitelisted domains for which ARC signature headers +## are trusted as determined by evaluating entries in the "arc.chain" field +## found in a locally generated Authentication-Results header. +## +## This list will be concatenated with DomainWhitelist (if provided). +## +# +# DomainWhitelistFile /etc/opendmarc/whitelist.domains + +## DomainWhitelistSize +## default 3000 +## +## The maximum number of entries in the DomainWhitelist including both entries +## in the DomainWhitelist configuration parameter (above) and entries in the +## DomainWhitelistFile. This number will be increased by approximately 20% to +## increase the efficiency of the hashing algorithm. +## +# +# DomainWhitelistSize 3000 + +## DNSTimeout (integer) +## default 5 +## +## Sets the DNS timeout in seconds. A value of 0 causes an infinite wait. +## (NOT YET IMPLEMENTED) +# +# DNSTimeout 5 + +## EnableCoredumps { true | false } +## default "false" +## +## On systems that have such support, make an explicit request to the kernel +## to dump cores when the filter crashes for some reason. Some modern UNIX +## systems suppress core dumps during crashes for security reasons if the +## user ID has changed during the lifetime of the process. Currently only +## supported on Linux. +# +# EnableCoreDumps false + +## FailureReports { true | false } +## default "false" +## +## Enables generation of failure reports when the DMARC test fails and the +## purported sender of the message has requested such reports. Reports are +## formatted per RFC6591. +# +# FailureReports false + +## FailureReportsBcc (string) +## default (none) +## +## When failure reports are enabled and one is to be generated, always +## send one to the address(es) specified here. If a failure report is +## requested by the domain owner, the address(es) are added in a Bcc: field. +## If no request is made, they address(es) are used in a To: field. There +## is no default. +# +# FailureReportsBcc postmaster@example.coom +FailureReportsBcc {{ postmaster_email }} + +## FailureReportsOnNone { true | false } +## default "false" +## +## Supplements the "FailureReports" setting by generating reports for +## domains that advertise "none" policies. By default, reports are only +## generated (when enabled) for sending domains advertising a "quarantine" +## or "reject" policy. +# +# FailureReportsOnNone false + +## FailureReportsSentBy string +## default "USER@HOSTNAME" +## +## Specifies the email address to use in the From: field of failure +## reports generated by the filter. The default is to use the userid of +## the user running the filter and the local hostname to construct an +## email address. "postmaster" is used in place of the userid if a name +## could not be determined. +# +# FailureReportsSentBy USER@HOSTNAME +FailureReportsSentBy {{ postmaster_email }} + +## HistoryFile path +## default (none) +## +## If set, specifies the location of a text file to which records are written +## that can be used to generate DMARC aggregate reports. Records are groups +## of rows containing information about a single received message, and +## include all relevant information needed to generate a DMARC aggregate +## report. It is expected that this will not be used in its raw form, but +## rather periodically imported into a relational database from which the +## aggregate reports can be extracted by a tool such as opendmarc-import(8). +# +# HistoryFile /var/spool/opendmarc/opendmarc.dat + +## HoldQuarantinedMessages { true | false } +## default "false" +## +## If set, the milter will signal to the mta that messages with +## p=quarantine, which fail dmarc authentication, should be held in +## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. +## If false, messsages will be accepted and passed along with the +## regular mail flow, and the quarantine will be left up to downstream +## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, +## including the Authentication-Results header added by OpenDMARC +# +# HoldQuarantinedMessages false + +## IgnoreAuthenticatedClients { true | false } +## default "false" +## +## If set, causes mail from authenticated clients (i.e., those that used +## SMTP AUTH) to be ignored by the filter. +# +# IgnoreAuthenticatedClients false + +## HoldQuarantinedMessages { true | false } +## default "false" +## +## If set, the milter will signal to the mta that messages with +## p=quarantine, which fail dmarc authentication, should be held in +## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. +## If false, messsages will be accepted and passed along with the +## regular mail flow, and the quarantine will be left up to downstream +## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, +## including the Authentication-Results header added by OpenDMARC +# +# HoldQuarantinedMessages false + + +## IgnoreHosts path +## default (internal) +## +## Specifies the path to a file that contains a list of hostnames, IP +## addresses, and/or CIDR expressions identifying hosts whose SMTP +## connections are to be ignored by the filter. If not specified, defaults +## to "127.0.0.1" only. +# +# IgnoreHosts /etc/opendmarc/ignore.hosts + +## IgnoreMailFrom domain[,...] +## default (none) +## +## Gives a list of domain names whose mail (based on the From: domain) is to +## be ignored by the filter. The list should be comma-separated. Matching +## against this list is case-insensitive. The default is an empty list, +## meaning no mail is ignored. +# +# IgnoreMailFrom example.com + +## MilterDebug (integer) +## default 0 +## +## Sets the debug level to be requested from the milter library. +# +# MilterDebug 0 + +## PidFile path +## default (none) +## +## Specifies the path to a file that should be created at process start +## containing the process ID. +# +# PidFile /var/run/opendmarc.pid + +## PublicSuffixList path +## default (none) +## +## Specifies the path to a file that contains top-level domains (TLDs) that +## will be used to compute the Organizational Domain for a given domain name, +## as described in the DMARC specification. If not provided, the filter will +## not be able to determine the Organizational Domain and only the presented +## domain will be evaluated. This file should be periodically updated. +## One location to retrieve the file from is https://publicsuffix.org/list/ +# +# PublicSuffixList path + +## RecordAllMessages { true | false } +## default "false" +## +## If set and "HistoryFile" is in use, all received messages are recorded +## to the history file. If not set (the default), only messages for which +## the From: domain published a DMARC record will be recorded in the +## history file. +# +# RecordAllMessages false + +## RejectFailures { true | false } +## default "false" +## +## If set, messages will be rejected if they fail the DMARC evaluation, or +## temp-failed if evaluation could not be completed. By default, no message +## will be rejected or temp-failed regardless of the outcome of the DMARC +## evaluation of the message. Instead, an Authentication-Results header +## field will be added. +# +# RejectFailures false +RejectFailures true + +## RejectMultiValueFrom { true | false } +## default "false" +## +## If set, messages with multiple addresses in the From: field of the message +## will be rejected unless all domains in the field are the same. They will +## otherwise be ignored by the filter (the default). +# +# RejectMultiValueFrom false + +## ReportCommand string +## default "/usr/sbin/sendmail -t" +## +## Indicates the shell command to which failure reports should be passed for +## delivery when "FailureReports" is enabled. +# +# ReportCommand /usr/sbin/sendmail -t + +## RequiredHeaders { true | false } +## default "false" +## +## If set, the filter will ensure the header of the message conforms to the +## basic header field count restrictions laid out in RFC5322, Section 3.6. +## Messages failing this test are rejected without further processing. A +## From: field from which no domain name could be extracted will also be +## rejected. +# +# RequiredHeaders false + +## Socket socketspec +## default (none) +## +## Specifies the socket that should be established by the filter to receive +## connections from sendmail(8) in order to provide service. socketspec is +## in one of two forms: local:path, which creates a UNIX domain socket at +## the specified path, or inet:port[@host] or inet6:port[@host] which creates +## a TCP socket on the specified port for the appropriate protocol family. +## If the host is not given as either a hostname or an IP address, the +## socket will be listening on all interfaces. This option is mandatory +## either in the configuration file or on the command line. If an IP +## address is used, it must be enclosed in square brackets. +# +Socket inet:8893@localhost +#Socket local:/run/opendmarc/opendmarc.sock + +## SoftwareHeader { true | false } +## default "false" +## +## Causes the filter to add a "DMARC-Filter" header field indicating the +## presence of this filter in the path of the message from injection to +## delivery. The product's name, version, and the job ID are included in +## the header field's contents. +# +SoftwareHeader true + +## SPFIgnoreResults { true | false } +## default "false" +## +## Causes the filter to ignore any SPF results in the header of the +## message. This is useful if you want the filter to perform SPF checks +## itself, or because you don't trust the arriving header. +# +SPFIgnoreResults true + +## SPFSelfValidate { true | false } +## default false +## +## Enable internal spf checking with --with-spf +## To use libspf2 instead: --with-spf --with-spf2-include=path --with-spf2-lib=path +## +## Causes the filter to perform a fallback SPF check itself when +## it can find no SPF results in the message header. If SPFIgnoreResults +## is also set, it never looks for SPF results in headers and +## always performs the SPF check itself when this is set. +# +SPFSelfValidate true + +## Syslog { true | false } +## default "false" +## +## Log via calls to syslog(3) any interesting activity. +# +Syslog true + +## SyslogFacility facility-name +## default "mail" +## +## Log via calls to syslog(3) using the named facility. The facility names +## are the same as the ones allowed in syslog.conf(5). +# +# SyslogFacility mail + +## TrustedAuthservIDs string +## default HOSTNAME +## +## Specifies one or more "authserv-id" values to trust as relaying true +## upstream DKIM and SPF results. The default is to use the name of +## the MTA processing the message. To specify a list, separate each entry +## with a comma. The key word "HOSTNAME" will be replaced by the name of +## the host running the filter as reported by the gethostname(3) function. +# +# TrustedAuthservIDs HOSTNAME + +## UMask mask +## default (none) +## +## Requests a specific permissions mask to be used for file creation. This +## only really applies to creation of the socket when Socket specifies a +## UNIX domain socket, and to the HistoryFile and PidFile (if any); temporary +## files are normally created by the mkstemp(3) function that enforces a +## specific file mode on creation regardless of the process umask. See +## umask(2) for more information. +# +UMask 007 + +## UserID user[:group] +## default (none) +## +## Attempts to become the specified userid before starting operations. +## The process will be assigned all of the groups and primary group ID of +## the named userid unless an alternate group is specified. +# +UserID opendmarc:mail diff --git a/templates/Fedora/41/etc/postfix/access b/templates/Fedora/41/etc/postfix/access new file mode 100644 index 0000000..97892eb --- /dev/null +++ b/templates/Fedora/41/etc/postfix/access @@ -0,0 +1,484 @@ +# ACCESS(5) ACCESS(5) +# +# NAME +# access - Postfix SMTP server access table +# +# SYNOPSIS +# postmap /etc/postfix/access +# +# postmap -q "string" /etc/postfix/access +# +# postmap -q - /etc/postfix/access as the lookup key for such addresses. The value is +# specified with the smtpd_null_access_lookup_key parameter +# in the Postfix main.cf file. +# +# EMAIL ADDRESS EXTENSION +# When a mail address localpart contains the optional recip- +# ient delimiter (e.g., user+foo@domain), the lookup order +# becomes: user+foo@domain, user@domain, domain, user+foo@, +# and user@. +# +# HOST NAME/ADDRESS PATTERNS +# With lookups from indexed files such as DB or DBM, or from +# networked tables such as NIS, LDAP or SQL, the following +# lookup patterns are examined in the order as listed: +# +# domain.tld +# Matches domain.tld. +# +# The pattern domain.tld also matches subdomains, but +# only when the string smtpd_access_maps is listed in +# the Postfix parent_domain_matches_subdomains con- +# figuration setting. +# +# .domain.tld +# Matches subdomains of domain.tld, but only when the +# string smtpd_access_maps is not listed in the Post- +# fix parent_domain_matches_subdomains configuration +# setting. +# +# net.work.addr.ess +# +# net.work.addr +# +# net.work +# +# net Matches a remote IPv4 host address or network +# address range. Specify one to four decimal octets +# separated by ".". Do not specify "[]" , "/", lead- +# ing zeros, or hexadecimal forms. +# +# Network ranges are matched by repeatedly truncating +# the last ".octet" from a remote IPv4 host address +# string, until a match is found in the access table, +# or until further truncation is not possible. +# +# NOTE: use the cidr lookup table type to specify +# network/netmask patterns. See cidr_table(5) for +# details. +# +# net:work:addr:ess +# +# net:work:addr +# +# net:work +# +# net Matches a remote IPv6 host address or network +# address range. Specify three to eight hexadecimal +# octet pairs separated by ":", using the compressed +# form "::" for a sequence of zero-valued octet +# pairs. Do not specify "[]", "/", leading zeros, or +# non-compressed forms. +# +# A network range is matched by repeatedly truncating +# the last ":octetpair" from the compressed-form +# remote IPv6 host address string, until a match is +# found in the access table, or until further trunca- +# tion is not possible. +# +# NOTE: use the cidr lookup table type to specify +# network/netmask patterns. See cidr_table(5) for +# details. +# +# IPv6 support is available in Postfix 2.2 and later. +# +# ACCEPT ACTIONS +# OK Accept the address etc. that matches the pattern. +# +# all-numerical +# An all-numerical result is treated as OK. This for- +# mat is generated by address-based relay authoriza- +# tion schemes such as pop-before-smtp. +# +# For other accept actions, see "OTHER ACTIONS" below. +# +# REJECT ACTIONS +# Postfix version 2.3 and later support enhanced status +# codes as defined in RFC 3463. When no code is specified +# at the beginning of the text below, Postfix inserts a +# default enhanced status code of "5.7.1" in the case of +# reject actions, and "4.7.1" in the case of defer actions. +# See "ENHANCED STATUS CODES" below. +# +# 4NN text +# +# 5NN text +# Reject the address etc. that matches the pattern, +# and respond with the numerical three-digit code and +# text. 4NN means "try again later", while 5NN means +# "do not try again". +# +# The following responses have special meaning for +# the Postfix SMTP server: +# +# 421 text (Postfix 2.3 and later) +# +# 521 text (Postfix 2.6 and later) +# After responding with the numerical +# three-digit code and text, disconnect imme- +# diately from the SMTP client. This frees up +# SMTP server resources so that they can be +# made available to another SMTP client. +# +# Note: The "521" response should be used only +# with botnets and other malware where inter- +# operability is of no concern. The "send 521 +# and disconnect" behavior is NOT defined in +# the SMTP standard. +# +# REJECT optional text... +# Reject the address etc. that matches the pattern. +# Reply with "$access_map_reject_code optional +# text..." when the optional text is specified, oth- +# erwise reply with a generic error response message. +# +# DEFER optional text... +# Reject the address etc. that matches the pattern. +# Reply with "$access_map_defer_code optional +# text..." when the optional text is specified, oth- +# erwise reply with a generic error response message. +# +# This feature is available in Postfix 2.6 and later. +# +# DEFER_IF_REJECT optional text... +# Defer the request if some later restriction would +# result in a REJECT action. Reply with +# "$access_map_defer_code 4.7.1 optional text..." +# when the optional text is specified, otherwise +# reply with a generic error response message. +# +# Prior to Postfix 2.6, the SMTP reply code is 450. +# +# This feature is available in Postfix 2.1 and later. +# +# DEFER_IF_PERMIT optional text... +# Defer the request if some later restriction would +# result in an explicit or implicit PERMIT action. +# Reply with "$access_map_defer_code 4.7.1 optional +# text..." when the optional text is specified, oth- +# erwise reply with a generic error response message. +# +# Prior to Postfix 2.6, the SMTP reply code is 450. +# +# This feature is available in Postfix 2.1 and later. +# +# For other reject actions, see "OTHER ACTIONS" below. +# +# OTHER ACTIONS +# restriction... +# Apply the named UCE restriction(s) (permit, reject, +# reject_unauth_destination, and so on). +# +# BCC user@domain +# Send one copy of the message to the specified +# recipient. +# +# If multiple BCC actions are specified within the +# same SMTP MAIL transaction, with Postfix 3.0 only +# the last action will be used. +# +# This feature is available in Postfix 3.0 and later. +# +# DISCARD optional text... +# Claim successful delivery and silently discard the +# message. Log the optional text if specified, oth- +# erwise log a generic message. +# +# Note: this action currently affects all recipients +# of the message. To discard only one recipient +# without discarding the entire message, use the +# transport(5) table to direct mail to the discard(8) +# service. +# +# This feature is available in Postfix 2.0 and later. +# +# DUNNO Pretend that the lookup key was not found. This +# prevents Postfix from trying substrings of the +# lookup key (such as a subdomain name, or a network +# address subnetwork). +# +# This feature is available in Postfix 2.0 and later. +# +# FILTER transport:destination +# After the message is queued, send the entire mes- +# sage through the specified external content filter. +# The transport name specifies the first field of a +# mail delivery agent definition in master.cf; the +# syntax of the next-hop destination is described in +# the manual page of the corresponding delivery +# agent. More information about external content +# filters is in the Postfix FILTER_README file. +# +# Note 1: do not use $number regular expression sub- +# stitutions for transport or destination unless you +# know that the information has a trusted origin. +# +# Note 2: this action overrides the main.cf con- +# tent_filter setting, and affects all recipients of +# the message. In the case that multiple FILTER +# actions fire, only the last one is executed. +# +# Note 3: the purpose of the FILTER command is to +# override message routing. To override the recipi- +# ent's transport but not the next-hop destination, +# specify an empty filter destination (Postfix 2.7 +# and later), or specify a transport:destination that +# delivers through a different Postfix instance +# (Postfix 2.6 and earlier). Other options are using +# the recipient-dependent transport_maps or the sen- +# der-dependent sender_dependent_default_transport- +# _maps features. +# +# This feature is available in Postfix 2.0 and later. +# +# HOLD optional text... +# Place the message on the hold queue, where it will +# sit until someone either deletes it or releases it +# for delivery. Log the optional text if specified, +# otherwise log a generic message. +# +# Mail that is placed on hold can be examined with +# the postcat(1) command, and can be destroyed or +# released with the postsuper(1) command. +# +# Note: use "postsuper -r" to release mail that was +# kept on hold for a significant fraction of $maxi- +# mal_queue_lifetime or $bounce_queue_lifetime, or +# longer. Use "postsuper -H" only for mail that will +# not expire within a few delivery attempts. +# +# Note: this action currently affects all recipients +# of the message. +# +# This feature is available in Postfix 2.0 and later. +# +# PREPEND headername: headervalue +# Prepend the specified message header to the mes- +# sage. When more than one PREPEND action executes, +# the first prepended header appears before the sec- +# ond etc. prepended header. +# +# Note: this action must execute before the message +# content is received; it cannot execute in the con- +# text of smtpd_end_of_data_restrictions. +# +# This feature is available in Postfix 2.1 and later. +# +# REDIRECT user@domain +# After the message is queued, send the message to +# the specified address instead of the intended +# recipient(s). When multiple REDIRECT actions fire, +# only the last one takes effect. +# +# Note: this action overrides the FILTER action, and +# currently overrides all recipients of the message. +# +# This feature is available in Postfix 2.1 and later. +# +# INFO optional text... +# Log an informational record with the optional text, +# together with client information and if available, +# with helo, sender, recipient and protocol informa- +# tion. +# +# This feature is available in Postfix 3.0 and later. +# +# WARN optional text... +# Log a warning with the optional text, together with +# client information and if available, with helo, +# sender, recipient and protocol information. +# +# This feature is available in Postfix 2.1 and later. +# +# ENHANCED STATUS CODES +# Postfix version 2.3 and later support enhanced status +# codes as defined in RFC 3463. When an enhanced status +# code is specified in an access table, it is subject to +# modification. The following transformations are needed +# when the same access table is used for client, helo, +# sender, or recipient access restrictions; they happen +# regardless of whether Postfix replies to a MAIL FROM, RCPT +# TO or other SMTP command. +# +# o When a sender address matches a REJECT action, the +# Postfix SMTP server will transform a recipient DSN +# status (e.g., 4.1.1-4.1.6) into the corresponding +# sender DSN status, and vice versa. +# +# o When non-address information matches a REJECT +# action (such as the HELO command argument or the +# client hostname/address), the Postfix SMTP server +# will transform a sender or recipient DSN status +# into a generic non-address DSN status (e.g., +# 4.0.0). +# +# REGULAR EXPRESSION TABLES +# This section describes how the table lookups change when +# the table is given in the form of regular expressions. For +# a description of regular expression lookup table syntax, +# see regexp_table(5) or pcre_table(5). +# +# Each pattern is a regular expression that is applied to +# the entire string being looked up. Depending on the appli- +# cation, that string is an entire client hostname, an +# entire client IP address, or an entire mail address. Thus, +# no parent domain or parent network search is done, +# user@domain mail addresses are not broken up into their +# user@ and domain constituent parts, nor is user+foo broken +# up into user and foo. +# +# Patterns are applied in the order as specified in the ta- +# ble, until a pattern is found that matches the search +# string. +# +# Actions are the same as with indexed file lookups, with +# the additional feature that parenthesized substrings from +# the pattern can be interpolated as $1, $2 and so on. +# +# TCP-BASED TABLES +# This section describes how the table lookups change when +# lookups are directed to a TCP-based server. For a descrip- +# tion of the TCP client/server lookup protocol, see tcp_ta- +# ble(5). This feature is not available up to and including +# Postfix version 2.4. +# +# Each lookup operation uses the entire query string once. +# Depending on the application, that string is an entire +# client hostname, an entire client IP address, or an entire +# mail address. Thus, no parent domain or parent network +# search is done, user@domain mail addresses are not broken +# up into their user@ and domain constituent parts, nor is +# user+foo broken up into user and foo. +# +# Actions are the same as with indexed file lookups. +# +# EXAMPLE +# The following example uses an indexed file, so that the +# order of table entries does not matter. The example per- +# mits access by the client at address 1.2.3.4 but rejects +# all other clients in 1.2.3.0/24. Instead of hash lookup +# tables, some systems use dbm. Use the command "postconf +# -m" to find out what lookup tables Postfix supports on +# your system. +# +# /etc/postfix/main.cf: +# smtpd_client_restrictions = +# check_client_access hash:/etc/postfix/access +# +# /etc/postfix/access: +# 1.2.3 REJECT +# 1.2.3.4 OK +# +# Execute the command "postmap /etc/postfix/access" after +# editing the file. +# +# BUGS +# The table format does not understand quoting conventions. +# +# SEE ALSO +# postmap(1), Postfix lookup table manager +# smtpd(8), SMTP server +# postconf(5), configuration parameters +# transport(5), transport:nexthop syntax +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# SMTPD_ACCESS_README, built-in SMTP server access control +# DATABASE_README, Postfix lookup table overview +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# ACCESS(5) diff --git a/templates/Fedora/41/etc/postfix/canonical b/templates/Fedora/41/etc/postfix/canonical new file mode 100644 index 0000000..4957fcc --- /dev/null +++ b/templates/Fedora/41/etc/postfix/canonical @@ -0,0 +1,307 @@ +# CANONICAL(5) CANONICAL(5) +# +# NAME +# canonical - Postfix canonical table format +# +# SYNOPSIS +# postmap /etc/postfix/canonical +# +# postmap -q "string" /etc/postfix/canonical +# +# postmap -q - /etc/postfix/canonical $/ +# REJECT IFRAME vulnerability exploit +# +# SEE ALSO +# cleanup(8), canonicalize and enqueue Postfix message +# pcre_table(5), format of PCRE lookup tables +# regexp_table(5), format of POSIX regular expression tables +# postconf(1), Postfix configuration utility +# postmap(1), Postfix lookup table management +# postsuper(1), Postfix janitor +# postcat(1), show Postfix queue file contents +# RFC 2045, base64 and quoted-printable encoding rules +# RFC 2047, message header encoding for non-ASCII text +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# DATABASE_README, Postfix lookup table overview +# CONTENT_INSPECTION_README, Postfix content inspection overview +# BUILTIN_FILTER_README, Postfix built-in content inspection +# BACKSCATTER_README, blocking returned forged mail +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# HEADER_CHECKS(5) diff --git a/templates/Fedora/41/etc/postfix/main.cf b/templates/Fedora/41/etc/postfix/main.cf new file mode 100644 index 0000000..e7c5ce2 --- /dev/null +++ b/templates/Fedora/41/etc/postfix/main.cf @@ -0,0 +1,774 @@ +# Global Postfix configuration file. This file lists only a subset +# of all parameters. For the syntax, and for a complete parameter +# list, see the postconf(5) manual page (command: "man 5 postconf"). +# +# TIP: use the command "postconf -n" to view main.cf parameter +# settings, "postconf parametername" to view a specific parameter, +# and "postconf 'parametername=value'" to set a specific parameter. +# +# For common configuration examples, see BASIC_CONFIGURATION_README +# and STANDARD_CONFIGURATION_README. To find these documents, use +# the command "postconf html_directory readme_directory", or go to +# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. +# +# For best results, change no more than 2-3 parameters at a time, +# and test if Postfix still works after every change. + +# COMPATIBILITY +# +# The compatibility_level determines what default settings Postfix +# will use for main.cf and master.cf settings. These defaults will +# change over time. +# +# To avoid breaking things, Postfix will use backwards-compatible +# default settings and log where it uses those old backwards-compatible +# default settings, until the system administrator has determined +# if any backwards-compatible default settings need to be made +# permanent in main.cf or master.cf. +# +# When this review is complete, update the compatibility_level setting +# below as recommended in the RELEASE_NOTES file. +# +# The level below is what should be used with new (not upgrade) installs. +# +compatibility_level = 3.7 + +# SOFT BOUNCE +# +# The soft_bounce parameter provides a limited safety net for +# testing. When soft_bounce is enabled, mail will remain queued that +# would otherwise bounce. This parameter disables locally-generated +# bounces, and prevents the SMTP server from rejecting mail permanently +# (by changing 5xx replies into 4xx replies). However, soft_bounce +# is no cure for address rewriting mistakes or mail routing mistakes. +# +#soft_bounce = no + +# LOCAL PATHNAME INFORMATION +# +# The queue_directory specifies the location of the Postfix queue. +# This is also the root directory of Postfix daemons that run chrooted. +# See the files in examples/chroot-setup for setting up Postfix chroot +# environments on different UNIX systems. +# +queue_directory = /var/spool/postfix + +# The command_directory parameter specifies the location of all +# postXXX commands. +# +command_directory = /usr/sbin + +# The daemon_directory parameter specifies the location of all Postfix +# daemon programs (i.e. programs listed in the master.cf file). This +# directory must be owned by root. +# +daemon_directory = /usr/libexec/postfix + +# The data_directory parameter specifies the location of Postfix-writable +# data files (caches, random numbers). This directory must be owned +# by the mail_owner account (see below). +# +data_directory = /var/lib/postfix + +# QUEUE AND PROCESS OWNERSHIP +# +# The mail_owner parameter specifies the owner of the Postfix queue +# and of most Postfix daemon processes. Specify the name of a user +# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS +# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In +# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED +# USER. +# +mail_owner = postfix + +# The default_privs parameter specifies the default rights used by +# the local delivery agent for delivery to external file or command. +# These rights are used in the absence of a recipient user context. +# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. +# +#default_privs = nobody + +# INTERNET HOST AND DOMAIN NAMES +# +# The myhostname parameter specifies the internet hostname of this +# mail system. The default is to use the fully-qualified domain name +# from gethostname(). $myhostname is used as a default value for many +# other configuration parameters. +# +#myhostname = host.domain.tld +#myhostname = virtual.domain.tld + +# The mydomain parameter specifies the local internet domain name. +# The default is to use $myhostname minus the first component. +# $mydomain is used as a default value for many other configuration +# parameters. +# +#mydomain = domain.tld + +# SENDING MAIL +# +# The myorigin parameter specifies the domain that locally-posted +# mail appears to come from. The default is to append $myhostname, +# which is fine for small sites. If you run a domain with multiple +# machines, you should (1) change this to $mydomain and (2) set up +# a domain-wide alias database that aliases each user to +# user@that.users.mailhost. +# +# For the sake of consistency between sender and recipient addresses, +# myorigin also specifies the default domain name that is appended +# to recipient addresses that have no @domain part. +# +#myorigin = $myhostname +#myorigin = $mydomain + +# RECEIVING MAIL + +# The inet_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on. By default, +# the software claims all active interfaces on the machine. The +# parameter also controls delivery of mail to user@[ip.address]. +# +# See also the proxy_interfaces parameter, for network addresses that +# are forwarded to us via a proxy or network address translator. +# +# Note: you need to stop/start Postfix when this parameter changes. +# +inet_interfaces = all +#inet_interfaces = $myhostname +#inet_interfaces = $myhostname, localhost +#inet_interfaces = localhost + +# Enable IPv4, and IPv6 if supported +inet_protocols = all + +# The proxy_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on by way of a +# proxy or network address translation unit. This setting extends +# the address list specified with the inet_interfaces parameter. +# +# You must specify your proxy/NAT addresses when your system is a +# backup MX host for other domains, otherwise mail delivery loops +# will happen when the primary MX host is down. +# +#proxy_interfaces = +#proxy_interfaces = 1.2.3.4 + +# The mydestination parameter specifies the list of domains that this +# machine considers itself the final destination for. +# +# These domains are routed to the delivery agent specified with the +# local_transport parameter setting. By default, that is the UNIX +# compatible delivery agent that lookups all recipients in /etc/passwd +# and /etc/aliases or their equivalent. +# +# The default is $myhostname + localhost.$mydomain + localhost. On +# a mail domain gateway, you should also include $mydomain. +# +# Do not specify the names of virtual domains - those domains are +# specified elsewhere (see VIRTUAL_README). +# +# Do not specify the names of domains that this machine is backup MX +# host for. Specify those names via the relay_domains settings for +# the SMTP server, or use permit_mx_backup if you are lazy (see +# STANDARD_CONFIGURATION_README). +# +# The local machine is always the final destination for mail addressed +# to user@[the.net.work.address] of an interface that the mail system +# receives mail on (see the inet_interfaces parameter). +# +# Specify a list of host or domain names, /file/name or type:table +# patterns, separated by commas and/or whitespace. A /file/name +# pattern is replaced by its contents; a type:table is matched when +# a name matches a lookup key (the right-hand side is ignored). +# Continue long lines by starting the next line with whitespace. +# +# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". +# +mydestination = $myhostname, localhost.$mydomain, localhost +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, +# mail.$mydomain, www.$mydomain, ftp.$mydomain + +# REJECTING MAIL FOR UNKNOWN LOCAL USERS +# +# The local_recipient_maps parameter specifies optional lookup tables +# with all names or addresses of users that are local with respect +# to $mydestination, $inet_interfaces or $proxy_interfaces. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown local users. This parameter is defined by default. +# +# To turn off local recipient checking in the SMTP server, specify +# local_recipient_maps = (i.e. empty). +# +# The default setting assumes that you use the default Postfix local +# delivery agent for local delivery. You need to update the +# local_recipient_maps setting if: +# +# - You define $mydestination domain recipients in files other than +# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. +# For example, you define $mydestination domain recipients in +# the $virtual_mailbox_maps files. +# +# - You redefine the local delivery agent in master.cf. +# +# - You redefine the "local_transport" setting in main.cf. +# +# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" +# feature of the Postfix local delivery agent (see local(8)). +# +# Details are described in the LOCAL_RECIPIENT_README file. +# +# Beware: if the Postfix SMTP server runs chrooted, you probably have +# to access the passwd file via the proxymap service, in order to +# overcome chroot restrictions. The alternative, having a copy of +# the system passwd file in the chroot jail is just not practical. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify a bare username, an @domain.tld +# wild-card, or specify a user@domain.tld address. +# +#local_recipient_maps = unix:passwd.byname $alias_maps +#local_recipient_maps = proxy:unix:passwd.byname $alias_maps +#local_recipient_maps = + +# The unknown_local_recipient_reject_code specifies the SMTP server +# response code when a recipient domain matches $mydestination or +# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty +# and the recipient address or address local-part is not found. +# +# The default setting is 550 (reject mail) but it is safer to start +# with 450 (try again later) until you are certain that your +# local_recipient_maps settings are OK. +# +unknown_local_recipient_reject_code = 550 + +# TRUST AND RELAY CONTROL + +# The mynetworks parameter specifies the list of "trusted" SMTP +# clients that have more privileges than "strangers". +# +# In particular, "trusted" SMTP clients are allowed to relay mail +# through Postfix. See the smtpd_recipient_restrictions parameter +# in postconf(5). +# +# You can specify the list of "trusted" network addresses by hand +# or you can let Postfix do it for you (which is the default). +# +# By default (mynetworks_style = host), Postfix "trusts" only +# the local machine. +# +# Specify "mynetworks_style = subnet" when Postfix should "trust" +# SMTP clients in the same IP subnetworks as the local machine. +# On Linux, this works correctly only with interfaces specified +# with the "ifconfig" or "ip" command. +# +# Specify "mynetworks_style = class" when Postfix should "trust" SMTP +# clients in the same IP class A/B/C networks as the local machine. +# Don't do this with a dialup site - it would cause Postfix to "trust" +# your entire provider's network. Instead, specify an explicit +# mynetworks list by hand, as described below. +# +# Specify "mynetworks_style = host" when Postfix should "trust" +# only the local machine. +# +#mynetworks_style = class +#mynetworks_style = subnet +#mynetworks_style = host + +# Alternatively, you can specify the mynetworks list by hand, in +# which case Postfix ignores the mynetworks_style setting. +# +# Specify an explicit list of network/netmask patterns, where the +# mask specifies the number of bits in the network part of a host +# address. +# +# You can also specify the absolute pathname of a pattern file instead +# of listing the patterns here. Specify type:table for table-based lookups +# (the value on the table right-hand side is not used). +# +#mynetworks = 168.100.3.0/28, 127.0.0.0/8 +#mynetworks = $config_directory/mynetworks +#mynetworks = hash:/etc/postfix/network_table + +# The relay_domains parameter restricts what destinations this system will +# relay mail to. See the smtpd_relay_restrictions and +# smtpd_recipient_restrictions descriptions in postconf(5) for detailed +# information. +# +# By default, Postfix relays mail +# - from "trusted" clients (IP address matches $mynetworks, or is +# SASL authenticated) to any destination, +# - from "untrusted" clients to destinations that match $relay_domains or +# subdomains thereof, except addresses with sender-specified routing. +# The default relay_domains value is empty. +# +# In addition to the above, the Postfix SMTP server by default accepts mail +# that Postfix is final destination for: +# - destinations that match $inet_interfaces or $proxy_interfaces, +# - destinations that match $mydestination +# - destinations that match $virtual_alias_domains, +# - destinations that match $virtual_mailbox_domains. +# These destinations do not need to be listed in $relay_domains. +# +# Specify a list of hosts or domains, /file/name patterns or type:name +# lookup tables, separated by commas and/or whitespace. Continue +# long lines by starting the next line with whitespace. A file name +# is replaced by its contents; a type:name table is matched when a +# (parent) domain appears as lookup key. +# +# NOTE: Postfix will not automatically forward mail for domains that +# list this system as their primary or backup MX host. See the +# permit_mx_backup restriction description in postconf(5). +# +#relay_domains = + +# INTERNET OR INTRANET + +# The relayhost parameter specifies the default host to send mail to +# when no entry is matched in the optional transport(5) table. When +# no relayhost is given, mail is routed directly to the destination. +# +# On an intranet, specify the organizational domain name. If your +# internal DNS uses no MX records, specify the name of the intranet +# gateway host instead. +# +# In the case of SMTP, specify a domain, host, host:port, [host]:port, +# [address] or [address]:port; the form [host] turns off MX lookups. +# +# If you're connected via UUCP, see also the default_transport parameter. +# +#relayhost = $mydomain +#relayhost = [gateway.my.domain] +#relayhost = [mailserver.isp.tld] +#relayhost = uucphost +#relayhost = [an.ip.add.ress] + +# REJECTING UNKNOWN RELAY USERS +# +# The relay_recipient_maps parameter specifies optional lookup tables +# with all addresses in the domains that match $relay_domains. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown relay users. This feature is off by default. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify an @domain.tld wild-card, or specify +# a user@domain.tld address. +# +#relay_recipient_maps = hash:/etc/postfix/relay_recipients + +# INPUT RATE CONTROL +# +# The in_flow_delay configuration parameter implements mail input +# flow control. This feature is turned on by default, although it +# still needs further development (it's disabled on SCO UNIX due +# to an SCO bug). +# +# A Postfix process will pause for $in_flow_delay seconds before +# accepting a new message, when the message arrival rate exceeds the +# message delivery rate. With the default 100 SMTP server process +# limit, this limits the mail inflow to 100 messages a second more +# than the number of messages delivered per second. +# +# Specify 0 to disable the feature. Valid delays are 0..10. +# +#in_flow_delay = 1s + +# ADDRESS REWRITING +# +# The ADDRESS_REWRITING_README document gives information about +# address masquerading or other forms of address rewriting including +# username->Firstname.Lastname mapping. + +# ADDRESS REDIRECTION (VIRTUAL DOMAIN) +# +# The VIRTUAL_README document gives information about the many forms +# of domain hosting that Postfix supports. + +# "USER HAS MOVED" BOUNCE MESSAGES +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# TRANSPORT MAP +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# ALIAS DATABASE +# +# The alias_maps parameter specifies the list of alias databases used +# by the local delivery agent. The default list is system dependent. +# +# On systems with NIS, the default is to search the local alias +# database, then the NIS alias database. See aliases(5) for syntax +# details. +# +# If you change the alias database, run "postalias /etc/aliases" (or +# wherever your system stores the mail alias file), or simply run +# "newaliases" to build the necessary DBM or DB file. +# +# It will take a minute or so before changes become visible. Use +# "postfix reload" to eliminate the delay. +# +#alias_maps = dbm:/etc/aliases +alias_maps = hash:/etc/aliases +#alias_maps = hash:/etc/aliases, nis:mail.aliases +#alias_maps = netinfo:/aliases + +# The alias_database parameter specifies the alias database(s) that +# are built with "newaliases" or "sendmail -bi". This is a separate +# configuration parameter, because alias_maps (see above) may specify +# tables that are not necessarily all under control by Postfix. +# +#alias_database = dbm:/etc/aliases +#alias_database = dbm:/etc/mail/aliases +alias_database = hash:/etc/aliases +#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases + +# ADDRESS EXTENSIONS (e.g., user+foo) +# +# The recipient_delimiter parameter specifies the separator between +# user names and address extensions (user+foo). See canonical(5), +# local(8), relocated(5) and virtual(5) for the effects this has on +# aliases, canonical, virtual, relocated and .forward file lookups. +# Basically, the software tries user+foo and .forward+foo before +# trying user and .forward. +# +#recipient_delimiter = + + +# DELIVERY TO MAILBOX +# +# The home_mailbox parameter specifies the optional pathname of a +# mailbox file relative to a user's home directory. The default +# mailbox file is /var/spool/mail/user or /var/mail/user. Specify +# "Maildir/" for qmail-style delivery (the / is required). +# +#home_mailbox = Mailbox +#home_mailbox = Maildir/ + +# The mail_spool_directory parameter specifies the directory where +# UNIX-style mailboxes are kept. The default setting depends on the +# system type. +# +#mail_spool_directory = /var/mail +#mail_spool_directory = /var/spool/mail + +# The mailbox_command parameter specifies the optional external +# command to use instead of mailbox delivery. The command is run as +# the recipient with proper HOME, SHELL and LOGNAME environment settings. +# Exception: delivery for root is done as $default_user. +# +# Other environment variables of interest: USER (recipient username), +# EXTENSION (address extension), DOMAIN (domain part of address), +# and LOCAL (the address localpart). +# +# Unlike other Postfix configuration parameters, the mailbox_command +# parameter is not subjected to $parameter substitutions. This is to +# make it easier to specify shell syntax (see example below). +# +# Avoid shell meta characters because they will force Postfix to run +# an expensive shell process. Procmail alone is expensive enough. +# +# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN +# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. +# +#mailbox_command = /some/where/procmail +#mailbox_command = /some/where/procmail -a "$EXTENSION" + +# The mailbox_transport specifies the optional transport in master.cf +# to use after processing aliases and .forward files. This parameter +# has precedence over the mailbox_command, fallback_transport and +# luser_relay parameters. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" +# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. +#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp +mailbox_transport = lmtp:inet:localhost:24 +virtual_transport = lmtp:inet:localhost:24 + +# If using the cyrus-imapd IMAP server deliver local mail to the IMAP +# server using LMTP (Local Mail Transport Protocol), this is prefered +# over the older cyrus deliver program by setting the +# mailbox_transport as below: +# +# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp +# +# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via +# these settings. +# +# local_destination_recipient_limit = 300 +# local_destination_concurrency_limit = 5 +# +# Of course you should adjust these settings as appropriate for the +# capacity of the hardware you are using. The recipient limit setting +# can be used to take advantage of the single instance message store +# capability of Cyrus. The concurrency limit can be used to control +# how many simultaneous LMTP sessions will be permitted to the Cyrus +# message store. +# +# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and +# subsequent line in master.cf. +#mailbox_transport = cyrus + +# The fallback_transport specifies the optional transport in master.cf +# to use for recipients that are not found in the UNIX passwd database. +# This parameter has precedence over the luser_relay parameter. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp +#fallback_transport = + +# The luser_relay parameter specifies an optional destination address +# for unknown recipients. By default, mail for unknown@$mydestination, +# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned +# as undeliverable. +# +# The following expansions are done on luser_relay: $user (recipient +# username), $shell (recipient shell), $home (recipient home directory), +# $recipient (full recipient address), $extension (recipient address +# extension), $domain (recipient domain), $local (entire recipient +# localpart), $recipient_delimiter. Specify ${name?value} or +# ${name:value} to expand value only when $name does (does not) exist. +# +# luser_relay works only for the default Postfix local delivery agent. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must specify "local_recipient_maps =" (i.e. empty) in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#luser_relay = $user@other.host +#luser_relay = $local@other.host +#luser_relay = admin+$local + +# JUNK MAIL CONTROLS +# +# The controls listed here are only a very small subset. The file +# SMTPD_ACCESS_README provides an overview. + +# The header_checks parameter specifies an optional table with patterns +# that each logical message header is matched against, including +# headers that span multiple physical lines. +# +# By default, these patterns also apply to MIME headers and to the +# headers of attached messages. With older Postfix versions, MIME and +# attached message headers were treated as body text. +# +# For details, see "man header_checks". +# +#header_checks = regexp:/etc/postfix/header_checks + +# FAST ETRN SERVICE +# +# Postfix maintains per-destination logfiles with information about +# deferred mail, so that mail can be flushed quickly with the SMTP +# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". +# See the ETRN_README document for a detailed description. +# +# The fast_flush_domains parameter controls what destinations are +# eligible for this service. By default, they are all domains that +# this server is willing to relay mail to. +# +#fast_flush_domains = $relay_domains + +# SHOW SOFTWARE VERSION OR NOT +# +# The smtpd_banner parameter specifies the text that follows the 220 +# code in the SMTP server's greeting banner. Some people like to see +# the mail version advertised. By default, Postfix shows no version. +# +# You MUST specify $myhostname at the start of the text. That is an +# RFC requirement. Postfix itself does not care. +# +#smtpd_banner = $myhostname ESMTP $mail_name +#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) + +# PARALLEL DELIVERY TO THE SAME DESTINATION +# +# How many parallel deliveries to the same user or domain? With local +# delivery, it does not make sense to do massively parallel delivery +# to the same user, because mailbox updates must happen sequentially, +# and expensive pipelines in .forward files can cause disasters when +# too many are run at the same time. With SMTP deliveries, 10 +# simultaneous connections to the same domain could be sufficient to +# raise eyebrows. +# +# Each message delivery transport has its XXX_destination_concurrency_limit +# parameter. The default is $default_destination_concurrency_limit for +# most delivery transports. For the local delivery agent the default is 2. + +#local_destination_concurrency_limit = 2 +#default_destination_concurrency_limit = 20 + +# DEBUGGING CONTROL +# +# The debug_peer_level parameter specifies the increment in verbose +# logging level when an SMTP client or server host name or address +# matches a pattern in the debug_peer_list parameter. +# +debug_peer_level = 2 + +# The debug_peer_list parameter specifies an optional list of domain +# or network patterns, /file/name patterns or type:name tables. When +# an SMTP client or server host name or address matches a pattern, +# increase the verbose logging level by the amount specified in the +# debug_peer_level parameter. +# +#debug_peer_list = 127.0.0.1 +#debug_peer_list = some.domain + +# The debugger_command specifies the external command that is executed +# when a Postfix daemon program is run with the -D option. +# +# Use "command .. & sleep 5" so that the debugger can attach before +# the process marches on. If you use an X-based debugger, be sure to +# set up your XAUTHORITY environment variable before starting Postfix. +# +debugger_command = + PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin + ddd $daemon_directory/$process_name $process_id & sleep 5 + +# If you can't use X, use this to capture the call stack when a +# daemon crashes. The result is in a file in the configuration +# directory, and is named after the process name and the process ID. +# +# debugger_command = +# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; +# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 +# >$config_directory/$process_name.$process_id.log & sleep 5 +# +# Another possibility is to run gdb under a detached screen session. +# To attach to the screen session, su root and run "screen -r +# " where uniquely matches one of the detached +# sessions (from "screen -list"). +# +# debugger_command = +# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen +# -dmS $process_name gdb $daemon_directory/$process_name +# $process_id & sleep 1 + +# INSTALL-TIME CONFIGURATION INFORMATION +# +# The following parameters are used when installing a new Postfix version. +# +# sendmail_path: The full pathname of the Postfix sendmail command. +# This is the Sendmail-compatible mail posting interface. +# +sendmail_path = /usr/sbin/sendmail.postfix + +# newaliases_path: The full pathname of the Postfix newaliases command. +# This is the Sendmail-compatible command to build alias databases. +# +newaliases_path = /usr/bin/newaliases.postfix + +# mailq_path: The full pathname of the Postfix mailq command. This +# is the Sendmail-compatible mail queue listing command. +# +mailq_path = /usr/bin/mailq.postfix + +# setgid_group: The group for mail submission and queue management +# commands. This must be a group name with a numerical group ID that +# is not shared with other accounts, not even with the Postfix account. +# +setgid_group = postdrop + +# html_directory: The location of the Postfix HTML documentation. +# +html_directory = no + +# manpage_directory: The location of the Postfix on-line manual pages. +# +manpage_directory = /usr/share/man + +# sample_directory: The location of the Postfix sample configuration files. +# This parameter is obsolete as of Postfix 2.1. +# +sample_directory = /usr/share/doc/postfix/samples + +# readme_directory: The location of the Postfix README files. +# +readme_directory = /usr/share/doc/postfix/README_FILES + +# TLS CONFIGURATION +# +# Basic Postfix TLS configuration by default with self-signed certificate +# for inbound SMTP and also opportunistic TLS for outbound SMTP. + +# The full pathname of a file with the Postfix SMTP server RSA certificate +# in PEM format. Intermediate certificates should be included in general, +# the server certificate first, then the issuing CA(s) (bottom-up order). +# +# smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem +smtpd_tls_cert_file = /etc/postfix/certificates/pubcert.pem + +# The full pathname of a file with the Postfix SMTP server RSA private key +# in PEM format. The private key must be accessible without a pass-phrase, +# i.e. it must not be encrypted. +# +# smtpd_tls_key_file = /etc/pki/tls/private/postfix.key +smtpd_tls_key_file = /etc/postfix/certificates/privkey.pem + +# Announce STARTTLS support to remote SMTP clients, but do not require that +# clients use TLS encryption (opportunistic TLS inbound). +# +smtpd_tls_security_level = may + +# Directory with PEM format Certification Authority certificates that the +# Postfix SMTP client uses to verify a remote SMTP server certificate. +# +smtp_tls_CApath = /etc/pki/tls/certs + +# The full pathname of a file containing CA certificates of root CAs +# trusted to sign either remote SMTP server certificates or intermediate CA +# certificates. +# +smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt + +# Use TLS if this is supported by the remote SMTP server, otherwise use +# plaintext (opportunistic TLS outbound). +# +smtp_tls_security_level = may +meta_directory = /etc/postfix +shlib_directory = /usr/lib64/postfix + +{% if ensure_postfix.milter_list is defined and ensure_postfix.milter_list is iterable %} +# The Milter List +{% for milter in ensure_postfix.milter_list %} +# -- {{ milter.description }} -- {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} +{% endfor %} +smtpd_milters = {% for milter in ensure_postfix.milter_list %} {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} {% endfor %} +{% endif %} + +{% if postfix_domains is defined and postfix_domains is iterable %} +virtual_mailbox_domains = {% for domain in postfix_domains %} {{ domain }} {% endfor %} +{% endif %} + +2bounce_notice_recipient = {{ postmaster_email }} +bounce_notice_recipient = {{ postmaster_email }} +delay_notice_recipient = {{ postmaster_email }} +error_notice_recipient = {{ postmaster_email }} +smtpd_helo_required = yes +disable_vrfy_command = yes +message_size_limit = {{ postfix_message_size_limit }} +smtpd_helo_restrictions = reject_unknown_helo_hostname +smtpd_client_restrictions = reject_unknown_reverse_client_hostname reject_unauth_pipelining +smtpd_discard_ehlo_keywords = silent-discard, dsn diff --git a/templates/Fedora/41/etc/postfix/main.cf.proto b/templates/Fedora/41/etc/postfix/main.cf.proto new file mode 100644 index 0000000..112c1f1 --- /dev/null +++ b/templates/Fedora/41/etc/postfix/main.cf.proto @@ -0,0 +1,745 @@ +# Global Postfix configuration file. This file lists only a subset +# of all parameters. For the syntax, and for a complete parameter +# list, see the postconf(5) manual page (command: "man 5 postconf"). +# +# TIP: use the command "postconf -n" to view main.cf parameter +# settings, "postconf parametername" to view a specific parameter, +# and "postconf 'parametername=value'" to set a specific parameter. +# +# For common configuration examples, see BASIC_CONFIGURATION_README +# and STANDARD_CONFIGURATION_README. To find these documents, use +# the command "postconf html_directory readme_directory", or go to +# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. +# +# For best results, change no more than 2-3 parameters at a time, +# and test if Postfix still works after every change. + +# COMPATIBILITY +# +# The compatibility_level determines what default settings Postfix +# will use for main.cf and master.cf settings. These defaults will +# change over time. +# +# To avoid breaking things, Postfix will use backwards-compatible +# default settings and log where it uses those old backwards-compatible +# default settings, until the system administrator has determined +# if any backwards-compatible default settings need to be made +# permanent in main.cf or master.cf. +# +# When this review is complete, update the compatibility_level setting +# below as recommended in the RELEASE_NOTES file. +# +# The level below is what should be used with new (not upgrade) installs. +# +compatibility_level = 3.7 + +# SOFT BOUNCE +# +# The soft_bounce parameter provides a limited safety net for +# testing. When soft_bounce is enabled, mail will remain queued that +# would otherwise bounce. This parameter disables locally-generated +# bounces, and prevents the SMTP server from rejecting mail permanently +# (by changing 5xx replies into 4xx replies). However, soft_bounce +# is no cure for address rewriting mistakes or mail routing mistakes. +# +#soft_bounce = no + +# LOCAL PATHNAME INFORMATION +# +# The queue_directory specifies the location of the Postfix queue. +# This is also the root directory of Postfix daemons that run chrooted. +# See the files in examples/chroot-setup for setting up Postfix chroot +# environments on different UNIX systems. +# +queue_directory = /var/spool/postfix + +# The command_directory parameter specifies the location of all +# postXXX commands. +# +command_directory = /usr/sbin + +# The daemon_directory parameter specifies the location of all Postfix +# daemon programs (i.e. programs listed in the master.cf file). This +# directory must be owned by root. +# +daemon_directory = /usr/libexec/postfix + +# The data_directory parameter specifies the location of Postfix-writable +# data files (caches, random numbers). This directory must be owned +# by the mail_owner account (see below). +# +data_directory = /var/lib/postfix + +# QUEUE AND PROCESS OWNERSHIP +# +# The mail_owner parameter specifies the owner of the Postfix queue +# and of most Postfix daemon processes. Specify the name of a user +# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS +# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In +# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED +# USER. +# +mail_owner = postfix + +# The default_privs parameter specifies the default rights used by +# the local delivery agent for delivery to external file or command. +# These rights are used in the absence of a recipient user context. +# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. +# +#default_privs = nobody + +# INTERNET HOST AND DOMAIN NAMES +# +# The myhostname parameter specifies the internet hostname of this +# mail system. The default is to use the fully-qualified domain name +# from gethostname(). $myhostname is used as a default value for many +# other configuration parameters. +# +#myhostname = host.domain.tld +#myhostname = virtual.domain.tld + +# The mydomain parameter specifies the local internet domain name. +# The default is to use $myhostname minus the first component. +# $mydomain is used as a default value for many other configuration +# parameters. +# +#mydomain = domain.tld + +# SENDING MAIL +# +# The myorigin parameter specifies the domain that locally-posted +# mail appears to come from. The default is to append $myhostname, +# which is fine for small sites. If you run a domain with multiple +# machines, you should (1) change this to $mydomain and (2) set up +# a domain-wide alias database that aliases each user to +# user@that.users.mailhost. +# +# For the sake of consistency between sender and recipient addresses, +# myorigin also specifies the default domain name that is appended +# to recipient addresses that have no @domain part. +# +#myorigin = $myhostname +#myorigin = $mydomain + +# RECEIVING MAIL + +# The inet_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on. By default, +# the software claims all active interfaces on the machine. The +# parameter also controls delivery of mail to user@[ip.address]. +# +# See also the proxy_interfaces parameter, for network addresses that +# are forwarded to us via a proxy or network address translator. +# +# Note: you need to stop/start Postfix when this parameter changes. +# +#inet_interfaces = all +#inet_interfaces = $myhostname +#inet_interfaces = $myhostname, localhost +inet_interfaces = localhost + +# Enable IPv4, and IPv6 if supported +inet_protocols = all + +# The proxy_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on by way of a +# proxy or network address translation unit. This setting extends +# the address list specified with the inet_interfaces parameter. +# +# You must specify your proxy/NAT addresses when your system is a +# backup MX host for other domains, otherwise mail delivery loops +# will happen when the primary MX host is down. +# +#proxy_interfaces = +#proxy_interfaces = 1.2.3.4 + +# The mydestination parameter specifies the list of domains that this +# machine considers itself the final destination for. +# +# These domains are routed to the delivery agent specified with the +# local_transport parameter setting. By default, that is the UNIX +# compatible delivery agent that lookups all recipients in /etc/passwd +# and /etc/aliases or their equivalent. +# +# The default is $myhostname + localhost.$mydomain + localhost. On +# a mail domain gateway, you should also include $mydomain. +# +# Do not specify the names of virtual domains - those domains are +# specified elsewhere (see VIRTUAL_README). +# +# Do not specify the names of domains that this machine is backup MX +# host for. Specify those names via the relay_domains settings for +# the SMTP server, or use permit_mx_backup if you are lazy (see +# STANDARD_CONFIGURATION_README). +# +# The local machine is always the final destination for mail addressed +# to user@[the.net.work.address] of an interface that the mail system +# receives mail on (see the inet_interfaces parameter). +# +# Specify a list of host or domain names, /file/name or type:table +# patterns, separated by commas and/or whitespace. A /file/name +# pattern is replaced by its contents; a type:table is matched when +# a name matches a lookup key (the right-hand side is ignored). +# Continue long lines by starting the next line with whitespace. +# +# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". +# +mydestination = $myhostname, localhost.$mydomain, localhost +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, +# mail.$mydomain, www.$mydomain, ftp.$mydomain + +# REJECTING MAIL FOR UNKNOWN LOCAL USERS +# +# The local_recipient_maps parameter specifies optional lookup tables +# with all names or addresses of users that are local with respect +# to $mydestination, $inet_interfaces or $proxy_interfaces. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown local users. This parameter is defined by default. +# +# To turn off local recipient checking in the SMTP server, specify +# local_recipient_maps = (i.e. empty). +# +# The default setting assumes that you use the default Postfix local +# delivery agent for local delivery. You need to update the +# local_recipient_maps setting if: +# +# - You define $mydestination domain recipients in files other than +# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. +# For example, you define $mydestination domain recipients in +# the $virtual_mailbox_maps files. +# +# - You redefine the local delivery agent in master.cf. +# +# - You redefine the "local_transport" setting in main.cf. +# +# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" +# feature of the Postfix local delivery agent (see local(8)). +# +# Details are described in the LOCAL_RECIPIENT_README file. +# +# Beware: if the Postfix SMTP server runs chrooted, you probably have +# to access the passwd file via the proxymap service, in order to +# overcome chroot restrictions. The alternative, having a copy of +# the system passwd file in the chroot jail is just not practical. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify a bare username, an @domain.tld +# wild-card, or specify a user@domain.tld address. +# +#local_recipient_maps = unix:passwd.byname $alias_maps +#local_recipient_maps = proxy:unix:passwd.byname $alias_maps +#local_recipient_maps = + +# The unknown_local_recipient_reject_code specifies the SMTP server +# response code when a recipient domain matches $mydestination or +# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty +# and the recipient address or address local-part is not found. +# +# The default setting is 550 (reject mail) but it is safer to start +# with 450 (try again later) until you are certain that your +# local_recipient_maps settings are OK. +# +unknown_local_recipient_reject_code = 550 + +# TRUST AND RELAY CONTROL + +# The mynetworks parameter specifies the list of "trusted" SMTP +# clients that have more privileges than "strangers". +# +# In particular, "trusted" SMTP clients are allowed to relay mail +# through Postfix. See the smtpd_recipient_restrictions parameter +# in postconf(5). +# +# You can specify the list of "trusted" network addresses by hand +# or you can let Postfix do it for you (which is the default). +# +# By default (mynetworks_style = host), Postfix "trusts" only +# the local machine. +# +# Specify "mynetworks_style = subnet" when Postfix should "trust" +# SMTP clients in the same IP subnetworks as the local machine. +# On Linux, this works correctly only with interfaces specified +# with the "ifconfig" or "ip" command. +# +# Specify "mynetworks_style = class" when Postfix should "trust" SMTP +# clients in the same IP class A/B/C networks as the local machine. +# Don't do this with a dialup site - it would cause Postfix to "trust" +# your entire provider's network. Instead, specify an explicit +# mynetworks list by hand, as described below. +# +# Specify "mynetworks_style = host" when Postfix should "trust" +# only the local machine. +# +#mynetworks_style = class +#mynetworks_style = subnet +#mynetworks_style = host + +# Alternatively, you can specify the mynetworks list by hand, in +# which case Postfix ignores the mynetworks_style setting. +# +# Specify an explicit list of network/netmask patterns, where the +# mask specifies the number of bits in the network part of a host +# address. +# +# You can also specify the absolute pathname of a pattern file instead +# of listing the patterns here. Specify type:table for table-based lookups +# (the value on the table right-hand side is not used). +# +#mynetworks = 168.100.3.0/28, 127.0.0.0/8 +#mynetworks = $config_directory/mynetworks +#mynetworks = hash:/etc/postfix/network_table + +# The relay_domains parameter restricts what destinations this system will +# relay mail to. See the smtpd_relay_restrictions and +# smtpd_recipient_restrictions descriptions in postconf(5) for detailed +# information. +# +# By default, Postfix relays mail +# - from "trusted" clients (IP address matches $mynetworks, or is +# SASL authenticated) to any destination, +# - from "untrusted" clients to destinations that match $relay_domains or +# subdomains thereof, except addresses with sender-specified routing. +# The default relay_domains value is empty. +# +# In addition to the above, the Postfix SMTP server by default accepts mail +# that Postfix is final destination for: +# - destinations that match $inet_interfaces or $proxy_interfaces, +# - destinations that match $mydestination +# - destinations that match $virtual_alias_domains, +# - destinations that match $virtual_mailbox_domains. +# These destinations do not need to be listed in $relay_domains. +# +# Specify a list of hosts or domains, /file/name patterns or type:name +# lookup tables, separated by commas and/or whitespace. Continue +# long lines by starting the next line with whitespace. A file name +# is replaced by its contents; a type:name table is matched when a +# (parent) domain appears as lookup key. +# +# NOTE: Postfix will not automatically forward mail for domains that +# list this system as their primary or backup MX host. See the +# permit_mx_backup restriction description in postconf(5). +# +#relay_domains = + +# INTERNET OR INTRANET + +# The relayhost parameter specifies the default host to send mail to +# when no entry is matched in the optional transport(5) table. When +# no relayhost is given, mail is routed directly to the destination. +# +# On an intranet, specify the organizational domain name. If your +# internal DNS uses no MX records, specify the name of the intranet +# gateway host instead. +# +# In the case of SMTP, specify a domain, host, host:port, [host]:port, +# [address] or [address]:port; the form [host] turns off MX lookups. +# +# If you're connected via UUCP, see also the default_transport parameter. +# +#relayhost = $mydomain +#relayhost = [gateway.my.domain] +#relayhost = [mailserver.isp.tld] +#relayhost = uucphost +#relayhost = [an.ip.add.ress] + +# REJECTING UNKNOWN RELAY USERS +# +# The relay_recipient_maps parameter specifies optional lookup tables +# with all addresses in the domains that match $relay_domains. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown relay users. This feature is off by default. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify an @domain.tld wild-card, or specify +# a user@domain.tld address. +# +#relay_recipient_maps = hash:/etc/postfix/relay_recipients + +# INPUT RATE CONTROL +# +# The in_flow_delay configuration parameter implements mail input +# flow control. This feature is turned on by default, although it +# still needs further development (it's disabled on SCO UNIX due +# to an SCO bug). +# +# A Postfix process will pause for $in_flow_delay seconds before +# accepting a new message, when the message arrival rate exceeds the +# message delivery rate. With the default 100 SMTP server process +# limit, this limits the mail inflow to 100 messages a second more +# than the number of messages delivered per second. +# +# Specify 0 to disable the feature. Valid delays are 0..10. +# +#in_flow_delay = 1s + +# ADDRESS REWRITING +# +# The ADDRESS_REWRITING_README document gives information about +# address masquerading or other forms of address rewriting including +# username->Firstname.Lastname mapping. + +# ADDRESS REDIRECTION (VIRTUAL DOMAIN) +# +# The VIRTUAL_README document gives information about the many forms +# of domain hosting that Postfix supports. + +# "USER HAS MOVED" BOUNCE MESSAGES +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# TRANSPORT MAP +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# ALIAS DATABASE +# +# The alias_maps parameter specifies the list of alias databases used +# by the local delivery agent. The default list is system dependent. +# +# On systems with NIS, the default is to search the local alias +# database, then the NIS alias database. See aliases(5) for syntax +# details. +# +# If you change the alias database, run "postalias /etc/aliases" (or +# wherever your system stores the mail alias file), or simply run +# "newaliases" to build the necessary DBM or DB file. +# +# It will take a minute or so before changes become visible. Use +# "postfix reload" to eliminate the delay. +# +#alias_maps = dbm:/etc/aliases +alias_maps = hash:/etc/aliases +#alias_maps = hash:/etc/aliases, nis:mail.aliases +#alias_maps = netinfo:/aliases + +# The alias_database parameter specifies the alias database(s) that +# are built with "newaliases" or "sendmail -bi". This is a separate +# configuration parameter, because alias_maps (see above) may specify +# tables that are not necessarily all under control by Postfix. +# +#alias_database = dbm:/etc/aliases +#alias_database = dbm:/etc/mail/aliases +alias_database = hash:/etc/aliases +#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases + +# ADDRESS EXTENSIONS (e.g., user+foo) +# +# The recipient_delimiter parameter specifies the separator between +# user names and address extensions (user+foo). See canonical(5), +# local(8), relocated(5) and virtual(5) for the effects this has on +# aliases, canonical, virtual, relocated and .forward file lookups. +# Basically, the software tries user+foo and .forward+foo before +# trying user and .forward. +# +#recipient_delimiter = + + +# DELIVERY TO MAILBOX +# +# The home_mailbox parameter specifies the optional pathname of a +# mailbox file relative to a user's home directory. The default +# mailbox file is /var/spool/mail/user or /var/mail/user. Specify +# "Maildir/" for qmail-style delivery (the / is required). +# +#home_mailbox = Mailbox +#home_mailbox = Maildir/ + +# The mail_spool_directory parameter specifies the directory where +# UNIX-style mailboxes are kept. The default setting depends on the +# system type. +# +#mail_spool_directory = /var/mail +#mail_spool_directory = /var/spool/mail + +# The mailbox_command parameter specifies the optional external +# command to use instead of mailbox delivery. The command is run as +# the recipient with proper HOME, SHELL and LOGNAME environment settings. +# Exception: delivery for root is done as $default_user. +# +# Other environment variables of interest: USER (recipient username), +# EXTENSION (address extension), DOMAIN (domain part of address), +# and LOCAL (the address localpart). +# +# Unlike other Postfix configuration parameters, the mailbox_command +# parameter is not subjected to $parameter substitutions. This is to +# make it easier to specify shell syntax (see example below). +# +# Avoid shell meta characters because they will force Postfix to run +# an expensive shell process. Procmail alone is expensive enough. +# +# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN +# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. +# +#mailbox_command = /some/where/procmail +#mailbox_command = /some/where/procmail -a "$EXTENSION" + +# The mailbox_transport specifies the optional transport in master.cf +# to use after processing aliases and .forward files. This parameter +# has precedence over the mailbox_command, fallback_transport and +# luser_relay parameters. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" +# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. +#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp + +# If using the cyrus-imapd IMAP server deliver local mail to the IMAP +# server using LMTP (Local Mail Transport Protocol), this is prefered +# over the older cyrus deliver program by setting the +# mailbox_transport as below: +# +# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp +# +# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via +# these settings. +# +# local_destination_recipient_limit = 300 +# local_destination_concurrency_limit = 5 +# +# Of course you should adjust these settings as appropriate for the +# capacity of the hardware you are using. The recipient limit setting +# can be used to take advantage of the single instance message store +# capability of Cyrus. The concurrency limit can be used to control +# how many simultaneous LMTP sessions will be permitted to the Cyrus +# message store. +# +# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and +# subsequent line in master.cf. +#mailbox_transport = cyrus + +# The fallback_transport specifies the optional transport in master.cf +# to use for recipients that are not found in the UNIX passwd database. +# This parameter has precedence over the luser_relay parameter. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp +#fallback_transport = + +# The luser_relay parameter specifies an optional destination address +# for unknown recipients. By default, mail for unknown@$mydestination, +# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned +# as undeliverable. +# +# The following expansions are done on luser_relay: $user (recipient +# username), $shell (recipient shell), $home (recipient home directory), +# $recipient (full recipient address), $extension (recipient address +# extension), $domain (recipient domain), $local (entire recipient +# localpart), $recipient_delimiter. Specify ${name?value} or +# ${name:value} to expand value only when $name does (does not) exist. +# +# luser_relay works only for the default Postfix local delivery agent. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must specify "local_recipient_maps =" (i.e. empty) in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#luser_relay = $user@other.host +#luser_relay = $local@other.host +#luser_relay = admin+$local + +# JUNK MAIL CONTROLS +# +# The controls listed here are only a very small subset. The file +# SMTPD_ACCESS_README provides an overview. + +# The header_checks parameter specifies an optional table with patterns +# that each logical message header is matched against, including +# headers that span multiple physical lines. +# +# By default, these patterns also apply to MIME headers and to the +# headers of attached messages. With older Postfix versions, MIME and +# attached message headers were treated as body text. +# +# For details, see "man header_checks". +# +#header_checks = regexp:/etc/postfix/header_checks + +# FAST ETRN SERVICE +# +# Postfix maintains per-destination logfiles with information about +# deferred mail, so that mail can be flushed quickly with the SMTP +# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". +# See the ETRN_README document for a detailed description. +# +# The fast_flush_domains parameter controls what destinations are +# eligible for this service. By default, they are all domains that +# this server is willing to relay mail to. +# +#fast_flush_domains = $relay_domains + +# SHOW SOFTWARE VERSION OR NOT +# +# The smtpd_banner parameter specifies the text that follows the 220 +# code in the SMTP server's greeting banner. Some people like to see +# the mail version advertised. By default, Postfix shows no version. +# +# You MUST specify $myhostname at the start of the text. That is an +# RFC requirement. Postfix itself does not care. +# +#smtpd_banner = $myhostname ESMTP $mail_name +#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) + +# PARALLEL DELIVERY TO THE SAME DESTINATION +# +# How many parallel deliveries to the same user or domain? With local +# delivery, it does not make sense to do massively parallel delivery +# to the same user, because mailbox updates must happen sequentially, +# and expensive pipelines in .forward files can cause disasters when +# too many are run at the same time. With SMTP deliveries, 10 +# simultaneous connections to the same domain could be sufficient to +# raise eyebrows. +# +# Each message delivery transport has its XXX_destination_concurrency_limit +# parameter. The default is $default_destination_concurrency_limit for +# most delivery transports. For the local delivery agent the default is 2. + +#local_destination_concurrency_limit = 2 +#default_destination_concurrency_limit = 20 + +# DEBUGGING CONTROL +# +# The debug_peer_level parameter specifies the increment in verbose +# logging level when an SMTP client or server host name or address +# matches a pattern in the debug_peer_list parameter. +# +debug_peer_level = 2 + +# The debug_peer_list parameter specifies an optional list of domain +# or network patterns, /file/name patterns or type:name tables. When +# an SMTP client or server host name or address matches a pattern, +# increase the verbose logging level by the amount specified in the +# debug_peer_level parameter. +# +#debug_peer_list = 127.0.0.1 +#debug_peer_list = some.domain + +# The debugger_command specifies the external command that is executed +# when a Postfix daemon program is run with the -D option. +# +# Use "command .. & sleep 5" so that the debugger can attach before +# the process marches on. If you use an X-based debugger, be sure to +# set up your XAUTHORITY environment variable before starting Postfix. +# +debugger_command = + PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin + ddd $daemon_directory/$process_name $process_id & sleep 5 + +# If you can't use X, use this to capture the call stack when a +# daemon crashes. The result is in a file in the configuration +# directory, and is named after the process name and the process ID. +# +# debugger_command = +# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; +# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 +# >$config_directory/$process_name.$process_id.log & sleep 5 +# +# Another possibility is to run gdb under a detached screen session. +# To attach to the screen session, su root and run "screen -r +# " where uniquely matches one of the detached +# sessions (from "screen -list"). +# +# debugger_command = +# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen +# -dmS $process_name gdb $daemon_directory/$process_name +# $process_id & sleep 1 + +# INSTALL-TIME CONFIGURATION INFORMATION +# +# The following parameters are used when installing a new Postfix version. +# +# sendmail_path: The full pathname of the Postfix sendmail command. +# This is the Sendmail-compatible mail posting interface. +# +sendmail_path = + +# newaliases_path: The full pathname of the Postfix newaliases command. +# This is the Sendmail-compatible command to build alias databases. +# +newaliases_path = + +# mailq_path: The full pathname of the Postfix mailq command. This +# is the Sendmail-compatible mail queue listing command. +# +mailq_path = + +# setgid_group: The group for mail submission and queue management +# commands. This must be a group name with a numerical group ID that +# is not shared with other accounts, not even with the Postfix account. +# +setgid_group = + +# html_directory: The location of the Postfix HTML documentation. +# +html_directory = + +# manpage_directory: The location of the Postfix on-line manual pages. +# +manpage_directory = + +# sample_directory: The location of the Postfix sample configuration files. +# This parameter is obsolete as of Postfix 2.1. +# +sample_directory = + +# readme_directory: The location of the Postfix README files. +# +readme_directory = + +# TLS CONFIGURATION +# +# Basic Postfix TLS configuration by default with self-signed certificate +# for inbound SMTP and also opportunistic TLS for outbound SMTP. + +# The full pathname of a file with the Postfix SMTP server RSA certificate +# in PEM format. Intermediate certificates should be included in general, +# the server certificate first, then the issuing CA(s) (bottom-up order). +# +smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem + +# The full pathname of a file with the Postfix SMTP server RSA private key +# in PEM format. The private key must be accessible without a pass-phrase, +# i.e. it must not be encrypted. +# +smtpd_tls_key_file = /etc/pki/tls/private/postfix.key + +# Announce STARTTLS support to remote SMTP clients, but do not require that +# clients use TLS encryption (opportunistic TLS inbound). +# +smtpd_tls_security_level = may + +# Directory with PEM format Certification Authority certificates that the +# Postfix SMTP client uses to verify a remote SMTP server certificate. +# +smtp_tls_CApath = /etc/pki/tls/certs + +# The full pathname of a file containing CA certificates of root CAs +# trusted to sign either remote SMTP server certificates or intermediate CA +# certificates. +# +smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt + +# Use TLS if this is supported by the remote SMTP server, otherwise use +# plaintext (opportunistic TLS outbound). +# +smtp_tls_security_level = may diff --git a/templates/Fedora/41/etc/postfix/master.cf b/templates/Fedora/41/etc/postfix/master.cf new file mode 100644 index 0000000..bb0eae9 --- /dev/null +++ b/templates/Fedora/41/etc/postfix/master.cf @@ -0,0 +1,145 @@ +# +# Postfix master process configuration file. For details on the format +# of the file, see the master(5) manual page (command: "man 5 master" or +# on-line: http://www.postfix.org/master.5.html). +# +# Do not forget to execute "postfix reload" after editing this file. +# +# ========================================================================== +# service type private unpriv chroot wakeup maxproc command + args +# (yes) (yes) (no) (never) (100) +# ========================================================================== +smtp inet n - n - - smtpd +#smtp inet n - n - 1 postscreen +#smtpd pass - - n - - smtpd +#dnsblog unix - - n - 0 dnsblog +#tlsproxy unix - - n - 0 tlsproxy +# Choose one: enable submission for loopback clients only, or for any client. +#127.0.0.1:submission inet n - n - - smtpd +#submission inet n - n - - smtpd +# -o syslog_name=postfix/submission +# -o smtpd_tls_security_level=encrypt +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_tls_auth_only=yes +# -o smtpd_reject_unlisted_recipient=no +# Instead of specifying complex smtpd__restrictions here, +# specify "smtpd__restrictions=$mua__restrictions" +# here, and specify mua__restrictions in main.cf (where +# "" is "client", "helo", "sender", "relay", or "recipient"). +# -o smtpd_client_restrictions= +# -o smtpd_helo_restrictions= +# -o smtpd_sender_restrictions= +# -o smtpd_relay_restrictions= +# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +# Choose one: enable submissions for loopback clients only, or for any client. +#127.0.0.1:submissions inet n - n - - smtpd +#submissions inet n - n - - smtpd +# -o syslog_name=postfix/submissions +# -o smtpd_tls_wrappermode=yes +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_reject_unlisted_recipient=no +# Instead of specifying complex smtpd__restrictions here, +# specify "smtpd__restrictions=$mua__restrictions" +# here, and specify mua__restrictions in main.cf (where +# "" is "client", "helo", "sender", "relay", or "recipient"). +# -o smtpd_client_restrictions= +# -o smtpd_helo_restrictions= +# -o smtpd_sender_restrictions= +# -o smtpd_relay_restrictions= +# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +#628 inet n - n - - qmqpd +pickup unix n - n 60 1 pickup +cleanup unix n - n - 0 cleanup +qmgr unix n - n 300 1 qmgr +#qmgr unix n - n 300 1 oqmgr +tlsmgr unix - - n 1000? 1 tlsmgr +rewrite unix - - n - - trivial-rewrite +bounce unix - - n - 0 bounce +defer unix - - n - 0 bounce +trace unix - - n - 0 bounce +verify unix - - n - 1 verify +flush unix n - n 1000? 0 flush +proxymap unix - - n - - proxymap +proxywrite unix - - n - 1 proxymap +smtp unix - - n - - smtp +relay unix - - n - - smtp + -o syslog_name=postfix/$service_name +# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 +showq unix n - n - - showq +error unix - - n - - error +retry unix - - n - - error +discard unix - - n - - discard +local unix - n n - - local +virtual unix - n n - - virtual +lmtp unix - - n - - lmtp +anvil unix - - n - 1 anvil +scache unix - - n - 1 scache +postlog unix-dgram n - n - 1 postlogd +# +# ==================================================================== +# Interfaces to non-Postfix software. Be sure to examine the manual +# pages of the non-Postfix software to find out what options it wants. +# +# Many of the following services use the Postfix pipe(8) delivery +# agent. See the pipe(8) man page for information about ${recipient} +# and other message envelope options. +# ==================================================================== +# +# maildrop. See the Postfix MAILDROP_README file for details. +# Also specify in main.cf: maildrop_destination_recipient_limit=1 +# +#maildrop unix - n n - - pipe +# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} +# +# ==================================================================== +# +# Recent Cyrus versions can use the existing "lmtp" master.cf entry. +# +# Specify in cyrus.conf: +# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 +# +# Specify in main.cf one or more of the following: +# mailbox_transport = lmtp:inet:localhost +# virtual_transport = lmtp:inet:localhost +# +# ==================================================================== +# +# Cyrus 2.1.5 (Amos Gouaux) +# Also specify in main.cf: cyrus_destination_recipient_limit=1 +# +#cyrus unix - n n - - pipe +# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} +# +# ==================================================================== +# +# Old example of delivery via Cyrus. +# +#old-cyrus unix - n n - - pipe +# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} +# +# ==================================================================== +# +# See the Postfix UUCP_README file for configuration details. +# +#uucp unix - n n - - pipe +# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) +# +# ==================================================================== +# +# Other external delivery methods. +# +#ifmail unix - n n - - pipe +# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) +# +#bsmtp unix - n n - - pipe +# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient +# +#scalemail-backend unix - n n - 2 pipe +# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store +# ${nexthop} ${user} ${extension} +# +#mailman unix - n n - - pipe +# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py +# ${nexthop} ${user} diff --git a/templates/Fedora/41/etc/postfix/master.cf.proto b/templates/Fedora/41/etc/postfix/master.cf.proto new file mode 100644 index 0000000..bb0eae9 --- /dev/null +++ b/templates/Fedora/41/etc/postfix/master.cf.proto @@ -0,0 +1,145 @@ +# +# Postfix master process configuration file. For details on the format +# of the file, see the master(5) manual page (command: "man 5 master" or +# on-line: http://www.postfix.org/master.5.html). +# +# Do not forget to execute "postfix reload" after editing this file. +# +# ========================================================================== +# service type private unpriv chroot wakeup maxproc command + args +# (yes) (yes) (no) (never) (100) +# ========================================================================== +smtp inet n - n - - smtpd +#smtp inet n - n - 1 postscreen +#smtpd pass - - n - - smtpd +#dnsblog unix - - n - 0 dnsblog +#tlsproxy unix - - n - 0 tlsproxy +# Choose one: enable submission for loopback clients only, or for any client. +#127.0.0.1:submission inet n - n - - smtpd +#submission inet n - n - - smtpd +# -o syslog_name=postfix/submission +# -o smtpd_tls_security_level=encrypt +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_tls_auth_only=yes +# -o smtpd_reject_unlisted_recipient=no +# Instead of specifying complex smtpd__restrictions here, +# specify "smtpd__restrictions=$mua__restrictions" +# here, and specify mua__restrictions in main.cf (where +# "" is "client", "helo", "sender", "relay", or "recipient"). +# -o smtpd_client_restrictions= +# -o smtpd_helo_restrictions= +# -o smtpd_sender_restrictions= +# -o smtpd_relay_restrictions= +# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +# Choose one: enable submissions for loopback clients only, or for any client. +#127.0.0.1:submissions inet n - n - - smtpd +#submissions inet n - n - - smtpd +# -o syslog_name=postfix/submissions +# -o smtpd_tls_wrappermode=yes +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_reject_unlisted_recipient=no +# Instead of specifying complex smtpd__restrictions here, +# specify "smtpd__restrictions=$mua__restrictions" +# here, and specify mua__restrictions in main.cf (where +# "" is "client", "helo", "sender", "relay", or "recipient"). +# -o smtpd_client_restrictions= +# -o smtpd_helo_restrictions= +# -o smtpd_sender_restrictions= +# -o smtpd_relay_restrictions= +# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +#628 inet n - n - - qmqpd +pickup unix n - n 60 1 pickup +cleanup unix n - n - 0 cleanup +qmgr unix n - n 300 1 qmgr +#qmgr unix n - n 300 1 oqmgr +tlsmgr unix - - n 1000? 1 tlsmgr +rewrite unix - - n - - trivial-rewrite +bounce unix - - n - 0 bounce +defer unix - - n - 0 bounce +trace unix - - n - 0 bounce +verify unix - - n - 1 verify +flush unix n - n 1000? 0 flush +proxymap unix - - n - - proxymap +proxywrite unix - - n - 1 proxymap +smtp unix - - n - - smtp +relay unix - - n - - smtp + -o syslog_name=postfix/$service_name +# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 +showq unix n - n - - showq +error unix - - n - - error +retry unix - - n - - error +discard unix - - n - - discard +local unix - n n - - local +virtual unix - n n - - virtual +lmtp unix - - n - - lmtp +anvil unix - - n - 1 anvil +scache unix - - n - 1 scache +postlog unix-dgram n - n - 1 postlogd +# +# ==================================================================== +# Interfaces to non-Postfix software. Be sure to examine the manual +# pages of the non-Postfix software to find out what options it wants. +# +# Many of the following services use the Postfix pipe(8) delivery +# agent. See the pipe(8) man page for information about ${recipient} +# and other message envelope options. +# ==================================================================== +# +# maildrop. See the Postfix MAILDROP_README file for details. +# Also specify in main.cf: maildrop_destination_recipient_limit=1 +# +#maildrop unix - n n - - pipe +# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} +# +# ==================================================================== +# +# Recent Cyrus versions can use the existing "lmtp" master.cf entry. +# +# Specify in cyrus.conf: +# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 +# +# Specify in main.cf one or more of the following: +# mailbox_transport = lmtp:inet:localhost +# virtual_transport = lmtp:inet:localhost +# +# ==================================================================== +# +# Cyrus 2.1.5 (Amos Gouaux) +# Also specify in main.cf: cyrus_destination_recipient_limit=1 +# +#cyrus unix - n n - - pipe +# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} +# +# ==================================================================== +# +# Old example of delivery via Cyrus. +# +#old-cyrus unix - n n - - pipe +# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} +# +# ==================================================================== +# +# See the Postfix UUCP_README file for configuration details. +# +#uucp unix - n n - - pipe +# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) +# +# ==================================================================== +# +# Other external delivery methods. +# +#ifmail unix - n n - - pipe +# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) +# +#bsmtp unix - n n - - pipe +# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient +# +#scalemail-backend unix - n n - 2 pipe +# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store +# ${nexthop} ${user} ${extension} +# +#mailman unix - n n - - pipe +# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py +# ${nexthop} ${user} diff --git a/templates/Fedora/41/etc/postfix/postfix-files b/templates/Fedora/41/etc/postfix/postfix-files new file mode 100644 index 0000000..b3ed234 --- /dev/null +++ b/templates/Fedora/41/etc/postfix/postfix-files @@ -0,0 +1,447 @@ +# +# Do not edit this file. +# +# This file controls the postfix-install script for installation of +# Postfix programs, configuration files and documentation, as well +# as the post-install script for setting permissions and for updating +# Postfix configuration files. See the respective manual pages within +# the script files. +# +# Do not list $command_directory or $shlib_directory in this file, +# or it will be blown away by a future Postfix uninstallation +# procedure. You would not want to lose all files in /usr/sbin or +# /usr/local/lib. +# +# Each record in this file describes one file or directory. +# Fields are separated by ":". Specify a null field as "-". +# Missing fields or separators at the end are OK. +# +# File format: +# name:type:owner:group:permission:flags +# No group means don't change group ownership. +# +# File types: +# d=directory +# f=regular file +# h=hard link (*) +# l=symbolic link (*) +# +# (*) With hard links and symbolic links, the owner field becomes the +# source pathname, while the group and permissions are ignored. +# +# File flags: +# No flag means the flag is not active. +# p=preserve existing file, do not replace (postfix-install). +# u=update owner/group/mode (post-install upgrade-permissions). +# c=create missing directory (post-install create-missing). +# r=apply owner/group recursively (post-install set/upgrade-permissions). +# o=obsolete, no longer part of Postfix +# 1=optional for non-default instance (config_dir != built-in default). +# +# Note: the "u" flag is for upgrading the permissions of existing files +# or directories after changes in Postfix architecture. For robustness +# it is a good idea to "u" all the files that have special ownership or +# permissions, so that running "make install" fixes any glitches. +# +# Note: order matters. Update shared libraries and database plugins +# before daemon/command-line programs. +$config_directory:d:root:-:755:u +$data_directory:d:$mail_owner:-:700:uc +$daemon_directory:d:root:-:755:u +$queue_directory:d:root:-:755:uc +$sample_directory:d:root:-:755:o +$readme_directory:d:root:-:755 +$html_directory:d:root:-:755 +$queue_directory/active:d:$mail_owner:-:700:ucr +$queue_directory/bounce:d:$mail_owner:-:700:ucr +$queue_directory/corrupt:d:$mail_owner:-:700:ucr +$queue_directory/defer:d:$mail_owner:-:700:ucr +$queue_directory/deferred:d:$mail_owner:-:700:ucr +$queue_directory/flush:d:$mail_owner:-:700:ucr +$queue_directory/hold:d:$mail_owner:-:700:ucr +$queue_directory/incoming:d:$mail_owner:-:700:ucr +$queue_directory/private:d:$mail_owner:-:700:uc +$queue_directory/maildrop:d:$mail_owner:$setgid_group:730:uc +$queue_directory/public:d:$mail_owner:$setgid_group:710:uc +$queue_directory/pid:d:root:-:755:uc +$queue_directory/saved:d:$mail_owner:-:700:ucr +$queue_directory/trace:d:$mail_owner:-:700:ucr +# Update shared libraries and plugins before daemon or command-line programs. +$shlib_directory/libpostfix-util.so:f:root:-:755 +$shlib_directory/libpostfix-global.so:f:root:-:755 +$shlib_directory/libpostfix-dns.so:f:root:-:755 +$shlib_directory/libpostfix-tls.so:f:root:-:755 +$shlib_directory/libpostfix-master.so:f:root:-:755 +$meta_directory/dynamicmaps.cf.d:d:root:-:755 +$meta_directory/dynamicmaps.cf:f:root:-:644 +$meta_directory/main.cf.proto:f:root:-:644 +$meta_directory/master.cf.proto:f:root:-:644 +$meta_directory/postfix-files.d:d:root:-:755 +$meta_directory/postfix-files:f:root:-:644 +$daemon_directory/anvil:f:root:-:755 +$daemon_directory/bounce:f:root:-:755 +$daemon_directory/cleanup:f:root:-:755 +$daemon_directory/discard:f:root:-:755 +$daemon_directory/dnsblog:f:root:-:755 +$daemon_directory/error:f:root:-:755 +$daemon_directory/flush:f:root:-:755 +$daemon_directory/local:f:root:-:755 +$daemon_directory/main.cf:f:root:-:644:o +$daemon_directory/master.cf:f:root:-:644:o +$daemon_directory/master:f:root:-:755 +$daemon_directory/oqmgr:f:root:-:755 +$daemon_directory/pickup:f:root:-:755 +$daemon_directory/pipe:f:root:-:755 +$daemon_directory/post-install:f:root:-:755 +# In case meta_directory == daemon_directory. +#$daemon_directory/postfix-files:f:root:-:644:o +#$daemon_directory/postfix-files.d:d:root:-:755:o +$daemon_directory/postfix-script:f:root:-:755 +$daemon_directory/postfix-tls-script:f:root:-:755 +$daemon_directory/postfix-wrapper:f:root:-:755 +$daemon_directory/postmulti-script:f:root:-:755 +$daemon_directory/postlogd:f:root:-:755 +$daemon_directory/postscreen:f:root:-:755 +$daemon_directory/proxymap:f:root:-:755 +$daemon_directory/qmgr:f:root:-:755 +$daemon_directory/qmqpd:f:root:-:755 +$daemon_directory/scache:f:root:-:755 +$daemon_directory/showq:f:root:-:755 +$daemon_directory/smtp:f:root:-:755 +$daemon_directory/smtpd:f:root:-:755 +$daemon_directory/spawn:f:root:-:755 +$daemon_directory/tlsproxy:f:root:-:755 +$daemon_directory/tlsmgr:f:root:-:755 +$daemon_directory/trivial-rewrite:f:root:-:755 +$daemon_directory/verify:f:root:-:755 +$daemon_directory/virtual:f:root:-:755 +$daemon_directory/nqmgr:h:$daemon_directory/qmgr +$daemon_directory/lmtp:h:$daemon_directory/smtp +$command_directory/postalias:f:root:-:755 +$command_directory/postcat:f:root:-:755 +$command_directory/postconf:f:root:-:755 +$command_directory/postfix:f:root:-:755 +$command_directory/postkick:f:root:-:755 +$command_directory/postlock:f:root:-:755 +$command_directory/postlog:f:root:$setgid_group:2755:u +$command_directory/postmap:f:root:-:755 +$command_directory/postmulti:f:root:-:755 +$command_directory/postsuper:f:root:-:755 +$command_directory/postdrop:f:root:$setgid_group:2755:u +$command_directory/postqueue:f:root:$setgid_group:2755:u +$sendmail_path:f:root:-:755 +$newaliases_path:l:$sendmail_path +$mailq_path:l:$sendmail_path +$config_directory/access:f:root:-:644:p1 +$config_directory/canonical:f:root:-:644:p1 +$config_directory/cidr_table:f:root:-:644:o +$config_directory/generic:f:root:-:644:p1 +$config_directory/generics:f:root:-:644:o +$config_directory/header_checks:f:root:-:644:p1 +$config_directory/install.cf:f:root:-:644:o +$config_directory/main.cf:f:root:-:644:p +$config_directory/master.cf:f:root:-:644:p +$config_directory/pcre_table:f:root:-:644:o +$config_directory/regexp_table:f:root:-:644:o +$config_directory/relocated:f:root:-:644:p1 +$config_directory/tcp_table:f:root:-:644:o +$config_directory/transport:f:root:-:644:p1 +$config_directory/virtual:f:root:-:644:p1 +$config_directory/postfix-script:f:root:-:755:o +$config_directory/postfix-script-sgid:f:root:-:755:o +$config_directory/postfix-script-nosgid:f:root:-:755:o +$config_directory/post-install:f:root:-:755:o +$manpage_directory/man1/mailq.postfix.1.gz:f:root:-:644 +$manpage_directory/man1/newaliases.postfix.1.gz:f:root:-:644 +$manpage_directory/man1/postalias.1.gz:f:root:-:644 +$manpage_directory/man1/postcat.1.gz:f:root:-:644 +$manpage_directory/man1/postconf.1.gz:f:root:-:644 +$manpage_directory/man1/postdrop.1.gz:f:root:-:644 +$manpage_directory/man1/postfix-tls.1.gz:f:root:-:644 +$manpage_directory/man1/postfix.1.gz:f:root:-:644 +$manpage_directory/man1/postkick.1.gz:f:root:-:644 +$manpage_directory/man1/postlock.1.gz:f:root:-:644 +$manpage_directory/man1/postlog.1.gz:f:root:-:644 +$manpage_directory/man1/postmap.1.gz:f:root:-:644 +$manpage_directory/man1/postmulti.1.gz:f:root:-:644 +$manpage_directory/man1/postqueue.1.gz:f:root:-:644 +$manpage_directory/man1/postsuper.1.gz:f:root:-:644 +$manpage_directory/man1/sendmail.postfix.1.gz:f:root:-:644 +$manpage_directory/man5/access.5.gz:f:root:-:644 +$manpage_directory/man5/aliases.postfix.5.gz:f:root:-:644 +$manpage_directory/man5/body_checks.5.gz:f:root:-:644 +$manpage_directory/man5/bounce.5.gz:f:root:-:644 +$manpage_directory/man5/canonical.5.gz:f:root:-:644 +$manpage_directory/man5/cidr_table.5.gz:f:root:-:644 +$manpage_directory/man5/generics.5.gz:f:root:-:644:o +$manpage_directory/man5/generic.5.gz:f:root:-:644 +$manpage_directory/man5/header_checks.5.gz:f:root:-:644 +$manpage_directory/man5/master.5.gz:f:root:-:644 +$manpage_directory/man5/memcache_table.5.gz:f:root:-:644 +$manpage_directory/man5/socketmap_table.5.gz:f:root:-:644 +$manpage_directory/man5/nisplus_table.5.gz:f:root:-:644 +$manpage_directory/man5/postconf.5.gz:f:root:-:644 +$manpage_directory/man5/postfix-wrapper.5.gz:f:root:-:644 +$manpage_directory/man5/regexp_table.5.gz:f:root:-:644 +$manpage_directory/man5/relocated.5.gz:f:root:-:644 +$manpage_directory/man5/tcp_table.5.gz:f:root:-:644 +$manpage_directory/man5/transport.5.gz:f:root:-:644 +$manpage_directory/man5/virtual.5.gz:f:root:-:644 +$manpage_directory/man8/bounce.8.gz:f:root:-:644 +$manpage_directory/man8/cleanup.8.gz:f:root:-:644 +$manpage_directory/man8/anvil.8.gz:f:root:-:644 +$manpage_directory/man8/defer.8.gz:f:root:-:644 +$manpage_directory/man8/discard.8.gz:f:root:-:644 +$manpage_directory/man8/dnsblog.8.gz:f:root:-:644 +$manpage_directory/man8/error.8.gz:f:root:-:644 +$manpage_directory/man8/flush.8.gz:f:root:-:644 +$manpage_directory/man8/lmtp.8.gz:f:root:-:644 +$manpage_directory/man8/local.8.gz:f:root:-:644 +$manpage_directory/man8/master.8.gz:f:root:-:644 +$manpage_directory/man8/nqmgr.8.gz:f:root:-:644:o +$manpage_directory/man8/oqmgr.8.gz:f:root:-:644: +$manpage_directory/man8/pickup.8.gz:f:root:-:644 +$manpage_directory/man8/pipe.8.gz:f:root:-:644 +$manpage_directory/man8/postlogd.8.gz:f:root:-:644 +$manpage_directory/man8/postscreen.8.gz:f:root:-:644 +$manpage_directory/man8/proxymap.8.gz:f:root:-:644 +$manpage_directory/man8/qmgr.8.gz:f:root:-:644 +$manpage_directory/man8/qmqpd.8.gz:f:root:-:644 +$manpage_directory/man8/scache.8.gz:f:root:-:644 +$manpage_directory/man8/showq.8.gz:f:root:-:644 +$manpage_directory/man8/smtp.8.gz:f:root:-:644 +$manpage_directory/man8/smtpd.postfix.8.gz:f:root:-:644 +$manpage_directory/man8/spawn.8.gz:f:root:-:644 +$manpage_directory/man8/tlsproxy.8.gz:f:root:-:644 +$manpage_directory/man8/tlsmgr.8.gz:f:root:-:644 +$manpage_directory/man8/trace.8.gz:f:root:-:644 +$manpage_directory/man8/trivial-rewrite.8.gz:f:root:-:644 +$manpage_directory/man8/verify.8.gz:f:root:-:644 +$manpage_directory/man8/virtual.8.gz:f:root:-:644 +$sample_directory/sample-aliases.cf:f:root:-:644:o +$sample_directory/sample-auth.cf:f:root:-:644:o +$sample_directory/sample-canonical.cf:f:root:-:644:o +$sample_directory/sample-compatibility.cf:f:root:-:644:o +$sample_directory/sample-debug.cf:f:root:-:644:o +$sample_directory/sample-filter.cf:f:root:-:644:o +$sample_directory/sample-flush.cf:f:root:-:644:o +$sample_directory/sample-ipv6.cf:f:root:-:644:o +$sample_directory/sample-ldap.cf:f:root:-:644:o +$sample_directory/sample-lmtp.cf:f:root:-:644:o +$sample_directory/sample-local.cf:f:root:-:644:o +$sample_directory/sample-mime.cf:f:root:-:644:o +$sample_directory/sample-misc.cf:f:root:-:644:o +$sample_directory/sample-pcre-access.cf:f:root:-:644:o +$sample_directory/sample-pcre-body.cf:f:root:-:644:o +$sample_directory/sample-pcre-header.cf:f:root:-:644:o +$sample_directory/sample-pgsql-aliases.cf:f:root:-:644:o +$sample_directory/sample-qmqpd.cf:f:root:-:644:o +$sample_directory/sample-rate.cf:f:root:-:644:o +$sample_directory/sample-regexp-access.cf:f:root:-:644:o +$sample_directory/sample-regexp-body.cf:f:root:-:644:o +$sample_directory/sample-regexp-header.cf:f:root:-:644:o +$sample_directory/sample-relocated.cf:f:root:-:644:o +$sample_directory/sample-resource.cf:f:root:-:644:o +$sample_directory/sample-rewrite.cf:f:root:-:644:o +$sample_directory/sample-scheduler.cf:f:root:-:644:o +$sample_directory/sample-smtp.cf:f:root:-:644:o +$sample_directory/sample-smtpd.cf:f:root:-:644:o +$sample_directory/sample-tls.cf:f:root:-:644:o +$sample_directory/sample-transport.cf:f:root:-:644:o +$sample_directory/sample-verify.cf:f:root:-:644:o +$sample_directory/sample-virtual.cf:f:root:-:644:o +$readme_directory/AAAREADME:f:root:-:644 +$readme_directory/ADDRESS_CLASS_README:f:root:-:644 +$readme_directory/ADDRESS_REWRITING_README:f:root:-:644 +$readme_directory/ADDRESS_VERIFICATION_README:f:root:-:644 +$readme_directory/BACKSCATTER_README:f:root:-:644 +$readme_directory/BASIC_CONFIGURATION_README:f:root:-:644 +$readme_directory/BDAT_README:f:root:-:644 +$readme_directory/BUILTIN_FILTER_README:f:root:-:644 +$readme_directory/COMPATIBILITY_README:f:root:-:644 +$readme_directory/CONNECTION_CACHE_README:f:root:-:644 +$readme_directory/CONTENT_INSPECTION_README:f:root:-:644 +$readme_directory/DATABASE_README:f:root:-:644 +$readme_directory/DB_README:f:root:-:644 +$readme_directory/DEBUG_README:f:root:-:644 +$readme_directory/DSN_README:f:root:-:644 +$readme_directory/ETRN_README:f:root:-:644 +$readme_directory/FILTER_README:f:root:-:644 +$readme_directory/FORWARD_SECRECY_README:f:root:-:644 +$readme_directory/HOSTING_README:f:root:-:644:o +$readme_directory/INSTALL:f:root:-:644 +$readme_directory/IPV6_README:f:root:-:644 +$readme_directory/LINUX_README:f:root:-:644 +$readme_directory/LOCAL_RECIPIENT_README:f:root:-:644 +$readme_directory/MACOSX_README:f:root:-:644:o +$readme_directory/MAILDROP_README:f:root:-:644 +$readme_directory/MAILLOG_README:f:root:-:644 +$readme_directory/MEMCACHE_README:f:root:-:644 +$readme_directory/MILTER_README:f:root:-:644 +$readme_directory/MULTI_INSTANCE_README:f:root:-:644 +$readme_directory/SMTPUTF8_README:f:root:-:644 +$readme_directory/NFS_README:f:root:-:644 +$readme_directory/OVERVIEW:f:root:-:644 +$readme_directory/PACKAGE_README:f:root:-:644 +$readme_directory/POSTSCREEN_3_5_README:f:root:-:644 +$readme_directory/POSTSCREEN_README:f:root:-:644 +$readme_directory/QMQP_README:f:root:-:644:o +$readme_directory/QSHAPE_README:f:root:-:644 +$readme_directory/RELEASE_NOTES:f:root:-:644 +$readme_directory/RESTRICTION_CLASS_README:f:root:-:644 +$readme_directory/SASL_README:f:root:-:644 +$readme_directory/SCHEDULER_README:f:root:-:644 +$readme_directory/SMTPD_ACCESS_README:f:root:-:644 +$readme_directory/SMTPD_POLICY_README:f:root:-:644 +$readme_directory/SMTPD_PROXY_README:f:root:-:644 +$readme_directory/SOHO_README:f:root:-:644 +$readme_directory/STANDARD_CONFIGURATION_README:f:root:-:644 +$readme_directory/STRESS_README:f:root:-:644 +$readme_directory/TLS_LEGACY_README:f:root:-:644 +$readme_directory/TLS_README:f:root:-:644 +$readme_directory/TUNING_README:f:root:-:644 +$readme_directory/ULTRIX_README:f:root:-:644 +$readme_directory/UUCP_README:f:root:-:644 +$readme_directory/VERP_README:f:root:-:644 +$readme_directory/VIRTUAL_README:f:root:-:644 +$readme_directory/XCLIENT_README:f:root:-:644 +$readme_directory/XFORWARD_README:f:root:-:644 +$html_directory/ADDRESS_CLASS_README.html:f:root:-:644 +$html_directory/ADDRESS_REWRITING_README.html:f:root:-:644 +$html_directory/ADDRESS_VERIFICATION_README.html:f:root:-:644 +$html_directory/BACKSCATTER_README.html:f:root:-:644 +$html_directory/BASIC_CONFIGURATION_README.html:f:root:-:644 +$html_directory/BDAT_README.html:f:root:-:644 +$html_directory/BUILTIN_FILTER_README.html:f:root:-:644 +$html_directory/CDB_README.html:f:root:-:644 +$html_directory/COMPATIBILITY_README.html:f:root:-:644 +$html_directory/CONNECTION_CACHE_README.html:f:root:-:644 +$html_directory/CONTENT_INSPECTION_README.html:f:root:-:644 +$html_directory/CYRUS_README.html:f:root:-:644:o +$html_directory/DATABASE_README.html:f:root:-:644 +$html_directory/DB_README.html:f:root:-:644 +$html_directory/DEBUG_README.html:f:root:-:644 +$html_directory/DSN_README.html:f:root:-:644 +$html_directory/ETRN_README.html:f:root:-:644 +$html_directory/FILTER_README.html:f:root:-:644 +$html_directory/FORWARD_SECRECY_README.html:f:root:-:644 +$html_directory/INSTALL.html:f:root:-:644 +$html_directory/IPV6_README.html:f:root:-:644 +$html_directory/LDAP_README.html:f:root:-:644 +$html_directory/LINUX_README.html:f:root:-:644 +$html_directory/LMDB_README.html:f:root:-:644 +$html_directory/LOCAL_RECIPIENT_README.html:f:root:-:644 +$html_directory/MAILDROP_README.html:f:root:-:644 +$html_directory/MAILLOG_README.html:f:root:-:644 +$html_directory/MEMCACHE_README.html:f:root:-:644 +$html_directory/MILTER_README.html:f:root:-:644 +$html_directory/MULTI_INSTANCE_README.html:f:root:-:644 +$html_directory/MYSQL_README.html:f:root:-:644 +$html_directory/SMTPUTF8_README.html:f:root:-:644 +$html_directory/SQLITE_README.html:f:root:-:644 +$html_directory/NFS_README.html:f:root:-:644 +$html_directory/OVERVIEW.html:f:root:-:644 +$html_directory/PACKAGE_README.html:f:root:-:644 +$html_directory/PCRE_README.html:f:root:-:644 +$html_directory/PGSQL_README.html:f:root:-:644 +$html_directory/POSTSCREEN_3_5_README.html:f:root:-:644 +$html_directory/POSTSCREEN_README.html:f:root:-:644 +$html_directory/QMQP_README.html:f:root:-:644:o +$html_directory/QSHAPE_README.html:f:root:-:644 +$html_directory/RESTRICTION_CLASS_README.html:f:root:-:644 +$html_directory/SASL_README.html:f:root:-:644 +$html_directory/SCHEDULER_README.html:f:root:-:644 +$html_directory/SMTPD_ACCESS_README.html:f:root:-:644 +$html_directory/SMTPD_POLICY_README.html:f:root:-:644 +$html_directory/SMTPD_PROXY_README.html:f:root:-:644 +$html_directory/SOHO_README.html:f:root:-:644 +$html_directory/STANDARD_CONFIGURATION_README.html:f:root:-:644 +$html_directory/STRESS_README.html:f:root:-:644 +$html_directory/TLS_LEGACY_README.html:f:root:-:644 +$html_directory/TLS_README.html:f:root:-:644 +$html_directory/TUNING_README.html:f:root:-:644 +$html_directory/ULTRIX_README.html:f:root:-:644:o +$html_directory/UUCP_README.html:f:root:-:644 +$html_directory/VERP_README.html:f:root:-:644 +$html_directory/VIRTUAL_README.html:f:root:-:644 +$html_directory/XCLIENT_README.html:f:root:-:644 +$html_directory/XFORWARD_README.html:f:root:-:644 +$html_directory/access.5.html:f:root:-:644 +$html_directory/aliases.5.html:f:root:-:644 +$html_directory/anvil.8.html:f:root:-:644 +$html_directory/bounce.5.html:f:root:-:644 +$html_directory/bounce.8.html:f:root:-:644 +$html_directory/canonical.5.html:f:root:-:644 +$html_directory/cidr_table.5.html:f:root:-:644 +$html_directory/cleanup.8.html:f:root:-:644 +$html_directory/defer.8.html:h:$html_directory/bounce.8.html:-:644 +$html_directory/discard.8.html:f:root:-:644 +$html_directory/dnsblog.8.html:f:root:-:644 +$html_directory/error.8.html:f:root:-:644 +$html_directory/flush.8.html:f:root:-:644 +$html_directory/generics.5.html:f:root:-:644:o +$html_directory/generic.5.html:f:root:-:644 +$html_directory/header_checks.5.html:f:root:-:644 +$html_directory/index.html:f:root:-:644 +$html_directory/ldap_table.5.html:f:root:-:644 +$html_directory/lmdb_table.5.html:f:root:-:644 +$html_directory/lmtp.8.html:f:root:-:644 +$html_directory/local.8.html:f:root:-:644 +$html_directory/mailq.1.html:f:root:-:644 +$html_directory/master.5.html:f:root:-:644 +$html_directory/master.8.html:f:root:-:644 +$html_directory/memcache_table.5.html:f:root:-:644 +$html_directory/mysql_table.5.html:f:root:-:644 +$html_directory/sqlite_table.5.html:f:root:-:644 +$html_directory/nisplus_table.5.html:f:root:-:644 +$html_directory/newaliases.1.html:h:$html_directory/mailq.1.html:-:644 +$html_directory/oqmgr.8.html:f:root:-:644 +$html_directory/pcre_table.5.html:f:root:-:644 +$html_directory/pgsql_table.5.html:f:root:-:644 +$html_directory/pickup.8.html:f:root:-:644 +$html_directory/pipe.8.html:f:root:-:644 +$html_directory/postalias.1.html:f:root:-:644 +$html_directory/postcat.1.html:f:root:-:644 +$html_directory/postconf.1.html:f:root:-:644 +$html_directory/postconf.5.html:f:root:-:644 +$html_directory/postdrop.1.html:f:root:-:644 +$html_directory/postfix-logo.jpg:f:root:-:644 +$html_directory/postfix-manuals.html:f:root:-:644 +$html_directory/postfix-tls.1.html:f:root:-:644 +$html_directory/postfix-wrapper.5.html:f:root:-:644 +$html_directory/postfix.1.html:f:root:-:644 +$html_directory/postkick.1.html:f:root:-:644 +$html_directory/postlock.1.html:f:root:-:644 +$html_directory/postlog.1.html:f:root:-:644 +$html_directory/postmap.1.html:f:root:-:644 +$html_directory/postmulti.1.html:f:root:-:644 +$html_directory/postlogd.8.html:f:root:-:644 +$html_directory/postqueue.1.html:f:root:-:644 +$html_directory/postscreen.8.html:f:root:-:644 +$html_directory/postsuper.1.html:f:root:-:644 +$html_directory/qshape.1.html:f:root:-:644 +$html_directory/proxymap.8.html:f:root:-:644 +$html_directory/qmgr.8.html:f:root:-:644 +$html_directory/qmqp-sink.1.html:f:root:-:644 +$html_directory/qmqp-source.1.html:f:root:-:644 +$html_directory/qmqpd.8.html:f:root:-:644 +$html_directory/regexp_table.5.html:f:root:-:644 +$html_directory/relocated.5.html:f:root:-:644 +$html_directory/scache.8.html:f:root:-:644 +$html_directory/sendmail.1.html:h:$html_directory/mailq.1.html:-:644 +$html_directory/showq.8.html:f:root:-:644 +$html_directory/smtp-sink.1.html:f:root:-:644 +$html_directory/smtp-source.1.html:f:root:-:644 +$html_directory/smtp.8.html:h:$html_directory/lmtp.8.html:-:644 +$html_directory/smtpd.8.html:f:root:-:644 +$html_directory/socketmap_table.5.html:f:root:-:644 +$html_directory/spawn.8.html:f:root:-:644 +$html_directory/tlsmgr.8.html:f:root:-:644 +$html_directory/tlsproxy.8.html:f:root:-:644 +$html_directory/tcp_table.5.html:f:root:-:644 +$html_directory/trace.8.html:h:$html_directory/bounce.8.html:-:644 +$html_directory/transport.5.html:f:root:-:644 +$html_directory/trivial-rewrite.8.html:f:root:-:644 +$html_directory/verify.8.html:f:root:-:644 +$html_directory/virtual.5.html:f:root:-:644 +$html_directory/virtual.8.html:f:root:-:644 diff --git a/templates/Fedora/41/etc/postfix/postfix-files.d/ldap b/templates/Fedora/41/etc/postfix/postfix-files.d/ldap new file mode 100644 index 0000000..684b05d --- /dev/null +++ b/templates/Fedora/41/etc/postfix/postfix-files.d/ldap @@ -0,0 +1,3 @@ +$shlib_directory/postfix-ldap.so:f:root:-:755 +$manpage_directory/man5/ldap_table.5.gz:f:root:-:644 +$readme_directory/LDAP_README:f:root:-:644 diff --git a/templates/Fedora/41/etc/postfix/postfix-files.d/mysql b/templates/Fedora/41/etc/postfix/postfix-files.d/mysql new file mode 100644 index 0000000..8e41d61 --- /dev/null +++ b/templates/Fedora/41/etc/postfix/postfix-files.d/mysql @@ -0,0 +1,3 @@ +$shlib_directory/postfix-mysql.so:f:root:-:755 +$manpage_directory/man5/mysql_table.5.gz:f:root:-:644 +$readme_directory/MYSQL_README:f:root:-:644 diff --git a/templates/Fedora/41/etc/postfix/postfix-files.d/pcre b/templates/Fedora/41/etc/postfix/postfix-files.d/pcre new file mode 100644 index 0000000..a34fd73 --- /dev/null +++ b/templates/Fedora/41/etc/postfix/postfix-files.d/pcre @@ -0,0 +1,3 @@ +$shlib_directory/postfix-pcre.so:f:root:-:755 +$manpage_directory/man5/pcre_table.5.gz:f:root:-:644 +$readme_directory/PCRE_README:f:root:-:644 diff --git a/templates/Fedora/41/etc/postfix/relocated b/templates/Fedora/41/etc/postfix/relocated new file mode 100644 index 0000000..90f63ec --- /dev/null +++ b/templates/Fedora/41/etc/postfix/relocated @@ -0,0 +1,178 @@ +# RELOCATED(5) RELOCATED(5) +# +# NAME +# relocated - Postfix relocated table format +# +# SYNOPSIS +# postmap /etc/postfix/relocated +# +# DESCRIPTION +# The optional relocated(5) table provides the information +# that is used in "user has moved to new_location" bounce +# messages. +# +# Normally, the relocated(5) table is specified as a text +# file that serves as input to the postmap(1) command. The +# result, an indexed file in dbm or db format, is used for +# fast searching by the mail system. Execute the command +# "postmap /etc/postfix/relocated" to rebuild an indexed +# file after changing the corresponding relocated table. +# +# When the table is provided via other means such as NIS, +# LDAP or SQL, the same lookups are done as for ordinary +# indexed files. +# +# Alternatively, the table can be provided as a regu- +# lar-expression map where patterns are given as regular +# expressions, or lookups can be directed to a TCP-based +# server. In those case, the lookups are done in a slightly +# different way as described below under "REGULAR EXPRESSION +# TABLES" or "TCP-BASED TABLES". +# +# Table lookups are case insensitive. +# +# CASE FOLDING +# The search string is folded to lowercase before database +# lookup. As of Postfix 2.3, the search string is not case +# folded with database types such as regexp: or pcre: whose +# lookup fields can match both upper and lower case. +# +# TABLE FORMAT +# The input format for the postmap(1) command is as follows: +# +# o An entry has one of the following form: +# +# pattern new_location +# +# Where new_location specifies contact information +# such as an email address, or perhaps a street +# address or telephone number. +# +# o Empty lines and whitespace-only lines are ignored, +# as are lines whose first non-whitespace character +# is a `#'. +# +# o A logical line starts with non-whitespace text. A +# line that starts with whitespace continues a logi- +# cal line. +# +# TABLE SEARCH ORDER +# With lookups from indexed files such as DB or DBM, or from +# networked tables such as NIS, LDAP or SQL, patterns are +# tried in the order as listed below: +# +# user@domain +# Matches user@domain. This form has precedence over +# all other forms. +# +# user Matches user@site when site is $myorigin, when site +# is listed in $mydestination, or when site is listed +# in $inet_interfaces or $proxy_interfaces. +# +# @domain +# Matches other addresses in domain. This form has +# the lowest precedence. +# +# ADDRESS EXTENSION +# When a mail address localpart contains the optional recip- +# ient delimiter (e.g., user+foo@domain), the lookup order +# becomes: user+foo@domain, user@domain, user+foo, user, and +# @domain. +# +# REGULAR EXPRESSION TABLES +# This section describes how the table lookups change when +# the table is given in the form of regular expressions or +# when lookups are directed to a TCP-based server. For a +# description of regular expression lookup table syntax, see +# regexp_table(5) or pcre_table(5). For a description of the +# TCP client/server table lookup protocol, see tcp_table(5). +# This feature is available in Postfix 2.5 and later. +# +# Each pattern is a regular expression that is applied to +# the entire address being looked up. Thus, user@domain mail +# addresses are not broken up into their user and @domain +# constituent parts, nor is user+foo broken up into user and +# foo. +# +# Patterns are applied in the order as specified in the ta- +# ble, until a pattern is found that matches the search +# string. +# +# Results are the same as with indexed file lookups, with +# the additional feature that parenthesized substrings from +# the pattern can be interpolated as $1, $2 and so on. +# +# TCP-BASED TABLES +# This section describes how the table lookups change when +# lookups are directed to a TCP-based server. For a descrip- +# tion of the TCP client/server lookup protocol, see tcp_ta- +# ble(5). This feature is available in Postfix 2.5 and +# later. +# +# Each lookup operation uses the entire address once. Thus, +# user@domain mail addresses are not broken up into their +# user and @domain constituent parts, nor is user+foo broken +# up into user and foo. +# +# Results are the same as with indexed file lookups. +# +# BUGS +# The table format does not understand quoting conventions. +# +# CONFIGURATION PARAMETERS +# The following main.cf parameters are especially relevant. +# The text below provides only a parameter summary. See +# postconf(5) for more details including examples. +# +# relocated_maps (empty) +# Optional lookup tables with new contact information +# for users or domains that no longer exist. +# +# Other parameters of interest: +# +# inet_interfaces (all) +# The network interface addresses that this mail sys- +# tem receives mail on. +# +# mydestination ($myhostname, localhost.$mydomain, local- +# host) +# The list of domains that are delivered via the +# $local_transport mail delivery transport. +# +# myorigin ($myhostname) +# The domain name that locally-posted mail appears to +# come from, and that locally posted mail is deliv- +# ered to. +# +# proxy_interfaces (empty) +# The network interface addresses that this mail sys- +# tem receives mail on by way of a proxy or network +# address translation unit. +# +# SEE ALSO +# trivial-rewrite(8), address resolver +# postmap(1), Postfix lookup table manager +# postconf(5), configuration parameters +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# DATABASE_README, Postfix lookup table overview +# ADDRESS_REWRITING_README, address rewriting guide +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# RELOCATED(5) diff --git a/templates/Fedora/41/etc/postfix/transport b/templates/Fedora/41/etc/postfix/transport new file mode 100644 index 0000000..bad7739 --- /dev/null +++ b/templates/Fedora/41/etc/postfix/transport @@ -0,0 +1,317 @@ +# TRANSPORT(5) TRANSPORT(5) +# +# NAME +# transport - Postfix transport table format +# +# SYNOPSIS +# postmap /etc/postfix/transport +# +# postmap -q "string" /etc/postfix/transport +# +# postmap -q - /etc/postfix/transport = 3.5): +# +# example.com smtp:bar.example, foo.example +# +# This tries to deliver to bar.example before trying to +# deliver to foo.example. +# +# The error mailer can be used to bounce mail: +# +# .example.com error:mail for *.example.com is not deliverable +# +# This causes all mail for user@anything.example.com to be +# bounced. +# +# REGULAR EXPRESSION TABLES +# This section describes how the table lookups change when +# the table is given in the form of regular expressions. For +# a description of regular expression lookup table syntax, +# see regexp_table(5) or pcre_table(5). +# +# Each pattern is a regular expression that is applied to +# the entire address being looked up. Thus, +# some.domain.hierarchy is not looked up via its parent +# domains, nor is user+foo@domain looked up as user@domain. +# +# Patterns are applied in the order as specified in the ta- +# ble, until a pattern is found that matches the search +# string. +# +# The trivial-rewrite(8) server disallows regular expression +# substitution of $1 etc. in regular expression lookup +# tables, because that could open a security hole (Postfix +# version 2.3 and later). +# +# TCP-BASED TABLES +# This section describes how the table lookups change when +# lookups are directed to a TCP-based server. For a descrip- +# tion of the TCP client/server lookup protocol, see tcp_ta- +# ble(5). This feature is not available up to and including +# Postfix version 2.4. +# +# Each lookup operation uses the entire recipient address +# once. Thus, some.domain.hierarchy is not looked up via +# its parent domains, nor is user+foo@domain looked up as +# user@domain. +# +# Results are the same as with indexed file lookups. +# +# CONFIGURATION PARAMETERS +# The following main.cf parameters are especially relevant. +# The text below provides only a parameter summary. See +# postconf(5) for more details including examples. +# +# empty_address_recipient (MAILER-DAEMON) +# The recipient of mail addressed to the null +# address. +# +# parent_domain_matches_subdomains (see 'postconf -d' out- +# put) +# A list of Postfix features where the pattern "exam- +# ple.com" also matches subdomains of example.com, +# instead of requiring an explicit ".example.com" +# pattern. +# +# transport_maps (empty) +# Optional lookup tables with mappings from recipient +# address to (message delivery transport, next-hop +# destination). +# +# SEE ALSO +# trivial-rewrite(8), rewrite and resolve addresses +# master(5), master.cf file format +# postconf(5), configuration parameters +# postmap(1), Postfix lookup table manager +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# ADDRESS_REWRITING_README, address rewriting guide +# DATABASE_README, Postfix lookup table overview +# FILTER_README, external content filter +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# TRANSPORT(5) diff --git a/templates/Fedora/41/etc/postfix/virtual b/templates/Fedora/41/etc/postfix/virtual new file mode 100644 index 0000000..96390fe --- /dev/null +++ b/templates/Fedora/41/etc/postfix/virtual @@ -0,0 +1,324 @@ +# VIRTUAL(5) VIRTUAL(5) +# +# NAME +# virtual - Postfix virtual alias table format +# +# SYNOPSIS +# postmap /etc/postfix/virtual +# +# postmap -q "string" /etc/postfix/virtual +# +# postmap -q - /etc/postfix/virtual Date: Fri, 27 Dec 2024 21:58:17 -0600 Subject: [PATCH 41/47] Fedora 41 Signed-off-by: Jason Rothstein --- templates/Fedora/41/etc/postfix/access | 4 +- templates/Fedora/41/etc/postfix/canonical | 49 ++++++++-------- templates/Fedora/41/etc/postfix/generic | 10 ++-- templates/Fedora/41/etc/postfix/header_checks | 56 +++++++------------ templates/Fedora/41/etc/postfix/postfix-files | 9 ++- templates/Fedora/41/etc/postfix/relocated | 10 ++-- 6 files changed, 65 insertions(+), 73 deletions(-) diff --git a/templates/Fedora/41/etc/postfix/access b/templates/Fedora/41/etc/postfix/access index 97892eb..6da2db2 100644 --- a/templates/Fedora/41/etc/postfix/access +++ b/templates/Fedora/41/etc/postfix/access @@ -59,7 +59,7 @@ # line that starts with whitespace continues a logi- # cal line. # -# EMAIL ADDRESS PATTERNS +# EMAIL ADDRESS PATTERNS IN INDEXED TABLES # With lookups from indexed files such as DB or DBM, or from # networked tables such as NIS, LDAP or SQL, patterns are # tried in the order as listed below: @@ -97,7 +97,7 @@ # becomes: user+foo@domain, user@domain, domain, user+foo@, # and user@. # -# HOST NAME/ADDRESS PATTERNS +# HOST NAME/ADDRESS PATTERNS IN INDEXED TABLES # With lookups from indexed files such as DB or DBM, or from # networked tables such as NIS, LDAP or SQL, the following # lookup patterns are examined in the order as listed: diff --git a/templates/Fedora/41/etc/postfix/canonical b/templates/Fedora/41/etc/postfix/canonical index 4957fcc..894fd5b 100644 --- a/templates/Fedora/41/etc/postfix/canonical +++ b/templates/Fedora/41/etc/postfix/canonical @@ -225,57 +225,56 @@ # Other parameters of interest: # # inet_interfaces (all) -# The network interface addresses that this mail sys- -# tem receives mail on. +# The local network interface addresses that this +# mail system receives mail on. # # local_header_rewrite_clients (permit_inet_interfaces) -# Rewrite message header addresses in mail from these -# clients and update incomplete addresses with the -# domain name in $myorigin or $mydomain; either don't -# rewrite message headers from other clients at all, -# or rewrite message headers and update incomplete -# addresses with the domain specified in the -# remote_header_rewrite_domain parameter. +# Rewrite or add message headers in mail from these +# clients, updating incomplete addresses with the +# domain name in $myorigin or $mydomain, and adding +# missing headers. # # proxy_interfaces (empty) -# The network interface addresses that this mail sys- -# tem receives mail on by way of a proxy or network -# address translation unit. +# The remote network interface addresses that this +# mail system receives mail on by way of a proxy or +# network address translation unit. # -# masquerade_classes (envelope_sender, header_sender, +# masquerade_classes (envelope_sender, header_sender, # header_recipient) # What addresses are subject to address masquerading. # # masquerade_domains (empty) -# Optional list of domains whose subdomain structure +# Optional list of domains whose subdomain structure # will be stripped off in email addresses. # # masquerade_exceptions (empty) -# Optional list of user names that are not subjected -# to address masquerading, even when their addresses +# Optional list of user names that are not subjected +# to address masquerading, even when their addresses # match $masquerade_domains. # # mydestination ($myhostname, localhost.$mydomain, local- # host) -# The list of domains that are delivered via the +# The list of domains that are delivered via the # $local_transport mail delivery transport. # # myorigin ($myhostname) # The domain name that locally-posted mail appears to -# come from, and that locally posted mail is deliv- +# come from, and that locally posted mail is deliv- # ered to. # # owner_request_special (yes) # Enable special treatment for owner-listname entries # in the aliases(5) file, and don't split owner-list- -# name and listname-request address localparts when +# name and listname-request address localparts when # the recipient_delimiter is set to "-". # # remote_header_rewrite_domain (empty) -# Don't rewrite message headers from remote clients -# at all when this parameter is empty; otherwise, re- -# write message headers and append the specified -# domain name to incomplete addresses. +# Rewrite or add message headers in mail from remote +# clients if the remote_header_rewrite_domain parame- +# ter value is non-empty, updating incomplete +# addresses with the domain specified in the +# remote_header_rewrite_domain parameter, and adding +# missing headers. # # SEE ALSO # cleanup(8), canonicalize and enqueue mail @@ -284,13 +283,13 @@ # virtual(5), virtual aliasing # # README FILES -# Use "postconf readme_directory" or "postconf html_direc- +# Use "postconf readme_directory" or "postconf html_direc- # tory" to locate this information. # DATABASE_README, Postfix lookup table overview # ADDRESS_REWRITING_README, address rewriting guide # # LICENSE -# The Secure Mailer license must be distributed with this +# The Secure Mailer license must be distributed with this # software. # # AUTHOR(S) diff --git a/templates/Fedora/41/etc/postfix/generic b/templates/Fedora/41/etc/postfix/generic index f371eb9..508e44a 100644 --- a/templates/Fedora/41/etc/postfix/generic +++ b/templates/Fedora/41/etc/postfix/generic @@ -193,13 +193,13 @@ # Other parameters of interest: # # inet_interfaces (all) -# The network interface addresses that this mail sys- -# tem receives mail on. +# The local network interface addresses that this +# mail system receives mail on. # # proxy_interfaces (empty) -# The network interface addresses that this mail sys- -# tem receives mail on by way of a proxy or network -# address translation unit. +# The remote network interface addresses that this +# mail system receives mail on by way of a proxy or +# network address translation unit. # # mydestination ($myhostname, localhost.$mydomain, local- # host) diff --git a/templates/Fedora/41/etc/postfix/header_checks b/templates/Fedora/41/etc/postfix/header_checks index bcd96a9..db295d0 100644 --- a/templates/Fedora/41/etc/postfix/header_checks +++ b/templates/Fedora/41/etc/postfix/header_checks @@ -440,46 +440,32 @@ # tent-Length:, Return-Path:. # # CONFIGURATION PARAMETERS -# body_checks -# Lookup tables with content filter rules for message -# body lines. These filters see one physical line at -# a time, in chunks of at most $line_length_limit -# bytes. +# body_checks (empty) +# Optional lookup tables for content inspection as +# specified in the body_checks(5) manual page. # -# body_checks_size_limit -# The amount of content per message body segment -# (attachment) that is subjected to $body_checks fil- -# tering. +# body_checks_size_limit (51200) +# How much text in a message body segment (or attach- +# ment, if you prefer to use that term) is subjected +# to body_checks inspection. # -# header_checks +# header_checks (empty) +# Optional lookup tables for content inspection of +# primary non-MIME message headers, as specified in +# the header_checks(5) manual page. # -# mime_header_checks (default: $header_checks) +# mime_header_checks ($header_checks) +# Optional lookup tables for content inspection of +# MIME related message headers, as described in the +# header_checks(5) manual page. # -# nested_header_checks (default: $header_checks) -# Lookup tables with content filter rules for message -# header lines: respectively, these are applied to -# the initial message headers (not including MIME -# headers), to the MIME headers anywhere in the mes- -# sage, and to the initial headers of attached mes- -# sages. +# nested_header_checks ($header_checks) +# Optional lookup tables for content inspection of +# non-MIME message headers in attached messages, as +# described in the header_checks(5) manual page. # -# Note: these filters see one logical message header -# at a time, even when a message header spans multi- -# ple lines. Message headers that are longer than -# $header_size_limit characters are truncated. -# -# disable_mime_input_processing -# While receiving mail, give no special treatment to -# MIME related message headers; all text after the -# initial message headers is considered to be part of -# the message body. This means that header_checks is -# applied to all the initial message headers, and -# that body_checks is applied to the remainder of the -# message. -# -# Note: when used in this manner, body_checks will -# process a multi-line message header one line at a -# time. +# disable_mime_input_processing (no) +# Turn off MIME processing while receiving mail. # # EXAMPLES # Header pattern to block attachments with bad file name diff --git a/templates/Fedora/41/etc/postfix/postfix-files b/templates/Fedora/41/etc/postfix/postfix-files index b3ed234..0e176a6 100644 --- a/templates/Fedora/41/etc/postfix/postfix-files +++ b/templates/Fedora/41/etc/postfix/postfix-files @@ -178,6 +178,7 @@ $manpage_directory/man5/generic.5.gz:f:root:-:644 $manpage_directory/man5/header_checks.5.gz:f:root:-:644 $manpage_directory/man5/master.5.gz:f:root:-:644 $manpage_directory/man5/memcache_table.5.gz:f:root:-:644 +$manpage_directory/man5/mongodb_table.5.gz:f:root:-:644 $manpage_directory/man5/socketmap_table.5.gz:f:root:-:644 $manpage_directory/man5/nisplus_table.5.gz:f:root:-:644 $manpage_directory/man5/postconf.5.gz:f:root:-:644 @@ -209,7 +210,7 @@ $manpage_directory/man8/qmgr.8.gz:f:root:-:644 $manpage_directory/man8/qmqpd.8.gz:f:root:-:644 $manpage_directory/man8/scache.8.gz:f:root:-:644 $manpage_directory/man8/showq.8.gz:f:root:-:644 -$manpage_directory/man8/smtp.8.gz:f:root:-:644 +$manpage_directory/man8/smtp.postfix.8.gz:f:root:-:644 $manpage_directory/man8/smtpd.postfix.8.gz:f:root:-:644 $manpage_directory/man8/spawn.8.gz:f:root:-:644 $manpage_directory/man8/tlsproxy.8.gz:f:root:-:644 @@ -264,6 +265,7 @@ $readme_directory/CONTENT_INSPECTION_README:f:root:-:644 $readme_directory/DATABASE_README:f:root:-:644 $readme_directory/DB_README:f:root:-:644 $readme_directory/DEBUG_README:f:root:-:644 +$readme_directory/DEPRECATION_README:f:root:-:644 $readme_directory/DSN_README:f:root:-:644 $readme_directory/ETRN_README:f:root:-:644 $readme_directory/FILTER_README:f:root:-:644 @@ -278,6 +280,7 @@ $readme_directory/MAILDROP_README:f:root:-:644 $readme_directory/MAILLOG_README:f:root:-:644 $readme_directory/MEMCACHE_README:f:root:-:644 $readme_directory/MILTER_README:f:root:-:644 +$readme_directory/MONGODB_README:f:root:-:644 $readme_directory/MULTI_INSTANCE_README:f:root:-:644 $readme_directory/SMTPUTF8_README:f:root:-:644 $readme_directory/NFS_README:f:root:-:644 @@ -321,6 +324,7 @@ $html_directory/CYRUS_README.html:f:root:-:644:o $html_directory/DATABASE_README.html:f:root:-:644 $html_directory/DB_README.html:f:root:-:644 $html_directory/DEBUG_README.html:f:root:-:644 +$html_directory/DEPRECATION_README.html:f:root:-:644 $html_directory/DSN_README.html:f:root:-:644 $html_directory/ETRN_README.html:f:root:-:644 $html_directory/FILTER_README.html:f:root:-:644 @@ -335,6 +339,7 @@ $html_directory/MAILDROP_README.html:f:root:-:644 $html_directory/MAILLOG_README.html:f:root:-:644 $html_directory/MEMCACHE_README.html:f:root:-:644 $html_directory/MILTER_README.html:f:root:-:644 +$html_directory/MONGODB_README.html:f:root:-:644 $html_directory/MULTI_INSTANCE_README.html:f:root:-:644 $html_directory/MYSQL_README.html:f:root:-:644 $html_directory/SMTPUTF8_README.html:f:root:-:644 @@ -391,6 +396,7 @@ $html_directory/mailq.1.html:f:root:-:644 $html_directory/master.5.html:f:root:-:644 $html_directory/master.8.html:f:root:-:644 $html_directory/memcache_table.5.html:f:root:-:644 +$html_directory/mongodb_table.5.html:f:root:-:644 $html_directory/mysql_table.5.html:f:root:-:644 $html_directory/sqlite_table.5.html:f:root:-:644 $html_directory/nisplus_table.5.html:f:root:-:644 @@ -410,6 +416,7 @@ $html_directory/postfix-manuals.html:f:root:-:644 $html_directory/postfix-tls.1.html:f:root:-:644 $html_directory/postfix-wrapper.5.html:f:root:-:644 $html_directory/postfix.1.html:f:root:-:644 +$html_directory/postfix-doc.css:f:root:-:644 $html_directory/postkick.1.html:f:root:-:644 $html_directory/postlock.1.html:f:root:-:644 $html_directory/postlog.1.html:f:root:-:644 diff --git a/templates/Fedora/41/etc/postfix/relocated b/templates/Fedora/41/etc/postfix/relocated index 90f63ec..5c43266 100644 --- a/templates/Fedora/41/etc/postfix/relocated +++ b/templates/Fedora/41/etc/postfix/relocated @@ -131,8 +131,8 @@ # Other parameters of interest: # # inet_interfaces (all) -# The network interface addresses that this mail sys- -# tem receives mail on. +# The local network interface addresses that this +# mail system receives mail on. # # mydestination ($myhostname, localhost.$mydomain, local- # host) @@ -145,9 +145,9 @@ # ered to. # # proxy_interfaces (empty) -# The network interface addresses that this mail sys- -# tem receives mail on by way of a proxy or network -# address translation unit. +# The remote network interface addresses that this +# mail system receives mail on by way of a proxy or +# network address translation unit. # # SEE ALSO # trivial-rewrite(8), address resolver From 6fef597574b07d3be9c17ffc4754893407924dfb Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sun, 27 Apr 2025 12:46:36 -0500 Subject: [PATCH 42/47] Fedora 42 Signed-off-by: Jason Rothstein --- templates/Fedora/42/etc/opendkim.conf | 135 +++ templates/Fedora/42/etc/opendkim/KeyTable | 6 + templates/Fedora/42/etc/opendkim/SigningTable | 25 + templates/Fedora/42/etc/opendkim/TrustedHosts | 9 + templates/Fedora/42/etc/opendmarc.conf | 443 ++++++++++ templates/Fedora/42/etc/postfix/access | 484 +++++++++++ templates/Fedora/42/etc/postfix/canonical | 306 +++++++ .../Fedora/42/etc/postfix/dynamicmaps.cf | 1 + .../42/etc/postfix/dynamicmaps.cf.d/ldap | 1 + .../42/etc/postfix/dynamicmaps.cf.d/mysql | 1 + .../42/etc/postfix/dynamicmaps.cf.d/pcre | 1 + templates/Fedora/42/etc/postfix/generic | 252 ++++++ templates/Fedora/42/etc/postfix/header_checks | 535 ++++++++++++ templates/Fedora/42/etc/postfix/main.cf | 774 ++++++++++++++++++ templates/Fedora/42/etc/postfix/main.cf.proto | 745 +++++++++++++++++ templates/Fedora/42/etc/postfix/master.cf | 145 ++++ .../Fedora/42/etc/postfix/master.cf.proto | 145 ++++ templates/Fedora/42/etc/postfix/postfix-files | 454 ++++++++++ .../42/etc/postfix/postfix-files.d/ldap | 3 + .../42/etc/postfix/postfix-files.d/mysql | 3 + .../42/etc/postfix/postfix-files.d/pcre | 3 + templates/Fedora/42/etc/postfix/relocated | 178 ++++ templates/Fedora/42/etc/postfix/transport | 317 +++++++ templates/Fedora/42/etc/postfix/virtual | 324 ++++++++ .../systemd/system/postfix-copytls.service | 12 + .../lib/systemd/system/postfix-copytls.timer | 9 + vars/Fedora-42-default.yml | 110 +++ 27 files changed, 5421 insertions(+) create mode 100644 templates/Fedora/42/etc/opendkim.conf create mode 100644 templates/Fedora/42/etc/opendkim/KeyTable create mode 100644 templates/Fedora/42/etc/opendkim/SigningTable create mode 100644 templates/Fedora/42/etc/opendkim/TrustedHosts create mode 100644 templates/Fedora/42/etc/opendmarc.conf create mode 100644 templates/Fedora/42/etc/postfix/access create mode 100644 templates/Fedora/42/etc/postfix/canonical create mode 100644 templates/Fedora/42/etc/postfix/dynamicmaps.cf create mode 100644 templates/Fedora/42/etc/postfix/dynamicmaps.cf.d/ldap create mode 100644 templates/Fedora/42/etc/postfix/dynamicmaps.cf.d/mysql create mode 100644 templates/Fedora/42/etc/postfix/dynamicmaps.cf.d/pcre create mode 100644 templates/Fedora/42/etc/postfix/generic create mode 100644 templates/Fedora/42/etc/postfix/header_checks create mode 100644 templates/Fedora/42/etc/postfix/main.cf create mode 100644 templates/Fedora/42/etc/postfix/main.cf.proto create mode 100644 templates/Fedora/42/etc/postfix/master.cf create mode 100644 templates/Fedora/42/etc/postfix/master.cf.proto create mode 100644 templates/Fedora/42/etc/postfix/postfix-files create mode 100644 templates/Fedora/42/etc/postfix/postfix-files.d/ldap create mode 100644 templates/Fedora/42/etc/postfix/postfix-files.d/mysql create mode 100644 templates/Fedora/42/etc/postfix/postfix-files.d/pcre create mode 100644 templates/Fedora/42/etc/postfix/relocated create mode 100644 templates/Fedora/42/etc/postfix/transport create mode 100644 templates/Fedora/42/etc/postfix/virtual create mode 100644 templates/Fedora/42/usr/lib/systemd/system/postfix-copytls.service create mode 100644 templates/Fedora/42/usr/lib/systemd/system/postfix-copytls.timer create mode 100644 vars/Fedora-42-default.yml diff --git a/templates/Fedora/42/etc/opendkim.conf b/templates/Fedora/42/etc/opendkim.conf new file mode 100644 index 0000000..1e26622 --- /dev/null +++ b/templates/Fedora/42/etc/opendkim.conf @@ -0,0 +1,135 @@ +## BASIC OPENDKIM CONFIGURATION FILE +## See opendkim.conf(5) or /usr/share/doc/opendkim/opendkim.conf.sample for more + +## BEFORE running OpenDKIM you must: + +## - make your MTA (Postfix, Sendmail, etc.) aware of OpenDKIM +## - generate keys for your domain (if signing) +## - edit your DNS records to publish your public keys (if signing) + +## See /usr/share/doc/opendkim/INSTALL for detailed instructions. + +## DEPRECATED CONFIGURATION OPTIONS +## +## The following configuration options are no longer valid. They should be +## removed from your existing configuration file to prevent potential issues. +## Failure to do so may result in opendkim being unable to start. +## +## Removed in 2.10.0: +## AddAllSignatureResults +## ADSPAction +## ADSPNoSuchDomain +## BogusPolicy +## DisableADSP +## LDAPSoftStart +## LocalADSP +## NoDiscardableMailTo +## On-PolicyError +## SendADSPReports +## UnprotectedPolicy + +## CONFIGURATION OPTIONS + +## Specifies the path to the process ID file. +#PidFile /run/opendkim/opendkim.pid + +## Selects operating modes. Valid modes are s (sign) and v (verify). Default is v. +## Must be changed to s (sign only) or sv (sign and verify) in order to sign outgoing +## messages. +Mode v + +## Log activity to the system log. +Syslog yes + +## Log additional entries indicating successful signing or verification of messages. +SyslogSuccess yes + +## If logging is enabled, include detailed logging about why or why not a message was +## signed or verified. This causes an increase in the amount of log data generated +## for each message, so set this to No (or comment it out) if it gets too noisy. +LogWhy yes + +## Attempt to become the specified user before starting operations. +UserID opendkim:opendkim + +## Create a socket through which your MTA can communicate. +Socket inet:8891@localhost +#Socket local:/run/opendkim/opendkim.sock + +## Required to use local socket with MTAs that access the socket as a non- +## privileged user (e.g. Postfix) +Umask 002 + +## This specifies a text file in which to store DKIM transaction statistics. +## OpenDKIM must be manually compiled with --enable-stats to enable this feature. +# Statistics /var/spool/opendkim/stats.dat + +## Specifies whether or not the filter should generate report mail back +## to senders when verification fails and an address for such a purpose +## is provided. See opendkim.conf(5) for details. +SendReports yes + +## Specifies the sending address to be used on From: headers of outgoing +## failure reports. By default, the e-mail address of the user executing +## the filter is used (executing_user@hostname). +# ReportAddress "Example.com Postmaster" +ReportAddress "Postmaster" <{{ postmaster_email }}> + +## Add a DKIM-Filter header field to messages passing through this filter +## to identify messages it has processed. +SoftwareHeader yes + +## SIGNING OPTIONS + +## Selects the canonicalization method(s) to be used when signing messages. +Canonicalization relaxed/relaxed + +## Domain(s) whose mail should be signed by this filter. Mail from other domains will +## be verified rather than being signed. Uncomment and use your domain name. +## This parameter is not required if a SigningTable is in use. +# Domain example.com + +## Defines the name of the selector to be used when signing messages. +Selector default + +## Specifies the minimum number of key bits for acceptable keys and signatures. +MinimumKeyBits 1024 + +## Gives the location of a private key to be used for signing ALL messages. This +## directive is ignored if KeyTable is enabled. +# KeyFile /etc/opendkim/keys/default.private + +## Gives the location of a file mapping key names to signing keys. In simple terms, +## this tells OpenDKIM where to find your keys. If present, overrides any KeyFile +## directive in the configuration file. Requires SigningTable be enabled. +# KeyTable /etc/opendkim/KeyTable + +## Defines a table used to select one or more signatures to apply to a message based +## on the address found in the From: header field. In simple terms, this tells +## OpenDKIM how to use your keys. Requires KeyTable be enabled. +# SigningTable refile:/etc/opendkim/SigningTable + +## Identifies a set of "external" hosts that may send mail through the server as one +## of the signing domains without credentials as such. +# ExternalIgnoreList refile:/etc/opendkim/TrustedHosts + +## Identifies a set "internal" hosts whose mail should be signed rather than verified. +# InternalHosts refile:/etc/opendkim/TrustedHosts + +## Contains a list of IP addresses, CIDR blocks, hostnames or domain names +## whose mail should be neither signed nor verified by this filter. See man +## page for file format. +# PeerList X.X.X.X + +## Always oversign From (sign using actual From and a null From to prevent +## malicious signatures header fields (From and/or others) between the signer +## and the verifier. From is oversigned by default in the Fedora package +## because it is often the identity key used by reputation systems and thus +## somewhat security sensitive. +OversignHeaders From + +## Instructs the DKIM library to maintain its own local cache of keys and +## policies retrieved from DNS, rather than relying on the nameserver for +## caching service. Useful if the nameserver being used by the filter is +## not local. +# QueryCache yes diff --git a/templates/Fedora/42/etc/opendkim/KeyTable b/templates/Fedora/42/etc/opendkim/KeyTable new file mode 100644 index 0000000..e804d68 --- /dev/null +++ b/templates/Fedora/42/etc/opendkim/KeyTable @@ -0,0 +1,6 @@ +# OPENDKIM KEY TABLE +# To use this file, uncomment the #KeyTable option in /etc/opendkim.conf, +# then uncomment the following line and replace example.com with your domain +# name, then restart OpenDKIM. Additional keys may be added on separate lines. + +#default._domainkey.example.com example.com:default:/etc/opendkim/keys/default.private diff --git a/templates/Fedora/42/etc/opendkim/SigningTable b/templates/Fedora/42/etc/opendkim/SigningTable new file mode 100644 index 0000000..e8161a1 --- /dev/null +++ b/templates/Fedora/42/etc/opendkim/SigningTable @@ -0,0 +1,25 @@ +# OPENDKIM SIGNING TABLE +# This table controls how to apply one or more signatures to outgoing messages based +# on the address found in the From: header field. In simple terms, this tells +# OpenDKIM "how" to apply your keys. + +# To use this file, uncomment the SigningTable option in /etc/opendkim.conf, +# then uncomment one of the usage examples below and replace example.com with your +# domain name, then restart OpenDKIM. + +# WILDCARD EXAMPLE +# Enables signing for any address on the listed domain(s), but will work only if +# "refile:/etc/opendkim/SigningTable" is included in /etc/opendkim.conf. +# Create additional lines for additional domains. + +#*@example.com default._domainkey.example.com + +# NON-WILDCARD EXAMPLE +# If "file:" (instead of "refile:") is specified in /etc/opendkim.conf, then +# wildcards will not work. Instead, full user@host is checked first, then simply host, +# then user@.domain (with all superdomains checked in sequence, so "foo.example.com" +# would first check "user@foo.example.com", then "user@.example.com", then "user@.com"), +# then .domain, then user@*, and finally *. See the opendkim.conf(5) man page under +# "SigningTable" for more details. + +#example.com default._domainkey.example.com diff --git a/templates/Fedora/42/etc/opendkim/TrustedHosts b/templates/Fedora/42/etc/opendkim/TrustedHosts new file mode 100644 index 0000000..7a086d4 --- /dev/null +++ b/templates/Fedora/42/etc/opendkim/TrustedHosts @@ -0,0 +1,9 @@ +# OPENDKIM TRUSTED HOSTS +# To use this file, uncomment the #ExternalIgnoreList and/or the #InternalHosts +# option in /etc/opendkim.conf then restart OpenDKIM. Additional hosts +# may be added on separate lines (IP addresses, hostnames, or CIDR ranges). +# The localhost IP (127.0.0.1) should always be the first entry in this file. +127.0.0.1 +::1 +#host.example.com +#192.168.1.0/24 diff --git a/templates/Fedora/42/etc/opendmarc.conf b/templates/Fedora/42/etc/opendmarc.conf new file mode 100644 index 0000000..19f6b7b --- /dev/null +++ b/templates/Fedora/42/etc/opendmarc.conf @@ -0,0 +1,443 @@ +## opendmarc.conf -- configuration file for OpenDMARC filter +## +## Copyright (c) 2012-2015, 2018, 2021, The Trusted Domain Project. +## All rights reserved. + +## DEPRECATED CONFIGURATION OPTIONS +## +## The following configuration options are no longer valid. They should be +## removed from your existing configuration file to prevent potential issues. +## Failure to do so may result in opendmarc being unable to start. +## +## Renamed in 1.3.0: +## ForensicReports became FailureReports +## ForensicReportsBcc became FailureReportsBcc +## ForensicReportsOnNone became FailureReportsOnNone +## ForensicReportsSentBy became FailureReportsSentBy + +## CONFIGURATION OPTIONS + +## AuthservID (string) +## defaults to MTA name +## +## Sets the "authserv-id" to use when generating the Authentication-Results: +## header field after verifying a message. If the string "HOSTNAME" is +## provided, the name of the host running the filter (as returned by the +## gethostname(3) function) will be used. +# +# AuthservID name + +## AuthservIDWithJobID { true | false } +## default "false" +## +## If "true", requests that the authserv-id portion of the added +## Authentication-Results header fields contain the job ID of the message +## being evaluated. +# +# AuthservIDWithJobID false + +## AutoRestart { true | false } +## default "false" +## +## Automatically re-start on failures. Use with caution; if the filter fails +## instantly after it starts, this can cause a tight fork(2) loop. +# +# AutoRestart false + +## AutoRestartCount n +## default 0 +## +## Sets the maximum automatic restart count. After this number of automatic +## restarts, the filter will give up and terminate. A value of 0 implies no +## limit. +# +# AutoRestartCount 0 + +## AutoRestartRate n/t[u] +## default (no limit) +## +## Sets the maximum automatic restart rate. If the filter begins restarting +## faster than the rate defined here, it will give up and terminate. This +## is a string of the form n/t[u] where n is an integer limiting the count +## of restarts in the given interval and t[u] defines the time interval +## through which the rate is calculated; t is an integer and u defines the +## units thus represented ("s" or "S" for seconds, the default; "m" or "M" +## for minutes; "h" or "H" for hours; "d" or "D" for days). For example, a +## value of "10/1h" limits the restarts to 10 in one hour. There is no +## default, meaning restart rate is not limited. +# +# AutoRestartRate n/t[u] + +## Background { true | false } +## default "true" +## +## Causes opendmarc to fork and exits immediately, leaving the service +## running in the background. +# +# Background true + +## BaseDirectory (string) +## default (none) +## +## If set, instructs the filter to change to the specified directory using +## chdir(2) before doing anything else. This means any files referenced +## elsewhere in the configuration file can be specified relative to this +## directory. It's also useful for arranging that any crash dumps will be +## saved to a specific location. +# +# BaseDirectory /var/run/opendmarc + +## ChangeRootDirectory (string) +## default (none) +## +## Requests that the operating system change the effective root directory of +## the process to the one specified here prior to beginning execution. +## chroot(2) requires superuser access. A warning will be generated if +## UserID is not also set. +# +# ChangeRootDirectory /var/chroot/opendmarc + +## CopyFailuresTo (string) +## default (none) +## +## Requests addition of the specified email address to the envelope of +## any message that fails the DMARC evaluation. +# +# CopyFailuresTo postmaster@localhost + +## DomainWhitelist (string) +## default (none) +## +## A brief list of whitelisted domains for which ARC signature headers are +## trusted as determined by evaluating entries in the "arc.chain" field found +## in a locally generated Authentication-Results header. +## +## This list will be concatenated with DomainWhitelistFile (if provided). +## +# +# DomainWhitelist example.com + +## DomainWhitelistFile path +## default (none) +## +## A comprehensive list of whitelisted domains for which ARC signature headers +## are trusted as determined by evaluating entries in the "arc.chain" field +## found in a locally generated Authentication-Results header. +## +## This list will be concatenated with DomainWhitelist (if provided). +## +# +# DomainWhitelistFile /etc/opendmarc/whitelist.domains + +## DomainWhitelistSize +## default 3000 +## +## The maximum number of entries in the DomainWhitelist including both entries +## in the DomainWhitelist configuration parameter (above) and entries in the +## DomainWhitelistFile. This number will be increased by approximately 20% to +## increase the efficiency of the hashing algorithm. +## +# +# DomainWhitelistSize 3000 + +## DNSTimeout (integer) +## default 5 +## +## Sets the DNS timeout in seconds. A value of 0 causes an infinite wait. +## (NOT YET IMPLEMENTED) +# +# DNSTimeout 5 + +## EnableCoredumps { true | false } +## default "false" +## +## On systems that have such support, make an explicit request to the kernel +## to dump cores when the filter crashes for some reason. Some modern UNIX +## systems suppress core dumps during crashes for security reasons if the +## user ID has changed during the lifetime of the process. Currently only +## supported on Linux. +# +# EnableCoreDumps false + +## FailureReports { true | false } +## default "false" +## +## Enables generation of failure reports when the DMARC test fails and the +## purported sender of the message has requested such reports. Reports are +## formatted per RFC6591. +# +# FailureReports false + +## FailureReportsBcc (string) +## default (none) +## +## When failure reports are enabled and one is to be generated, always +## send one to the address(es) specified here. If a failure report is +## requested by the domain owner, the address(es) are added in a Bcc: field. +## If no request is made, they address(es) are used in a To: field. There +## is no default. +# +# FailureReportsBcc postmaster@example.coom +FailureReportsBcc {{ postmaster_email }} + +## FailureReportsOnNone { true | false } +## default "false" +## +## Supplements the "FailureReports" setting by generating reports for +## domains that advertise "none" policies. By default, reports are only +## generated (when enabled) for sending domains advertising a "quarantine" +## or "reject" policy. +# +# FailureReportsOnNone false + +## FailureReportsSentBy string +## default "USER@HOSTNAME" +## +## Specifies the email address to use in the From: field of failure +## reports generated by the filter. The default is to use the userid of +## the user running the filter and the local hostname to construct an +## email address. "postmaster" is used in place of the userid if a name +## could not be determined. +# +# FailureReportsSentBy USER@HOSTNAME +FailureReportsSentBy {{ postmaster_email }} + +## HistoryFile path +## default (none) +## +## If set, specifies the location of a text file to which records are written +## that can be used to generate DMARC aggregate reports. Records are groups +## of rows containing information about a single received message, and +## include all relevant information needed to generate a DMARC aggregate +## report. It is expected that this will not be used in its raw form, but +## rather periodically imported into a relational database from which the +## aggregate reports can be extracted by a tool such as opendmarc-import(8). +# +# HistoryFile /var/spool/opendmarc/opendmarc.dat + +## HoldQuarantinedMessages { true | false } +## default "false" +## +## If set, the milter will signal to the mta that messages with +## p=quarantine, which fail dmarc authentication, should be held in +## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. +## If false, messsages will be accepted and passed along with the +## regular mail flow, and the quarantine will be left up to downstream +## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, +## including the Authentication-Results header added by OpenDMARC +# +# HoldQuarantinedMessages false + +## IgnoreAuthenticatedClients { true | false } +## default "false" +## +## If set, causes mail from authenticated clients (i.e., those that used +## SMTP AUTH) to be ignored by the filter. +# +# IgnoreAuthenticatedClients false + +## HoldQuarantinedMessages { true | false } +## default "false" +## +## If set, the milter will signal to the mta that messages with +## p=quarantine, which fail dmarc authentication, should be held in +## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. +## If false, messsages will be accepted and passed along with the +## regular mail flow, and the quarantine will be left up to downstream +## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, +## including the Authentication-Results header added by OpenDMARC +# +# HoldQuarantinedMessages false + + +## IgnoreHosts path +## default (internal) +## +## Specifies the path to a file that contains a list of hostnames, IP +## addresses, and/or CIDR expressions identifying hosts whose SMTP +## connections are to be ignored by the filter. If not specified, defaults +## to "127.0.0.1" only. +# +# IgnoreHosts /etc/opendmarc/ignore.hosts + +## IgnoreMailFrom domain[,...] +## default (none) +## +## Gives a list of domain names whose mail (based on the From: domain) is to +## be ignored by the filter. The list should be comma-separated. Matching +## against this list is case-insensitive. The default is an empty list, +## meaning no mail is ignored. +# +# IgnoreMailFrom example.com + +## MilterDebug (integer) +## default 0 +## +## Sets the debug level to be requested from the milter library. +# +# MilterDebug 0 + +## PidFile path +## default (none) +## +## Specifies the path to a file that should be created at process start +## containing the process ID. +# +# PidFile /var/run/opendmarc.pid + +## PublicSuffixList path +## default (none) +## +## Specifies the path to a file that contains top-level domains (TLDs) that +## will be used to compute the Organizational Domain for a given domain name, +## as described in the DMARC specification. If not provided, the filter will +## not be able to determine the Organizational Domain and only the presented +## domain will be evaluated. This file should be periodically updated. +## One location to retrieve the file from is https://publicsuffix.org/list/ +# +# PublicSuffixList path + +## RecordAllMessages { true | false } +## default "false" +## +## If set and "HistoryFile" is in use, all received messages are recorded +## to the history file. If not set (the default), only messages for which +## the From: domain published a DMARC record will be recorded in the +## history file. +# +# RecordAllMessages false + +## RejectFailures { true | false } +## default "false" +## +## If set, messages will be rejected if they fail the DMARC evaluation, or +## temp-failed if evaluation could not be completed. By default, no message +## will be rejected or temp-failed regardless of the outcome of the DMARC +## evaluation of the message. Instead, an Authentication-Results header +## field will be added. +# +# RejectFailures false +RejectFailures true + +## RejectMultiValueFrom { true | false } +## default "false" +## +## If set, messages with multiple addresses in the From: field of the message +## will be rejected unless all domains in the field are the same. They will +## otherwise be ignored by the filter (the default). +# +# RejectMultiValueFrom false + +## ReportCommand string +## default "/usr/sbin/sendmail -t" +## +## Indicates the shell command to which failure reports should be passed for +## delivery when "FailureReports" is enabled. +# +# ReportCommand /usr/sbin/sendmail -t + +## RequiredHeaders { true | false } +## default "false" +## +## If set, the filter will ensure the header of the message conforms to the +## basic header field count restrictions laid out in RFC5322, Section 3.6. +## Messages failing this test are rejected without further processing. A +## From: field from which no domain name could be extracted will also be +## rejected. +# +# RequiredHeaders false + +## Socket socketspec +## default (none) +## +## Specifies the socket that should be established by the filter to receive +## connections from sendmail(8) in order to provide service. socketspec is +## in one of two forms: local:path, which creates a UNIX domain socket at +## the specified path, or inet:port[@host] or inet6:port[@host] which creates +## a TCP socket on the specified port for the appropriate protocol family. +## If the host is not given as either a hostname or an IP address, the +## socket will be listening on all interfaces. This option is mandatory +## either in the configuration file or on the command line. If an IP +## address is used, it must be enclosed in square brackets. +# +Socket inet:8893@localhost +#Socket local:/run/opendmarc/opendmarc.sock + +## SoftwareHeader { true | false } +## default "false" +## +## Causes the filter to add a "DMARC-Filter" header field indicating the +## presence of this filter in the path of the message from injection to +## delivery. The product's name, version, and the job ID are included in +## the header field's contents. +# +SoftwareHeader true + +## SPFIgnoreResults { true | false } +## default "false" +## +## Causes the filter to ignore any SPF results in the header of the +## message. This is useful if you want the filter to perform SPF checks +## itself, or because you don't trust the arriving header. +# +SPFIgnoreResults true + +## SPFSelfValidate { true | false } +## default false +## +## Enable internal spf checking with --with-spf +## To use libspf2 instead: --with-spf --with-spf2-include=path --with-spf2-lib=path +## +## Causes the filter to perform a fallback SPF check itself when +## it can find no SPF results in the message header. If SPFIgnoreResults +## is also set, it never looks for SPF results in headers and +## always performs the SPF check itself when this is set. +# +SPFSelfValidate true + +## Syslog { true | false } +## default "false" +## +## Log via calls to syslog(3) any interesting activity. +# +Syslog true + +## SyslogFacility facility-name +## default "mail" +## +## Log via calls to syslog(3) using the named facility. The facility names +## are the same as the ones allowed in syslog.conf(5). +# +# SyslogFacility mail + +## TrustedAuthservIDs string +## default HOSTNAME +## +## Specifies one or more "authserv-id" values to trust as relaying true +## upstream DKIM and SPF results. The default is to use the name of +## the MTA processing the message. To specify a list, separate each entry +## with a comma. The key word "HOSTNAME" will be replaced by the name of +## the host running the filter as reported by the gethostname(3) function. +# +# TrustedAuthservIDs HOSTNAME + +## UMask mask +## default (none) +## +## Requests a specific permissions mask to be used for file creation. This +## only really applies to creation of the socket when Socket specifies a +## UNIX domain socket, and to the HistoryFile and PidFile (if any); temporary +## files are normally created by the mkstemp(3) function that enforces a +## specific file mode on creation regardless of the process umask. See +## umask(2) for more information. +# +UMask 007 + +## UserID user[:group] +## default (none) +## +## Attempts to become the specified userid before starting operations. +## The process will be assigned all of the groups and primary group ID of +## the named userid unless an alternate group is specified. +# +UserID opendmarc:mail diff --git a/templates/Fedora/42/etc/postfix/access b/templates/Fedora/42/etc/postfix/access new file mode 100644 index 0000000..6da2db2 --- /dev/null +++ b/templates/Fedora/42/etc/postfix/access @@ -0,0 +1,484 @@ +# ACCESS(5) ACCESS(5) +# +# NAME +# access - Postfix SMTP server access table +# +# SYNOPSIS +# postmap /etc/postfix/access +# +# postmap -q "string" /etc/postfix/access +# +# postmap -q - /etc/postfix/access as the lookup key for such addresses. The value is +# specified with the smtpd_null_access_lookup_key parameter +# in the Postfix main.cf file. +# +# EMAIL ADDRESS EXTENSION +# When a mail address localpart contains the optional recip- +# ient delimiter (e.g., user+foo@domain), the lookup order +# becomes: user+foo@domain, user@domain, domain, user+foo@, +# and user@. +# +# HOST NAME/ADDRESS PATTERNS IN INDEXED TABLES +# With lookups from indexed files such as DB or DBM, or from +# networked tables such as NIS, LDAP or SQL, the following +# lookup patterns are examined in the order as listed: +# +# domain.tld +# Matches domain.tld. +# +# The pattern domain.tld also matches subdomains, but +# only when the string smtpd_access_maps is listed in +# the Postfix parent_domain_matches_subdomains con- +# figuration setting. +# +# .domain.tld +# Matches subdomains of domain.tld, but only when the +# string smtpd_access_maps is not listed in the Post- +# fix parent_domain_matches_subdomains configuration +# setting. +# +# net.work.addr.ess +# +# net.work.addr +# +# net.work +# +# net Matches a remote IPv4 host address or network +# address range. Specify one to four decimal octets +# separated by ".". Do not specify "[]" , "/", lead- +# ing zeros, or hexadecimal forms. +# +# Network ranges are matched by repeatedly truncating +# the last ".octet" from a remote IPv4 host address +# string, until a match is found in the access table, +# or until further truncation is not possible. +# +# NOTE: use the cidr lookup table type to specify +# network/netmask patterns. See cidr_table(5) for +# details. +# +# net:work:addr:ess +# +# net:work:addr +# +# net:work +# +# net Matches a remote IPv6 host address or network +# address range. Specify three to eight hexadecimal +# octet pairs separated by ":", using the compressed +# form "::" for a sequence of zero-valued octet +# pairs. Do not specify "[]", "/", leading zeros, or +# non-compressed forms. +# +# A network range is matched by repeatedly truncating +# the last ":octetpair" from the compressed-form +# remote IPv6 host address string, until a match is +# found in the access table, or until further trunca- +# tion is not possible. +# +# NOTE: use the cidr lookup table type to specify +# network/netmask patterns. See cidr_table(5) for +# details. +# +# IPv6 support is available in Postfix 2.2 and later. +# +# ACCEPT ACTIONS +# OK Accept the address etc. that matches the pattern. +# +# all-numerical +# An all-numerical result is treated as OK. This for- +# mat is generated by address-based relay authoriza- +# tion schemes such as pop-before-smtp. +# +# For other accept actions, see "OTHER ACTIONS" below. +# +# REJECT ACTIONS +# Postfix version 2.3 and later support enhanced status +# codes as defined in RFC 3463. When no code is specified +# at the beginning of the text below, Postfix inserts a +# default enhanced status code of "5.7.1" in the case of +# reject actions, and "4.7.1" in the case of defer actions. +# See "ENHANCED STATUS CODES" below. +# +# 4NN text +# +# 5NN text +# Reject the address etc. that matches the pattern, +# and respond with the numerical three-digit code and +# text. 4NN means "try again later", while 5NN means +# "do not try again". +# +# The following responses have special meaning for +# the Postfix SMTP server: +# +# 421 text (Postfix 2.3 and later) +# +# 521 text (Postfix 2.6 and later) +# After responding with the numerical +# three-digit code and text, disconnect imme- +# diately from the SMTP client. This frees up +# SMTP server resources so that they can be +# made available to another SMTP client. +# +# Note: The "521" response should be used only +# with botnets and other malware where inter- +# operability is of no concern. The "send 521 +# and disconnect" behavior is NOT defined in +# the SMTP standard. +# +# REJECT optional text... +# Reject the address etc. that matches the pattern. +# Reply with "$access_map_reject_code optional +# text..." when the optional text is specified, oth- +# erwise reply with a generic error response message. +# +# DEFER optional text... +# Reject the address etc. that matches the pattern. +# Reply with "$access_map_defer_code optional +# text..." when the optional text is specified, oth- +# erwise reply with a generic error response message. +# +# This feature is available in Postfix 2.6 and later. +# +# DEFER_IF_REJECT optional text... +# Defer the request if some later restriction would +# result in a REJECT action. Reply with +# "$access_map_defer_code 4.7.1 optional text..." +# when the optional text is specified, otherwise +# reply with a generic error response message. +# +# Prior to Postfix 2.6, the SMTP reply code is 450. +# +# This feature is available in Postfix 2.1 and later. +# +# DEFER_IF_PERMIT optional text... +# Defer the request if some later restriction would +# result in an explicit or implicit PERMIT action. +# Reply with "$access_map_defer_code 4.7.1 optional +# text..." when the optional text is specified, oth- +# erwise reply with a generic error response message. +# +# Prior to Postfix 2.6, the SMTP reply code is 450. +# +# This feature is available in Postfix 2.1 and later. +# +# For other reject actions, see "OTHER ACTIONS" below. +# +# OTHER ACTIONS +# restriction... +# Apply the named UCE restriction(s) (permit, reject, +# reject_unauth_destination, and so on). +# +# BCC user@domain +# Send one copy of the message to the specified +# recipient. +# +# If multiple BCC actions are specified within the +# same SMTP MAIL transaction, with Postfix 3.0 only +# the last action will be used. +# +# This feature is available in Postfix 3.0 and later. +# +# DISCARD optional text... +# Claim successful delivery and silently discard the +# message. Log the optional text if specified, oth- +# erwise log a generic message. +# +# Note: this action currently affects all recipients +# of the message. To discard only one recipient +# without discarding the entire message, use the +# transport(5) table to direct mail to the discard(8) +# service. +# +# This feature is available in Postfix 2.0 and later. +# +# DUNNO Pretend that the lookup key was not found. This +# prevents Postfix from trying substrings of the +# lookup key (such as a subdomain name, or a network +# address subnetwork). +# +# This feature is available in Postfix 2.0 and later. +# +# FILTER transport:destination +# After the message is queued, send the entire mes- +# sage through the specified external content filter. +# The transport name specifies the first field of a +# mail delivery agent definition in master.cf; the +# syntax of the next-hop destination is described in +# the manual page of the corresponding delivery +# agent. More information about external content +# filters is in the Postfix FILTER_README file. +# +# Note 1: do not use $number regular expression sub- +# stitutions for transport or destination unless you +# know that the information has a trusted origin. +# +# Note 2: this action overrides the main.cf con- +# tent_filter setting, and affects all recipients of +# the message. In the case that multiple FILTER +# actions fire, only the last one is executed. +# +# Note 3: the purpose of the FILTER command is to +# override message routing. To override the recipi- +# ent's transport but not the next-hop destination, +# specify an empty filter destination (Postfix 2.7 +# and later), or specify a transport:destination that +# delivers through a different Postfix instance +# (Postfix 2.6 and earlier). Other options are using +# the recipient-dependent transport_maps or the sen- +# der-dependent sender_dependent_default_transport- +# _maps features. +# +# This feature is available in Postfix 2.0 and later. +# +# HOLD optional text... +# Place the message on the hold queue, where it will +# sit until someone either deletes it or releases it +# for delivery. Log the optional text if specified, +# otherwise log a generic message. +# +# Mail that is placed on hold can be examined with +# the postcat(1) command, and can be destroyed or +# released with the postsuper(1) command. +# +# Note: use "postsuper -r" to release mail that was +# kept on hold for a significant fraction of $maxi- +# mal_queue_lifetime or $bounce_queue_lifetime, or +# longer. Use "postsuper -H" only for mail that will +# not expire within a few delivery attempts. +# +# Note: this action currently affects all recipients +# of the message. +# +# This feature is available in Postfix 2.0 and later. +# +# PREPEND headername: headervalue +# Prepend the specified message header to the mes- +# sage. When more than one PREPEND action executes, +# the first prepended header appears before the sec- +# ond etc. prepended header. +# +# Note: this action must execute before the message +# content is received; it cannot execute in the con- +# text of smtpd_end_of_data_restrictions. +# +# This feature is available in Postfix 2.1 and later. +# +# REDIRECT user@domain +# After the message is queued, send the message to +# the specified address instead of the intended +# recipient(s). When multiple REDIRECT actions fire, +# only the last one takes effect. +# +# Note: this action overrides the FILTER action, and +# currently overrides all recipients of the message. +# +# This feature is available in Postfix 2.1 and later. +# +# INFO optional text... +# Log an informational record with the optional text, +# together with client information and if available, +# with helo, sender, recipient and protocol informa- +# tion. +# +# This feature is available in Postfix 3.0 and later. +# +# WARN optional text... +# Log a warning with the optional text, together with +# client information and if available, with helo, +# sender, recipient and protocol information. +# +# This feature is available in Postfix 2.1 and later. +# +# ENHANCED STATUS CODES +# Postfix version 2.3 and later support enhanced status +# codes as defined in RFC 3463. When an enhanced status +# code is specified in an access table, it is subject to +# modification. The following transformations are needed +# when the same access table is used for client, helo, +# sender, or recipient access restrictions; they happen +# regardless of whether Postfix replies to a MAIL FROM, RCPT +# TO or other SMTP command. +# +# o When a sender address matches a REJECT action, the +# Postfix SMTP server will transform a recipient DSN +# status (e.g., 4.1.1-4.1.6) into the corresponding +# sender DSN status, and vice versa. +# +# o When non-address information matches a REJECT +# action (such as the HELO command argument or the +# client hostname/address), the Postfix SMTP server +# will transform a sender or recipient DSN status +# into a generic non-address DSN status (e.g., +# 4.0.0). +# +# REGULAR EXPRESSION TABLES +# This section describes how the table lookups change when +# the table is given in the form of regular expressions. For +# a description of regular expression lookup table syntax, +# see regexp_table(5) or pcre_table(5). +# +# Each pattern is a regular expression that is applied to +# the entire string being looked up. Depending on the appli- +# cation, that string is an entire client hostname, an +# entire client IP address, or an entire mail address. Thus, +# no parent domain or parent network search is done, +# user@domain mail addresses are not broken up into their +# user@ and domain constituent parts, nor is user+foo broken +# up into user and foo. +# +# Patterns are applied in the order as specified in the ta- +# ble, until a pattern is found that matches the search +# string. +# +# Actions are the same as with indexed file lookups, with +# the additional feature that parenthesized substrings from +# the pattern can be interpolated as $1, $2 and so on. +# +# TCP-BASED TABLES +# This section describes how the table lookups change when +# lookups are directed to a TCP-based server. For a descrip- +# tion of the TCP client/server lookup protocol, see tcp_ta- +# ble(5). This feature is not available up to and including +# Postfix version 2.4. +# +# Each lookup operation uses the entire query string once. +# Depending on the application, that string is an entire +# client hostname, an entire client IP address, or an entire +# mail address. Thus, no parent domain or parent network +# search is done, user@domain mail addresses are not broken +# up into their user@ and domain constituent parts, nor is +# user+foo broken up into user and foo. +# +# Actions are the same as with indexed file lookups. +# +# EXAMPLE +# The following example uses an indexed file, so that the +# order of table entries does not matter. The example per- +# mits access by the client at address 1.2.3.4 but rejects +# all other clients in 1.2.3.0/24. Instead of hash lookup +# tables, some systems use dbm. Use the command "postconf +# -m" to find out what lookup tables Postfix supports on +# your system. +# +# /etc/postfix/main.cf: +# smtpd_client_restrictions = +# check_client_access hash:/etc/postfix/access +# +# /etc/postfix/access: +# 1.2.3 REJECT +# 1.2.3.4 OK +# +# Execute the command "postmap /etc/postfix/access" after +# editing the file. +# +# BUGS +# The table format does not understand quoting conventions. +# +# SEE ALSO +# postmap(1), Postfix lookup table manager +# smtpd(8), SMTP server +# postconf(5), configuration parameters +# transport(5), transport:nexthop syntax +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# SMTPD_ACCESS_README, built-in SMTP server access control +# DATABASE_README, Postfix lookup table overview +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# ACCESS(5) diff --git a/templates/Fedora/42/etc/postfix/canonical b/templates/Fedora/42/etc/postfix/canonical new file mode 100644 index 0000000..894fd5b --- /dev/null +++ b/templates/Fedora/42/etc/postfix/canonical @@ -0,0 +1,306 @@ +# CANONICAL(5) CANONICAL(5) +# +# NAME +# canonical - Postfix canonical table format +# +# SYNOPSIS +# postmap /etc/postfix/canonical +# +# postmap -q "string" /etc/postfix/canonical +# +# postmap -q - /etc/postfix/canonical $/ +# REJECT IFRAME vulnerability exploit +# +# SEE ALSO +# cleanup(8), canonicalize and enqueue Postfix message +# pcre_table(5), format of PCRE lookup tables +# regexp_table(5), format of POSIX regular expression tables +# postconf(1), Postfix configuration utility +# postmap(1), Postfix lookup table management +# postsuper(1), Postfix janitor +# postcat(1), show Postfix queue file contents +# RFC 2045, base64 and quoted-printable encoding rules +# RFC 2047, message header encoding for non-ASCII text +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# DATABASE_README, Postfix lookup table overview +# CONTENT_INSPECTION_README, Postfix content inspection overview +# BUILTIN_FILTER_README, Postfix built-in content inspection +# BACKSCATTER_README, blocking returned forged mail +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# HEADER_CHECKS(5) diff --git a/templates/Fedora/42/etc/postfix/main.cf b/templates/Fedora/42/etc/postfix/main.cf new file mode 100644 index 0000000..e7c5ce2 --- /dev/null +++ b/templates/Fedora/42/etc/postfix/main.cf @@ -0,0 +1,774 @@ +# Global Postfix configuration file. This file lists only a subset +# of all parameters. For the syntax, and for a complete parameter +# list, see the postconf(5) manual page (command: "man 5 postconf"). +# +# TIP: use the command "postconf -n" to view main.cf parameter +# settings, "postconf parametername" to view a specific parameter, +# and "postconf 'parametername=value'" to set a specific parameter. +# +# For common configuration examples, see BASIC_CONFIGURATION_README +# and STANDARD_CONFIGURATION_README. To find these documents, use +# the command "postconf html_directory readme_directory", or go to +# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. +# +# For best results, change no more than 2-3 parameters at a time, +# and test if Postfix still works after every change. + +# COMPATIBILITY +# +# The compatibility_level determines what default settings Postfix +# will use for main.cf and master.cf settings. These defaults will +# change over time. +# +# To avoid breaking things, Postfix will use backwards-compatible +# default settings and log where it uses those old backwards-compatible +# default settings, until the system administrator has determined +# if any backwards-compatible default settings need to be made +# permanent in main.cf or master.cf. +# +# When this review is complete, update the compatibility_level setting +# below as recommended in the RELEASE_NOTES file. +# +# The level below is what should be used with new (not upgrade) installs. +# +compatibility_level = 3.7 + +# SOFT BOUNCE +# +# The soft_bounce parameter provides a limited safety net for +# testing. When soft_bounce is enabled, mail will remain queued that +# would otherwise bounce. This parameter disables locally-generated +# bounces, and prevents the SMTP server from rejecting mail permanently +# (by changing 5xx replies into 4xx replies). However, soft_bounce +# is no cure for address rewriting mistakes or mail routing mistakes. +# +#soft_bounce = no + +# LOCAL PATHNAME INFORMATION +# +# The queue_directory specifies the location of the Postfix queue. +# This is also the root directory of Postfix daemons that run chrooted. +# See the files in examples/chroot-setup for setting up Postfix chroot +# environments on different UNIX systems. +# +queue_directory = /var/spool/postfix + +# The command_directory parameter specifies the location of all +# postXXX commands. +# +command_directory = /usr/sbin + +# The daemon_directory parameter specifies the location of all Postfix +# daemon programs (i.e. programs listed in the master.cf file). This +# directory must be owned by root. +# +daemon_directory = /usr/libexec/postfix + +# The data_directory parameter specifies the location of Postfix-writable +# data files (caches, random numbers). This directory must be owned +# by the mail_owner account (see below). +# +data_directory = /var/lib/postfix + +# QUEUE AND PROCESS OWNERSHIP +# +# The mail_owner parameter specifies the owner of the Postfix queue +# and of most Postfix daemon processes. Specify the name of a user +# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS +# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In +# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED +# USER. +# +mail_owner = postfix + +# The default_privs parameter specifies the default rights used by +# the local delivery agent for delivery to external file or command. +# These rights are used in the absence of a recipient user context. +# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. +# +#default_privs = nobody + +# INTERNET HOST AND DOMAIN NAMES +# +# The myhostname parameter specifies the internet hostname of this +# mail system. The default is to use the fully-qualified domain name +# from gethostname(). $myhostname is used as a default value for many +# other configuration parameters. +# +#myhostname = host.domain.tld +#myhostname = virtual.domain.tld + +# The mydomain parameter specifies the local internet domain name. +# The default is to use $myhostname minus the first component. +# $mydomain is used as a default value for many other configuration +# parameters. +# +#mydomain = domain.tld + +# SENDING MAIL +# +# The myorigin parameter specifies the domain that locally-posted +# mail appears to come from. The default is to append $myhostname, +# which is fine for small sites. If you run a domain with multiple +# machines, you should (1) change this to $mydomain and (2) set up +# a domain-wide alias database that aliases each user to +# user@that.users.mailhost. +# +# For the sake of consistency between sender and recipient addresses, +# myorigin also specifies the default domain name that is appended +# to recipient addresses that have no @domain part. +# +#myorigin = $myhostname +#myorigin = $mydomain + +# RECEIVING MAIL + +# The inet_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on. By default, +# the software claims all active interfaces on the machine. The +# parameter also controls delivery of mail to user@[ip.address]. +# +# See also the proxy_interfaces parameter, for network addresses that +# are forwarded to us via a proxy or network address translator. +# +# Note: you need to stop/start Postfix when this parameter changes. +# +inet_interfaces = all +#inet_interfaces = $myhostname +#inet_interfaces = $myhostname, localhost +#inet_interfaces = localhost + +# Enable IPv4, and IPv6 if supported +inet_protocols = all + +# The proxy_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on by way of a +# proxy or network address translation unit. This setting extends +# the address list specified with the inet_interfaces parameter. +# +# You must specify your proxy/NAT addresses when your system is a +# backup MX host for other domains, otherwise mail delivery loops +# will happen when the primary MX host is down. +# +#proxy_interfaces = +#proxy_interfaces = 1.2.3.4 + +# The mydestination parameter specifies the list of domains that this +# machine considers itself the final destination for. +# +# These domains are routed to the delivery agent specified with the +# local_transport parameter setting. By default, that is the UNIX +# compatible delivery agent that lookups all recipients in /etc/passwd +# and /etc/aliases or their equivalent. +# +# The default is $myhostname + localhost.$mydomain + localhost. On +# a mail domain gateway, you should also include $mydomain. +# +# Do not specify the names of virtual domains - those domains are +# specified elsewhere (see VIRTUAL_README). +# +# Do not specify the names of domains that this machine is backup MX +# host for. Specify those names via the relay_domains settings for +# the SMTP server, or use permit_mx_backup if you are lazy (see +# STANDARD_CONFIGURATION_README). +# +# The local machine is always the final destination for mail addressed +# to user@[the.net.work.address] of an interface that the mail system +# receives mail on (see the inet_interfaces parameter). +# +# Specify a list of host or domain names, /file/name or type:table +# patterns, separated by commas and/or whitespace. A /file/name +# pattern is replaced by its contents; a type:table is matched when +# a name matches a lookup key (the right-hand side is ignored). +# Continue long lines by starting the next line with whitespace. +# +# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". +# +mydestination = $myhostname, localhost.$mydomain, localhost +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, +# mail.$mydomain, www.$mydomain, ftp.$mydomain + +# REJECTING MAIL FOR UNKNOWN LOCAL USERS +# +# The local_recipient_maps parameter specifies optional lookup tables +# with all names or addresses of users that are local with respect +# to $mydestination, $inet_interfaces or $proxy_interfaces. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown local users. This parameter is defined by default. +# +# To turn off local recipient checking in the SMTP server, specify +# local_recipient_maps = (i.e. empty). +# +# The default setting assumes that you use the default Postfix local +# delivery agent for local delivery. You need to update the +# local_recipient_maps setting if: +# +# - You define $mydestination domain recipients in files other than +# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. +# For example, you define $mydestination domain recipients in +# the $virtual_mailbox_maps files. +# +# - You redefine the local delivery agent in master.cf. +# +# - You redefine the "local_transport" setting in main.cf. +# +# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" +# feature of the Postfix local delivery agent (see local(8)). +# +# Details are described in the LOCAL_RECIPIENT_README file. +# +# Beware: if the Postfix SMTP server runs chrooted, you probably have +# to access the passwd file via the proxymap service, in order to +# overcome chroot restrictions. The alternative, having a copy of +# the system passwd file in the chroot jail is just not practical. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify a bare username, an @domain.tld +# wild-card, or specify a user@domain.tld address. +# +#local_recipient_maps = unix:passwd.byname $alias_maps +#local_recipient_maps = proxy:unix:passwd.byname $alias_maps +#local_recipient_maps = + +# The unknown_local_recipient_reject_code specifies the SMTP server +# response code when a recipient domain matches $mydestination or +# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty +# and the recipient address or address local-part is not found. +# +# The default setting is 550 (reject mail) but it is safer to start +# with 450 (try again later) until you are certain that your +# local_recipient_maps settings are OK. +# +unknown_local_recipient_reject_code = 550 + +# TRUST AND RELAY CONTROL + +# The mynetworks parameter specifies the list of "trusted" SMTP +# clients that have more privileges than "strangers". +# +# In particular, "trusted" SMTP clients are allowed to relay mail +# through Postfix. See the smtpd_recipient_restrictions parameter +# in postconf(5). +# +# You can specify the list of "trusted" network addresses by hand +# or you can let Postfix do it for you (which is the default). +# +# By default (mynetworks_style = host), Postfix "trusts" only +# the local machine. +# +# Specify "mynetworks_style = subnet" when Postfix should "trust" +# SMTP clients in the same IP subnetworks as the local machine. +# On Linux, this works correctly only with interfaces specified +# with the "ifconfig" or "ip" command. +# +# Specify "mynetworks_style = class" when Postfix should "trust" SMTP +# clients in the same IP class A/B/C networks as the local machine. +# Don't do this with a dialup site - it would cause Postfix to "trust" +# your entire provider's network. Instead, specify an explicit +# mynetworks list by hand, as described below. +# +# Specify "mynetworks_style = host" when Postfix should "trust" +# only the local machine. +# +#mynetworks_style = class +#mynetworks_style = subnet +#mynetworks_style = host + +# Alternatively, you can specify the mynetworks list by hand, in +# which case Postfix ignores the mynetworks_style setting. +# +# Specify an explicit list of network/netmask patterns, where the +# mask specifies the number of bits in the network part of a host +# address. +# +# You can also specify the absolute pathname of a pattern file instead +# of listing the patterns here. Specify type:table for table-based lookups +# (the value on the table right-hand side is not used). +# +#mynetworks = 168.100.3.0/28, 127.0.0.0/8 +#mynetworks = $config_directory/mynetworks +#mynetworks = hash:/etc/postfix/network_table + +# The relay_domains parameter restricts what destinations this system will +# relay mail to. See the smtpd_relay_restrictions and +# smtpd_recipient_restrictions descriptions in postconf(5) for detailed +# information. +# +# By default, Postfix relays mail +# - from "trusted" clients (IP address matches $mynetworks, or is +# SASL authenticated) to any destination, +# - from "untrusted" clients to destinations that match $relay_domains or +# subdomains thereof, except addresses with sender-specified routing. +# The default relay_domains value is empty. +# +# In addition to the above, the Postfix SMTP server by default accepts mail +# that Postfix is final destination for: +# - destinations that match $inet_interfaces or $proxy_interfaces, +# - destinations that match $mydestination +# - destinations that match $virtual_alias_domains, +# - destinations that match $virtual_mailbox_domains. +# These destinations do not need to be listed in $relay_domains. +# +# Specify a list of hosts or domains, /file/name patterns or type:name +# lookup tables, separated by commas and/or whitespace. Continue +# long lines by starting the next line with whitespace. A file name +# is replaced by its contents; a type:name table is matched when a +# (parent) domain appears as lookup key. +# +# NOTE: Postfix will not automatically forward mail for domains that +# list this system as their primary or backup MX host. See the +# permit_mx_backup restriction description in postconf(5). +# +#relay_domains = + +# INTERNET OR INTRANET + +# The relayhost parameter specifies the default host to send mail to +# when no entry is matched in the optional transport(5) table. When +# no relayhost is given, mail is routed directly to the destination. +# +# On an intranet, specify the organizational domain name. If your +# internal DNS uses no MX records, specify the name of the intranet +# gateway host instead. +# +# In the case of SMTP, specify a domain, host, host:port, [host]:port, +# [address] or [address]:port; the form [host] turns off MX lookups. +# +# If you're connected via UUCP, see also the default_transport parameter. +# +#relayhost = $mydomain +#relayhost = [gateway.my.domain] +#relayhost = [mailserver.isp.tld] +#relayhost = uucphost +#relayhost = [an.ip.add.ress] + +# REJECTING UNKNOWN RELAY USERS +# +# The relay_recipient_maps parameter specifies optional lookup tables +# with all addresses in the domains that match $relay_domains. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown relay users. This feature is off by default. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify an @domain.tld wild-card, or specify +# a user@domain.tld address. +# +#relay_recipient_maps = hash:/etc/postfix/relay_recipients + +# INPUT RATE CONTROL +# +# The in_flow_delay configuration parameter implements mail input +# flow control. This feature is turned on by default, although it +# still needs further development (it's disabled on SCO UNIX due +# to an SCO bug). +# +# A Postfix process will pause for $in_flow_delay seconds before +# accepting a new message, when the message arrival rate exceeds the +# message delivery rate. With the default 100 SMTP server process +# limit, this limits the mail inflow to 100 messages a second more +# than the number of messages delivered per second. +# +# Specify 0 to disable the feature. Valid delays are 0..10. +# +#in_flow_delay = 1s + +# ADDRESS REWRITING +# +# The ADDRESS_REWRITING_README document gives information about +# address masquerading or other forms of address rewriting including +# username->Firstname.Lastname mapping. + +# ADDRESS REDIRECTION (VIRTUAL DOMAIN) +# +# The VIRTUAL_README document gives information about the many forms +# of domain hosting that Postfix supports. + +# "USER HAS MOVED" BOUNCE MESSAGES +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# TRANSPORT MAP +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# ALIAS DATABASE +# +# The alias_maps parameter specifies the list of alias databases used +# by the local delivery agent. The default list is system dependent. +# +# On systems with NIS, the default is to search the local alias +# database, then the NIS alias database. See aliases(5) for syntax +# details. +# +# If you change the alias database, run "postalias /etc/aliases" (or +# wherever your system stores the mail alias file), or simply run +# "newaliases" to build the necessary DBM or DB file. +# +# It will take a minute or so before changes become visible. Use +# "postfix reload" to eliminate the delay. +# +#alias_maps = dbm:/etc/aliases +alias_maps = hash:/etc/aliases +#alias_maps = hash:/etc/aliases, nis:mail.aliases +#alias_maps = netinfo:/aliases + +# The alias_database parameter specifies the alias database(s) that +# are built with "newaliases" or "sendmail -bi". This is a separate +# configuration parameter, because alias_maps (see above) may specify +# tables that are not necessarily all under control by Postfix. +# +#alias_database = dbm:/etc/aliases +#alias_database = dbm:/etc/mail/aliases +alias_database = hash:/etc/aliases +#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases + +# ADDRESS EXTENSIONS (e.g., user+foo) +# +# The recipient_delimiter parameter specifies the separator between +# user names and address extensions (user+foo). See canonical(5), +# local(8), relocated(5) and virtual(5) for the effects this has on +# aliases, canonical, virtual, relocated and .forward file lookups. +# Basically, the software tries user+foo and .forward+foo before +# trying user and .forward. +# +#recipient_delimiter = + + +# DELIVERY TO MAILBOX +# +# The home_mailbox parameter specifies the optional pathname of a +# mailbox file relative to a user's home directory. The default +# mailbox file is /var/spool/mail/user or /var/mail/user. Specify +# "Maildir/" for qmail-style delivery (the / is required). +# +#home_mailbox = Mailbox +#home_mailbox = Maildir/ + +# The mail_spool_directory parameter specifies the directory where +# UNIX-style mailboxes are kept. The default setting depends on the +# system type. +# +#mail_spool_directory = /var/mail +#mail_spool_directory = /var/spool/mail + +# The mailbox_command parameter specifies the optional external +# command to use instead of mailbox delivery. The command is run as +# the recipient with proper HOME, SHELL and LOGNAME environment settings. +# Exception: delivery for root is done as $default_user. +# +# Other environment variables of interest: USER (recipient username), +# EXTENSION (address extension), DOMAIN (domain part of address), +# and LOCAL (the address localpart). +# +# Unlike other Postfix configuration parameters, the mailbox_command +# parameter is not subjected to $parameter substitutions. This is to +# make it easier to specify shell syntax (see example below). +# +# Avoid shell meta characters because they will force Postfix to run +# an expensive shell process. Procmail alone is expensive enough. +# +# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN +# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. +# +#mailbox_command = /some/where/procmail +#mailbox_command = /some/where/procmail -a "$EXTENSION" + +# The mailbox_transport specifies the optional transport in master.cf +# to use after processing aliases and .forward files. This parameter +# has precedence over the mailbox_command, fallback_transport and +# luser_relay parameters. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" +# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. +#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp +mailbox_transport = lmtp:inet:localhost:24 +virtual_transport = lmtp:inet:localhost:24 + +# If using the cyrus-imapd IMAP server deliver local mail to the IMAP +# server using LMTP (Local Mail Transport Protocol), this is prefered +# over the older cyrus deliver program by setting the +# mailbox_transport as below: +# +# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp +# +# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via +# these settings. +# +# local_destination_recipient_limit = 300 +# local_destination_concurrency_limit = 5 +# +# Of course you should adjust these settings as appropriate for the +# capacity of the hardware you are using. The recipient limit setting +# can be used to take advantage of the single instance message store +# capability of Cyrus. The concurrency limit can be used to control +# how many simultaneous LMTP sessions will be permitted to the Cyrus +# message store. +# +# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and +# subsequent line in master.cf. +#mailbox_transport = cyrus + +# The fallback_transport specifies the optional transport in master.cf +# to use for recipients that are not found in the UNIX passwd database. +# This parameter has precedence over the luser_relay parameter. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp +#fallback_transport = + +# The luser_relay parameter specifies an optional destination address +# for unknown recipients. By default, mail for unknown@$mydestination, +# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned +# as undeliverable. +# +# The following expansions are done on luser_relay: $user (recipient +# username), $shell (recipient shell), $home (recipient home directory), +# $recipient (full recipient address), $extension (recipient address +# extension), $domain (recipient domain), $local (entire recipient +# localpart), $recipient_delimiter. Specify ${name?value} or +# ${name:value} to expand value only when $name does (does not) exist. +# +# luser_relay works only for the default Postfix local delivery agent. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must specify "local_recipient_maps =" (i.e. empty) in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#luser_relay = $user@other.host +#luser_relay = $local@other.host +#luser_relay = admin+$local + +# JUNK MAIL CONTROLS +# +# The controls listed here are only a very small subset. The file +# SMTPD_ACCESS_README provides an overview. + +# The header_checks parameter specifies an optional table with patterns +# that each logical message header is matched against, including +# headers that span multiple physical lines. +# +# By default, these patterns also apply to MIME headers and to the +# headers of attached messages. With older Postfix versions, MIME and +# attached message headers were treated as body text. +# +# For details, see "man header_checks". +# +#header_checks = regexp:/etc/postfix/header_checks + +# FAST ETRN SERVICE +# +# Postfix maintains per-destination logfiles with information about +# deferred mail, so that mail can be flushed quickly with the SMTP +# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". +# See the ETRN_README document for a detailed description. +# +# The fast_flush_domains parameter controls what destinations are +# eligible for this service. By default, they are all domains that +# this server is willing to relay mail to. +# +#fast_flush_domains = $relay_domains + +# SHOW SOFTWARE VERSION OR NOT +# +# The smtpd_banner parameter specifies the text that follows the 220 +# code in the SMTP server's greeting banner. Some people like to see +# the mail version advertised. By default, Postfix shows no version. +# +# You MUST specify $myhostname at the start of the text. That is an +# RFC requirement. Postfix itself does not care. +# +#smtpd_banner = $myhostname ESMTP $mail_name +#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) + +# PARALLEL DELIVERY TO THE SAME DESTINATION +# +# How many parallel deliveries to the same user or domain? With local +# delivery, it does not make sense to do massively parallel delivery +# to the same user, because mailbox updates must happen sequentially, +# and expensive pipelines in .forward files can cause disasters when +# too many are run at the same time. With SMTP deliveries, 10 +# simultaneous connections to the same domain could be sufficient to +# raise eyebrows. +# +# Each message delivery transport has its XXX_destination_concurrency_limit +# parameter. The default is $default_destination_concurrency_limit for +# most delivery transports. For the local delivery agent the default is 2. + +#local_destination_concurrency_limit = 2 +#default_destination_concurrency_limit = 20 + +# DEBUGGING CONTROL +# +# The debug_peer_level parameter specifies the increment in verbose +# logging level when an SMTP client or server host name or address +# matches a pattern in the debug_peer_list parameter. +# +debug_peer_level = 2 + +# The debug_peer_list parameter specifies an optional list of domain +# or network patterns, /file/name patterns or type:name tables. When +# an SMTP client or server host name or address matches a pattern, +# increase the verbose logging level by the amount specified in the +# debug_peer_level parameter. +# +#debug_peer_list = 127.0.0.1 +#debug_peer_list = some.domain + +# The debugger_command specifies the external command that is executed +# when a Postfix daemon program is run with the -D option. +# +# Use "command .. & sleep 5" so that the debugger can attach before +# the process marches on. If you use an X-based debugger, be sure to +# set up your XAUTHORITY environment variable before starting Postfix. +# +debugger_command = + PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin + ddd $daemon_directory/$process_name $process_id & sleep 5 + +# If you can't use X, use this to capture the call stack when a +# daemon crashes. The result is in a file in the configuration +# directory, and is named after the process name and the process ID. +# +# debugger_command = +# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; +# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 +# >$config_directory/$process_name.$process_id.log & sleep 5 +# +# Another possibility is to run gdb under a detached screen session. +# To attach to the screen session, su root and run "screen -r +# " where uniquely matches one of the detached +# sessions (from "screen -list"). +# +# debugger_command = +# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen +# -dmS $process_name gdb $daemon_directory/$process_name +# $process_id & sleep 1 + +# INSTALL-TIME CONFIGURATION INFORMATION +# +# The following parameters are used when installing a new Postfix version. +# +# sendmail_path: The full pathname of the Postfix sendmail command. +# This is the Sendmail-compatible mail posting interface. +# +sendmail_path = /usr/sbin/sendmail.postfix + +# newaliases_path: The full pathname of the Postfix newaliases command. +# This is the Sendmail-compatible command to build alias databases. +# +newaliases_path = /usr/bin/newaliases.postfix + +# mailq_path: The full pathname of the Postfix mailq command. This +# is the Sendmail-compatible mail queue listing command. +# +mailq_path = /usr/bin/mailq.postfix + +# setgid_group: The group for mail submission and queue management +# commands. This must be a group name with a numerical group ID that +# is not shared with other accounts, not even with the Postfix account. +# +setgid_group = postdrop + +# html_directory: The location of the Postfix HTML documentation. +# +html_directory = no + +# manpage_directory: The location of the Postfix on-line manual pages. +# +manpage_directory = /usr/share/man + +# sample_directory: The location of the Postfix sample configuration files. +# This parameter is obsolete as of Postfix 2.1. +# +sample_directory = /usr/share/doc/postfix/samples + +# readme_directory: The location of the Postfix README files. +# +readme_directory = /usr/share/doc/postfix/README_FILES + +# TLS CONFIGURATION +# +# Basic Postfix TLS configuration by default with self-signed certificate +# for inbound SMTP and also opportunistic TLS for outbound SMTP. + +# The full pathname of a file with the Postfix SMTP server RSA certificate +# in PEM format. Intermediate certificates should be included in general, +# the server certificate first, then the issuing CA(s) (bottom-up order). +# +# smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem +smtpd_tls_cert_file = /etc/postfix/certificates/pubcert.pem + +# The full pathname of a file with the Postfix SMTP server RSA private key +# in PEM format. The private key must be accessible without a pass-phrase, +# i.e. it must not be encrypted. +# +# smtpd_tls_key_file = /etc/pki/tls/private/postfix.key +smtpd_tls_key_file = /etc/postfix/certificates/privkey.pem + +# Announce STARTTLS support to remote SMTP clients, but do not require that +# clients use TLS encryption (opportunistic TLS inbound). +# +smtpd_tls_security_level = may + +# Directory with PEM format Certification Authority certificates that the +# Postfix SMTP client uses to verify a remote SMTP server certificate. +# +smtp_tls_CApath = /etc/pki/tls/certs + +# The full pathname of a file containing CA certificates of root CAs +# trusted to sign either remote SMTP server certificates or intermediate CA +# certificates. +# +smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt + +# Use TLS if this is supported by the remote SMTP server, otherwise use +# plaintext (opportunistic TLS outbound). +# +smtp_tls_security_level = may +meta_directory = /etc/postfix +shlib_directory = /usr/lib64/postfix + +{% if ensure_postfix.milter_list is defined and ensure_postfix.milter_list is iterable %} +# The Milter List +{% for milter in ensure_postfix.milter_list %} +# -- {{ milter.description }} -- {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} +{% endfor %} +smtpd_milters = {% for milter in ensure_postfix.milter_list %} {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} {% endfor %} +{% endif %} + +{% if postfix_domains is defined and postfix_domains is iterable %} +virtual_mailbox_domains = {% for domain in postfix_domains %} {{ domain }} {% endfor %} +{% endif %} + +2bounce_notice_recipient = {{ postmaster_email }} +bounce_notice_recipient = {{ postmaster_email }} +delay_notice_recipient = {{ postmaster_email }} +error_notice_recipient = {{ postmaster_email }} +smtpd_helo_required = yes +disable_vrfy_command = yes +message_size_limit = {{ postfix_message_size_limit }} +smtpd_helo_restrictions = reject_unknown_helo_hostname +smtpd_client_restrictions = reject_unknown_reverse_client_hostname reject_unauth_pipelining +smtpd_discard_ehlo_keywords = silent-discard, dsn diff --git a/templates/Fedora/42/etc/postfix/main.cf.proto b/templates/Fedora/42/etc/postfix/main.cf.proto new file mode 100644 index 0000000..112c1f1 --- /dev/null +++ b/templates/Fedora/42/etc/postfix/main.cf.proto @@ -0,0 +1,745 @@ +# Global Postfix configuration file. This file lists only a subset +# of all parameters. For the syntax, and for a complete parameter +# list, see the postconf(5) manual page (command: "man 5 postconf"). +# +# TIP: use the command "postconf -n" to view main.cf parameter +# settings, "postconf parametername" to view a specific parameter, +# and "postconf 'parametername=value'" to set a specific parameter. +# +# For common configuration examples, see BASIC_CONFIGURATION_README +# and STANDARD_CONFIGURATION_README. To find these documents, use +# the command "postconf html_directory readme_directory", or go to +# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. +# +# For best results, change no more than 2-3 parameters at a time, +# and test if Postfix still works after every change. + +# COMPATIBILITY +# +# The compatibility_level determines what default settings Postfix +# will use for main.cf and master.cf settings. These defaults will +# change over time. +# +# To avoid breaking things, Postfix will use backwards-compatible +# default settings and log where it uses those old backwards-compatible +# default settings, until the system administrator has determined +# if any backwards-compatible default settings need to be made +# permanent in main.cf or master.cf. +# +# When this review is complete, update the compatibility_level setting +# below as recommended in the RELEASE_NOTES file. +# +# The level below is what should be used with new (not upgrade) installs. +# +compatibility_level = 3.7 + +# SOFT BOUNCE +# +# The soft_bounce parameter provides a limited safety net for +# testing. When soft_bounce is enabled, mail will remain queued that +# would otherwise bounce. This parameter disables locally-generated +# bounces, and prevents the SMTP server from rejecting mail permanently +# (by changing 5xx replies into 4xx replies). However, soft_bounce +# is no cure for address rewriting mistakes or mail routing mistakes. +# +#soft_bounce = no + +# LOCAL PATHNAME INFORMATION +# +# The queue_directory specifies the location of the Postfix queue. +# This is also the root directory of Postfix daemons that run chrooted. +# See the files in examples/chroot-setup for setting up Postfix chroot +# environments on different UNIX systems. +# +queue_directory = /var/spool/postfix + +# The command_directory parameter specifies the location of all +# postXXX commands. +# +command_directory = /usr/sbin + +# The daemon_directory parameter specifies the location of all Postfix +# daemon programs (i.e. programs listed in the master.cf file). This +# directory must be owned by root. +# +daemon_directory = /usr/libexec/postfix + +# The data_directory parameter specifies the location of Postfix-writable +# data files (caches, random numbers). This directory must be owned +# by the mail_owner account (see below). +# +data_directory = /var/lib/postfix + +# QUEUE AND PROCESS OWNERSHIP +# +# The mail_owner parameter specifies the owner of the Postfix queue +# and of most Postfix daemon processes. Specify the name of a user +# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS +# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In +# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED +# USER. +# +mail_owner = postfix + +# The default_privs parameter specifies the default rights used by +# the local delivery agent for delivery to external file or command. +# These rights are used in the absence of a recipient user context. +# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. +# +#default_privs = nobody + +# INTERNET HOST AND DOMAIN NAMES +# +# The myhostname parameter specifies the internet hostname of this +# mail system. The default is to use the fully-qualified domain name +# from gethostname(). $myhostname is used as a default value for many +# other configuration parameters. +# +#myhostname = host.domain.tld +#myhostname = virtual.domain.tld + +# The mydomain parameter specifies the local internet domain name. +# The default is to use $myhostname minus the first component. +# $mydomain is used as a default value for many other configuration +# parameters. +# +#mydomain = domain.tld + +# SENDING MAIL +# +# The myorigin parameter specifies the domain that locally-posted +# mail appears to come from. The default is to append $myhostname, +# which is fine for small sites. If you run a domain with multiple +# machines, you should (1) change this to $mydomain and (2) set up +# a domain-wide alias database that aliases each user to +# user@that.users.mailhost. +# +# For the sake of consistency between sender and recipient addresses, +# myorigin also specifies the default domain name that is appended +# to recipient addresses that have no @domain part. +# +#myorigin = $myhostname +#myorigin = $mydomain + +# RECEIVING MAIL + +# The inet_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on. By default, +# the software claims all active interfaces on the machine. The +# parameter also controls delivery of mail to user@[ip.address]. +# +# See also the proxy_interfaces parameter, for network addresses that +# are forwarded to us via a proxy or network address translator. +# +# Note: you need to stop/start Postfix when this parameter changes. +# +#inet_interfaces = all +#inet_interfaces = $myhostname +#inet_interfaces = $myhostname, localhost +inet_interfaces = localhost + +# Enable IPv4, and IPv6 if supported +inet_protocols = all + +# The proxy_interfaces parameter specifies the network interface +# addresses that this mail system receives mail on by way of a +# proxy or network address translation unit. This setting extends +# the address list specified with the inet_interfaces parameter. +# +# You must specify your proxy/NAT addresses when your system is a +# backup MX host for other domains, otherwise mail delivery loops +# will happen when the primary MX host is down. +# +#proxy_interfaces = +#proxy_interfaces = 1.2.3.4 + +# The mydestination parameter specifies the list of domains that this +# machine considers itself the final destination for. +# +# These domains are routed to the delivery agent specified with the +# local_transport parameter setting. By default, that is the UNIX +# compatible delivery agent that lookups all recipients in /etc/passwd +# and /etc/aliases or their equivalent. +# +# The default is $myhostname + localhost.$mydomain + localhost. On +# a mail domain gateway, you should also include $mydomain. +# +# Do not specify the names of virtual domains - those domains are +# specified elsewhere (see VIRTUAL_README). +# +# Do not specify the names of domains that this machine is backup MX +# host for. Specify those names via the relay_domains settings for +# the SMTP server, or use permit_mx_backup if you are lazy (see +# STANDARD_CONFIGURATION_README). +# +# The local machine is always the final destination for mail addressed +# to user@[the.net.work.address] of an interface that the mail system +# receives mail on (see the inet_interfaces parameter). +# +# Specify a list of host or domain names, /file/name or type:table +# patterns, separated by commas and/or whitespace. A /file/name +# pattern is replaced by its contents; a type:table is matched when +# a name matches a lookup key (the right-hand side is ignored). +# Continue long lines by starting the next line with whitespace. +# +# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". +# +mydestination = $myhostname, localhost.$mydomain, localhost +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain +#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, +# mail.$mydomain, www.$mydomain, ftp.$mydomain + +# REJECTING MAIL FOR UNKNOWN LOCAL USERS +# +# The local_recipient_maps parameter specifies optional lookup tables +# with all names or addresses of users that are local with respect +# to $mydestination, $inet_interfaces or $proxy_interfaces. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown local users. This parameter is defined by default. +# +# To turn off local recipient checking in the SMTP server, specify +# local_recipient_maps = (i.e. empty). +# +# The default setting assumes that you use the default Postfix local +# delivery agent for local delivery. You need to update the +# local_recipient_maps setting if: +# +# - You define $mydestination domain recipients in files other than +# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. +# For example, you define $mydestination domain recipients in +# the $virtual_mailbox_maps files. +# +# - You redefine the local delivery agent in master.cf. +# +# - You redefine the "local_transport" setting in main.cf. +# +# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" +# feature of the Postfix local delivery agent (see local(8)). +# +# Details are described in the LOCAL_RECIPIENT_README file. +# +# Beware: if the Postfix SMTP server runs chrooted, you probably have +# to access the passwd file via the proxymap service, in order to +# overcome chroot restrictions. The alternative, having a copy of +# the system passwd file in the chroot jail is just not practical. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify a bare username, an @domain.tld +# wild-card, or specify a user@domain.tld address. +# +#local_recipient_maps = unix:passwd.byname $alias_maps +#local_recipient_maps = proxy:unix:passwd.byname $alias_maps +#local_recipient_maps = + +# The unknown_local_recipient_reject_code specifies the SMTP server +# response code when a recipient domain matches $mydestination or +# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty +# and the recipient address or address local-part is not found. +# +# The default setting is 550 (reject mail) but it is safer to start +# with 450 (try again later) until you are certain that your +# local_recipient_maps settings are OK. +# +unknown_local_recipient_reject_code = 550 + +# TRUST AND RELAY CONTROL + +# The mynetworks parameter specifies the list of "trusted" SMTP +# clients that have more privileges than "strangers". +# +# In particular, "trusted" SMTP clients are allowed to relay mail +# through Postfix. See the smtpd_recipient_restrictions parameter +# in postconf(5). +# +# You can specify the list of "trusted" network addresses by hand +# or you can let Postfix do it for you (which is the default). +# +# By default (mynetworks_style = host), Postfix "trusts" only +# the local machine. +# +# Specify "mynetworks_style = subnet" when Postfix should "trust" +# SMTP clients in the same IP subnetworks as the local machine. +# On Linux, this works correctly only with interfaces specified +# with the "ifconfig" or "ip" command. +# +# Specify "mynetworks_style = class" when Postfix should "trust" SMTP +# clients in the same IP class A/B/C networks as the local machine. +# Don't do this with a dialup site - it would cause Postfix to "trust" +# your entire provider's network. Instead, specify an explicit +# mynetworks list by hand, as described below. +# +# Specify "mynetworks_style = host" when Postfix should "trust" +# only the local machine. +# +#mynetworks_style = class +#mynetworks_style = subnet +#mynetworks_style = host + +# Alternatively, you can specify the mynetworks list by hand, in +# which case Postfix ignores the mynetworks_style setting. +# +# Specify an explicit list of network/netmask patterns, where the +# mask specifies the number of bits in the network part of a host +# address. +# +# You can also specify the absolute pathname of a pattern file instead +# of listing the patterns here. Specify type:table for table-based lookups +# (the value on the table right-hand side is not used). +# +#mynetworks = 168.100.3.0/28, 127.0.0.0/8 +#mynetworks = $config_directory/mynetworks +#mynetworks = hash:/etc/postfix/network_table + +# The relay_domains parameter restricts what destinations this system will +# relay mail to. See the smtpd_relay_restrictions and +# smtpd_recipient_restrictions descriptions in postconf(5) for detailed +# information. +# +# By default, Postfix relays mail +# - from "trusted" clients (IP address matches $mynetworks, or is +# SASL authenticated) to any destination, +# - from "untrusted" clients to destinations that match $relay_domains or +# subdomains thereof, except addresses with sender-specified routing. +# The default relay_domains value is empty. +# +# In addition to the above, the Postfix SMTP server by default accepts mail +# that Postfix is final destination for: +# - destinations that match $inet_interfaces or $proxy_interfaces, +# - destinations that match $mydestination +# - destinations that match $virtual_alias_domains, +# - destinations that match $virtual_mailbox_domains. +# These destinations do not need to be listed in $relay_domains. +# +# Specify a list of hosts or domains, /file/name patterns or type:name +# lookup tables, separated by commas and/or whitespace. Continue +# long lines by starting the next line with whitespace. A file name +# is replaced by its contents; a type:name table is matched when a +# (parent) domain appears as lookup key. +# +# NOTE: Postfix will not automatically forward mail for domains that +# list this system as their primary or backup MX host. See the +# permit_mx_backup restriction description in postconf(5). +# +#relay_domains = + +# INTERNET OR INTRANET + +# The relayhost parameter specifies the default host to send mail to +# when no entry is matched in the optional transport(5) table. When +# no relayhost is given, mail is routed directly to the destination. +# +# On an intranet, specify the organizational domain name. If your +# internal DNS uses no MX records, specify the name of the intranet +# gateway host instead. +# +# In the case of SMTP, specify a domain, host, host:port, [host]:port, +# [address] or [address]:port; the form [host] turns off MX lookups. +# +# If you're connected via UUCP, see also the default_transport parameter. +# +#relayhost = $mydomain +#relayhost = [gateway.my.domain] +#relayhost = [mailserver.isp.tld] +#relayhost = uucphost +#relayhost = [an.ip.add.ress] + +# REJECTING UNKNOWN RELAY USERS +# +# The relay_recipient_maps parameter specifies optional lookup tables +# with all addresses in the domains that match $relay_domains. +# +# If this parameter is defined, then the SMTP server will reject +# mail for unknown relay users. This feature is off by default. +# +# The right-hand side of the lookup tables is conveniently ignored. +# In the left-hand side, specify an @domain.tld wild-card, or specify +# a user@domain.tld address. +# +#relay_recipient_maps = hash:/etc/postfix/relay_recipients + +# INPUT RATE CONTROL +# +# The in_flow_delay configuration parameter implements mail input +# flow control. This feature is turned on by default, although it +# still needs further development (it's disabled on SCO UNIX due +# to an SCO bug). +# +# A Postfix process will pause for $in_flow_delay seconds before +# accepting a new message, when the message arrival rate exceeds the +# message delivery rate. With the default 100 SMTP server process +# limit, this limits the mail inflow to 100 messages a second more +# than the number of messages delivered per second. +# +# Specify 0 to disable the feature. Valid delays are 0..10. +# +#in_flow_delay = 1s + +# ADDRESS REWRITING +# +# The ADDRESS_REWRITING_README document gives information about +# address masquerading or other forms of address rewriting including +# username->Firstname.Lastname mapping. + +# ADDRESS REDIRECTION (VIRTUAL DOMAIN) +# +# The VIRTUAL_README document gives information about the many forms +# of domain hosting that Postfix supports. + +# "USER HAS MOVED" BOUNCE MESSAGES +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# TRANSPORT MAP +# +# See the discussion in the ADDRESS_REWRITING_README document. + +# ALIAS DATABASE +# +# The alias_maps parameter specifies the list of alias databases used +# by the local delivery agent. The default list is system dependent. +# +# On systems with NIS, the default is to search the local alias +# database, then the NIS alias database. See aliases(5) for syntax +# details. +# +# If you change the alias database, run "postalias /etc/aliases" (or +# wherever your system stores the mail alias file), or simply run +# "newaliases" to build the necessary DBM or DB file. +# +# It will take a minute or so before changes become visible. Use +# "postfix reload" to eliminate the delay. +# +#alias_maps = dbm:/etc/aliases +alias_maps = hash:/etc/aliases +#alias_maps = hash:/etc/aliases, nis:mail.aliases +#alias_maps = netinfo:/aliases + +# The alias_database parameter specifies the alias database(s) that +# are built with "newaliases" or "sendmail -bi". This is a separate +# configuration parameter, because alias_maps (see above) may specify +# tables that are not necessarily all under control by Postfix. +# +#alias_database = dbm:/etc/aliases +#alias_database = dbm:/etc/mail/aliases +alias_database = hash:/etc/aliases +#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases + +# ADDRESS EXTENSIONS (e.g., user+foo) +# +# The recipient_delimiter parameter specifies the separator between +# user names and address extensions (user+foo). See canonical(5), +# local(8), relocated(5) and virtual(5) for the effects this has on +# aliases, canonical, virtual, relocated and .forward file lookups. +# Basically, the software tries user+foo and .forward+foo before +# trying user and .forward. +# +#recipient_delimiter = + + +# DELIVERY TO MAILBOX +# +# The home_mailbox parameter specifies the optional pathname of a +# mailbox file relative to a user's home directory. The default +# mailbox file is /var/spool/mail/user or /var/mail/user. Specify +# "Maildir/" for qmail-style delivery (the / is required). +# +#home_mailbox = Mailbox +#home_mailbox = Maildir/ + +# The mail_spool_directory parameter specifies the directory where +# UNIX-style mailboxes are kept. The default setting depends on the +# system type. +# +#mail_spool_directory = /var/mail +#mail_spool_directory = /var/spool/mail + +# The mailbox_command parameter specifies the optional external +# command to use instead of mailbox delivery. The command is run as +# the recipient with proper HOME, SHELL and LOGNAME environment settings. +# Exception: delivery for root is done as $default_user. +# +# Other environment variables of interest: USER (recipient username), +# EXTENSION (address extension), DOMAIN (domain part of address), +# and LOCAL (the address localpart). +# +# Unlike other Postfix configuration parameters, the mailbox_command +# parameter is not subjected to $parameter substitutions. This is to +# make it easier to specify shell syntax (see example below). +# +# Avoid shell meta characters because they will force Postfix to run +# an expensive shell process. Procmail alone is expensive enough. +# +# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN +# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. +# +#mailbox_command = /some/where/procmail +#mailbox_command = /some/where/procmail -a "$EXTENSION" + +# The mailbox_transport specifies the optional transport in master.cf +# to use after processing aliases and .forward files. This parameter +# has precedence over the mailbox_command, fallback_transport and +# luser_relay parameters. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" +# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. +#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp + +# If using the cyrus-imapd IMAP server deliver local mail to the IMAP +# server using LMTP (Local Mail Transport Protocol), this is prefered +# over the older cyrus deliver program by setting the +# mailbox_transport as below: +# +# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp +# +# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via +# these settings. +# +# local_destination_recipient_limit = 300 +# local_destination_concurrency_limit = 5 +# +# Of course you should adjust these settings as appropriate for the +# capacity of the hardware you are using. The recipient limit setting +# can be used to take advantage of the single instance message store +# capability of Cyrus. The concurrency limit can be used to control +# how many simultaneous LMTP sessions will be permitted to the Cyrus +# message store. +# +# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and +# subsequent line in master.cf. +#mailbox_transport = cyrus + +# The fallback_transport specifies the optional transport in master.cf +# to use for recipients that are not found in the UNIX passwd database. +# This parameter has precedence over the luser_relay parameter. +# +# Specify a string of the form transport:nexthop, where transport is +# the name of a mail delivery transport defined in master.cf. The +# :nexthop part is optional. For more details see the sample transport +# configuration file. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must update the "local_recipient_maps" setting in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp +#fallback_transport = + +# The luser_relay parameter specifies an optional destination address +# for unknown recipients. By default, mail for unknown@$mydestination, +# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned +# as undeliverable. +# +# The following expansions are done on luser_relay: $user (recipient +# username), $shell (recipient shell), $home (recipient home directory), +# $recipient (full recipient address), $extension (recipient address +# extension), $domain (recipient domain), $local (entire recipient +# localpart), $recipient_delimiter. Specify ${name?value} or +# ${name:value} to expand value only when $name does (does not) exist. +# +# luser_relay works only for the default Postfix local delivery agent. +# +# NOTE: if you use this feature for accounts not in the UNIX password +# file, then you must specify "local_recipient_maps =" (i.e. empty) in +# the main.cf file, otherwise the SMTP server will reject mail for +# non-UNIX accounts with "User unknown in local recipient table". +# +#luser_relay = $user@other.host +#luser_relay = $local@other.host +#luser_relay = admin+$local + +# JUNK MAIL CONTROLS +# +# The controls listed here are only a very small subset. The file +# SMTPD_ACCESS_README provides an overview. + +# The header_checks parameter specifies an optional table with patterns +# that each logical message header is matched against, including +# headers that span multiple physical lines. +# +# By default, these patterns also apply to MIME headers and to the +# headers of attached messages. With older Postfix versions, MIME and +# attached message headers were treated as body text. +# +# For details, see "man header_checks". +# +#header_checks = regexp:/etc/postfix/header_checks + +# FAST ETRN SERVICE +# +# Postfix maintains per-destination logfiles with information about +# deferred mail, so that mail can be flushed quickly with the SMTP +# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". +# See the ETRN_README document for a detailed description. +# +# The fast_flush_domains parameter controls what destinations are +# eligible for this service. By default, they are all domains that +# this server is willing to relay mail to. +# +#fast_flush_domains = $relay_domains + +# SHOW SOFTWARE VERSION OR NOT +# +# The smtpd_banner parameter specifies the text that follows the 220 +# code in the SMTP server's greeting banner. Some people like to see +# the mail version advertised. By default, Postfix shows no version. +# +# You MUST specify $myhostname at the start of the text. That is an +# RFC requirement. Postfix itself does not care. +# +#smtpd_banner = $myhostname ESMTP $mail_name +#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) + +# PARALLEL DELIVERY TO THE SAME DESTINATION +# +# How many parallel deliveries to the same user or domain? With local +# delivery, it does not make sense to do massively parallel delivery +# to the same user, because mailbox updates must happen sequentially, +# and expensive pipelines in .forward files can cause disasters when +# too many are run at the same time. With SMTP deliveries, 10 +# simultaneous connections to the same domain could be sufficient to +# raise eyebrows. +# +# Each message delivery transport has its XXX_destination_concurrency_limit +# parameter. The default is $default_destination_concurrency_limit for +# most delivery transports. For the local delivery agent the default is 2. + +#local_destination_concurrency_limit = 2 +#default_destination_concurrency_limit = 20 + +# DEBUGGING CONTROL +# +# The debug_peer_level parameter specifies the increment in verbose +# logging level when an SMTP client or server host name or address +# matches a pattern in the debug_peer_list parameter. +# +debug_peer_level = 2 + +# The debug_peer_list parameter specifies an optional list of domain +# or network patterns, /file/name patterns or type:name tables. When +# an SMTP client or server host name or address matches a pattern, +# increase the verbose logging level by the amount specified in the +# debug_peer_level parameter. +# +#debug_peer_list = 127.0.0.1 +#debug_peer_list = some.domain + +# The debugger_command specifies the external command that is executed +# when a Postfix daemon program is run with the -D option. +# +# Use "command .. & sleep 5" so that the debugger can attach before +# the process marches on. If you use an X-based debugger, be sure to +# set up your XAUTHORITY environment variable before starting Postfix. +# +debugger_command = + PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin + ddd $daemon_directory/$process_name $process_id & sleep 5 + +# If you can't use X, use this to capture the call stack when a +# daemon crashes. The result is in a file in the configuration +# directory, and is named after the process name and the process ID. +# +# debugger_command = +# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; +# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 +# >$config_directory/$process_name.$process_id.log & sleep 5 +# +# Another possibility is to run gdb under a detached screen session. +# To attach to the screen session, su root and run "screen -r +# " where uniquely matches one of the detached +# sessions (from "screen -list"). +# +# debugger_command = +# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen +# -dmS $process_name gdb $daemon_directory/$process_name +# $process_id & sleep 1 + +# INSTALL-TIME CONFIGURATION INFORMATION +# +# The following parameters are used when installing a new Postfix version. +# +# sendmail_path: The full pathname of the Postfix sendmail command. +# This is the Sendmail-compatible mail posting interface. +# +sendmail_path = + +# newaliases_path: The full pathname of the Postfix newaliases command. +# This is the Sendmail-compatible command to build alias databases. +# +newaliases_path = + +# mailq_path: The full pathname of the Postfix mailq command. This +# is the Sendmail-compatible mail queue listing command. +# +mailq_path = + +# setgid_group: The group for mail submission and queue management +# commands. This must be a group name with a numerical group ID that +# is not shared with other accounts, not even with the Postfix account. +# +setgid_group = + +# html_directory: The location of the Postfix HTML documentation. +# +html_directory = + +# manpage_directory: The location of the Postfix on-line manual pages. +# +manpage_directory = + +# sample_directory: The location of the Postfix sample configuration files. +# This parameter is obsolete as of Postfix 2.1. +# +sample_directory = + +# readme_directory: The location of the Postfix README files. +# +readme_directory = + +# TLS CONFIGURATION +# +# Basic Postfix TLS configuration by default with self-signed certificate +# for inbound SMTP and also opportunistic TLS for outbound SMTP. + +# The full pathname of a file with the Postfix SMTP server RSA certificate +# in PEM format. Intermediate certificates should be included in general, +# the server certificate first, then the issuing CA(s) (bottom-up order). +# +smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem + +# The full pathname of a file with the Postfix SMTP server RSA private key +# in PEM format. The private key must be accessible without a pass-phrase, +# i.e. it must not be encrypted. +# +smtpd_tls_key_file = /etc/pki/tls/private/postfix.key + +# Announce STARTTLS support to remote SMTP clients, but do not require that +# clients use TLS encryption (opportunistic TLS inbound). +# +smtpd_tls_security_level = may + +# Directory with PEM format Certification Authority certificates that the +# Postfix SMTP client uses to verify a remote SMTP server certificate. +# +smtp_tls_CApath = /etc/pki/tls/certs + +# The full pathname of a file containing CA certificates of root CAs +# trusted to sign either remote SMTP server certificates or intermediate CA +# certificates. +# +smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt + +# Use TLS if this is supported by the remote SMTP server, otherwise use +# plaintext (opportunistic TLS outbound). +# +smtp_tls_security_level = may diff --git a/templates/Fedora/42/etc/postfix/master.cf b/templates/Fedora/42/etc/postfix/master.cf new file mode 100644 index 0000000..bb0eae9 --- /dev/null +++ b/templates/Fedora/42/etc/postfix/master.cf @@ -0,0 +1,145 @@ +# +# Postfix master process configuration file. For details on the format +# of the file, see the master(5) manual page (command: "man 5 master" or +# on-line: http://www.postfix.org/master.5.html). +# +# Do not forget to execute "postfix reload" after editing this file. +# +# ========================================================================== +# service type private unpriv chroot wakeup maxproc command + args +# (yes) (yes) (no) (never) (100) +# ========================================================================== +smtp inet n - n - - smtpd +#smtp inet n - n - 1 postscreen +#smtpd pass - - n - - smtpd +#dnsblog unix - - n - 0 dnsblog +#tlsproxy unix - - n - 0 tlsproxy +# Choose one: enable submission for loopback clients only, or for any client. +#127.0.0.1:submission inet n - n - - smtpd +#submission inet n - n - - smtpd +# -o syslog_name=postfix/submission +# -o smtpd_tls_security_level=encrypt +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_tls_auth_only=yes +# -o smtpd_reject_unlisted_recipient=no +# Instead of specifying complex smtpd__restrictions here, +# specify "smtpd__restrictions=$mua__restrictions" +# here, and specify mua__restrictions in main.cf (where +# "" is "client", "helo", "sender", "relay", or "recipient"). +# -o smtpd_client_restrictions= +# -o smtpd_helo_restrictions= +# -o smtpd_sender_restrictions= +# -o smtpd_relay_restrictions= +# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +# Choose one: enable submissions for loopback clients only, or for any client. +#127.0.0.1:submissions inet n - n - - smtpd +#submissions inet n - n - - smtpd +# -o syslog_name=postfix/submissions +# -o smtpd_tls_wrappermode=yes +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_reject_unlisted_recipient=no +# Instead of specifying complex smtpd__restrictions here, +# specify "smtpd__restrictions=$mua__restrictions" +# here, and specify mua__restrictions in main.cf (where +# "" is "client", "helo", "sender", "relay", or "recipient"). +# -o smtpd_client_restrictions= +# -o smtpd_helo_restrictions= +# -o smtpd_sender_restrictions= +# -o smtpd_relay_restrictions= +# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +#628 inet n - n - - qmqpd +pickup unix n - n 60 1 pickup +cleanup unix n - n - 0 cleanup +qmgr unix n - n 300 1 qmgr +#qmgr unix n - n 300 1 oqmgr +tlsmgr unix - - n 1000? 1 tlsmgr +rewrite unix - - n - - trivial-rewrite +bounce unix - - n - 0 bounce +defer unix - - n - 0 bounce +trace unix - - n - 0 bounce +verify unix - - n - 1 verify +flush unix n - n 1000? 0 flush +proxymap unix - - n - - proxymap +proxywrite unix - - n - 1 proxymap +smtp unix - - n - - smtp +relay unix - - n - - smtp + -o syslog_name=postfix/$service_name +# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 +showq unix n - n - - showq +error unix - - n - - error +retry unix - - n - - error +discard unix - - n - - discard +local unix - n n - - local +virtual unix - n n - - virtual +lmtp unix - - n - - lmtp +anvil unix - - n - 1 anvil +scache unix - - n - 1 scache +postlog unix-dgram n - n - 1 postlogd +# +# ==================================================================== +# Interfaces to non-Postfix software. Be sure to examine the manual +# pages of the non-Postfix software to find out what options it wants. +# +# Many of the following services use the Postfix pipe(8) delivery +# agent. See the pipe(8) man page for information about ${recipient} +# and other message envelope options. +# ==================================================================== +# +# maildrop. See the Postfix MAILDROP_README file for details. +# Also specify in main.cf: maildrop_destination_recipient_limit=1 +# +#maildrop unix - n n - - pipe +# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} +# +# ==================================================================== +# +# Recent Cyrus versions can use the existing "lmtp" master.cf entry. +# +# Specify in cyrus.conf: +# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 +# +# Specify in main.cf one or more of the following: +# mailbox_transport = lmtp:inet:localhost +# virtual_transport = lmtp:inet:localhost +# +# ==================================================================== +# +# Cyrus 2.1.5 (Amos Gouaux) +# Also specify in main.cf: cyrus_destination_recipient_limit=1 +# +#cyrus unix - n n - - pipe +# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} +# +# ==================================================================== +# +# Old example of delivery via Cyrus. +# +#old-cyrus unix - n n - - pipe +# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} +# +# ==================================================================== +# +# See the Postfix UUCP_README file for configuration details. +# +#uucp unix - n n - - pipe +# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) +# +# ==================================================================== +# +# Other external delivery methods. +# +#ifmail unix - n n - - pipe +# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) +# +#bsmtp unix - n n - - pipe +# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient +# +#scalemail-backend unix - n n - 2 pipe +# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store +# ${nexthop} ${user} ${extension} +# +#mailman unix - n n - - pipe +# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py +# ${nexthop} ${user} diff --git a/templates/Fedora/42/etc/postfix/master.cf.proto b/templates/Fedora/42/etc/postfix/master.cf.proto new file mode 100644 index 0000000..bb0eae9 --- /dev/null +++ b/templates/Fedora/42/etc/postfix/master.cf.proto @@ -0,0 +1,145 @@ +# +# Postfix master process configuration file. For details on the format +# of the file, see the master(5) manual page (command: "man 5 master" or +# on-line: http://www.postfix.org/master.5.html). +# +# Do not forget to execute "postfix reload" after editing this file. +# +# ========================================================================== +# service type private unpriv chroot wakeup maxproc command + args +# (yes) (yes) (no) (never) (100) +# ========================================================================== +smtp inet n - n - - smtpd +#smtp inet n - n - 1 postscreen +#smtpd pass - - n - - smtpd +#dnsblog unix - - n - 0 dnsblog +#tlsproxy unix - - n - 0 tlsproxy +# Choose one: enable submission for loopback clients only, or for any client. +#127.0.0.1:submission inet n - n - - smtpd +#submission inet n - n - - smtpd +# -o syslog_name=postfix/submission +# -o smtpd_tls_security_level=encrypt +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_tls_auth_only=yes +# -o smtpd_reject_unlisted_recipient=no +# Instead of specifying complex smtpd__restrictions here, +# specify "smtpd__restrictions=$mua__restrictions" +# here, and specify mua__restrictions in main.cf (where +# "" is "client", "helo", "sender", "relay", or "recipient"). +# -o smtpd_client_restrictions= +# -o smtpd_helo_restrictions= +# -o smtpd_sender_restrictions= +# -o smtpd_relay_restrictions= +# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +# Choose one: enable submissions for loopback clients only, or for any client. +#127.0.0.1:submissions inet n - n - - smtpd +#submissions inet n - n - - smtpd +# -o syslog_name=postfix/submissions +# -o smtpd_tls_wrappermode=yes +# -o smtpd_sasl_auth_enable=yes +# -o smtpd_reject_unlisted_recipient=no +# Instead of specifying complex smtpd__restrictions here, +# specify "smtpd__restrictions=$mua__restrictions" +# here, and specify mua__restrictions in main.cf (where +# "" is "client", "helo", "sender", "relay", or "recipient"). +# -o smtpd_client_restrictions= +# -o smtpd_helo_restrictions= +# -o smtpd_sender_restrictions= +# -o smtpd_relay_restrictions= +# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject +# -o milter_macro_daemon_name=ORIGINATING +#628 inet n - n - - qmqpd +pickup unix n - n 60 1 pickup +cleanup unix n - n - 0 cleanup +qmgr unix n - n 300 1 qmgr +#qmgr unix n - n 300 1 oqmgr +tlsmgr unix - - n 1000? 1 tlsmgr +rewrite unix - - n - - trivial-rewrite +bounce unix - - n - 0 bounce +defer unix - - n - 0 bounce +trace unix - - n - 0 bounce +verify unix - - n - 1 verify +flush unix n - n 1000? 0 flush +proxymap unix - - n - - proxymap +proxywrite unix - - n - 1 proxymap +smtp unix - - n - - smtp +relay unix - - n - - smtp + -o syslog_name=postfix/$service_name +# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 +showq unix n - n - - showq +error unix - - n - - error +retry unix - - n - - error +discard unix - - n - - discard +local unix - n n - - local +virtual unix - n n - - virtual +lmtp unix - - n - - lmtp +anvil unix - - n - 1 anvil +scache unix - - n - 1 scache +postlog unix-dgram n - n - 1 postlogd +# +# ==================================================================== +# Interfaces to non-Postfix software. Be sure to examine the manual +# pages of the non-Postfix software to find out what options it wants. +# +# Many of the following services use the Postfix pipe(8) delivery +# agent. See the pipe(8) man page for information about ${recipient} +# and other message envelope options. +# ==================================================================== +# +# maildrop. See the Postfix MAILDROP_README file for details. +# Also specify in main.cf: maildrop_destination_recipient_limit=1 +# +#maildrop unix - n n - - pipe +# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} +# +# ==================================================================== +# +# Recent Cyrus versions can use the existing "lmtp" master.cf entry. +# +# Specify in cyrus.conf: +# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 +# +# Specify in main.cf one or more of the following: +# mailbox_transport = lmtp:inet:localhost +# virtual_transport = lmtp:inet:localhost +# +# ==================================================================== +# +# Cyrus 2.1.5 (Amos Gouaux) +# Also specify in main.cf: cyrus_destination_recipient_limit=1 +# +#cyrus unix - n n - - pipe +# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} +# +# ==================================================================== +# +# Old example of delivery via Cyrus. +# +#old-cyrus unix - n n - - pipe +# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} +# +# ==================================================================== +# +# See the Postfix UUCP_README file for configuration details. +# +#uucp unix - n n - - pipe +# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) +# +# ==================================================================== +# +# Other external delivery methods. +# +#ifmail unix - n n - - pipe +# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) +# +#bsmtp unix - n n - - pipe +# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient +# +#scalemail-backend unix - n n - 2 pipe +# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store +# ${nexthop} ${user} ${extension} +# +#mailman unix - n n - - pipe +# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py +# ${nexthop} ${user} diff --git a/templates/Fedora/42/etc/postfix/postfix-files b/templates/Fedora/42/etc/postfix/postfix-files new file mode 100644 index 0000000..0e176a6 --- /dev/null +++ b/templates/Fedora/42/etc/postfix/postfix-files @@ -0,0 +1,454 @@ +# +# Do not edit this file. +# +# This file controls the postfix-install script for installation of +# Postfix programs, configuration files and documentation, as well +# as the post-install script for setting permissions and for updating +# Postfix configuration files. See the respective manual pages within +# the script files. +# +# Do not list $command_directory or $shlib_directory in this file, +# or it will be blown away by a future Postfix uninstallation +# procedure. You would not want to lose all files in /usr/sbin or +# /usr/local/lib. +# +# Each record in this file describes one file or directory. +# Fields are separated by ":". Specify a null field as "-". +# Missing fields or separators at the end are OK. +# +# File format: +# name:type:owner:group:permission:flags +# No group means don't change group ownership. +# +# File types: +# d=directory +# f=regular file +# h=hard link (*) +# l=symbolic link (*) +# +# (*) With hard links and symbolic links, the owner field becomes the +# source pathname, while the group and permissions are ignored. +# +# File flags: +# No flag means the flag is not active. +# p=preserve existing file, do not replace (postfix-install). +# u=update owner/group/mode (post-install upgrade-permissions). +# c=create missing directory (post-install create-missing). +# r=apply owner/group recursively (post-install set/upgrade-permissions). +# o=obsolete, no longer part of Postfix +# 1=optional for non-default instance (config_dir != built-in default). +# +# Note: the "u" flag is for upgrading the permissions of existing files +# or directories after changes in Postfix architecture. For robustness +# it is a good idea to "u" all the files that have special ownership or +# permissions, so that running "make install" fixes any glitches. +# +# Note: order matters. Update shared libraries and database plugins +# before daemon/command-line programs. +$config_directory:d:root:-:755:u +$data_directory:d:$mail_owner:-:700:uc +$daemon_directory:d:root:-:755:u +$queue_directory:d:root:-:755:uc +$sample_directory:d:root:-:755:o +$readme_directory:d:root:-:755 +$html_directory:d:root:-:755 +$queue_directory/active:d:$mail_owner:-:700:ucr +$queue_directory/bounce:d:$mail_owner:-:700:ucr +$queue_directory/corrupt:d:$mail_owner:-:700:ucr +$queue_directory/defer:d:$mail_owner:-:700:ucr +$queue_directory/deferred:d:$mail_owner:-:700:ucr +$queue_directory/flush:d:$mail_owner:-:700:ucr +$queue_directory/hold:d:$mail_owner:-:700:ucr +$queue_directory/incoming:d:$mail_owner:-:700:ucr +$queue_directory/private:d:$mail_owner:-:700:uc +$queue_directory/maildrop:d:$mail_owner:$setgid_group:730:uc +$queue_directory/public:d:$mail_owner:$setgid_group:710:uc +$queue_directory/pid:d:root:-:755:uc +$queue_directory/saved:d:$mail_owner:-:700:ucr +$queue_directory/trace:d:$mail_owner:-:700:ucr +# Update shared libraries and plugins before daemon or command-line programs. +$shlib_directory/libpostfix-util.so:f:root:-:755 +$shlib_directory/libpostfix-global.so:f:root:-:755 +$shlib_directory/libpostfix-dns.so:f:root:-:755 +$shlib_directory/libpostfix-tls.so:f:root:-:755 +$shlib_directory/libpostfix-master.so:f:root:-:755 +$meta_directory/dynamicmaps.cf.d:d:root:-:755 +$meta_directory/dynamicmaps.cf:f:root:-:644 +$meta_directory/main.cf.proto:f:root:-:644 +$meta_directory/master.cf.proto:f:root:-:644 +$meta_directory/postfix-files.d:d:root:-:755 +$meta_directory/postfix-files:f:root:-:644 +$daemon_directory/anvil:f:root:-:755 +$daemon_directory/bounce:f:root:-:755 +$daemon_directory/cleanup:f:root:-:755 +$daemon_directory/discard:f:root:-:755 +$daemon_directory/dnsblog:f:root:-:755 +$daemon_directory/error:f:root:-:755 +$daemon_directory/flush:f:root:-:755 +$daemon_directory/local:f:root:-:755 +$daemon_directory/main.cf:f:root:-:644:o +$daemon_directory/master.cf:f:root:-:644:o +$daemon_directory/master:f:root:-:755 +$daemon_directory/oqmgr:f:root:-:755 +$daemon_directory/pickup:f:root:-:755 +$daemon_directory/pipe:f:root:-:755 +$daemon_directory/post-install:f:root:-:755 +# In case meta_directory == daemon_directory. +#$daemon_directory/postfix-files:f:root:-:644:o +#$daemon_directory/postfix-files.d:d:root:-:755:o +$daemon_directory/postfix-script:f:root:-:755 +$daemon_directory/postfix-tls-script:f:root:-:755 +$daemon_directory/postfix-wrapper:f:root:-:755 +$daemon_directory/postmulti-script:f:root:-:755 +$daemon_directory/postlogd:f:root:-:755 +$daemon_directory/postscreen:f:root:-:755 +$daemon_directory/proxymap:f:root:-:755 +$daemon_directory/qmgr:f:root:-:755 +$daemon_directory/qmqpd:f:root:-:755 +$daemon_directory/scache:f:root:-:755 +$daemon_directory/showq:f:root:-:755 +$daemon_directory/smtp:f:root:-:755 +$daemon_directory/smtpd:f:root:-:755 +$daemon_directory/spawn:f:root:-:755 +$daemon_directory/tlsproxy:f:root:-:755 +$daemon_directory/tlsmgr:f:root:-:755 +$daemon_directory/trivial-rewrite:f:root:-:755 +$daemon_directory/verify:f:root:-:755 +$daemon_directory/virtual:f:root:-:755 +$daemon_directory/nqmgr:h:$daemon_directory/qmgr +$daemon_directory/lmtp:h:$daemon_directory/smtp +$command_directory/postalias:f:root:-:755 +$command_directory/postcat:f:root:-:755 +$command_directory/postconf:f:root:-:755 +$command_directory/postfix:f:root:-:755 +$command_directory/postkick:f:root:-:755 +$command_directory/postlock:f:root:-:755 +$command_directory/postlog:f:root:$setgid_group:2755:u +$command_directory/postmap:f:root:-:755 +$command_directory/postmulti:f:root:-:755 +$command_directory/postsuper:f:root:-:755 +$command_directory/postdrop:f:root:$setgid_group:2755:u +$command_directory/postqueue:f:root:$setgid_group:2755:u +$sendmail_path:f:root:-:755 +$newaliases_path:l:$sendmail_path +$mailq_path:l:$sendmail_path +$config_directory/access:f:root:-:644:p1 +$config_directory/canonical:f:root:-:644:p1 +$config_directory/cidr_table:f:root:-:644:o +$config_directory/generic:f:root:-:644:p1 +$config_directory/generics:f:root:-:644:o +$config_directory/header_checks:f:root:-:644:p1 +$config_directory/install.cf:f:root:-:644:o +$config_directory/main.cf:f:root:-:644:p +$config_directory/master.cf:f:root:-:644:p +$config_directory/pcre_table:f:root:-:644:o +$config_directory/regexp_table:f:root:-:644:o +$config_directory/relocated:f:root:-:644:p1 +$config_directory/tcp_table:f:root:-:644:o +$config_directory/transport:f:root:-:644:p1 +$config_directory/virtual:f:root:-:644:p1 +$config_directory/postfix-script:f:root:-:755:o +$config_directory/postfix-script-sgid:f:root:-:755:o +$config_directory/postfix-script-nosgid:f:root:-:755:o +$config_directory/post-install:f:root:-:755:o +$manpage_directory/man1/mailq.postfix.1.gz:f:root:-:644 +$manpage_directory/man1/newaliases.postfix.1.gz:f:root:-:644 +$manpage_directory/man1/postalias.1.gz:f:root:-:644 +$manpage_directory/man1/postcat.1.gz:f:root:-:644 +$manpage_directory/man1/postconf.1.gz:f:root:-:644 +$manpage_directory/man1/postdrop.1.gz:f:root:-:644 +$manpage_directory/man1/postfix-tls.1.gz:f:root:-:644 +$manpage_directory/man1/postfix.1.gz:f:root:-:644 +$manpage_directory/man1/postkick.1.gz:f:root:-:644 +$manpage_directory/man1/postlock.1.gz:f:root:-:644 +$manpage_directory/man1/postlog.1.gz:f:root:-:644 +$manpage_directory/man1/postmap.1.gz:f:root:-:644 +$manpage_directory/man1/postmulti.1.gz:f:root:-:644 +$manpage_directory/man1/postqueue.1.gz:f:root:-:644 +$manpage_directory/man1/postsuper.1.gz:f:root:-:644 +$manpage_directory/man1/sendmail.postfix.1.gz:f:root:-:644 +$manpage_directory/man5/access.5.gz:f:root:-:644 +$manpage_directory/man5/aliases.postfix.5.gz:f:root:-:644 +$manpage_directory/man5/body_checks.5.gz:f:root:-:644 +$manpage_directory/man5/bounce.5.gz:f:root:-:644 +$manpage_directory/man5/canonical.5.gz:f:root:-:644 +$manpage_directory/man5/cidr_table.5.gz:f:root:-:644 +$manpage_directory/man5/generics.5.gz:f:root:-:644:o +$manpage_directory/man5/generic.5.gz:f:root:-:644 +$manpage_directory/man5/header_checks.5.gz:f:root:-:644 +$manpage_directory/man5/master.5.gz:f:root:-:644 +$manpage_directory/man5/memcache_table.5.gz:f:root:-:644 +$manpage_directory/man5/mongodb_table.5.gz:f:root:-:644 +$manpage_directory/man5/socketmap_table.5.gz:f:root:-:644 +$manpage_directory/man5/nisplus_table.5.gz:f:root:-:644 +$manpage_directory/man5/postconf.5.gz:f:root:-:644 +$manpage_directory/man5/postfix-wrapper.5.gz:f:root:-:644 +$manpage_directory/man5/regexp_table.5.gz:f:root:-:644 +$manpage_directory/man5/relocated.5.gz:f:root:-:644 +$manpage_directory/man5/tcp_table.5.gz:f:root:-:644 +$manpage_directory/man5/transport.5.gz:f:root:-:644 +$manpage_directory/man5/virtual.5.gz:f:root:-:644 +$manpage_directory/man8/bounce.8.gz:f:root:-:644 +$manpage_directory/man8/cleanup.8.gz:f:root:-:644 +$manpage_directory/man8/anvil.8.gz:f:root:-:644 +$manpage_directory/man8/defer.8.gz:f:root:-:644 +$manpage_directory/man8/discard.8.gz:f:root:-:644 +$manpage_directory/man8/dnsblog.8.gz:f:root:-:644 +$manpage_directory/man8/error.8.gz:f:root:-:644 +$manpage_directory/man8/flush.8.gz:f:root:-:644 +$manpage_directory/man8/lmtp.8.gz:f:root:-:644 +$manpage_directory/man8/local.8.gz:f:root:-:644 +$manpage_directory/man8/master.8.gz:f:root:-:644 +$manpage_directory/man8/nqmgr.8.gz:f:root:-:644:o +$manpage_directory/man8/oqmgr.8.gz:f:root:-:644: +$manpage_directory/man8/pickup.8.gz:f:root:-:644 +$manpage_directory/man8/pipe.8.gz:f:root:-:644 +$manpage_directory/man8/postlogd.8.gz:f:root:-:644 +$manpage_directory/man8/postscreen.8.gz:f:root:-:644 +$manpage_directory/man8/proxymap.8.gz:f:root:-:644 +$manpage_directory/man8/qmgr.8.gz:f:root:-:644 +$manpage_directory/man8/qmqpd.8.gz:f:root:-:644 +$manpage_directory/man8/scache.8.gz:f:root:-:644 +$manpage_directory/man8/showq.8.gz:f:root:-:644 +$manpage_directory/man8/smtp.postfix.8.gz:f:root:-:644 +$manpage_directory/man8/smtpd.postfix.8.gz:f:root:-:644 +$manpage_directory/man8/spawn.8.gz:f:root:-:644 +$manpage_directory/man8/tlsproxy.8.gz:f:root:-:644 +$manpage_directory/man8/tlsmgr.8.gz:f:root:-:644 +$manpage_directory/man8/trace.8.gz:f:root:-:644 +$manpage_directory/man8/trivial-rewrite.8.gz:f:root:-:644 +$manpage_directory/man8/verify.8.gz:f:root:-:644 +$manpage_directory/man8/virtual.8.gz:f:root:-:644 +$sample_directory/sample-aliases.cf:f:root:-:644:o +$sample_directory/sample-auth.cf:f:root:-:644:o +$sample_directory/sample-canonical.cf:f:root:-:644:o +$sample_directory/sample-compatibility.cf:f:root:-:644:o +$sample_directory/sample-debug.cf:f:root:-:644:o +$sample_directory/sample-filter.cf:f:root:-:644:o +$sample_directory/sample-flush.cf:f:root:-:644:o +$sample_directory/sample-ipv6.cf:f:root:-:644:o +$sample_directory/sample-ldap.cf:f:root:-:644:o +$sample_directory/sample-lmtp.cf:f:root:-:644:o +$sample_directory/sample-local.cf:f:root:-:644:o +$sample_directory/sample-mime.cf:f:root:-:644:o +$sample_directory/sample-misc.cf:f:root:-:644:o +$sample_directory/sample-pcre-access.cf:f:root:-:644:o +$sample_directory/sample-pcre-body.cf:f:root:-:644:o +$sample_directory/sample-pcre-header.cf:f:root:-:644:o +$sample_directory/sample-pgsql-aliases.cf:f:root:-:644:o +$sample_directory/sample-qmqpd.cf:f:root:-:644:o +$sample_directory/sample-rate.cf:f:root:-:644:o +$sample_directory/sample-regexp-access.cf:f:root:-:644:o +$sample_directory/sample-regexp-body.cf:f:root:-:644:o +$sample_directory/sample-regexp-header.cf:f:root:-:644:o +$sample_directory/sample-relocated.cf:f:root:-:644:o +$sample_directory/sample-resource.cf:f:root:-:644:o +$sample_directory/sample-rewrite.cf:f:root:-:644:o +$sample_directory/sample-scheduler.cf:f:root:-:644:o +$sample_directory/sample-smtp.cf:f:root:-:644:o +$sample_directory/sample-smtpd.cf:f:root:-:644:o +$sample_directory/sample-tls.cf:f:root:-:644:o +$sample_directory/sample-transport.cf:f:root:-:644:o +$sample_directory/sample-verify.cf:f:root:-:644:o +$sample_directory/sample-virtual.cf:f:root:-:644:o +$readme_directory/AAAREADME:f:root:-:644 +$readme_directory/ADDRESS_CLASS_README:f:root:-:644 +$readme_directory/ADDRESS_REWRITING_README:f:root:-:644 +$readme_directory/ADDRESS_VERIFICATION_README:f:root:-:644 +$readme_directory/BACKSCATTER_README:f:root:-:644 +$readme_directory/BASIC_CONFIGURATION_README:f:root:-:644 +$readme_directory/BDAT_README:f:root:-:644 +$readme_directory/BUILTIN_FILTER_README:f:root:-:644 +$readme_directory/COMPATIBILITY_README:f:root:-:644 +$readme_directory/CONNECTION_CACHE_README:f:root:-:644 +$readme_directory/CONTENT_INSPECTION_README:f:root:-:644 +$readme_directory/DATABASE_README:f:root:-:644 +$readme_directory/DB_README:f:root:-:644 +$readme_directory/DEBUG_README:f:root:-:644 +$readme_directory/DEPRECATION_README:f:root:-:644 +$readme_directory/DSN_README:f:root:-:644 +$readme_directory/ETRN_README:f:root:-:644 +$readme_directory/FILTER_README:f:root:-:644 +$readme_directory/FORWARD_SECRECY_README:f:root:-:644 +$readme_directory/HOSTING_README:f:root:-:644:o +$readme_directory/INSTALL:f:root:-:644 +$readme_directory/IPV6_README:f:root:-:644 +$readme_directory/LINUX_README:f:root:-:644 +$readme_directory/LOCAL_RECIPIENT_README:f:root:-:644 +$readme_directory/MACOSX_README:f:root:-:644:o +$readme_directory/MAILDROP_README:f:root:-:644 +$readme_directory/MAILLOG_README:f:root:-:644 +$readme_directory/MEMCACHE_README:f:root:-:644 +$readme_directory/MILTER_README:f:root:-:644 +$readme_directory/MONGODB_README:f:root:-:644 +$readme_directory/MULTI_INSTANCE_README:f:root:-:644 +$readme_directory/SMTPUTF8_README:f:root:-:644 +$readme_directory/NFS_README:f:root:-:644 +$readme_directory/OVERVIEW:f:root:-:644 +$readme_directory/PACKAGE_README:f:root:-:644 +$readme_directory/POSTSCREEN_3_5_README:f:root:-:644 +$readme_directory/POSTSCREEN_README:f:root:-:644 +$readme_directory/QMQP_README:f:root:-:644:o +$readme_directory/QSHAPE_README:f:root:-:644 +$readme_directory/RELEASE_NOTES:f:root:-:644 +$readme_directory/RESTRICTION_CLASS_README:f:root:-:644 +$readme_directory/SASL_README:f:root:-:644 +$readme_directory/SCHEDULER_README:f:root:-:644 +$readme_directory/SMTPD_ACCESS_README:f:root:-:644 +$readme_directory/SMTPD_POLICY_README:f:root:-:644 +$readme_directory/SMTPD_PROXY_README:f:root:-:644 +$readme_directory/SOHO_README:f:root:-:644 +$readme_directory/STANDARD_CONFIGURATION_README:f:root:-:644 +$readme_directory/STRESS_README:f:root:-:644 +$readme_directory/TLS_LEGACY_README:f:root:-:644 +$readme_directory/TLS_README:f:root:-:644 +$readme_directory/TUNING_README:f:root:-:644 +$readme_directory/ULTRIX_README:f:root:-:644 +$readme_directory/UUCP_README:f:root:-:644 +$readme_directory/VERP_README:f:root:-:644 +$readme_directory/VIRTUAL_README:f:root:-:644 +$readme_directory/XCLIENT_README:f:root:-:644 +$readme_directory/XFORWARD_README:f:root:-:644 +$html_directory/ADDRESS_CLASS_README.html:f:root:-:644 +$html_directory/ADDRESS_REWRITING_README.html:f:root:-:644 +$html_directory/ADDRESS_VERIFICATION_README.html:f:root:-:644 +$html_directory/BACKSCATTER_README.html:f:root:-:644 +$html_directory/BASIC_CONFIGURATION_README.html:f:root:-:644 +$html_directory/BDAT_README.html:f:root:-:644 +$html_directory/BUILTIN_FILTER_README.html:f:root:-:644 +$html_directory/CDB_README.html:f:root:-:644 +$html_directory/COMPATIBILITY_README.html:f:root:-:644 +$html_directory/CONNECTION_CACHE_README.html:f:root:-:644 +$html_directory/CONTENT_INSPECTION_README.html:f:root:-:644 +$html_directory/CYRUS_README.html:f:root:-:644:o +$html_directory/DATABASE_README.html:f:root:-:644 +$html_directory/DB_README.html:f:root:-:644 +$html_directory/DEBUG_README.html:f:root:-:644 +$html_directory/DEPRECATION_README.html:f:root:-:644 +$html_directory/DSN_README.html:f:root:-:644 +$html_directory/ETRN_README.html:f:root:-:644 +$html_directory/FILTER_README.html:f:root:-:644 +$html_directory/FORWARD_SECRECY_README.html:f:root:-:644 +$html_directory/INSTALL.html:f:root:-:644 +$html_directory/IPV6_README.html:f:root:-:644 +$html_directory/LDAP_README.html:f:root:-:644 +$html_directory/LINUX_README.html:f:root:-:644 +$html_directory/LMDB_README.html:f:root:-:644 +$html_directory/LOCAL_RECIPIENT_README.html:f:root:-:644 +$html_directory/MAILDROP_README.html:f:root:-:644 +$html_directory/MAILLOG_README.html:f:root:-:644 +$html_directory/MEMCACHE_README.html:f:root:-:644 +$html_directory/MILTER_README.html:f:root:-:644 +$html_directory/MONGODB_README.html:f:root:-:644 +$html_directory/MULTI_INSTANCE_README.html:f:root:-:644 +$html_directory/MYSQL_README.html:f:root:-:644 +$html_directory/SMTPUTF8_README.html:f:root:-:644 +$html_directory/SQLITE_README.html:f:root:-:644 +$html_directory/NFS_README.html:f:root:-:644 +$html_directory/OVERVIEW.html:f:root:-:644 +$html_directory/PACKAGE_README.html:f:root:-:644 +$html_directory/PCRE_README.html:f:root:-:644 +$html_directory/PGSQL_README.html:f:root:-:644 +$html_directory/POSTSCREEN_3_5_README.html:f:root:-:644 +$html_directory/POSTSCREEN_README.html:f:root:-:644 +$html_directory/QMQP_README.html:f:root:-:644:o +$html_directory/QSHAPE_README.html:f:root:-:644 +$html_directory/RESTRICTION_CLASS_README.html:f:root:-:644 +$html_directory/SASL_README.html:f:root:-:644 +$html_directory/SCHEDULER_README.html:f:root:-:644 +$html_directory/SMTPD_ACCESS_README.html:f:root:-:644 +$html_directory/SMTPD_POLICY_README.html:f:root:-:644 +$html_directory/SMTPD_PROXY_README.html:f:root:-:644 +$html_directory/SOHO_README.html:f:root:-:644 +$html_directory/STANDARD_CONFIGURATION_README.html:f:root:-:644 +$html_directory/STRESS_README.html:f:root:-:644 +$html_directory/TLS_LEGACY_README.html:f:root:-:644 +$html_directory/TLS_README.html:f:root:-:644 +$html_directory/TUNING_README.html:f:root:-:644 +$html_directory/ULTRIX_README.html:f:root:-:644:o +$html_directory/UUCP_README.html:f:root:-:644 +$html_directory/VERP_README.html:f:root:-:644 +$html_directory/VIRTUAL_README.html:f:root:-:644 +$html_directory/XCLIENT_README.html:f:root:-:644 +$html_directory/XFORWARD_README.html:f:root:-:644 +$html_directory/access.5.html:f:root:-:644 +$html_directory/aliases.5.html:f:root:-:644 +$html_directory/anvil.8.html:f:root:-:644 +$html_directory/bounce.5.html:f:root:-:644 +$html_directory/bounce.8.html:f:root:-:644 +$html_directory/canonical.5.html:f:root:-:644 +$html_directory/cidr_table.5.html:f:root:-:644 +$html_directory/cleanup.8.html:f:root:-:644 +$html_directory/defer.8.html:h:$html_directory/bounce.8.html:-:644 +$html_directory/discard.8.html:f:root:-:644 +$html_directory/dnsblog.8.html:f:root:-:644 +$html_directory/error.8.html:f:root:-:644 +$html_directory/flush.8.html:f:root:-:644 +$html_directory/generics.5.html:f:root:-:644:o +$html_directory/generic.5.html:f:root:-:644 +$html_directory/header_checks.5.html:f:root:-:644 +$html_directory/index.html:f:root:-:644 +$html_directory/ldap_table.5.html:f:root:-:644 +$html_directory/lmdb_table.5.html:f:root:-:644 +$html_directory/lmtp.8.html:f:root:-:644 +$html_directory/local.8.html:f:root:-:644 +$html_directory/mailq.1.html:f:root:-:644 +$html_directory/master.5.html:f:root:-:644 +$html_directory/master.8.html:f:root:-:644 +$html_directory/memcache_table.5.html:f:root:-:644 +$html_directory/mongodb_table.5.html:f:root:-:644 +$html_directory/mysql_table.5.html:f:root:-:644 +$html_directory/sqlite_table.5.html:f:root:-:644 +$html_directory/nisplus_table.5.html:f:root:-:644 +$html_directory/newaliases.1.html:h:$html_directory/mailq.1.html:-:644 +$html_directory/oqmgr.8.html:f:root:-:644 +$html_directory/pcre_table.5.html:f:root:-:644 +$html_directory/pgsql_table.5.html:f:root:-:644 +$html_directory/pickup.8.html:f:root:-:644 +$html_directory/pipe.8.html:f:root:-:644 +$html_directory/postalias.1.html:f:root:-:644 +$html_directory/postcat.1.html:f:root:-:644 +$html_directory/postconf.1.html:f:root:-:644 +$html_directory/postconf.5.html:f:root:-:644 +$html_directory/postdrop.1.html:f:root:-:644 +$html_directory/postfix-logo.jpg:f:root:-:644 +$html_directory/postfix-manuals.html:f:root:-:644 +$html_directory/postfix-tls.1.html:f:root:-:644 +$html_directory/postfix-wrapper.5.html:f:root:-:644 +$html_directory/postfix.1.html:f:root:-:644 +$html_directory/postfix-doc.css:f:root:-:644 +$html_directory/postkick.1.html:f:root:-:644 +$html_directory/postlock.1.html:f:root:-:644 +$html_directory/postlog.1.html:f:root:-:644 +$html_directory/postmap.1.html:f:root:-:644 +$html_directory/postmulti.1.html:f:root:-:644 +$html_directory/postlogd.8.html:f:root:-:644 +$html_directory/postqueue.1.html:f:root:-:644 +$html_directory/postscreen.8.html:f:root:-:644 +$html_directory/postsuper.1.html:f:root:-:644 +$html_directory/qshape.1.html:f:root:-:644 +$html_directory/proxymap.8.html:f:root:-:644 +$html_directory/qmgr.8.html:f:root:-:644 +$html_directory/qmqp-sink.1.html:f:root:-:644 +$html_directory/qmqp-source.1.html:f:root:-:644 +$html_directory/qmqpd.8.html:f:root:-:644 +$html_directory/regexp_table.5.html:f:root:-:644 +$html_directory/relocated.5.html:f:root:-:644 +$html_directory/scache.8.html:f:root:-:644 +$html_directory/sendmail.1.html:h:$html_directory/mailq.1.html:-:644 +$html_directory/showq.8.html:f:root:-:644 +$html_directory/smtp-sink.1.html:f:root:-:644 +$html_directory/smtp-source.1.html:f:root:-:644 +$html_directory/smtp.8.html:h:$html_directory/lmtp.8.html:-:644 +$html_directory/smtpd.8.html:f:root:-:644 +$html_directory/socketmap_table.5.html:f:root:-:644 +$html_directory/spawn.8.html:f:root:-:644 +$html_directory/tlsmgr.8.html:f:root:-:644 +$html_directory/tlsproxy.8.html:f:root:-:644 +$html_directory/tcp_table.5.html:f:root:-:644 +$html_directory/trace.8.html:h:$html_directory/bounce.8.html:-:644 +$html_directory/transport.5.html:f:root:-:644 +$html_directory/trivial-rewrite.8.html:f:root:-:644 +$html_directory/verify.8.html:f:root:-:644 +$html_directory/virtual.5.html:f:root:-:644 +$html_directory/virtual.8.html:f:root:-:644 diff --git a/templates/Fedora/42/etc/postfix/postfix-files.d/ldap b/templates/Fedora/42/etc/postfix/postfix-files.d/ldap new file mode 100644 index 0000000..684b05d --- /dev/null +++ b/templates/Fedora/42/etc/postfix/postfix-files.d/ldap @@ -0,0 +1,3 @@ +$shlib_directory/postfix-ldap.so:f:root:-:755 +$manpage_directory/man5/ldap_table.5.gz:f:root:-:644 +$readme_directory/LDAP_README:f:root:-:644 diff --git a/templates/Fedora/42/etc/postfix/postfix-files.d/mysql b/templates/Fedora/42/etc/postfix/postfix-files.d/mysql new file mode 100644 index 0000000..8e41d61 --- /dev/null +++ b/templates/Fedora/42/etc/postfix/postfix-files.d/mysql @@ -0,0 +1,3 @@ +$shlib_directory/postfix-mysql.so:f:root:-:755 +$manpage_directory/man5/mysql_table.5.gz:f:root:-:644 +$readme_directory/MYSQL_README:f:root:-:644 diff --git a/templates/Fedora/42/etc/postfix/postfix-files.d/pcre b/templates/Fedora/42/etc/postfix/postfix-files.d/pcre new file mode 100644 index 0000000..a34fd73 --- /dev/null +++ b/templates/Fedora/42/etc/postfix/postfix-files.d/pcre @@ -0,0 +1,3 @@ +$shlib_directory/postfix-pcre.so:f:root:-:755 +$manpage_directory/man5/pcre_table.5.gz:f:root:-:644 +$readme_directory/PCRE_README:f:root:-:644 diff --git a/templates/Fedora/42/etc/postfix/relocated b/templates/Fedora/42/etc/postfix/relocated new file mode 100644 index 0000000..5c43266 --- /dev/null +++ b/templates/Fedora/42/etc/postfix/relocated @@ -0,0 +1,178 @@ +# RELOCATED(5) RELOCATED(5) +# +# NAME +# relocated - Postfix relocated table format +# +# SYNOPSIS +# postmap /etc/postfix/relocated +# +# DESCRIPTION +# The optional relocated(5) table provides the information +# that is used in "user has moved to new_location" bounce +# messages. +# +# Normally, the relocated(5) table is specified as a text +# file that serves as input to the postmap(1) command. The +# result, an indexed file in dbm or db format, is used for +# fast searching by the mail system. Execute the command +# "postmap /etc/postfix/relocated" to rebuild an indexed +# file after changing the corresponding relocated table. +# +# When the table is provided via other means such as NIS, +# LDAP or SQL, the same lookups are done as for ordinary +# indexed files. +# +# Alternatively, the table can be provided as a regu- +# lar-expression map where patterns are given as regular +# expressions, or lookups can be directed to a TCP-based +# server. In those case, the lookups are done in a slightly +# different way as described below under "REGULAR EXPRESSION +# TABLES" or "TCP-BASED TABLES". +# +# Table lookups are case insensitive. +# +# CASE FOLDING +# The search string is folded to lowercase before database +# lookup. As of Postfix 2.3, the search string is not case +# folded with database types such as regexp: or pcre: whose +# lookup fields can match both upper and lower case. +# +# TABLE FORMAT +# The input format for the postmap(1) command is as follows: +# +# o An entry has one of the following form: +# +# pattern new_location +# +# Where new_location specifies contact information +# such as an email address, or perhaps a street +# address or telephone number. +# +# o Empty lines and whitespace-only lines are ignored, +# as are lines whose first non-whitespace character +# is a `#'. +# +# o A logical line starts with non-whitespace text. A +# line that starts with whitespace continues a logi- +# cal line. +# +# TABLE SEARCH ORDER +# With lookups from indexed files such as DB or DBM, or from +# networked tables such as NIS, LDAP or SQL, patterns are +# tried in the order as listed below: +# +# user@domain +# Matches user@domain. This form has precedence over +# all other forms. +# +# user Matches user@site when site is $myorigin, when site +# is listed in $mydestination, or when site is listed +# in $inet_interfaces or $proxy_interfaces. +# +# @domain +# Matches other addresses in domain. This form has +# the lowest precedence. +# +# ADDRESS EXTENSION +# When a mail address localpart contains the optional recip- +# ient delimiter (e.g., user+foo@domain), the lookup order +# becomes: user+foo@domain, user@domain, user+foo, user, and +# @domain. +# +# REGULAR EXPRESSION TABLES +# This section describes how the table lookups change when +# the table is given in the form of regular expressions or +# when lookups are directed to a TCP-based server. For a +# description of regular expression lookup table syntax, see +# regexp_table(5) or pcre_table(5). For a description of the +# TCP client/server table lookup protocol, see tcp_table(5). +# This feature is available in Postfix 2.5 and later. +# +# Each pattern is a regular expression that is applied to +# the entire address being looked up. Thus, user@domain mail +# addresses are not broken up into their user and @domain +# constituent parts, nor is user+foo broken up into user and +# foo. +# +# Patterns are applied in the order as specified in the ta- +# ble, until a pattern is found that matches the search +# string. +# +# Results are the same as with indexed file lookups, with +# the additional feature that parenthesized substrings from +# the pattern can be interpolated as $1, $2 and so on. +# +# TCP-BASED TABLES +# This section describes how the table lookups change when +# lookups are directed to a TCP-based server. For a descrip- +# tion of the TCP client/server lookup protocol, see tcp_ta- +# ble(5). This feature is available in Postfix 2.5 and +# later. +# +# Each lookup operation uses the entire address once. Thus, +# user@domain mail addresses are not broken up into their +# user and @domain constituent parts, nor is user+foo broken +# up into user and foo. +# +# Results are the same as with indexed file lookups. +# +# BUGS +# The table format does not understand quoting conventions. +# +# CONFIGURATION PARAMETERS +# The following main.cf parameters are especially relevant. +# The text below provides only a parameter summary. See +# postconf(5) for more details including examples. +# +# relocated_maps (empty) +# Optional lookup tables with new contact information +# for users or domains that no longer exist. +# +# Other parameters of interest: +# +# inet_interfaces (all) +# The local network interface addresses that this +# mail system receives mail on. +# +# mydestination ($myhostname, localhost.$mydomain, local- +# host) +# The list of domains that are delivered via the +# $local_transport mail delivery transport. +# +# myorigin ($myhostname) +# The domain name that locally-posted mail appears to +# come from, and that locally posted mail is deliv- +# ered to. +# +# proxy_interfaces (empty) +# The remote network interface addresses that this +# mail system receives mail on by way of a proxy or +# network address translation unit. +# +# SEE ALSO +# trivial-rewrite(8), address resolver +# postmap(1), Postfix lookup table manager +# postconf(5), configuration parameters +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# DATABASE_README, Postfix lookup table overview +# ADDRESS_REWRITING_README, address rewriting guide +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# RELOCATED(5) diff --git a/templates/Fedora/42/etc/postfix/transport b/templates/Fedora/42/etc/postfix/transport new file mode 100644 index 0000000..bad7739 --- /dev/null +++ b/templates/Fedora/42/etc/postfix/transport @@ -0,0 +1,317 @@ +# TRANSPORT(5) TRANSPORT(5) +# +# NAME +# transport - Postfix transport table format +# +# SYNOPSIS +# postmap /etc/postfix/transport +# +# postmap -q "string" /etc/postfix/transport +# +# postmap -q - /etc/postfix/transport = 3.5): +# +# example.com smtp:bar.example, foo.example +# +# This tries to deliver to bar.example before trying to +# deliver to foo.example. +# +# The error mailer can be used to bounce mail: +# +# .example.com error:mail for *.example.com is not deliverable +# +# This causes all mail for user@anything.example.com to be +# bounced. +# +# REGULAR EXPRESSION TABLES +# This section describes how the table lookups change when +# the table is given in the form of regular expressions. For +# a description of regular expression lookup table syntax, +# see regexp_table(5) or pcre_table(5). +# +# Each pattern is a regular expression that is applied to +# the entire address being looked up. Thus, +# some.domain.hierarchy is not looked up via its parent +# domains, nor is user+foo@domain looked up as user@domain. +# +# Patterns are applied in the order as specified in the ta- +# ble, until a pattern is found that matches the search +# string. +# +# The trivial-rewrite(8) server disallows regular expression +# substitution of $1 etc. in regular expression lookup +# tables, because that could open a security hole (Postfix +# version 2.3 and later). +# +# TCP-BASED TABLES +# This section describes how the table lookups change when +# lookups are directed to a TCP-based server. For a descrip- +# tion of the TCP client/server lookup protocol, see tcp_ta- +# ble(5). This feature is not available up to and including +# Postfix version 2.4. +# +# Each lookup operation uses the entire recipient address +# once. Thus, some.domain.hierarchy is not looked up via +# its parent domains, nor is user+foo@domain looked up as +# user@domain. +# +# Results are the same as with indexed file lookups. +# +# CONFIGURATION PARAMETERS +# The following main.cf parameters are especially relevant. +# The text below provides only a parameter summary. See +# postconf(5) for more details including examples. +# +# empty_address_recipient (MAILER-DAEMON) +# The recipient of mail addressed to the null +# address. +# +# parent_domain_matches_subdomains (see 'postconf -d' out- +# put) +# A list of Postfix features where the pattern "exam- +# ple.com" also matches subdomains of example.com, +# instead of requiring an explicit ".example.com" +# pattern. +# +# transport_maps (empty) +# Optional lookup tables with mappings from recipient +# address to (message delivery transport, next-hop +# destination). +# +# SEE ALSO +# trivial-rewrite(8), rewrite and resolve addresses +# master(5), master.cf file format +# postconf(5), configuration parameters +# postmap(1), Postfix lookup table manager +# +# README FILES +# Use "postconf readme_directory" or "postconf html_direc- +# tory" to locate this information. +# ADDRESS_REWRITING_README, address rewriting guide +# DATABASE_README, Postfix lookup table overview +# FILTER_README, external content filter +# +# LICENSE +# The Secure Mailer license must be distributed with this +# software. +# +# AUTHOR(S) +# Wietse Venema +# IBM T.J. Watson Research +# P.O. Box 704 +# Yorktown Heights, NY 10598, USA +# +# Wietse Venema +# Google, Inc. +# 111 8th Avenue +# New York, NY 10011, USA +# +# TRANSPORT(5) diff --git a/templates/Fedora/42/etc/postfix/virtual b/templates/Fedora/42/etc/postfix/virtual new file mode 100644 index 0000000..96390fe --- /dev/null +++ b/templates/Fedora/42/etc/postfix/virtual @@ -0,0 +1,324 @@ +# VIRTUAL(5) VIRTUAL(5) +# +# NAME +# virtual - Postfix virtual alias table format +# +# SYNOPSIS +# postmap /etc/postfix/virtual +# +# postmap -q "string" /etc/postfix/virtual +# +# postmap -q - /etc/postfix/virtual Date: Sun, 27 Apr 2025 13:09:07 -0500 Subject: [PATCH 43/47] Fedora 42 moved postfix binaries to /usr/bin Signed-off-by: Jason Rothstein --- templates/Fedora/42/etc/postfix/main.cf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/templates/Fedora/42/etc/postfix/main.cf b/templates/Fedora/42/etc/postfix/main.cf index e7c5ce2..81bcec7 100644 --- a/templates/Fedora/42/etc/postfix/main.cf +++ b/templates/Fedora/42/etc/postfix/main.cf @@ -56,7 +56,7 @@ queue_directory = /var/spool/postfix # The command_directory parameter specifies the location of all # postXXX commands. # -command_directory = /usr/sbin +command_directory = /usr/bin # The daemon_directory parameter specifies the location of all Postfix # daemon programs (i.e. programs listed in the master.cf file). This From 41aa8840b07b1e86b67c6bb5922243053e9d923b Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sun, 25 May 2025 20:12:42 -0500 Subject: [PATCH 44/47] Handler improvements Signed-off-by: Jason Rothstein --- handlers/main.yml | 4 +++- tasks/main.yml | 12 +++++++----- 2 files changed, 10 insertions(+), 6 deletions(-) diff --git a/handlers/main.yml b/handlers/main.yml index 7063426..4ff2143 100644 --- a/handlers/main.yml +++ b/handlers/main.yml @@ -11,7 +11,7 @@ - ensure_postfix is defined ansible.builtin.systemd: daemon_reload: 'yes' -- name: 'ensure_postfix.services' +- name: 'ensure_postfix.service_restart' when: - ansible_system == 'Linux' - ensure_postfix is defined @@ -25,3 +25,5 @@ loop: '{{ ensure_postfix.service_list }}' loop_control: label: '{{ item.name }} will be restarted' +... + diff --git a/tasks/main.yml b/tasks/main.yml index a446093..d005afc 100644 --- a/tasks/main.yml +++ b/tasks/main.yml @@ -49,7 +49,7 @@ - 'ensure_postfix.package_facts' - 'ensure_postfix.service_facts' - 'ensure_postfix.service_reload' - - 'ensure_postfix.services' + - 'ensure_postfix.service_restart' - name: 'ensure packages' when: - ansible_system == 'Linux' @@ -66,7 +66,7 @@ - 'ensure_postfix.package_facts' - 'ensure_postfix.service_facts' - 'ensure_postfix.service_reload' - - 'ensure_postfix.services' + - 'ensure_postfix.service_restart' - name: 'ensure seboolean' when: - ansible_system == 'Linux' @@ -84,7 +84,7 @@ - 'ensure_postfix.package_facts' - 'ensure_postfix.service_facts' - 'ensure_postfix.service_reload' - - 'ensure_postfix.services' + - 'ensure_postfix.service_restart' - name: 'ensure configurations' when: - ansible_system == 'Linux' @@ -109,7 +109,7 @@ - 'ensure_postfix.package_facts' - 'ensure_postfix.service_facts' - 'ensure_postfix.service_reload' - - 'ensure_postfix.services' + - 'ensure_postfix.service_restart' - name: 'ensure firewall' when: - ansible_system == 'Linux' @@ -129,7 +129,7 @@ - 'ensure_postfix.package_facts' - 'ensure_postfix.service_facts' - 'ensure_postfix.service_reload' - - 'ensure_postfix.services' + - 'ensure_postfix.service_restart' - name: 'ensure services' when: - ansible_system == 'Linux' @@ -148,3 +148,5 @@ - 'ensure_postfix.service_facts' - name: 'flush handlers' meta: 'flush_handlers' +... + From 203a761e03c7285cc48c50dafa0587bb22e9dd72 Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Mon, 1 Sep 2025 14:01:33 -0500 Subject: [PATCH 45/47] Trust traffic originating from localhost (outbound) Signed-off-by: Jason Rothstein --- templates/Fedora/42/etc/opendmarc.conf | 1 + templates/Fedora/42/etc/opendmarc/ignore.hosts | 1 + vars/Fedora-42-default.yml | 2 ++ 3 files changed, 4 insertions(+) create mode 100644 templates/Fedora/42/etc/opendmarc/ignore.hosts diff --git a/templates/Fedora/42/etc/opendmarc.conf b/templates/Fedora/42/etc/opendmarc.conf index 19f6b7b..f5566b3 100644 --- a/templates/Fedora/42/etc/opendmarc.conf +++ b/templates/Fedora/42/etc/opendmarc.conf @@ -259,6 +259,7 @@ FailureReportsSentBy {{ postmaster_email }} ## to "127.0.0.1" only. # # IgnoreHosts /etc/opendmarc/ignore.hosts +IgnoreHosts /etc/opendmarc/ignore.hosts ## IgnoreMailFrom domain[,...] ## default (none) diff --git a/templates/Fedora/42/etc/opendmarc/ignore.hosts b/templates/Fedora/42/etc/opendmarc/ignore.hosts new file mode 100644 index 0000000..2fbb50c --- /dev/null +++ b/templates/Fedora/42/etc/opendmarc/ignore.hosts @@ -0,0 +1 @@ +localhost diff --git a/vars/Fedora-42-default.yml b/vars/Fedora-42-default.yml index d2f418d..532bad5 100644 --- a/vars/Fedora-42-default.yml +++ b/vars/Fedora-42-default.yml @@ -103,6 +103,8 @@ template_list: src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/opendkim.conf' - dest: '/etc/opendmarc.conf' src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/opendmarc.conf' + - dest: '/etc/opendmarc/ignore.hosts' + src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/opendmarc/ignore.hosts' - dest: '/usr/lib/systemd/system/postfix-copytls.service' src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/usr/lib/systemd/system/postfix-copytls.service' - dest: '/usr/lib/systemd/system/postfix-copytls.timer' From a019a68558a6479cba9042c459a4a554caede65a Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Tue, 5 May 2026 18:16:12 -0500 Subject: [PATCH 46/47] Fix ansible core 2.20 and supported OS list Signed-off-by: Jason Rothstein --- handlers/main.yml | 6 +- tasks/main.yml | 34 +- templates/Fedora/35/etc/opendkim.conf | 134 --- templates/Fedora/35/etc/opendkim/KeyTable | 6 - templates/Fedora/35/etc/opendkim/SigningTable | 25 - templates/Fedora/35/etc/opendkim/TrustedHosts | 9 - templates/Fedora/35/etc/opendmarc.conf | 442 ---------- templates/Fedora/35/etc/postfix/access | 484 ----------- templates/Fedora/35/etc/postfix/canonical | 307 ------- .../Fedora/35/etc/postfix/dynamicmaps.cf | 1 - .../35/etc/postfix/dynamicmaps.cf.d/ldap | 1 - .../35/etc/postfix/dynamicmaps.cf.d/mysql | 1 - .../35/etc/postfix/dynamicmaps.cf.d/pcre | 1 - templates/Fedora/35/etc/postfix/generic | 250 ------ templates/Fedora/35/etc/postfix/header_checks | 549 ------------- templates/Fedora/35/etc/postfix/main.cf | 766 ----------------- templates/Fedora/35/etc/postfix/main.cf.proto | 736 ----------------- templates/Fedora/35/etc/postfix/master.cf | 137 ---- .../Fedora/35/etc/postfix/master.cf.proto | 137 ---- templates/Fedora/35/etc/postfix/postfix-files | 432 ---------- .../35/etc/postfix/postfix-files.d/ldap | 3 - .../35/etc/postfix/postfix-files.d/mysql | 3 - .../35/etc/postfix/postfix-files.d/pcre | 3 - templates/Fedora/35/etc/postfix/relocated | 176 ---- templates/Fedora/35/etc/postfix/transport | 317 ------- templates/Fedora/35/etc/postfix/virtual | 324 -------- .../systemd/system/postfix-copytls.service | 12 - .../lib/systemd/system/postfix-copytls.timer | 9 - templates/Fedora/36/etc/opendkim.conf | 134 --- templates/Fedora/36/etc/opendkim/KeyTable | 6 - templates/Fedora/36/etc/opendkim/SigningTable | 25 - templates/Fedora/36/etc/opendkim/TrustedHosts | 9 - templates/Fedora/36/etc/opendmarc.conf | 442 ---------- templates/Fedora/36/etc/postfix/access | 484 ----------- templates/Fedora/36/etc/postfix/canonical | 307 ------- .../Fedora/36/etc/postfix/dynamicmaps.cf | 1 - .../36/etc/postfix/dynamicmaps.cf.d/ldap | 1 - .../36/etc/postfix/dynamicmaps.cf.d/mysql | 1 - .../36/etc/postfix/dynamicmaps.cf.d/pcre | 1 - templates/Fedora/36/etc/postfix/generic | 250 ------ templates/Fedora/36/etc/postfix/header_checks | 549 ------------- templates/Fedora/36/etc/postfix/main.cf | 766 ----------------- templates/Fedora/36/etc/postfix/main.cf.proto | 736 ----------------- templates/Fedora/36/etc/postfix/master.cf | 137 ---- .../Fedora/36/etc/postfix/master.cf.proto | 137 ---- templates/Fedora/36/etc/postfix/postfix-files | 432 ---------- .../36/etc/postfix/postfix-files.d/ldap | 3 - .../36/etc/postfix/postfix-files.d/mysql | 3 - .../36/etc/postfix/postfix-files.d/pcre | 3 - templates/Fedora/36/etc/postfix/relocated | 176 ---- templates/Fedora/36/etc/postfix/transport | 317 ------- templates/Fedora/36/etc/postfix/virtual | 324 -------- .../systemd/system/postfix-copytls.service | 12 - .../lib/systemd/system/postfix-copytls.timer | 9 - templates/Fedora/37/etc/opendkim.conf | 134 --- templates/Fedora/37/etc/opendkim/KeyTable | 6 - templates/Fedora/37/etc/opendkim/SigningTable | 25 - templates/Fedora/37/etc/opendkim/TrustedHosts | 9 - templates/Fedora/37/etc/opendmarc.conf | 442 ---------- templates/Fedora/37/etc/postfix/access | 484 ----------- templates/Fedora/37/etc/postfix/canonical | 307 ------- .../Fedora/37/etc/postfix/dynamicmaps.cf | 1 - .../37/etc/postfix/dynamicmaps.cf.d/ldap | 1 - .../37/etc/postfix/dynamicmaps.cf.d/mysql | 1 - .../37/etc/postfix/dynamicmaps.cf.d/pcre | 1 - templates/Fedora/37/etc/postfix/generic | 250 ------ templates/Fedora/37/etc/postfix/header_checks | 549 ------------- templates/Fedora/37/etc/postfix/main.cf | 766 ----------------- templates/Fedora/37/etc/postfix/main.cf.proto | 736 ----------------- templates/Fedora/37/etc/postfix/master.cf | 137 ---- .../Fedora/37/etc/postfix/master.cf.proto | 137 ---- templates/Fedora/37/etc/postfix/postfix-files | 432 ---------- .../37/etc/postfix/postfix-files.d/ldap | 3 - .../37/etc/postfix/postfix-files.d/mysql | 3 - .../37/etc/postfix/postfix-files.d/pcre | 3 - templates/Fedora/37/etc/postfix/relocated | 176 ---- templates/Fedora/37/etc/postfix/transport | 317 ------- templates/Fedora/37/etc/postfix/virtual | 324 -------- .../systemd/system/postfix-copytls.service | 12 - .../lib/systemd/system/postfix-copytls.timer | 9 - templates/Fedora/38/etc/opendkim.conf | 135 --- templates/Fedora/38/etc/opendkim/KeyTable | 6 - templates/Fedora/38/etc/opendkim/SigningTable | 25 - templates/Fedora/38/etc/opendkim/TrustedHosts | 9 - templates/Fedora/38/etc/opendmarc.conf | 443 ---------- templates/Fedora/38/etc/postfix/access | 484 ----------- templates/Fedora/38/etc/postfix/canonical | 307 ------- .../Fedora/38/etc/postfix/dynamicmaps.cf | 1 - .../38/etc/postfix/dynamicmaps.cf.d/ldap | 1 - .../38/etc/postfix/dynamicmaps.cf.d/mysql | 1 - .../38/etc/postfix/dynamicmaps.cf.d/pcre | 1 - templates/Fedora/38/etc/postfix/generic | 252 ------ templates/Fedora/38/etc/postfix/header_checks | 549 ------------- templates/Fedora/38/etc/postfix/main.cf | 774 ------------------ templates/Fedora/38/etc/postfix/main.cf.proto | 745 ----------------- templates/Fedora/38/etc/postfix/master.cf | 145 ---- .../Fedora/38/etc/postfix/master.cf.proto | 145 ---- templates/Fedora/38/etc/postfix/postfix-files | 447 ---------- .../38/etc/postfix/postfix-files.d/ldap | 3 - .../38/etc/postfix/postfix-files.d/mysql | 3 - .../38/etc/postfix/postfix-files.d/pcre | 3 - templates/Fedora/38/etc/postfix/relocated | 178 ---- templates/Fedora/38/etc/postfix/transport | 317 ------- templates/Fedora/38/etc/postfix/virtual | 324 -------- .../systemd/system/postfix-copytls.service | 12 - .../lib/systemd/system/postfix-copytls.timer | 9 - templates/Fedora/39/etc/opendkim.conf | 135 --- templates/Fedora/39/etc/opendkim/KeyTable | 6 - templates/Fedora/39/etc/opendkim/SigningTable | 25 - templates/Fedora/39/etc/opendkim/TrustedHosts | 9 - templates/Fedora/39/etc/opendmarc.conf | 443 ---------- templates/Fedora/39/etc/postfix/access | 484 ----------- templates/Fedora/39/etc/postfix/canonical | 307 ------- .../Fedora/39/etc/postfix/dynamicmaps.cf | 1 - .../39/etc/postfix/dynamicmaps.cf.d/ldap | 1 - .../39/etc/postfix/dynamicmaps.cf.d/mysql | 1 - .../39/etc/postfix/dynamicmaps.cf.d/pcre | 1 - templates/Fedora/39/etc/postfix/generic | 252 ------ templates/Fedora/39/etc/postfix/header_checks | 549 ------------- templates/Fedora/39/etc/postfix/main.cf | 774 ------------------ templates/Fedora/39/etc/postfix/main.cf.proto | 745 ----------------- templates/Fedora/39/etc/postfix/master.cf | 145 ---- .../Fedora/39/etc/postfix/master.cf.proto | 145 ---- templates/Fedora/39/etc/postfix/postfix-files | 447 ---------- .../39/etc/postfix/postfix-files.d/ldap | 3 - .../39/etc/postfix/postfix-files.d/mysql | 3 - .../39/etc/postfix/postfix-files.d/pcre | 3 - templates/Fedora/39/etc/postfix/relocated | 178 ---- templates/Fedora/39/etc/postfix/transport | 317 ------- templates/Fedora/39/etc/postfix/virtual | 324 -------- .../systemd/system/postfix-copytls.service | 12 - .../lib/systemd/system/postfix-copytls.timer | 9 - templates/Fedora/40/etc/opendkim.conf | 135 --- templates/Fedora/40/etc/opendkim/KeyTable | 6 - templates/Fedora/40/etc/opendkim/SigningTable | 25 - templates/Fedora/40/etc/opendkim/TrustedHosts | 9 - templates/Fedora/40/etc/opendmarc.conf | 443 ---------- templates/Fedora/40/etc/postfix/access | 484 ----------- templates/Fedora/40/etc/postfix/canonical | 307 ------- .../Fedora/40/etc/postfix/dynamicmaps.cf | 1 - .../40/etc/postfix/dynamicmaps.cf.d/ldap | 1 - .../40/etc/postfix/dynamicmaps.cf.d/mysql | 1 - .../40/etc/postfix/dynamicmaps.cf.d/pcre | 1 - templates/Fedora/40/etc/postfix/generic | 252 ------ templates/Fedora/40/etc/postfix/header_checks | 549 ------------- templates/Fedora/40/etc/postfix/main.cf | 774 ------------------ templates/Fedora/40/etc/postfix/main.cf.proto | 745 ----------------- templates/Fedora/40/etc/postfix/master.cf | 145 ---- .../Fedora/40/etc/postfix/master.cf.proto | 145 ---- templates/Fedora/40/etc/postfix/postfix-files | 447 ---------- .../40/etc/postfix/postfix-files.d/ldap | 3 - .../40/etc/postfix/postfix-files.d/mysql | 3 - .../40/etc/postfix/postfix-files.d/pcre | 3 - templates/Fedora/40/etc/postfix/relocated | 178 ---- templates/Fedora/40/etc/postfix/transport | 317 ------- templates/Fedora/40/etc/postfix/virtual | 324 -------- .../systemd/system/postfix-copytls.service | 12 - .../lib/systemd/system/postfix-copytls.timer | 9 - templates/Fedora/41/etc/opendkim.conf | 135 --- templates/Fedora/41/etc/opendkim/KeyTable | 6 - templates/Fedora/41/etc/opendkim/SigningTable | 25 - templates/Fedora/41/etc/opendkim/TrustedHosts | 9 - templates/Fedora/41/etc/opendmarc.conf | 443 ---------- templates/Fedora/41/etc/postfix/access | 484 ----------- templates/Fedora/41/etc/postfix/canonical | 306 ------- .../Fedora/41/etc/postfix/dynamicmaps.cf | 1 - .../41/etc/postfix/dynamicmaps.cf.d/ldap | 1 - .../41/etc/postfix/dynamicmaps.cf.d/mysql | 1 - .../41/etc/postfix/dynamicmaps.cf.d/pcre | 1 - templates/Fedora/41/etc/postfix/generic | 252 ------ templates/Fedora/41/etc/postfix/header_checks | 535 ------------ templates/Fedora/41/etc/postfix/main.cf | 774 ------------------ templates/Fedora/41/etc/postfix/main.cf.proto | 745 ----------------- templates/Fedora/41/etc/postfix/master.cf | 145 ---- .../Fedora/41/etc/postfix/master.cf.proto | 145 ---- templates/Fedora/41/etc/postfix/postfix-files | 454 ---------- .../41/etc/postfix/postfix-files.d/ldap | 3 - .../41/etc/postfix/postfix-files.d/mysql | 3 - .../41/etc/postfix/postfix-files.d/pcre | 3 - templates/Fedora/41/etc/postfix/relocated | 178 ---- templates/Fedora/41/etc/postfix/transport | 317 ------- templates/Fedora/41/etc/postfix/virtual | 324 -------- .../systemd/system/postfix-copytls.service | 12 - .../lib/systemd/system/postfix-copytls.timer | 9 - vars/Fedora-35-default.yml | 110 --- vars/Fedora-36-default.yml | 110 --- vars/Fedora-37-default.yml | 110 --- vars/Fedora-38-default.yml | 110 --- vars/Fedora-39-default.yml | 110 --- vars/Fedora-40-default.yml | 110 --- vars/Fedora-41-default.yml | 110 --- vars/Fedora-42-default.yml | 54 +- 192 files changed, 47 insertions(+), 37880 deletions(-) delete mode 100644 templates/Fedora/35/etc/opendkim.conf delete mode 100644 templates/Fedora/35/etc/opendkim/KeyTable delete mode 100644 templates/Fedora/35/etc/opendkim/SigningTable delete mode 100644 templates/Fedora/35/etc/opendkim/TrustedHosts delete mode 100644 templates/Fedora/35/etc/opendmarc.conf delete mode 100644 templates/Fedora/35/etc/postfix/access delete mode 100644 templates/Fedora/35/etc/postfix/canonical delete mode 100644 templates/Fedora/35/etc/postfix/dynamicmaps.cf delete mode 100644 templates/Fedora/35/etc/postfix/dynamicmaps.cf.d/ldap delete mode 100644 templates/Fedora/35/etc/postfix/dynamicmaps.cf.d/mysql delete mode 100644 templates/Fedora/35/etc/postfix/dynamicmaps.cf.d/pcre delete mode 100644 templates/Fedora/35/etc/postfix/generic delete mode 100644 templates/Fedora/35/etc/postfix/header_checks delete mode 100644 templates/Fedora/35/etc/postfix/main.cf delete mode 100644 templates/Fedora/35/etc/postfix/main.cf.proto delete mode 100644 templates/Fedora/35/etc/postfix/master.cf delete mode 100644 templates/Fedora/35/etc/postfix/master.cf.proto delete mode 100644 templates/Fedora/35/etc/postfix/postfix-files delete mode 100644 templates/Fedora/35/etc/postfix/postfix-files.d/ldap delete mode 100644 templates/Fedora/35/etc/postfix/postfix-files.d/mysql delete mode 100644 templates/Fedora/35/etc/postfix/postfix-files.d/pcre delete mode 100644 templates/Fedora/35/etc/postfix/relocated delete mode 100644 templates/Fedora/35/etc/postfix/transport delete mode 100644 templates/Fedora/35/etc/postfix/virtual delete mode 100644 templates/Fedora/35/usr/lib/systemd/system/postfix-copytls.service delete mode 100644 templates/Fedora/35/usr/lib/systemd/system/postfix-copytls.timer delete mode 100644 templates/Fedora/36/etc/opendkim.conf delete mode 100644 templates/Fedora/36/etc/opendkim/KeyTable delete mode 100644 templates/Fedora/36/etc/opendkim/SigningTable delete mode 100644 templates/Fedora/36/etc/opendkim/TrustedHosts delete mode 100644 templates/Fedora/36/etc/opendmarc.conf delete mode 100644 templates/Fedora/36/etc/postfix/access delete mode 100644 templates/Fedora/36/etc/postfix/canonical delete mode 100644 templates/Fedora/36/etc/postfix/dynamicmaps.cf delete mode 100644 templates/Fedora/36/etc/postfix/dynamicmaps.cf.d/ldap delete mode 100644 templates/Fedora/36/etc/postfix/dynamicmaps.cf.d/mysql delete mode 100644 templates/Fedora/36/etc/postfix/dynamicmaps.cf.d/pcre delete mode 100644 templates/Fedora/36/etc/postfix/generic delete mode 100644 templates/Fedora/36/etc/postfix/header_checks delete mode 100644 templates/Fedora/36/etc/postfix/main.cf delete mode 100644 templates/Fedora/36/etc/postfix/main.cf.proto delete mode 100644 templates/Fedora/36/etc/postfix/master.cf delete mode 100644 templates/Fedora/36/etc/postfix/master.cf.proto delete mode 100644 templates/Fedora/36/etc/postfix/postfix-files delete mode 100644 templates/Fedora/36/etc/postfix/postfix-files.d/ldap delete mode 100644 templates/Fedora/36/etc/postfix/postfix-files.d/mysql delete mode 100644 templates/Fedora/36/etc/postfix/postfix-files.d/pcre delete mode 100644 templates/Fedora/36/etc/postfix/relocated delete mode 100644 templates/Fedora/36/etc/postfix/transport delete mode 100644 templates/Fedora/36/etc/postfix/virtual delete mode 100644 templates/Fedora/36/usr/lib/systemd/system/postfix-copytls.service delete mode 100644 templates/Fedora/36/usr/lib/systemd/system/postfix-copytls.timer delete mode 100644 templates/Fedora/37/etc/opendkim.conf delete mode 100644 templates/Fedora/37/etc/opendkim/KeyTable delete mode 100644 templates/Fedora/37/etc/opendkim/SigningTable delete mode 100644 templates/Fedora/37/etc/opendkim/TrustedHosts delete mode 100644 templates/Fedora/37/etc/opendmarc.conf delete mode 100644 templates/Fedora/37/etc/postfix/access delete mode 100644 templates/Fedora/37/etc/postfix/canonical delete mode 100644 templates/Fedora/37/etc/postfix/dynamicmaps.cf delete mode 100644 templates/Fedora/37/etc/postfix/dynamicmaps.cf.d/ldap delete mode 100644 templates/Fedora/37/etc/postfix/dynamicmaps.cf.d/mysql delete mode 100644 templates/Fedora/37/etc/postfix/dynamicmaps.cf.d/pcre delete mode 100644 templates/Fedora/37/etc/postfix/generic delete mode 100644 templates/Fedora/37/etc/postfix/header_checks delete mode 100644 templates/Fedora/37/etc/postfix/main.cf delete mode 100644 templates/Fedora/37/etc/postfix/main.cf.proto delete mode 100644 templates/Fedora/37/etc/postfix/master.cf delete mode 100644 templates/Fedora/37/etc/postfix/master.cf.proto delete mode 100644 templates/Fedora/37/etc/postfix/postfix-files delete mode 100644 templates/Fedora/37/etc/postfix/postfix-files.d/ldap delete mode 100644 templates/Fedora/37/etc/postfix/postfix-files.d/mysql delete mode 100644 templates/Fedora/37/etc/postfix/postfix-files.d/pcre delete mode 100644 templates/Fedora/37/etc/postfix/relocated delete mode 100644 templates/Fedora/37/etc/postfix/transport delete mode 100644 templates/Fedora/37/etc/postfix/virtual delete mode 100644 templates/Fedora/37/usr/lib/systemd/system/postfix-copytls.service delete mode 100644 templates/Fedora/37/usr/lib/systemd/system/postfix-copytls.timer delete mode 100644 templates/Fedora/38/etc/opendkim.conf delete mode 100644 templates/Fedora/38/etc/opendkim/KeyTable delete mode 100644 templates/Fedora/38/etc/opendkim/SigningTable delete mode 100644 templates/Fedora/38/etc/opendkim/TrustedHosts delete mode 100644 templates/Fedora/38/etc/opendmarc.conf delete mode 100644 templates/Fedora/38/etc/postfix/access delete mode 100644 templates/Fedora/38/etc/postfix/canonical delete mode 100644 templates/Fedora/38/etc/postfix/dynamicmaps.cf delete mode 100644 templates/Fedora/38/etc/postfix/dynamicmaps.cf.d/ldap delete mode 100644 templates/Fedora/38/etc/postfix/dynamicmaps.cf.d/mysql delete mode 100644 templates/Fedora/38/etc/postfix/dynamicmaps.cf.d/pcre delete mode 100644 templates/Fedora/38/etc/postfix/generic delete mode 100644 templates/Fedora/38/etc/postfix/header_checks delete mode 100644 templates/Fedora/38/etc/postfix/main.cf delete mode 100644 templates/Fedora/38/etc/postfix/main.cf.proto delete mode 100644 templates/Fedora/38/etc/postfix/master.cf delete mode 100644 templates/Fedora/38/etc/postfix/master.cf.proto delete mode 100644 templates/Fedora/38/etc/postfix/postfix-files delete mode 100644 templates/Fedora/38/etc/postfix/postfix-files.d/ldap delete mode 100644 templates/Fedora/38/etc/postfix/postfix-files.d/mysql delete mode 100644 templates/Fedora/38/etc/postfix/postfix-files.d/pcre delete mode 100644 templates/Fedora/38/etc/postfix/relocated delete mode 100644 templates/Fedora/38/etc/postfix/transport delete mode 100644 templates/Fedora/38/etc/postfix/virtual delete mode 100644 templates/Fedora/38/usr/lib/systemd/system/postfix-copytls.service delete mode 100644 templates/Fedora/38/usr/lib/systemd/system/postfix-copytls.timer delete mode 100644 templates/Fedora/39/etc/opendkim.conf delete mode 100644 templates/Fedora/39/etc/opendkim/KeyTable delete mode 100644 templates/Fedora/39/etc/opendkim/SigningTable delete mode 100644 templates/Fedora/39/etc/opendkim/TrustedHosts delete mode 100644 templates/Fedora/39/etc/opendmarc.conf delete mode 100644 templates/Fedora/39/etc/postfix/access delete mode 100644 templates/Fedora/39/etc/postfix/canonical delete mode 100644 templates/Fedora/39/etc/postfix/dynamicmaps.cf delete mode 100644 templates/Fedora/39/etc/postfix/dynamicmaps.cf.d/ldap delete mode 100644 templates/Fedora/39/etc/postfix/dynamicmaps.cf.d/mysql delete mode 100644 templates/Fedora/39/etc/postfix/dynamicmaps.cf.d/pcre delete mode 100644 templates/Fedora/39/etc/postfix/generic delete mode 100644 templates/Fedora/39/etc/postfix/header_checks delete mode 100644 templates/Fedora/39/etc/postfix/main.cf delete mode 100644 templates/Fedora/39/etc/postfix/main.cf.proto delete mode 100644 templates/Fedora/39/etc/postfix/master.cf delete mode 100644 templates/Fedora/39/etc/postfix/master.cf.proto delete mode 100644 templates/Fedora/39/etc/postfix/postfix-files delete mode 100644 templates/Fedora/39/etc/postfix/postfix-files.d/ldap delete mode 100644 templates/Fedora/39/etc/postfix/postfix-files.d/mysql delete mode 100644 templates/Fedora/39/etc/postfix/postfix-files.d/pcre delete mode 100644 templates/Fedora/39/etc/postfix/relocated delete mode 100644 templates/Fedora/39/etc/postfix/transport delete mode 100644 templates/Fedora/39/etc/postfix/virtual delete mode 100644 templates/Fedora/39/usr/lib/systemd/system/postfix-copytls.service delete mode 100644 templates/Fedora/39/usr/lib/systemd/system/postfix-copytls.timer delete mode 100644 templates/Fedora/40/etc/opendkim.conf delete mode 100644 templates/Fedora/40/etc/opendkim/KeyTable delete mode 100644 templates/Fedora/40/etc/opendkim/SigningTable delete mode 100644 templates/Fedora/40/etc/opendkim/TrustedHosts delete mode 100644 templates/Fedora/40/etc/opendmarc.conf delete mode 100644 templates/Fedora/40/etc/postfix/access delete mode 100644 templates/Fedora/40/etc/postfix/canonical delete mode 100644 templates/Fedora/40/etc/postfix/dynamicmaps.cf delete mode 100644 templates/Fedora/40/etc/postfix/dynamicmaps.cf.d/ldap delete mode 100644 templates/Fedora/40/etc/postfix/dynamicmaps.cf.d/mysql delete mode 100644 templates/Fedora/40/etc/postfix/dynamicmaps.cf.d/pcre delete mode 100644 templates/Fedora/40/etc/postfix/generic delete mode 100644 templates/Fedora/40/etc/postfix/header_checks delete mode 100644 templates/Fedora/40/etc/postfix/main.cf delete mode 100644 templates/Fedora/40/etc/postfix/main.cf.proto delete mode 100644 templates/Fedora/40/etc/postfix/master.cf delete mode 100644 templates/Fedora/40/etc/postfix/master.cf.proto delete mode 100644 templates/Fedora/40/etc/postfix/postfix-files delete mode 100644 templates/Fedora/40/etc/postfix/postfix-files.d/ldap delete mode 100644 templates/Fedora/40/etc/postfix/postfix-files.d/mysql delete mode 100644 templates/Fedora/40/etc/postfix/postfix-files.d/pcre delete mode 100644 templates/Fedora/40/etc/postfix/relocated delete mode 100644 templates/Fedora/40/etc/postfix/transport delete mode 100644 templates/Fedora/40/etc/postfix/virtual delete mode 100644 templates/Fedora/40/usr/lib/systemd/system/postfix-copytls.service delete mode 100644 templates/Fedora/40/usr/lib/systemd/system/postfix-copytls.timer delete mode 100644 templates/Fedora/41/etc/opendkim.conf delete mode 100644 templates/Fedora/41/etc/opendkim/KeyTable delete mode 100644 templates/Fedora/41/etc/opendkim/SigningTable delete mode 100644 templates/Fedora/41/etc/opendkim/TrustedHosts delete mode 100644 templates/Fedora/41/etc/opendmarc.conf delete mode 100644 templates/Fedora/41/etc/postfix/access delete mode 100644 templates/Fedora/41/etc/postfix/canonical delete mode 100644 templates/Fedora/41/etc/postfix/dynamicmaps.cf delete mode 100644 templates/Fedora/41/etc/postfix/dynamicmaps.cf.d/ldap delete mode 100644 templates/Fedora/41/etc/postfix/dynamicmaps.cf.d/mysql delete mode 100644 templates/Fedora/41/etc/postfix/dynamicmaps.cf.d/pcre delete mode 100644 templates/Fedora/41/etc/postfix/generic delete mode 100644 templates/Fedora/41/etc/postfix/header_checks delete mode 100644 templates/Fedora/41/etc/postfix/main.cf delete mode 100644 templates/Fedora/41/etc/postfix/main.cf.proto delete mode 100644 templates/Fedora/41/etc/postfix/master.cf delete mode 100644 templates/Fedora/41/etc/postfix/master.cf.proto delete mode 100644 templates/Fedora/41/etc/postfix/postfix-files delete mode 100644 templates/Fedora/41/etc/postfix/postfix-files.d/ldap delete mode 100644 templates/Fedora/41/etc/postfix/postfix-files.d/mysql delete mode 100644 templates/Fedora/41/etc/postfix/postfix-files.d/pcre delete mode 100644 templates/Fedora/41/etc/postfix/relocated delete mode 100644 templates/Fedora/41/etc/postfix/transport delete mode 100644 templates/Fedora/41/etc/postfix/virtual delete mode 100644 templates/Fedora/41/usr/lib/systemd/system/postfix-copytls.service delete mode 100644 templates/Fedora/41/usr/lib/systemd/system/postfix-copytls.timer delete mode 100644 vars/Fedora-35-default.yml delete mode 100644 vars/Fedora-36-default.yml delete mode 100644 vars/Fedora-37-default.yml delete mode 100644 vars/Fedora-38-default.yml delete mode 100644 vars/Fedora-39-default.yml delete mode 100644 vars/Fedora-40-default.yml delete mode 100644 vars/Fedora-41-default.yml diff --git a/handlers/main.yml b/handlers/main.yml index 4ff2143..24d3b02 100644 --- a/handlers/main.yml +++ b/handlers/main.yml @@ -6,14 +6,14 @@ ansible.builtin.service_facts: - name: 'ensure_postfix.service_reload' when: - - ansible_system == 'Linux' - - ansible_service_mgr == 'systemd' + - ansible_facts["system"] == 'Linux' + - ansible_facts["service_mgr"] == 'systemd' - ensure_postfix is defined ansible.builtin.systemd: daemon_reload: 'yes' - name: 'ensure_postfix.service_restart' when: - - ansible_system == 'Linux' + - ansible_facts["system"] == 'Linux' - ensure_postfix is defined - ensure_postfix.service_list is defined - ensure_postfix.service_list is iterable diff --git a/tasks/main.yml b/tasks/main.yml index d005afc..b7d01cb 100644 --- a/tasks/main.yml +++ b/tasks/main.yml @@ -2,36 +2,36 @@ # tasks file for ensure_postfix - name: 'include variables' when: - - ansible_system == 'Linux' + - ansible_facts["system"] == 'Linux' include_vars: file: '{{ lookup("first_found", findme ) }}' name: 'ensure_postfix' vars: findme: files: - - '{{ ansible_distribution }}-{{ ansible_distribution_major_version }}-{{ ansible_architecture }}.yml' - - '{{ ansible_distribution }}-{{ ansible_distribution_major_version }}-default.yml' - - '{{ ansible_distribution }}-default.yml' - - '{{ ansible_os_family }}-{{ ansible_distribution_major_version }}-{{ ansible_architecture }}.yml' - - '{{ ansible_os_family }}-{{ ansible_distribution_major_version }}-default.yml' - - '{{ ansible_os_family }}-default.yml' + - '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"] }}-{{ ansible_facts["architecture"] }}.yml' + - '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"] }}-default.yml' + - '{{ ansible_facts["distribution"] }}-default.yml' + - '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"] }}-{{ ansible_facts["architecture"] }}.yml' + - '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"] }}-default.yml' + - '{{ ansible_facts["os_family"] }}-default.yml' - 'default.yml' paths: - '../vars/' errors: 'ignore' - name: 'package discovery' when: - - ansible_system == 'Linux' - - packages is not defined + - ansible_facts["system"] == 'Linux' + - ansible_facts["packages"] is not defined ansible.builtin.package_facts: - name: 'service discovery' when: - - ansible_system == 'Linux' - - services is not defined + - ansible_facts["system"] == 'Linux' + - ansible_facts["services"] is not defined ansible.builtin.service_facts: - name: 'ensure sysctl' when: - - ansible_system == 'Linux' + - ansible_facts["system"] == 'Linux' - ensure_postfix is defined - ensure_postfix.sysctl_list is defined - ensure_postfix.sysctl_list is iterable @@ -52,7 +52,7 @@ - 'ensure_postfix.service_restart' - name: 'ensure packages' when: - - ansible_system == 'Linux' + - ansible_facts["system"] == 'Linux' - ensure_postfix is defined - ensure_postfix.package_list is defined - ensure_postfix.package_list is iterable @@ -69,7 +69,7 @@ - 'ensure_postfix.service_restart' - name: 'ensure seboolean' when: - - ansible_system == 'Linux' + - ansible_facts["system"] == 'Linux' - ensure_postfix is defined - ensure_postfix.seboolean_list is defined - ensure_postfix.seboolean_list is iterable @@ -87,7 +87,7 @@ - 'ensure_postfix.service_restart' - name: 'ensure configurations' when: - - ansible_system == 'Linux' + - ansible_facts["system"] == 'Linux' - ensure_postfix is defined - ensure_postfix.template_list is defined - ensure_postfix.template_list is iterable @@ -112,7 +112,7 @@ - 'ensure_postfix.service_restart' - name: 'ensure firewall' when: - - ansible_system == 'Linux' + - ansible_facts["system"] == 'Linux' - packages["firewalld"] is defined - packages["python3-firewall"] is defined - ensure_postfix is defined @@ -132,7 +132,7 @@ - 'ensure_postfix.service_restart' - name: 'ensure services' when: - - ansible_system == 'Linux' + - ansible_facts["system"] == 'Linux' - ensure_postfix is defined - ensure_postfix.service_list is defined - ensure_postfix.service_list is iterable diff --git a/templates/Fedora/35/etc/opendkim.conf b/templates/Fedora/35/etc/opendkim.conf deleted file mode 100644 index 992e0b2..0000000 --- a/templates/Fedora/35/etc/opendkim.conf +++ /dev/null @@ -1,134 +0,0 @@ -## BASIC OPENDKIM CONFIGURATION FILE -## See opendkim.conf(5) or /usr/share/doc/opendkim/opendkim.conf.sample for more - -## BEFORE running OpenDKIM you must: - -## - make your MTA (Postfix, Sendmail, etc.) aware of OpenDKIM -## - generate keys for your domain (if signing) -## - edit your DNS records to publish your public keys (if signing) - -## See /usr/share/doc/opendkim/INSTALL for detailed instructions. - -## DEPRECATED CONFIGURATION OPTIONS -## -## The following configuration options are no longer valid. They should be -## removed from your existing configuration file to prevent potential issues. -## Failure to do so may result in opendkim being unable to start. -## -## Removed in 2.10.0: -## AddAllSignatureResults -## ADSPAction -## ADSPNoSuchDomain -## BogusPolicy -## DisableADSP -## LDAPSoftStart -## LocalADSP -## NoDiscardableMailTo -## On-PolicyError -## SendADSPReports -## UnprotectedPolicy - -## CONFIGURATION OPTIONS - -## Specifies the path to the process ID file. -PidFile /run/opendkim/opendkim.pid - -## Selects operating modes. Valid modes are s (sign) and v (verify). Default is v. -## Must be changed to s (sign only) or sv (sign and verify) in order to sign outgoing -## messages. -Mode v - -## Log activity to the system log. -Syslog yes - -## Log additional entries indicating successful signing or verification of messages. -SyslogSuccess yes - -## If logging is enabled, include detailed logging about why or why not a message was -## signed or verified. This causes an increase in the amount of log data generated -## for each message, so set this to No (or comment it out) if it gets too noisy. -LogWhy yes - -## Attempt to become the specified user before starting operations. -UserID opendkim:opendkim - -## Create a socket through which your MTA can communicate. -Socket inet:8891@localhost - -## Required to use local socket with MTAs that access the socket as a non- -## privileged user (e.g. Postfix) -Umask 002 - -## This specifies a text file in which to store DKIM transaction statistics. -## OpenDKIM must be manually compiled with --enable-stats to enable this feature. -# Statistics /var/spool/opendkim/stats.dat - -## Specifies whether or not the filter should generate report mail back -## to senders when verification fails and an address for such a purpose -## is provided. See opendkim.conf(5) for details. -SendReports yes - -## Specifies the sending address to be used on From: headers of outgoing -## failure reports. By default, the e-mail address of the user executing -## the filter is used (executing_user@hostname). -# ReportAddress "Example.com Postmaster" -ReportAddress "Postmaster" <{{ postmaster_email }}> - -## Add a DKIM-Filter header field to messages passing through this filter -## to identify messages it has processed. -SoftwareHeader yes - -## SIGNING OPTIONS - -## Selects the canonicalization method(s) to be used when signing messages. -Canonicalization relaxed/relaxed - -## Domain(s) whose mail should be signed by this filter. Mail from other domains will -## be verified rather than being signed. Uncomment and use your domain name. -## This parameter is not required if a SigningTable is in use. -# Domain example.com - -## Defines the name of the selector to be used when signing messages. -Selector default - -## Specifies the minimum number of key bits for acceptable keys and signatures. -MinimumKeyBits 1024 - -## Gives the location of a private key to be used for signing ALL messages. This -## directive is ignored if KeyTable is enabled. -# KeyFile /etc/opendkim/keys/default.private - -## Gives the location of a file mapping key names to signing keys. In simple terms, -## this tells OpenDKIM where to find your keys. If present, overrides any KeyFile -## directive in the configuration file. Requires SigningTable be enabled. -# KeyTable /etc/opendkim/KeyTable - -## Defines a table used to select one or more signatures to apply to a message based -## on the address found in the From: header field. In simple terms, this tells -## OpenDKIM how to use your keys. Requires KeyTable be enabled. -# SigningTable refile:/etc/opendkim/SigningTable - -## Identifies a set of "external" hosts that may send mail through the server as one -## of the signing domains without credentials as such. -# ExternalIgnoreList refile:/etc/opendkim/TrustedHosts - -## Identifies a set "internal" hosts whose mail should be signed rather than verified. -# InternalHosts refile:/etc/opendkim/TrustedHosts - -## Contains a list of IP addresses, CIDR blocks, hostnames or domain names -## whose mail should be neither signed nor verified by this filter. See man -## page for file format. -# PeerList X.X.X.X - -## Always oversign From (sign using actual From and a null From to prevent -## malicious signatures header fields (From and/or others) between the signer -## and the verifier. From is oversigned by default in the Fedora package -## because it is often the identity key used by reputation systems and thus -## somewhat security sensitive. -OversignHeaders From - -## Instructs the DKIM library to maintain its own local cache of keys and -## policies retrieved from DNS, rather than relying on the nameserver for -## caching service. Useful if the nameserver being used by the filter is -## not local. -QueryCache yes diff --git a/templates/Fedora/35/etc/opendkim/KeyTable b/templates/Fedora/35/etc/opendkim/KeyTable deleted file mode 100644 index e804d68..0000000 --- a/templates/Fedora/35/etc/opendkim/KeyTable +++ /dev/null @@ -1,6 +0,0 @@ -# OPENDKIM KEY TABLE -# To use this file, uncomment the #KeyTable option in /etc/opendkim.conf, -# then uncomment the following line and replace example.com with your domain -# name, then restart OpenDKIM. Additional keys may be added on separate lines. - -#default._domainkey.example.com example.com:default:/etc/opendkim/keys/default.private diff --git a/templates/Fedora/35/etc/opendkim/SigningTable b/templates/Fedora/35/etc/opendkim/SigningTable deleted file mode 100644 index e8161a1..0000000 --- a/templates/Fedora/35/etc/opendkim/SigningTable +++ /dev/null @@ -1,25 +0,0 @@ -# OPENDKIM SIGNING TABLE -# This table controls how to apply one or more signatures to outgoing messages based -# on the address found in the From: header field. In simple terms, this tells -# OpenDKIM "how" to apply your keys. - -# To use this file, uncomment the SigningTable option in /etc/opendkim.conf, -# then uncomment one of the usage examples below and replace example.com with your -# domain name, then restart OpenDKIM. - -# WILDCARD EXAMPLE -# Enables signing for any address on the listed domain(s), but will work only if -# "refile:/etc/opendkim/SigningTable" is included in /etc/opendkim.conf. -# Create additional lines for additional domains. - -#*@example.com default._domainkey.example.com - -# NON-WILDCARD EXAMPLE -# If "file:" (instead of "refile:") is specified in /etc/opendkim.conf, then -# wildcards will not work. Instead, full user@host is checked first, then simply host, -# then user@.domain (with all superdomains checked in sequence, so "foo.example.com" -# would first check "user@foo.example.com", then "user@.example.com", then "user@.com"), -# then .domain, then user@*, and finally *. See the opendkim.conf(5) man page under -# "SigningTable" for more details. - -#example.com default._domainkey.example.com diff --git a/templates/Fedora/35/etc/opendkim/TrustedHosts b/templates/Fedora/35/etc/opendkim/TrustedHosts deleted file mode 100644 index 7a086d4..0000000 --- a/templates/Fedora/35/etc/opendkim/TrustedHosts +++ /dev/null @@ -1,9 +0,0 @@ -# OPENDKIM TRUSTED HOSTS -# To use this file, uncomment the #ExternalIgnoreList and/or the #InternalHosts -# option in /etc/opendkim.conf then restart OpenDKIM. Additional hosts -# may be added on separate lines (IP addresses, hostnames, or CIDR ranges). -# The localhost IP (127.0.0.1) should always be the first entry in this file. -127.0.0.1 -::1 -#host.example.com -#192.168.1.0/24 diff --git a/templates/Fedora/35/etc/opendmarc.conf b/templates/Fedora/35/etc/opendmarc.conf deleted file mode 100644 index cc1018d..0000000 --- a/templates/Fedora/35/etc/opendmarc.conf +++ /dev/null @@ -1,442 +0,0 @@ -## opendmarc.conf -- configuration file for OpenDMARC filter -## -## Copyright (c) 2012-2015, 2018, 2021, The Trusted Domain Project. -## All rights reserved. - -## DEPRECATED CONFIGURATION OPTIONS -## -## The following configuration options are no longer valid. They should be -## removed from your existing configuration file to prevent potential issues. -## Failure to do so may result in opendmarc being unable to start. -## -## Renamed in 1.3.0: -## ForensicReports became FailureReports -## ForensicReportsBcc became FailureReportsBcc -## ForensicReportsOnNone became FailureReportsOnNone -## ForensicReportsSentBy became FailureReportsSentBy - -## CONFIGURATION OPTIONS - -## AuthservID (string) -## defaults to MTA name -## -## Sets the "authserv-id" to use when generating the Authentication-Results: -## header field after verifying a message. If the string "HOSTNAME" is -## provided, the name of the host running the filter (as returned by the -## gethostname(3) function) will be used. -# -# AuthservID name - -## AuthservIDWithJobID { true | false } -## default "false" -## -## If "true", requests that the authserv-id portion of the added -## Authentication-Results header fields contain the job ID of the message -## being evaluated. -# -# AuthservIDWithJobID false - -## AutoRestart { true | false } -## default "false" -## -## Automatically re-start on failures. Use with caution; if the filter fails -## instantly after it starts, this can cause a tight fork(2) loop. -# -# AutoRestart false - -## AutoRestartCount n -## default 0 -## -## Sets the maximum automatic restart count. After this number of automatic -## restarts, the filter will give up and terminate. A value of 0 implies no -## limit. -# -# AutoRestartCount 0 - -## AutoRestartRate n/t[u] -## default (no limit) -## -## Sets the maximum automatic restart rate. If the filter begins restarting -## faster than the rate defined here, it will give up and terminate. This -## is a string of the form n/t[u] where n is an integer limiting the count -## of restarts in the given interval and t[u] defines the time interval -## through which the rate is calculated; t is an integer and u defines the -## units thus represented ("s" or "S" for seconds, the default; "m" or "M" -## for minutes; "h" or "H" for hours; "d" or "D" for days). For example, a -## value of "10/1h" limits the restarts to 10 in one hour. There is no -## default, meaning restart rate is not limited. -# -# AutoRestartRate n/t[u] - -## Background { true | false } -## default "true" -## -## Causes opendmarc to fork and exits immediately, leaving the service -## running in the background. -# -# Background true - -## BaseDirectory (string) -## default (none) -## -## If set, instructs the filter to change to the specified directory using -## chdir(2) before doing anything else. This means any files referenced -## elsewhere in the configuration file can be specified relative to this -## directory. It's also useful for arranging that any crash dumps will be -## saved to a specific location. -# -# BaseDirectory /var/run/opendmarc - -## ChangeRootDirectory (string) -## default (none) -## -## Requests that the operating system change the effective root directory of -## the process to the one specified here prior to beginning execution. -## chroot(2) requires superuser access. A warning will be generated if -## UserID is not also set. -# -# ChangeRootDirectory /var/chroot/opendmarc - -## CopyFailuresTo (string) -## default (none) -## -## Requests addition of the specified email address to the envelope of -## any message that fails the DMARC evaluation. -# -# CopyFailuresTo postmaster@localhost - -## DomainWhitelist (string) -## default (none) -## -## A brief list of whitelisted domains for which ARC signature headers are -## trusted as determined by evaluating entries in the "arc.chain" field found -## in a locally generated Authentication-Results header. -## -## This list will be concatenated with DomainWhitelistFile (if provided). -## -# -# DomainWhitelist example.com - -## DomainWhitelistFile path -## default (none) -## -## A comprehensive list of whitelisted domains for which ARC signature headers -## are trusted as determined by evaluating entries in the "arc.chain" field -## found in a locally generated Authentication-Results header. -## -## This list will be concatenated with DomainWhitelist (if provided). -## -# -# DomainWhitelistFile /etc/opendmarc/whitelist.domains - -## DomainWhitelistSize -## default 3000 -## -## The maximum number of entries in the DomainWhitelist including both entries -## in the DomainWhitelist configuration parameter (above) and entries in the -## DomainWhitelistFile. This number will be increased by approximately 20% to -## increase the efficiency of the hashing algorithm. -## -# -# DomainWhitelistSize 3000 - -## DNSTimeout (integer) -## default 5 -## -## Sets the DNS timeout in seconds. A value of 0 causes an infinite wait. -## (NOT YET IMPLEMENTED) -# -# DNSTimeout 5 - -## EnableCoredumps { true | false } -## default "false" -## -## On systems that have such support, make an explicit request to the kernel -## to dump cores when the filter crashes for some reason. Some modern UNIX -## systems suppress core dumps during crashes for security reasons if the -## user ID has changed during the lifetime of the process. Currently only -## supported on Linux. -# -# EnableCoreDumps false - -## FailureReports { true | false } -## default "false" -## -## Enables generation of failure reports when the DMARC test fails and the -## purported sender of the message has requested such reports. Reports are -## formatted per RFC6591. -# -# FailureReports false - -## FailureReportsBcc (string) -## default (none) -## -## When failure reports are enabled and one is to be generated, always -## send one to the address(es) specified here. If a failure report is -## requested by the domain owner, the address(es) are added in a Bcc: field. -## If no request is made, they address(es) are used in a To: field. There -## is no default. -# -# FailureReportsBcc postmaster@example.coom -FailureReportsBcc {{ postmaster_email }} - -## FailureReportsOnNone { true | false } -## default "false" -## -## Supplements the "FailureReports" setting by generating reports for -## domains that advertise "none" policies. By default, reports are only -## generated (when enabled) for sending domains advertising a "quarantine" -## or "reject" policy. -# -# FailureReportsOnNone false - -## FailureReportsSentBy string -## default "USER@HOSTNAME" -## -## Specifies the email address to use in the From: field of failure -## reports generated by the filter. The default is to use the userid of -## the user running the filter and the local hostname to construct an -## email address. "postmaster" is used in place of the userid if a name -## could not be determined. -# -# FailureReportsSentBy USER@HOSTNAME -FailureReportsSentBy {{ postmaster_email }} - -## HistoryFile path -## default (none) -## -## If set, specifies the location of a text file to which records are written -## that can be used to generate DMARC aggregate reports. Records are groups -## of rows containing information about a single received message, and -## include all relevant information needed to generate a DMARC aggregate -## report. It is expected that this will not be used in its raw form, but -## rather periodically imported into a relational database from which the -## aggregate reports can be extracted by a tool such as opendmarc-import(8). -# -# HistoryFile /var/spool/opendmarc/opendmarc.dat - -## HoldQuarantinedMessages { true | false } -## default "false" -## -## If set, the milter will signal to the mta that messages with -## p=quarantine, which fail dmarc authentication, should be held in -## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. -## If false, messsages will be accepted and passed along with the -## regular mail flow, and the quarantine will be left up to downstream -## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, -## including the Authentication-Results header added by OpenDMARC -# -# HoldQuarantinedMessages false - -## IgnoreAuthenticatedClients { true | false } -## default "false" -## -## If set, causes mail from authenticated clients (i.e., those that used -## SMTP AUTH) to be ignored by the filter. -# -# IgnoreAuthenticatedClients false - -## HoldQuarantinedMessages { true | false } -## default "false" -## -## If set, the milter will signal to the mta that messages with -## p=quarantine, which fail dmarc authentication, should be held in -## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. -## If false, messsages will be accepted and passed along with the -## regular mail flow, and the quarantine will be left up to downstream -## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, -## including the Authentication-Results header added by OpenDMARC -# -# HoldQuarantinedMessages false - - -## IgnoreHosts path -## default (internal) -## -## Specifies the path to a file that contains a list of hostnames, IP -## addresses, and/or CIDR expressions identifying hosts whose SMTP -## connections are to be ignored by the filter. If not specified, defaults -## to "127.0.0.1" only. -# -# IgnoreHosts /etc/opendmarc/ignore.hosts - -## IgnoreMailFrom domain[,...] -## default (none) -## -## Gives a list of domain names whose mail (based on the From: domain) is to -## be ignored by the filter. The list should be comma-separated. Matching -## against this list is case-insensitive. The default is an empty list, -## meaning no mail is ignored. -# -# IgnoreMailFrom example.com - -## MilterDebug (integer) -## default 0 -## -## Sets the debug level to be requested from the milter library. -# -# MilterDebug 0 - -## PidFile path -## default (none) -## -## Specifies the path to a file that should be created at process start -## containing the process ID. -# -# PidFile /var/run/opendmarc.pid - -## PublicSuffixList path -## default (none) -## -## Specifies the path to a file that contains top-level domains (TLDs) that -## will be used to compute the Organizational Domain for a given domain name, -## as described in the DMARC specification. If not provided, the filter will -## not be able to determine the Organizational Domain and only the presented -## domain will be evaluated. This file should be periodically updated. -## One location to retrieve the file from is https://publicsuffix.org/list/ -# -# PublicSuffixList path - -## RecordAllMessages { true | false } -## default "false" -## -## If set and "HistoryFile" is in use, all received messages are recorded -## to the history file. If not set (the default), only messages for which -## the From: domain published a DMARC record will be recorded in the -## history file. -# -# RecordAllMessages false - -## RejectFailures { true | false } -## default "false" -## -## If set, messages will be rejected if they fail the DMARC evaluation, or -## temp-failed if evaluation could not be completed. By default, no message -## will be rejected or temp-failed regardless of the outcome of the DMARC -## evaluation of the message. Instead, an Authentication-Results header -## field will be added. -# -# RejectFailures false -RejectFailures true - -## RejectMultiValueFrom { true | false } -## default "false" -## -## If set, messages with multiple addresses in the From: field of the message -## will be rejected unless all domains in the field are the same. They will -## otherwise be ignored by the filter (the default). -# -# RejectMultiValueFrom false - -## ReportCommand string -## default "/usr/sbin/sendmail -t" -## -## Indicates the shell command to which failure reports should be passed for -## delivery when "FailureReports" is enabled. -# -# ReportCommand /usr/sbin/sendmail -t - -## RequiredHeaders { true | false } -## default "false" -## -## If set, the filter will ensure the header of the message conforms to the -## basic header field count restrictions laid out in RFC5322, Section 3.6. -## Messages failing this test are rejected without further processing. A -## From: field from which no domain name could be extracted will also be -## rejected. -# -# RequiredHeaders false - -## Socket socketspec -## default (none) -## -## Specifies the socket that should be established by the filter to receive -## connections from sendmail(8) in order to provide service. socketspec is -## in one of two forms: local:path, which creates a UNIX domain socket at -## the specified path, or inet:port[@host] or inet6:port[@host] which creates -## a TCP socket on the specified port for the appropriate protocol family. -## If the host is not given as either a hostname or an IP address, the -## socket will be listening on all interfaces. This option is mandatory -## either in the configuration file or on the command line. If an IP -## address is used, it must be enclosed in square brackets. -# -Socket inet:8893@localhost - -## SoftwareHeader { true | false } -## default "false" -## -## Causes the filter to add a "DMARC-Filter" header field indicating the -## presence of this filter in the path of the message from injection to -## delivery. The product's name, version, and the job ID are included in -## the header field's contents. -# -SoftwareHeader true - -## SPFIgnoreResults { true | false } -## default "false" -## -## Causes the filter to ignore any SPF results in the header of the -## message. This is useful if you want the filter to perform SPF checks -## itself, or because you don't trust the arriving header. -# -SPFIgnoreResults true - -## SPFSelfValidate { true | false } -## default false -## -## Enable internal spf checking with --with-spf -## To use libspf2 instead: --with-spf --with-spf2-include=path --with-spf2-lib=path -## -## Causes the filter to perform a fallback SPF check itself when -## it can find no SPF results in the message header. If SPFIgnoreResults -## is also set, it never looks for SPF results in headers and -## always performs the SPF check itself when this is set. -# -SPFSelfValidate true - -## Syslog { true | false } -## default "false" -## -## Log via calls to syslog(3) any interesting activity. -# -Syslog true - -## SyslogFacility facility-name -## default "mail" -## -## Log via calls to syslog(3) using the named facility. The facility names -## are the same as the ones allowed in syslog.conf(5). -# -# SyslogFacility mail - -## TrustedAuthservIDs string -## default HOSTNAME -## -## Specifies one or more "authserv-id" values to trust as relaying true -## upstream DKIM and SPF results. The default is to use the name of -## the MTA processing the message. To specify a list, separate each entry -## with a comma. The key word "HOSTNAME" will be replaced by the name of -## the host running the filter as reported by the gethostname(3) function. -# -# TrustedAuthservIDs HOSTNAME - -## UMask mask -## default (none) -## -## Requests a specific permissions mask to be used for file creation. This -## only really applies to creation of the socket when Socket specifies a -## UNIX domain socket, and to the HistoryFile and PidFile (if any); temporary -## files are normally created by the mkstemp(3) function that enforces a -## specific file mode on creation regardless of the process umask. See -## umask(2) for more information. -# -UMask 007 - -## UserID user[:group] -## default (none) -## -## Attempts to become the specified userid before starting operations. -## The process will be assigned all of the groups and primary group ID of -## the named userid unless an alternate group is specified. -# -UserID opendmarc:mail diff --git a/templates/Fedora/35/etc/postfix/access b/templates/Fedora/35/etc/postfix/access deleted file mode 100644 index 257339b..0000000 --- a/templates/Fedora/35/etc/postfix/access +++ /dev/null @@ -1,484 +0,0 @@ -# ACCESS(5) ACCESS(5) -# -# NAME -# access - Postfix SMTP server access table -# -# SYNOPSIS -# postmap /etc/postfix/access -# -# postmap -q "string" /etc/postfix/access -# -# postmap -q - /etc/postfix/access as the lookup key for such addresses. The value is -# specified with the smtpd_null_access_lookup_key parameter -# in the Postfix main.cf file. -# -# EMAIL ADDRESS EXTENSION -# When a mail address localpart contains the optional recip- -# ient delimiter (e.g., user+foo@domain), the lookup order -# becomes: user+foo@domain, user@domain, domain, user+foo@, -# and user@. -# -# HOST NAME/ADDRESS PATTERNS -# With lookups from indexed files such as DB or DBM, or from -# networked tables such as NIS, LDAP or SQL, the following -# lookup patterns are examined in the order as listed: -# -# domain.tld -# Matches domain.tld. -# -# The pattern domain.tld also matches subdomains, but -# only when the string smtpd_access_maps is listed in -# the Postfix parent_domain_matches_subdomains con- -# figuration setting. -# -# .domain.tld -# Matches subdomains of domain.tld, but only when the -# string smtpd_access_maps is not listed in the Post- -# fix parent_domain_matches_subdomains configuration -# setting. -# -# net.work.addr.ess -# -# net.work.addr -# -# net.work -# -# net Matches a remote IPv4 host address or network -# address range. Specify one to four decimal octets -# separated by ".". Do not specify "[]" , "/", lead- -# ing zeros, or hexadecimal forms. -# -# Network ranges are matched by repeatedly truncating -# the last ".octet" from a remote IPv4 host address -# string, until a match is found in the access table, -# or until further truncation is not possible. -# -# NOTE: use the cidr lookup table type to specify -# network/netmask patterns. See cidr_table(5) for -# details. -# -# net:work:addr:ess -# -# net:work:addr -# -# net:work -# -# net Matches a remote IPv6 host address or network -# address range. Specify three to eight hexadecimal -# octet pairs separated by ":", using the compressed -# form "::" for a sequence of zero-valued octet -# pairs. Do not specify "[]", "/", leading zeros, or -# non-compressed forms. -# -# A network range is matched by repeatedly truncating -# the last ":octetpair" from the compressed-form -# remote IPv6 host address string, until a match is -# found in the access table, or until further trunca- -# tion is not possible. -# -# NOTE: use the cidr lookup table type to specify -# network/netmask patterns. See cidr_table(5) for -# details. -# -# IPv6 support is available in Postfix 2.2 and later. -# -# ACCEPT ACTIONS -# OK Accept the address etc. that matches the pattern. -# -# all-numerical -# An all-numerical result is treated as OK. This for- -# mat is generated by address-based relay authoriza- -# tion schemes such as pop-before-smtp. -# -# For other accept actions, see "OTHER ACTIONS" below. -# -# REJECT ACTIONS -# Postfix version 2.3 and later support enhanced status -# codes as defined in RFC 3463. When no code is specified -# at the beginning of the text below, Postfix inserts a -# default enhanced status code of "5.7.1" in the case of -# reject actions, and "4.7.1" in the case of defer actions. -# See "ENHANCED STATUS CODES" below. -# -# 4NN text -# -# 5NN text -# Reject the address etc. that matches the pattern, -# and respond with the numerical three-digit code and -# text. 4NN means "try again later", while 5NN means -# "do not try again". -# -# The following responses have special meaning for -# the Postfix SMTP server: -# -# 421 text (Postfix 2.3 and later) -# -# 521 text (Postfix 2.6 and later) -# After responding with the numerical -# three-digit code and text, disconnect imme- -# diately from the SMTP client. This frees up -# SMTP server resources so that they can be -# made available to another SMTP client. -# -# Note: The "521" response should be used only -# with botnets and other malware where inter- -# operability is of no concern. The "send 521 -# and disconnect" behavior is NOT defined in -# the SMTP standard. -# -# REJECT optional text... -# Reject the address etc. that matches the pattern. -# Reply with "$access_map_reject_code optional -# text..." when the optional text is specified, oth- -# erwise reply with a generic error response message. -# -# DEFER optional text... -# Reject the address etc. that matches the pattern. -# Reply with "$access_map_defer_code optional -# text..." when the optional text is specified, oth- -# erwise reply with a generic error response message. -# -# This feature is available in Postfix 2.6 and later. -# -# DEFER_IF_REJECT optional text... -# Defer the request if some later restriction would -# result in a REJECT action. Reply with -# "$access_map_defer_code 4.7.1 optional text..." -# when the optional text is specified, otherwise -# reply with a generic error response message. -# -# Prior to Postfix 2.6, the SMTP reply code is 450. -# -# This feature is available in Postfix 2.1 and later. -# -# DEFER_IF_PERMIT optional text... -# Defer the request if some later restriction would -# result in a an explicit or implicit PERMIT action. -# Reply with "$access_map_defer_code 4.7.1 optional -# text..." when the optional text is specified, oth- -# erwise reply with a generic error response message. -# -# Prior to Postfix 2.6, the SMTP reply code is 450. -# -# This feature is available in Postfix 2.1 and later. -# -# For other reject actions, see "OTHER ACTIONS" below. -# -# OTHER ACTIONS -# restriction... -# Apply the named UCE restriction(s) (permit, reject, -# reject_unauth_destination, and so on). -# -# BCC user@domain -# Send one copy of the message to the specified -# recipient. -# -# If multiple BCC actions are specified within the -# same SMTP MAIL transaction, with Postfix 3.0 only -# the last action will be used. -# -# This feature is available in Postfix 3.0 and later. -# -# DISCARD optional text... -# Claim successful delivery and silently discard the -# message. Log the optional text if specified, oth- -# erwise log a generic message. -# -# Note: this action currently affects all recipients -# of the message. To discard only one recipient -# without discarding the entire message, use the -# transport(5) table to direct mail to the discard(8) -# service. -# -# This feature is available in Postfix 2.0 and later. -# -# DUNNO Pretend that the lookup key was not found. This -# prevents Postfix from trying substrings of the -# lookup key (such as a subdomain name, or a network -# address subnetwork). -# -# This feature is available in Postfix 2.0 and later. -# -# FILTER transport:destination -# After the message is queued, send the entire mes- -# sage through the specified external content filter. -# The transport name specifies the first field of a -# mail delivery agent definition in master.cf; the -# syntax of the next-hop destination is described in -# the manual page of the corresponding delivery -# agent. More information about external content -# filters is in the Postfix FILTER_README file. -# -# Note 1: do not use $number regular expression sub- -# stitutions for transport or destination unless you -# know that the information has a trusted origin. -# -# Note 2: this action overrides the main.cf con- -# tent_filter setting, and affects all recipients of -# the message. In the case that multiple FILTER -# actions fire, only the last one is executed. -# -# Note 3: the purpose of the FILTER command is to -# override message routing. To override the recipi- -# ent's transport but not the next-hop destination, -# specify an empty filter destination (Postfix 2.7 -# and later), or specify a transport:destination that -# delivers through a different Postfix instance -# (Postfix 2.6 and earlier). Other options are using -# the recipient-dependent transport_maps or the sen- -# der-dependent sender_dependent_default_transport- -# _maps features. -# -# This feature is available in Postfix 2.0 and later. -# -# HOLD optional text... -# Place the message on the hold queue, where it will -# sit until someone either deletes it or releases it -# for delivery. Log the optional text if specified, -# otherwise log a generic message. -# -# Mail that is placed on hold can be examined with -# the postcat(1) command, and can be destroyed or -# released with the postsuper(1) command. -# -# Note: use "postsuper -r" to release mail that was -# kept on hold for a significant fraction of $maxi- -# mal_queue_lifetime or $bounce_queue_lifetime, or -# longer. Use "postsuper -H" only for mail that will -# not expire within a few delivery attempts. -# -# Note: this action currently affects all recipients -# of the message. -# -# This feature is available in Postfix 2.0 and later. -# -# PREPEND headername: headervalue -# Prepend the specified message header to the mes- -# sage. When more than one PREPEND action executes, -# the first prepended header appears before the sec- -# ond etc. prepended header. -# -# Note: this action must execute before the message -# content is received; it cannot execute in the con- -# text of smtpd_end_of_data_restrictions. -# -# This feature is available in Postfix 2.1 and later. -# -# REDIRECT user@domain -# After the message is queued, send the message to -# the specified address instead of the intended -# recipient(s). When multiple REDIRECT actions fire, -# only the last one takes effect. -# -# Note: this action overrides the FILTER action, and -# currently overrides all recipients of the message. -# -# This feature is available in Postfix 2.1 and later. -# -# INFO optional text... -# Log an informational record with the optional text, -# together with client information and if available, -# with helo, sender, recipient and protocol informa- -# tion. -# -# This feature is available in Postfix 3.0 and later. -# -# WARN optional text... -# Log a warning with the optional text, together with -# client information and if available, with helo, -# sender, recipient and protocol information. -# -# This feature is available in Postfix 2.1 and later. -# -# ENHANCED STATUS CODES -# Postfix version 2.3 and later support enhanced status -# codes as defined in RFC 3463. When an enhanced status -# code is specified in an access table, it is subject to -# modification. The following transformations are needed -# when the same access table is used for client, helo, -# sender, or recipient access restrictions; they happen -# regardless of whether Postfix replies to a MAIL FROM, RCPT -# TO or other SMTP command. -# -# o When a sender address matches a REJECT action, the -# Postfix SMTP server will transform a recipient DSN -# status (e.g., 4.1.1-4.1.6) into the corresponding -# sender DSN status, and vice versa. -# -# o When non-address information matches a REJECT -# action (such as the HELO command argument or the -# client hostname/address), the Postfix SMTP server -# will transform a sender or recipient DSN status -# into a generic non-address DSN status (e.g., -# 4.0.0). -# -# REGULAR EXPRESSION TABLES -# This section describes how the table lookups change when -# the table is given in the form of regular expressions. For -# a description of regular expression lookup table syntax, -# see regexp_table(5) or pcre_table(5). -# -# Each pattern is a regular expression that is applied to -# the entire string being looked up. Depending on the appli- -# cation, that string is an entire client hostname, an -# entire client IP address, or an entire mail address. Thus, -# no parent domain or parent network search is done, -# user@domain mail addresses are not broken up into their -# user@ and domain constituent parts, nor is user+foo broken -# up into user and foo. -# -# Patterns are applied in the order as specified in the ta- -# ble, until a pattern is found that matches the search -# string. -# -# Actions are the same as with indexed file lookups, with -# the additional feature that parenthesized substrings from -# the pattern can be interpolated as $1, $2 and so on. -# -# TCP-BASED TABLES -# This section describes how the table lookups change when -# lookups are directed to a TCP-based server. For a descrip- -# tion of the TCP client/server lookup protocol, see tcp_ta- -# ble(5). This feature is not available up to and including -# Postfix version 2.4. -# -# Each lookup operation uses the entire query string once. -# Depending on the application, that string is an entire -# client hostname, an entire client IP address, or an entire -# mail address. Thus, no parent domain or parent network -# search is done, user@domain mail addresses are not broken -# up into their user@ and domain constituent parts, nor is -# user+foo broken up into user and foo. -# -# Actions are the same as with indexed file lookups. -# -# EXAMPLE -# The following example uses an indexed file, so that the -# order of table entries does not matter. The example per- -# mits access by the client at address 1.2.3.4 but rejects -# all other clients in 1.2.3.0/24. Instead of hash lookup -# tables, some systems use dbm. Use the command "postconf -# -m" to find out what lookup tables Postfix supports on -# your system. -# -# /etc/postfix/main.cf: -# smtpd_client_restrictions = -# check_client_access hash:/etc/postfix/access -# -# /etc/postfix/access: -# 1.2.3 REJECT -# 1.2.3.4 OK -# -# Execute the command "postmap /etc/postfix/access" after -# editing the file. -# -# BUGS -# The table format does not understand quoting conventions. -# -# SEE ALSO -# postmap(1), Postfix lookup table manager -# smtpd(8), SMTP server -# postconf(5), configuration parameters -# transport(5), transport:nexthop syntax -# -# README FILES -# Use "postconf readme_directory" or "postconf html_direc- -# tory" to locate this information. -# SMTPD_ACCESS_README, built-in SMTP server access control -# DATABASE_README, Postfix lookup table overview -# -# LICENSE -# The Secure Mailer license must be distributed with this -# software. -# -# AUTHOR(S) -# Wietse Venema -# IBM T.J. Watson Research -# P.O. Box 704 -# Yorktown Heights, NY 10598, USA -# -# Wietse Venema -# Google, Inc. -# 111 8th Avenue -# New York, NY 10011, USA -# -# ACCESS(5) diff --git a/templates/Fedora/35/etc/postfix/canonical b/templates/Fedora/35/etc/postfix/canonical deleted file mode 100644 index 9881f4e..0000000 --- a/templates/Fedora/35/etc/postfix/canonical +++ /dev/null @@ -1,307 +0,0 @@ -# CANONICAL(5) CANONICAL(5) -# -# NAME -# canonical - Postfix canonical table format -# -# SYNOPSIS -# postmap /etc/postfix/canonical -# -# postmap -q "string" /etc/postfix/canonical -# -# postmap -q - /etc/postfix/canonical $/ -# REJECT IFRAME vulnerability exploit -# -# SEE ALSO -# cleanup(8), canonicalize and enqueue Postfix message -# pcre_table(5), format of PCRE lookup tables -# regexp_table(5), format of POSIX regular expression tables -# postconf(1), Postfix configuration utility -# postmap(1), Postfix lookup table management -# postsuper(1), Postfix janitor -# postcat(1), show Postfix queue file contents -# RFC 2045, base64 and quoted-printable encoding rules -# RFC 2047, message header encoding for non-ASCII text -# -# README FILES -# Use "postconf readme_directory" or "postconf html_direc- -# tory" to locate this information. -# DATABASE_README, Postfix lookup table overview -# CONTENT_INSPECTION_README, Postfix content inspection overview -# BUILTIN_FILTER_README, Postfix built-in content inspection -# BACKSCATTER_README, blocking returned forged mail -# -# LICENSE -# The Secure Mailer license must be distributed with this -# software. -# -# AUTHOR(S) -# Wietse Venema -# IBM T.J. Watson Research -# P.O. Box 704 -# Yorktown Heights, NY 10598, USA -# -# Wietse Venema -# Google, Inc. -# 111 8th Avenue -# New York, NY 10011, USA -# -# HEADER_CHECKS(5) diff --git a/templates/Fedora/35/etc/postfix/main.cf b/templates/Fedora/35/etc/postfix/main.cf deleted file mode 100644 index e26183d..0000000 --- a/templates/Fedora/35/etc/postfix/main.cf +++ /dev/null @@ -1,766 +0,0 @@ -# Global Postfix configuration file. This file lists only a subset -# of all parameters. For the syntax, and for a complete parameter -# list, see the postconf(5) manual page (command: "man 5 postconf"). -# -# For common configuration examples, see BASIC_CONFIGURATION_README -# and STANDARD_CONFIGURATION_README. To find these documents, use -# the command "postconf html_directory readme_directory", or go to -# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. -# -# For best results, change no more than 2-3 parameters at a time, -# and test if Postfix still works after every change. - -# COMPATIBILITY -# -# The compatibility_level determines what default settings Postfix -# will use for main.cf and master.cf settings. These defaults will -# change over time. -# -# To avoid breaking things, Postfix will use backwards-compatible -# default settings and log where it uses those old backwards-compatible -# default settings, until the system administrator has determined -# if any backwards-compatible default settings need to be made -# permanent in main.cf or master.cf. -# -# When this review is complete, update the compatibility_level setting -# below as recommended in the RELEASE_NOTES file. -# -# The level below is what should be used with new (not upgrade) installs. -# -compatibility_level = 3.6 - -# SOFT BOUNCE -# -# The soft_bounce parameter provides a limited safety net for -# testing. When soft_bounce is enabled, mail will remain queued that -# would otherwise bounce. This parameter disables locally-generated -# bounces, and prevents the SMTP server from rejecting mail permanently -# (by changing 5xx replies into 4xx replies). However, soft_bounce -# is no cure for address rewriting mistakes or mail routing mistakes. -# -#soft_bounce = no - -# LOCAL PATHNAME INFORMATION -# -# The queue_directory specifies the location of the Postfix queue. -# This is also the root directory of Postfix daemons that run chrooted. -# See the files in examples/chroot-setup for setting up Postfix chroot -# environments on different UNIX systems. -# -queue_directory = /var/spool/postfix - -# The command_directory parameter specifies the location of all -# postXXX commands. -# -command_directory = /usr/sbin - -# The daemon_directory parameter specifies the location of all Postfix -# daemon programs (i.e. programs listed in the master.cf file). This -# directory must be owned by root. -# -daemon_directory = /usr/libexec/postfix - -# The data_directory parameter specifies the location of Postfix-writable -# data files (caches, random numbers). This directory must be owned -# by the mail_owner account (see below). -# -data_directory = /var/lib/postfix - -# QUEUE AND PROCESS OWNERSHIP -# -# The mail_owner parameter specifies the owner of the Postfix queue -# and of most Postfix daemon processes. Specify the name of a user -# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS -# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In -# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED -# USER. -# -mail_owner = postfix - -# The default_privs parameter specifies the default rights used by -# the local delivery agent for delivery to external file or command. -# These rights are used in the absence of a recipient user context. -# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. -# -#default_privs = nobody - -# INTERNET HOST AND DOMAIN NAMES -# -# The myhostname parameter specifies the internet hostname of this -# mail system. The default is to use the fully-qualified domain name -# from gethostname(). $myhostname is used as a default value for many -# other configuration parameters. -# -#myhostname = host.domain.tld -#myhostname = virtual.domain.tld - -# The mydomain parameter specifies the local internet domain name. -# The default is to use $myhostname minus the first component. -# $mydomain is used as a default value for many other configuration -# parameters. -# -#mydomain = domain.tld - -# SENDING MAIL -# -# The myorigin parameter specifies the domain that locally-posted -# mail appears to come from. The default is to append $myhostname, -# which is fine for small sites. If you run a domain with multiple -# machines, you should (1) change this to $mydomain and (2) set up -# a domain-wide alias database that aliases each user to -# user@that.users.mailhost. -# -# For the sake of consistency between sender and recipient addresses, -# myorigin also specifies the default domain name that is appended -# to recipient addresses that have no @domain part. -# -#myorigin = $myhostname -#myorigin = $mydomain - -# RECEIVING MAIL - -# The inet_interfaces parameter specifies the network interface -# addresses that this mail system receives mail on. By default, -# the software claims all active interfaces on the machine. The -# parameter also controls delivery of mail to user@[ip.address]. -# -# See also the proxy_interfaces parameter, for network addresses that -# are forwarded to us via a proxy or network address translator. -# -# Note: you need to stop/start Postfix when this parameter changes. -# -inet_interfaces = all -#inet_interfaces = $myhostname -#inet_interfaces = $myhostname, localhost -#inet_interfaces = localhost - -# Enable IPv4, and IPv6 if supported -inet_protocols = all - -# The proxy_interfaces parameter specifies the network interface -# addresses that this mail system receives mail on by way of a -# proxy or network address translation unit. This setting extends -# the address list specified with the inet_interfaces parameter. -# -# You must specify your proxy/NAT addresses when your system is a -# backup MX host for other domains, otherwise mail delivery loops -# will happen when the primary MX host is down. -# -#proxy_interfaces = -#proxy_interfaces = 1.2.3.4 - -# The mydestination parameter specifies the list of domains that this -# machine considers itself the final destination for. -# -# These domains are routed to the delivery agent specified with the -# local_transport parameter setting. By default, that is the UNIX -# compatible delivery agent that lookups all recipients in /etc/passwd -# and /etc/aliases or their equivalent. -# -# The default is $myhostname + localhost.$mydomain + localhost. On -# a mail domain gateway, you should also include $mydomain. -# -# Do not specify the names of virtual domains - those domains are -# specified elsewhere (see VIRTUAL_README). -# -# Do not specify the names of domains that this machine is backup MX -# host for. Specify those names via the relay_domains settings for -# the SMTP server, or use permit_mx_backup if you are lazy (see -# STANDARD_CONFIGURATION_README). -# -# The local machine is always the final destination for mail addressed -# to user@[the.net.work.address] of an interface that the mail system -# receives mail on (see the inet_interfaces parameter). -# -# Specify a list of host or domain names, /file/name or type:table -# patterns, separated by commas and/or whitespace. A /file/name -# pattern is replaced by its contents; a type:table is matched when -# a name matches a lookup key (the right-hand side is ignored). -# Continue long lines by starting the next line with whitespace. -# -# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". -# -mydestination = $myhostname, localhost.$mydomain, localhost -#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain -#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, -# mail.$mydomain, www.$mydomain, ftp.$mydomain - -# REJECTING MAIL FOR UNKNOWN LOCAL USERS -# -# The local_recipient_maps parameter specifies optional lookup tables -# with all names or addresses of users that are local with respect -# to $mydestination, $inet_interfaces or $proxy_interfaces. -# -# If this parameter is defined, then the SMTP server will reject -# mail for unknown local users. This parameter is defined by default. -# -# To turn off local recipient checking in the SMTP server, specify -# local_recipient_maps = (i.e. empty). -# -# The default setting assumes that you use the default Postfix local -# delivery agent for local delivery. You need to update the -# local_recipient_maps setting if: -# -# - You define $mydestination domain recipients in files other than -# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. -# For example, you define $mydestination domain recipients in -# the $virtual_mailbox_maps files. -# -# - You redefine the local delivery agent in master.cf. -# -# - You redefine the "local_transport" setting in main.cf. -# -# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" -# feature of the Postfix local delivery agent (see local(8)). -# -# Details are described in the LOCAL_RECIPIENT_README file. -# -# Beware: if the Postfix SMTP server runs chrooted, you probably have -# to access the passwd file via the proxymap service, in order to -# overcome chroot restrictions. The alternative, having a copy of -# the system passwd file in the chroot jail is just not practical. -# -# The right-hand side of the lookup tables is conveniently ignored. -# In the left-hand side, specify a bare username, an @domain.tld -# wild-card, or specify a user@domain.tld address. -# -#local_recipient_maps = unix:passwd.byname $alias_maps -#local_recipient_maps = proxy:unix:passwd.byname $alias_maps -#local_recipient_maps = - -# The unknown_local_recipient_reject_code specifies the SMTP server -# response code when a recipient domain matches $mydestination or -# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty -# and the recipient address or address local-part is not found. -# -# The default setting is 550 (reject mail) but it is safer to start -# with 450 (try again later) until you are certain that your -# local_recipient_maps settings are OK. -# -unknown_local_recipient_reject_code = 550 - -# TRUST AND RELAY CONTROL - -# The mynetworks parameter specifies the list of "trusted" SMTP -# clients that have more privileges than "strangers". -# -# In particular, "trusted" SMTP clients are allowed to relay mail -# through Postfix. See the smtpd_recipient_restrictions parameter -# in postconf(5). -# -# You can specify the list of "trusted" network addresses by hand -# or you can let Postfix do it for you (which is the default). -# -# By default (mynetworks_style = subnet), Postfix "trusts" SMTP -# clients in the same IP subnetworks as the local machine. -# On Linux, this works correctly only with interfaces specified -# with the "ifconfig" command. -# -# Specify "mynetworks_style = class" when Postfix should "trust" SMTP -# clients in the same IP class A/B/C networks as the local machine. -# Don't do this with a dialup site - it would cause Postfix to "trust" -# your entire provider's network. Instead, specify an explicit -# mynetworks list by hand, as described below. -# -# Specify "mynetworks_style = host" when Postfix should "trust" -# only the local machine. -# -#mynetworks_style = class -#mynetworks_style = subnet -#mynetworks_style = host - -# Alternatively, you can specify the mynetworks list by hand, in -# which case Postfix ignores the mynetworks_style setting. -# -# Specify an explicit list of network/netmask patterns, where the -# mask specifies the number of bits in the network part of a host -# address. -# -# You can also specify the absolute pathname of a pattern file instead -# of listing the patterns here. Specify type:table for table-based lookups -# (the value on the table right-hand side is not used). -# -#mynetworks = 168.100.3.0/28, 127.0.0.0/8 -#mynetworks = $config_directory/mynetworks -#mynetworks = hash:/etc/postfix/network_table - -# The relay_domains parameter restricts what destinations this system will -# relay mail to. See the smtpd_recipient_restrictions description in -# postconf(5) for detailed information. -# -# By default, Postfix relays mail -# - from "trusted" clients (IP address matches $mynetworks) to any destination, -# - from "untrusted" clients to destinations that match $relay_domains or -# subdomains thereof, except addresses with sender-specified routing. -# The default relay_domains value is $mydestination. -# -# In addition to the above, the Postfix SMTP server by default accepts mail -# that Postfix is final destination for: -# - destinations that match $inet_interfaces or $proxy_interfaces, -# - destinations that match $mydestination -# - destinations that match $virtual_alias_domains, -# - destinations that match $virtual_mailbox_domains. -# These destinations do not need to be listed in $relay_domains. -# -# Specify a list of hosts or domains, /file/name patterns or type:name -# lookup tables, separated by commas and/or whitespace. Continue -# long lines by starting the next line with whitespace. A file name -# is replaced by its contents; a type:name table is matched when a -# (parent) domain appears as lookup key. -# -# NOTE: Postfix will not automatically forward mail for domains that -# list this system as their primary or backup MX host. See the -# permit_mx_backup restriction description in postconf(5). -# -#relay_domains = $mydestination - -# INTERNET OR INTRANET - -# The relayhost parameter specifies the default host to send mail to -# when no entry is matched in the optional transport(5) table. When -# no relayhost is given, mail is routed directly to the destination. -# -# On an intranet, specify the organizational domain name. If your -# internal DNS uses no MX records, specify the name of the intranet -# gateway host instead. -# -# In the case of SMTP, specify a domain, host, host:port, [host]:port, -# [address] or [address]:port; the form [host] turns off MX lookups. -# -# If you're connected via UUCP, see also the default_transport parameter. -# -#relayhost = $mydomain -#relayhost = [gateway.my.domain] -#relayhost = [mailserver.isp.tld] -#relayhost = uucphost -#relayhost = [an.ip.add.ress] - -# REJECTING UNKNOWN RELAY USERS -# -# The relay_recipient_maps parameter specifies optional lookup tables -# with all addresses in the domains that match $relay_domains. -# -# If this parameter is defined, then the SMTP server will reject -# mail for unknown relay users. This feature is off by default. -# -# The right-hand side of the lookup tables is conveniently ignored. -# In the left-hand side, specify an @domain.tld wild-card, or specify -# a user@domain.tld address. -# -#relay_recipient_maps = hash:/etc/postfix/relay_recipients - -# INPUT RATE CONTROL -# -# The in_flow_delay configuration parameter implements mail input -# flow control. This feature is turned on by default, although it -# still needs further development (it's disabled on SCO UNIX due -# to an SCO bug). -# -# A Postfix process will pause for $in_flow_delay seconds before -# accepting a new message, when the message arrival rate exceeds the -# message delivery rate. With the default 100 SMTP server process -# limit, this limits the mail inflow to 100 messages a second more -# than the number of messages delivered per second. -# -# Specify 0 to disable the feature. Valid delays are 0..10. -# -#in_flow_delay = 1s - -# ADDRESS REWRITING -# -# The ADDRESS_REWRITING_README document gives information about -# address masquerading or other forms of address rewriting including -# username->Firstname.Lastname mapping. - -# ADDRESS REDIRECTION (VIRTUAL DOMAIN) -# -# The VIRTUAL_README document gives information about the many forms -# of domain hosting that Postfix supports. - -# "USER HAS MOVED" BOUNCE MESSAGES -# -# See the discussion in the ADDRESS_REWRITING_README document. - -# TRANSPORT MAP -# -# See the discussion in the ADDRESS_REWRITING_README document. - -# ALIAS DATABASE -# -# The alias_maps parameter specifies the list of alias databases used -# by the local delivery agent. The default list is system dependent. -# -# On systems with NIS, the default is to search the local alias -# database, then the NIS alias database. See aliases(5) for syntax -# details. -# -# If you change the alias database, run "postalias /etc/aliases" (or -# wherever your system stores the mail alias file), or simply run -# "newaliases" to build the necessary DBM or DB file. -# -# It will take a minute or so before changes become visible. Use -# "postfix reload" to eliminate the delay. -# -#alias_maps = dbm:/etc/aliases -alias_maps = hash:/etc/aliases -#alias_maps = hash:/etc/aliases, nis:mail.aliases -#alias_maps = netinfo:/aliases - -# The alias_database parameter specifies the alias database(s) that -# are built with "newaliases" or "sendmail -bi". This is a separate -# configuration parameter, because alias_maps (see above) may specify -# tables that are not necessarily all under control by Postfix. -# -#alias_database = dbm:/etc/aliases -#alias_database = dbm:/etc/mail/aliases -alias_database = hash:/etc/aliases -#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases - -# ADDRESS EXTENSIONS (e.g., user+foo) -# -# The recipient_delimiter parameter specifies the separator between -# user names and address extensions (user+foo). See canonical(5), -# local(8), relocated(5) and virtual(5) for the effects this has on -# aliases, canonical, virtual, relocated and .forward file lookups. -# Basically, the software tries user+foo and .forward+foo before -# trying user and .forward. -# -#recipient_delimiter = + - -# DELIVERY TO MAILBOX -# -# The home_mailbox parameter specifies the optional pathname of a -# mailbox file relative to a user's home directory. The default -# mailbox file is /var/spool/mail/user or /var/mail/user. Specify -# "Maildir/" for qmail-style delivery (the / is required). -# -#home_mailbox = Mailbox -#home_mailbox = Maildir/ - -# The mail_spool_directory parameter specifies the directory where -# UNIX-style mailboxes are kept. The default setting depends on the -# system type. -# -#mail_spool_directory = /var/mail -#mail_spool_directory = /var/spool/mail - -# The mailbox_command parameter specifies the optional external -# command to use instead of mailbox delivery. The command is run as -# the recipient with proper HOME, SHELL and LOGNAME environment settings. -# Exception: delivery for root is done as $default_user. -# -# Other environment variables of interest: USER (recipient username), -# EXTENSION (address extension), DOMAIN (domain part of address), -# and LOCAL (the address localpart). -# -# Unlike other Postfix configuration parameters, the mailbox_command -# parameter is not subjected to $parameter substitutions. This is to -# make it easier to specify shell syntax (see example below). -# -# Avoid shell meta characters because they will force Postfix to run -# an expensive shell process. Procmail alone is expensive enough. -# -# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN -# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. -# -#mailbox_command = /some/where/procmail -#mailbox_command = /some/where/procmail -a "$EXTENSION" - -# The mailbox_transport specifies the optional transport in master.cf -# to use after processing aliases and .forward files. This parameter -# has precedence over the mailbox_command, fallback_transport and -# luser_relay parameters. -# -# Specify a string of the form transport:nexthop, where transport is -# the name of a mail delivery transport defined in master.cf. The -# :nexthop part is optional. For more details see the sample transport -# configuration file. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must update the "local_recipient_maps" setting in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" -# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. -#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp -mailbox_transport = lmtp:inet:localhost:24 -virtual_transport = lmtp:inet:localhost:24 - -# If using the cyrus-imapd IMAP server deliver local mail to the IMAP -# server using LMTP (Local Mail Transport Protocol), this is prefered -# over the older cyrus deliver program by setting the -# mailbox_transport as below: -# -# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp -# -# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via -# these settings. -# -# local_destination_recipient_limit = 300 -# local_destination_concurrency_limit = 5 -# -# Of course you should adjust these settings as appropriate for the -# capacity of the hardware you are using. The recipient limit setting -# can be used to take advantage of the single instance message store -# capability of Cyrus. The concurrency limit can be used to control -# how many simultaneous LMTP sessions will be permitted to the Cyrus -# message store. -# -# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and -# subsequent line in master.cf. -#mailbox_transport = cyrus - -# The fallback_transport specifies the optional transport in master.cf -# to use for recipients that are not found in the UNIX passwd database. -# This parameter has precedence over the luser_relay parameter. -# -# Specify a string of the form transport:nexthop, where transport is -# the name of a mail delivery transport defined in master.cf. The -# :nexthop part is optional. For more details see the sample transport -# configuration file. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must update the "local_recipient_maps" setting in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp -#fallback_transport = - -# The luser_relay parameter specifies an optional destination address -# for unknown recipients. By default, mail for unknown@$mydestination, -# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned -# as undeliverable. -# -# The following expansions are done on luser_relay: $user (recipient -# username), $shell (recipient shell), $home (recipient home directory), -# $recipient (full recipient address), $extension (recipient address -# extension), $domain (recipient domain), $local (entire recipient -# localpart), $recipient_delimiter. Specify ${name?value} or -# ${name:value} to expand value only when $name does (does not) exist. -# -# luser_relay works only for the default Postfix local delivery agent. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must specify "local_recipient_maps =" (i.e. empty) in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -#luser_relay = $user@other.host -#luser_relay = $local@other.host -#luser_relay = admin+$local - -# JUNK MAIL CONTROLS -# -# The controls listed here are only a very small subset. The file -# SMTPD_ACCESS_README provides an overview. - -# The header_checks parameter specifies an optional table with patterns -# that each logical message header is matched against, including -# headers that span multiple physical lines. -# -# By default, these patterns also apply to MIME headers and to the -# headers of attached messages. With older Postfix versions, MIME and -# attached message headers were treated as body text. -# -# For details, see "man header_checks". -# -#header_checks = regexp:/etc/postfix/header_checks - -# FAST ETRN SERVICE -# -# Postfix maintains per-destination logfiles with information about -# deferred mail, so that mail can be flushed quickly with the SMTP -# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". -# See the ETRN_README document for a detailed description. -# -# The fast_flush_domains parameter controls what destinations are -# eligible for this service. By default, they are all domains that -# this server is willing to relay mail to. -# -#fast_flush_domains = $relay_domains - -# SHOW SOFTWARE VERSION OR NOT -# -# The smtpd_banner parameter specifies the text that follows the 220 -# code in the SMTP server's greeting banner. Some people like to see -# the mail version advertised. By default, Postfix shows no version. -# -# You MUST specify $myhostname at the start of the text. That is an -# RFC requirement. Postfix itself does not care. -# -#smtpd_banner = $myhostname ESMTP $mail_name -#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) - -# PARALLEL DELIVERY TO THE SAME DESTINATION -# -# How many parallel deliveries to the same user or domain? With local -# delivery, it does not make sense to do massively parallel delivery -# to the same user, because mailbox updates must happen sequentially, -# and expensive pipelines in .forward files can cause disasters when -# too many are run at the same time. With SMTP deliveries, 10 -# simultaneous connections to the same domain could be sufficient to -# raise eyebrows. -# -# Each message delivery transport has its XXX_destination_concurrency_limit -# parameter. The default is $default_destination_concurrency_limit for -# most delivery transports. For the local delivery agent the default is 2. - -#local_destination_concurrency_limit = 2 -#default_destination_concurrency_limit = 20 - -# DEBUGGING CONTROL -# -# The debug_peer_level parameter specifies the increment in verbose -# logging level when an SMTP client or server host name or address -# matches a pattern in the debug_peer_list parameter. -# -debug_peer_level = 2 - -# The debug_peer_list parameter specifies an optional list of domain -# or network patterns, /file/name patterns or type:name tables. When -# an SMTP client or server host name or address matches a pattern, -# increase the verbose logging level by the amount specified in the -# debug_peer_level parameter. -# -#debug_peer_list = 127.0.0.1 -#debug_peer_list = some.domain - -# The debugger_command specifies the external command that is executed -# when a Postfix daemon program is run with the -D option. -# -# Use "command .. & sleep 5" so that the debugger can attach before -# the process marches on. If you use an X-based debugger, be sure to -# set up your XAUTHORITY environment variable before starting Postfix. -# -debugger_command = - PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin - ddd $daemon_directory/$process_name $process_id & sleep 5 - -# If you can't use X, use this to capture the call stack when a -# daemon crashes. The result is in a file in the configuration -# directory, and is named after the process name and the process ID. -# -# debugger_command = -# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; -# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 -# >$config_directory/$process_name.$process_id.log & sleep 5 -# -# Another possibility is to run gdb under a detached screen session. -# To attach to the screen session, su root and run "screen -r -# " where uniquely matches one of the detached -# sessions (from "screen -list"). -# -# debugger_command = -# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen -# -dmS $process_name gdb $daemon_directory/$process_name -# $process_id & sleep 1 - -# INSTALL-TIME CONFIGURATION INFORMATION -# -# The following parameters are used when installing a new Postfix version. -# -# sendmail_path: The full pathname of the Postfix sendmail command. -# This is the Sendmail-compatible mail posting interface. -# -sendmail_path = /usr/sbin/sendmail.postfix - -# newaliases_path: The full pathname of the Postfix newaliases command. -# This is the Sendmail-compatible command to build alias databases. -# -newaliases_path = /usr/bin/newaliases.postfix - -# mailq_path: The full pathname of the Postfix mailq command. This -# is the Sendmail-compatible mail queue listing command. -# -mailq_path = /usr/bin/mailq.postfix - -# setgid_group: The group for mail submission and queue management -# commands. This must be a group name with a numerical group ID that -# is not shared with other accounts, not even with the Postfix account. -# -setgid_group = postdrop - -# html_directory: The location of the Postfix HTML documentation. -# -html_directory = no - -# manpage_directory: The location of the Postfix on-line manual pages. -# -manpage_directory = /usr/share/man - -# sample_directory: The location of the Postfix sample configuration files. -# This parameter is obsolete as of Postfix 2.1. -# -sample_directory = /usr/share/doc/postfix/samples - -# readme_directory: The location of the Postfix README files. -# -readme_directory = /usr/share/doc/postfix/README_FILES - -# TLS CONFIGURATION -# -# Basic Postfix TLS configuration by default with self-signed certificate -# for inbound SMTP and also opportunistic TLS for outbound SMTP. - -# The full pathname of a file with the Postfix SMTP server RSA certificate -# in PEM format. Intermediate certificates should be included in general, -# the server certificate first, then the issuing CA(s) (bottom-up order). -# -# smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem -smtpd_tls_cert_file = /etc/postfix/certificates/pubcert.pem - -# The full pathname of a file with the Postfix SMTP server RSA private key -# in PEM format. The private key must be accessible without a pass-phrase, -# i.e. it must not be encrypted. -# -# smtpd_tls_key_file = /etc/pki/tls/private/postfix.key -smtpd_tls_key_file = /etc/postfix/certificates/privkey.pem - -# Announce STARTTLS support to remote SMTP clients, but do not require that -# clients use TLS encryption (opportunistic TLS inbound). -# -smtpd_tls_security_level = may - -# Directory with PEM format Certification Authority certificates that the -# Postfix SMTP client uses to verify a remote SMTP server certificate. -# -smtp_tls_CApath = /etc/pki/tls/certs - -# The full pathname of a file containing CA certificates of root CAs -# trusted to sign either remote SMTP server certificates or intermediate CA -# certificates. -# -smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt - -# Use TLS if this is supported by the remote SMTP server, otherwise use -# plaintext (opportunistic TLS outbound). -# -smtp_tls_security_level = may -meta_directory = /etc/postfix -shlib_directory = /usr/lib64/postfix - -{% if ensure_postfix.milter_list is defined and ensure_postfix.milter_list is iterable %} -# The Milter List -{% for milter in ensure_postfix.milter_list %} -# -- {{ milter.description }} -- {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} -{% endfor %} -smtpd_milters = {% for milter in ensure_postfix.milter_list %} {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} {% endfor %} -{% endif %} - -{% if postfix_domains is defined and postfix_domains is iterable %} -virtual_mailbox_domains = {% for domain in postfix_domains %} {{ domain }} {% endfor %} -{% endif %} - -2bounce_notice_recipient = {{ postmaster_email }} -bounce_notice_recipient = {{ postmaster_email }} -delay_notice_recipient = {{ postmaster_email }} -error_notice_recipient = {{ postmaster_email }} -smtpd_helo_required = yes -disable_vrfy_command = yes -message_size_limit = {{ postfix_message_size_limit }} -smtpd_helo_restrictions = reject_unknown_helo_hostname -smtpd_client_restrictions = reject_unknown_reverse_client_hostname reject_unauth_pipelining -smtpd_discard_ehlo_keywords = silent-discard, dsn - diff --git a/templates/Fedora/35/etc/postfix/main.cf.proto b/templates/Fedora/35/etc/postfix/main.cf.proto deleted file mode 100644 index 9bef4f2..0000000 --- a/templates/Fedora/35/etc/postfix/main.cf.proto +++ /dev/null @@ -1,736 +0,0 @@ -# Global Postfix configuration file. This file lists only a subset -# of all parameters. For the syntax, and for a complete parameter -# list, see the postconf(5) manual page (command: "man 5 postconf"). -# -# For common configuration examples, see BASIC_CONFIGURATION_README -# and STANDARD_CONFIGURATION_README. To find these documents, use -# the command "postconf html_directory readme_directory", or go to -# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. -# -# For best results, change no more than 2-3 parameters at a time, -# and test if Postfix still works after every change. - -# COMPATIBILITY -# -# The compatibility_level determines what default settings Postfix -# will use for main.cf and master.cf settings. These defaults will -# change over time. -# -# To avoid breaking things, Postfix will use backwards-compatible -# default settings and log where it uses those old backwards-compatible -# default settings, until the system administrator has determined -# if any backwards-compatible default settings need to be made -# permanent in main.cf or master.cf. -# -# When this review is complete, update the compatibility_level setting -# below as recommended in the RELEASE_NOTES file. -# -# The level below is what should be used with new (not upgrade) installs. -# -compatibility_level = 3.6 - -# SOFT BOUNCE -# -# The soft_bounce parameter provides a limited safety net for -# testing. When soft_bounce is enabled, mail will remain queued that -# would otherwise bounce. This parameter disables locally-generated -# bounces, and prevents the SMTP server from rejecting mail permanently -# (by changing 5xx replies into 4xx replies). However, soft_bounce -# is no cure for address rewriting mistakes or mail routing mistakes. -# -#soft_bounce = no - -# LOCAL PATHNAME INFORMATION -# -# The queue_directory specifies the location of the Postfix queue. -# This is also the root directory of Postfix daemons that run chrooted. -# See the files in examples/chroot-setup for setting up Postfix chroot -# environments on different UNIX systems. -# -queue_directory = /var/spool/postfix - -# The command_directory parameter specifies the location of all -# postXXX commands. -# -command_directory = /usr/sbin - -# The daemon_directory parameter specifies the location of all Postfix -# daemon programs (i.e. programs listed in the master.cf file). This -# directory must be owned by root. -# -daemon_directory = /usr/libexec/postfix - -# The data_directory parameter specifies the location of Postfix-writable -# data files (caches, random numbers). This directory must be owned -# by the mail_owner account (see below). -# -data_directory = /var/lib/postfix - -# QUEUE AND PROCESS OWNERSHIP -# -# The mail_owner parameter specifies the owner of the Postfix queue -# and of most Postfix daemon processes. Specify the name of a user -# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS -# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In -# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED -# USER. -# -mail_owner = postfix - -# The default_privs parameter specifies the default rights used by -# the local delivery agent for delivery to external file or command. -# These rights are used in the absence of a recipient user context. -# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. -# -#default_privs = nobody - -# INTERNET HOST AND DOMAIN NAMES -# -# The myhostname parameter specifies the internet hostname of this -# mail system. The default is to use the fully-qualified domain name -# from gethostname(). $myhostname is used as a default value for many -# other configuration parameters. -# -#myhostname = host.domain.tld -#myhostname = virtual.domain.tld - -# The mydomain parameter specifies the local internet domain name. -# The default is to use $myhostname minus the first component. -# $mydomain is used as a default value for many other configuration -# parameters. -# -#mydomain = domain.tld - -# SENDING MAIL -# -# The myorigin parameter specifies the domain that locally-posted -# mail appears to come from. The default is to append $myhostname, -# which is fine for small sites. If you run a domain with multiple -# machines, you should (1) change this to $mydomain and (2) set up -# a domain-wide alias database that aliases each user to -# user@that.users.mailhost. -# -# For the sake of consistency between sender and recipient addresses, -# myorigin also specifies the default domain name that is appended -# to recipient addresses that have no @domain part. -# -#myorigin = $myhostname -#myorigin = $mydomain - -# RECEIVING MAIL - -# The inet_interfaces parameter specifies the network interface -# addresses that this mail system receives mail on. By default, -# the software claims all active interfaces on the machine. The -# parameter also controls delivery of mail to user@[ip.address]. -# -# See also the proxy_interfaces parameter, for network addresses that -# are forwarded to us via a proxy or network address translator. -# -# Note: you need to stop/start Postfix when this parameter changes. -# -#inet_interfaces = all -#inet_interfaces = $myhostname -#inet_interfaces = $myhostname, localhost -inet_interfaces = localhost - -# Enable IPv4, and IPv6 if supported -inet_protocols = all - -# The proxy_interfaces parameter specifies the network interface -# addresses that this mail system receives mail on by way of a -# proxy or network address translation unit. This setting extends -# the address list specified with the inet_interfaces parameter. -# -# You must specify your proxy/NAT addresses when your system is a -# backup MX host for other domains, otherwise mail delivery loops -# will happen when the primary MX host is down. -# -#proxy_interfaces = -#proxy_interfaces = 1.2.3.4 - -# The mydestination parameter specifies the list of domains that this -# machine considers itself the final destination for. -# -# These domains are routed to the delivery agent specified with the -# local_transport parameter setting. By default, that is the UNIX -# compatible delivery agent that lookups all recipients in /etc/passwd -# and /etc/aliases or their equivalent. -# -# The default is $myhostname + localhost.$mydomain + localhost. On -# a mail domain gateway, you should also include $mydomain. -# -# Do not specify the names of virtual domains - those domains are -# specified elsewhere (see VIRTUAL_README). -# -# Do not specify the names of domains that this machine is backup MX -# host for. Specify those names via the relay_domains settings for -# the SMTP server, or use permit_mx_backup if you are lazy (see -# STANDARD_CONFIGURATION_README). -# -# The local machine is always the final destination for mail addressed -# to user@[the.net.work.address] of an interface that the mail system -# receives mail on (see the inet_interfaces parameter). -# -# Specify a list of host or domain names, /file/name or type:table -# patterns, separated by commas and/or whitespace. A /file/name -# pattern is replaced by its contents; a type:table is matched when -# a name matches a lookup key (the right-hand side is ignored). -# Continue long lines by starting the next line with whitespace. -# -# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". -# -mydestination = $myhostname, localhost.$mydomain, localhost -#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain -#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, -# mail.$mydomain, www.$mydomain, ftp.$mydomain - -# REJECTING MAIL FOR UNKNOWN LOCAL USERS -# -# The local_recipient_maps parameter specifies optional lookup tables -# with all names or addresses of users that are local with respect -# to $mydestination, $inet_interfaces or $proxy_interfaces. -# -# If this parameter is defined, then the SMTP server will reject -# mail for unknown local users. This parameter is defined by default. -# -# To turn off local recipient checking in the SMTP server, specify -# local_recipient_maps = (i.e. empty). -# -# The default setting assumes that you use the default Postfix local -# delivery agent for local delivery. You need to update the -# local_recipient_maps setting if: -# -# - You define $mydestination domain recipients in files other than -# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. -# For example, you define $mydestination domain recipients in -# the $virtual_mailbox_maps files. -# -# - You redefine the local delivery agent in master.cf. -# -# - You redefine the "local_transport" setting in main.cf. -# -# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" -# feature of the Postfix local delivery agent (see local(8)). -# -# Details are described in the LOCAL_RECIPIENT_README file. -# -# Beware: if the Postfix SMTP server runs chrooted, you probably have -# to access the passwd file via the proxymap service, in order to -# overcome chroot restrictions. The alternative, having a copy of -# the system passwd file in the chroot jail is just not practical. -# -# The right-hand side of the lookup tables is conveniently ignored. -# In the left-hand side, specify a bare username, an @domain.tld -# wild-card, or specify a user@domain.tld address. -# -#local_recipient_maps = unix:passwd.byname $alias_maps -#local_recipient_maps = proxy:unix:passwd.byname $alias_maps -#local_recipient_maps = - -# The unknown_local_recipient_reject_code specifies the SMTP server -# response code when a recipient domain matches $mydestination or -# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty -# and the recipient address or address local-part is not found. -# -# The default setting is 550 (reject mail) but it is safer to start -# with 450 (try again later) until you are certain that your -# local_recipient_maps settings are OK. -# -unknown_local_recipient_reject_code = 550 - -# TRUST AND RELAY CONTROL - -# The mynetworks parameter specifies the list of "trusted" SMTP -# clients that have more privileges than "strangers". -# -# In particular, "trusted" SMTP clients are allowed to relay mail -# through Postfix. See the smtpd_recipient_restrictions parameter -# in postconf(5). -# -# You can specify the list of "trusted" network addresses by hand -# or you can let Postfix do it for you (which is the default). -# -# By default (mynetworks_style = subnet), Postfix "trusts" SMTP -# clients in the same IP subnetworks as the local machine. -# On Linux, this works correctly only with interfaces specified -# with the "ifconfig" command. -# -# Specify "mynetworks_style = class" when Postfix should "trust" SMTP -# clients in the same IP class A/B/C networks as the local machine. -# Don't do this with a dialup site - it would cause Postfix to "trust" -# your entire provider's network. Instead, specify an explicit -# mynetworks list by hand, as described below. -# -# Specify "mynetworks_style = host" when Postfix should "trust" -# only the local machine. -# -#mynetworks_style = class -#mynetworks_style = subnet -#mynetworks_style = host - -# Alternatively, you can specify the mynetworks list by hand, in -# which case Postfix ignores the mynetworks_style setting. -# -# Specify an explicit list of network/netmask patterns, where the -# mask specifies the number of bits in the network part of a host -# address. -# -# You can also specify the absolute pathname of a pattern file instead -# of listing the patterns here. Specify type:table for table-based lookups -# (the value on the table right-hand side is not used). -# -#mynetworks = 168.100.3.0/28, 127.0.0.0/8 -#mynetworks = $config_directory/mynetworks -#mynetworks = hash:/etc/postfix/network_table - -# The relay_domains parameter restricts what destinations this system will -# relay mail to. See the smtpd_recipient_restrictions description in -# postconf(5) for detailed information. -# -# By default, Postfix relays mail -# - from "trusted" clients (IP address matches $mynetworks) to any destination, -# - from "untrusted" clients to destinations that match $relay_domains or -# subdomains thereof, except addresses with sender-specified routing. -# The default relay_domains value is $mydestination. -# -# In addition to the above, the Postfix SMTP server by default accepts mail -# that Postfix is final destination for: -# - destinations that match $inet_interfaces or $proxy_interfaces, -# - destinations that match $mydestination -# - destinations that match $virtual_alias_domains, -# - destinations that match $virtual_mailbox_domains. -# These destinations do not need to be listed in $relay_domains. -# -# Specify a list of hosts or domains, /file/name patterns or type:name -# lookup tables, separated by commas and/or whitespace. Continue -# long lines by starting the next line with whitespace. A file name -# is replaced by its contents; a type:name table is matched when a -# (parent) domain appears as lookup key. -# -# NOTE: Postfix will not automatically forward mail for domains that -# list this system as their primary or backup MX host. See the -# permit_mx_backup restriction description in postconf(5). -# -#relay_domains = $mydestination - -# INTERNET OR INTRANET - -# The relayhost parameter specifies the default host to send mail to -# when no entry is matched in the optional transport(5) table. When -# no relayhost is given, mail is routed directly to the destination. -# -# On an intranet, specify the organizational domain name. If your -# internal DNS uses no MX records, specify the name of the intranet -# gateway host instead. -# -# In the case of SMTP, specify a domain, host, host:port, [host]:port, -# [address] or [address]:port; the form [host] turns off MX lookups. -# -# If you're connected via UUCP, see also the default_transport parameter. -# -#relayhost = $mydomain -#relayhost = [gateway.my.domain] -#relayhost = [mailserver.isp.tld] -#relayhost = uucphost -#relayhost = [an.ip.add.ress] - -# REJECTING UNKNOWN RELAY USERS -# -# The relay_recipient_maps parameter specifies optional lookup tables -# with all addresses in the domains that match $relay_domains. -# -# If this parameter is defined, then the SMTP server will reject -# mail for unknown relay users. This feature is off by default. -# -# The right-hand side of the lookup tables is conveniently ignored. -# In the left-hand side, specify an @domain.tld wild-card, or specify -# a user@domain.tld address. -# -#relay_recipient_maps = hash:/etc/postfix/relay_recipients - -# INPUT RATE CONTROL -# -# The in_flow_delay configuration parameter implements mail input -# flow control. This feature is turned on by default, although it -# still needs further development (it's disabled on SCO UNIX due -# to an SCO bug). -# -# A Postfix process will pause for $in_flow_delay seconds before -# accepting a new message, when the message arrival rate exceeds the -# message delivery rate. With the default 100 SMTP server process -# limit, this limits the mail inflow to 100 messages a second more -# than the number of messages delivered per second. -# -# Specify 0 to disable the feature. Valid delays are 0..10. -# -#in_flow_delay = 1s - -# ADDRESS REWRITING -# -# The ADDRESS_REWRITING_README document gives information about -# address masquerading or other forms of address rewriting including -# username->Firstname.Lastname mapping. - -# ADDRESS REDIRECTION (VIRTUAL DOMAIN) -# -# The VIRTUAL_README document gives information about the many forms -# of domain hosting that Postfix supports. - -# "USER HAS MOVED" BOUNCE MESSAGES -# -# See the discussion in the ADDRESS_REWRITING_README document. - -# TRANSPORT MAP -# -# See the discussion in the ADDRESS_REWRITING_README document. - -# ALIAS DATABASE -# -# The alias_maps parameter specifies the list of alias databases used -# by the local delivery agent. The default list is system dependent. -# -# On systems with NIS, the default is to search the local alias -# database, then the NIS alias database. See aliases(5) for syntax -# details. -# -# If you change the alias database, run "postalias /etc/aliases" (or -# wherever your system stores the mail alias file), or simply run -# "newaliases" to build the necessary DBM or DB file. -# -# It will take a minute or so before changes become visible. Use -# "postfix reload" to eliminate the delay. -# -#alias_maps = dbm:/etc/aliases -alias_maps = hash:/etc/aliases -#alias_maps = hash:/etc/aliases, nis:mail.aliases -#alias_maps = netinfo:/aliases - -# The alias_database parameter specifies the alias database(s) that -# are built with "newaliases" or "sendmail -bi". This is a separate -# configuration parameter, because alias_maps (see above) may specify -# tables that are not necessarily all under control by Postfix. -# -#alias_database = dbm:/etc/aliases -#alias_database = dbm:/etc/mail/aliases -alias_database = hash:/etc/aliases -#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases - -# ADDRESS EXTENSIONS (e.g., user+foo) -# -# The recipient_delimiter parameter specifies the separator between -# user names and address extensions (user+foo). See canonical(5), -# local(8), relocated(5) and virtual(5) for the effects this has on -# aliases, canonical, virtual, relocated and .forward file lookups. -# Basically, the software tries user+foo and .forward+foo before -# trying user and .forward. -# -#recipient_delimiter = + - -# DELIVERY TO MAILBOX -# -# The home_mailbox parameter specifies the optional pathname of a -# mailbox file relative to a user's home directory. The default -# mailbox file is /var/spool/mail/user or /var/mail/user. Specify -# "Maildir/" for qmail-style delivery (the / is required). -# -#home_mailbox = Mailbox -#home_mailbox = Maildir/ - -# The mail_spool_directory parameter specifies the directory where -# UNIX-style mailboxes are kept. The default setting depends on the -# system type. -# -#mail_spool_directory = /var/mail -#mail_spool_directory = /var/spool/mail - -# The mailbox_command parameter specifies the optional external -# command to use instead of mailbox delivery. The command is run as -# the recipient with proper HOME, SHELL and LOGNAME environment settings. -# Exception: delivery for root is done as $default_user. -# -# Other environment variables of interest: USER (recipient username), -# EXTENSION (address extension), DOMAIN (domain part of address), -# and LOCAL (the address localpart). -# -# Unlike other Postfix configuration parameters, the mailbox_command -# parameter is not subjected to $parameter substitutions. This is to -# make it easier to specify shell syntax (see example below). -# -# Avoid shell meta characters because they will force Postfix to run -# an expensive shell process. Procmail alone is expensive enough. -# -# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN -# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. -# -#mailbox_command = /some/where/procmail -#mailbox_command = /some/where/procmail -a "$EXTENSION" - -# The mailbox_transport specifies the optional transport in master.cf -# to use after processing aliases and .forward files. This parameter -# has precedence over the mailbox_command, fallback_transport and -# luser_relay parameters. -# -# Specify a string of the form transport:nexthop, where transport is -# the name of a mail delivery transport defined in master.cf. The -# :nexthop part is optional. For more details see the sample transport -# configuration file. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must update the "local_recipient_maps" setting in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" -# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. -#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp - -# If using the cyrus-imapd IMAP server deliver local mail to the IMAP -# server using LMTP (Local Mail Transport Protocol), this is prefered -# over the older cyrus deliver program by setting the -# mailbox_transport as below: -# -# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp -# -# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via -# these settings. -# -# local_destination_recipient_limit = 300 -# local_destination_concurrency_limit = 5 -# -# Of course you should adjust these settings as appropriate for the -# capacity of the hardware you are using. The recipient limit setting -# can be used to take advantage of the single instance message store -# capability of Cyrus. The concurrency limit can be used to control -# how many simultaneous LMTP sessions will be permitted to the Cyrus -# message store. -# -# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and -# subsequent line in master.cf. -#mailbox_transport = cyrus - -# The fallback_transport specifies the optional transport in master.cf -# to use for recipients that are not found in the UNIX passwd database. -# This parameter has precedence over the luser_relay parameter. -# -# Specify a string of the form transport:nexthop, where transport is -# the name of a mail delivery transport defined in master.cf. The -# :nexthop part is optional. For more details see the sample transport -# configuration file. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must update the "local_recipient_maps" setting in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp -#fallback_transport = - -# The luser_relay parameter specifies an optional destination address -# for unknown recipients. By default, mail for unknown@$mydestination, -# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned -# as undeliverable. -# -# The following expansions are done on luser_relay: $user (recipient -# username), $shell (recipient shell), $home (recipient home directory), -# $recipient (full recipient address), $extension (recipient address -# extension), $domain (recipient domain), $local (entire recipient -# localpart), $recipient_delimiter. Specify ${name?value} or -# ${name:value} to expand value only when $name does (does not) exist. -# -# luser_relay works only for the default Postfix local delivery agent. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must specify "local_recipient_maps =" (i.e. empty) in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -#luser_relay = $user@other.host -#luser_relay = $local@other.host -#luser_relay = admin+$local - -# JUNK MAIL CONTROLS -# -# The controls listed here are only a very small subset. The file -# SMTPD_ACCESS_README provides an overview. - -# The header_checks parameter specifies an optional table with patterns -# that each logical message header is matched against, including -# headers that span multiple physical lines. -# -# By default, these patterns also apply to MIME headers and to the -# headers of attached messages. With older Postfix versions, MIME and -# attached message headers were treated as body text. -# -# For details, see "man header_checks". -# -#header_checks = regexp:/etc/postfix/header_checks - -# FAST ETRN SERVICE -# -# Postfix maintains per-destination logfiles with information about -# deferred mail, so that mail can be flushed quickly with the SMTP -# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". -# See the ETRN_README document for a detailed description. -# -# The fast_flush_domains parameter controls what destinations are -# eligible for this service. By default, they are all domains that -# this server is willing to relay mail to. -# -#fast_flush_domains = $relay_domains - -# SHOW SOFTWARE VERSION OR NOT -# -# The smtpd_banner parameter specifies the text that follows the 220 -# code in the SMTP server's greeting banner. Some people like to see -# the mail version advertised. By default, Postfix shows no version. -# -# You MUST specify $myhostname at the start of the text. That is an -# RFC requirement. Postfix itself does not care. -# -#smtpd_banner = $myhostname ESMTP $mail_name -#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) - -# PARALLEL DELIVERY TO THE SAME DESTINATION -# -# How many parallel deliveries to the same user or domain? With local -# delivery, it does not make sense to do massively parallel delivery -# to the same user, because mailbox updates must happen sequentially, -# and expensive pipelines in .forward files can cause disasters when -# too many are run at the same time. With SMTP deliveries, 10 -# simultaneous connections to the same domain could be sufficient to -# raise eyebrows. -# -# Each message delivery transport has its XXX_destination_concurrency_limit -# parameter. The default is $default_destination_concurrency_limit for -# most delivery transports. For the local delivery agent the default is 2. - -#local_destination_concurrency_limit = 2 -#default_destination_concurrency_limit = 20 - -# DEBUGGING CONTROL -# -# The debug_peer_level parameter specifies the increment in verbose -# logging level when an SMTP client or server host name or address -# matches a pattern in the debug_peer_list parameter. -# -debug_peer_level = 2 - -# The debug_peer_list parameter specifies an optional list of domain -# or network patterns, /file/name patterns or type:name tables. When -# an SMTP client or server host name or address matches a pattern, -# increase the verbose logging level by the amount specified in the -# debug_peer_level parameter. -# -#debug_peer_list = 127.0.0.1 -#debug_peer_list = some.domain - -# The debugger_command specifies the external command that is executed -# when a Postfix daemon program is run with the -D option. -# -# Use "command .. & sleep 5" so that the debugger can attach before -# the process marches on. If you use an X-based debugger, be sure to -# set up your XAUTHORITY environment variable before starting Postfix. -# -debugger_command = - PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin - ddd $daemon_directory/$process_name $process_id & sleep 5 - -# If you can't use X, use this to capture the call stack when a -# daemon crashes. The result is in a file in the configuration -# directory, and is named after the process name and the process ID. -# -# debugger_command = -# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; -# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 -# >$config_directory/$process_name.$process_id.log & sleep 5 -# -# Another possibility is to run gdb under a detached screen session. -# To attach to the screen session, su root and run "screen -r -# " where uniquely matches one of the detached -# sessions (from "screen -list"). -# -# debugger_command = -# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen -# -dmS $process_name gdb $daemon_directory/$process_name -# $process_id & sleep 1 - -# INSTALL-TIME CONFIGURATION INFORMATION -# -# The following parameters are used when installing a new Postfix version. -# -# sendmail_path: The full pathname of the Postfix sendmail command. -# This is the Sendmail-compatible mail posting interface. -# -sendmail_path = - -# newaliases_path: The full pathname of the Postfix newaliases command. -# This is the Sendmail-compatible command to build alias databases. -# -newaliases_path = - -# mailq_path: The full pathname of the Postfix mailq command. This -# is the Sendmail-compatible mail queue listing command. -# -mailq_path = - -# setgid_group: The group for mail submission and queue management -# commands. This must be a group name with a numerical group ID that -# is not shared with other accounts, not even with the Postfix account. -# -setgid_group = - -# html_directory: The location of the Postfix HTML documentation. -# -html_directory = - -# manpage_directory: The location of the Postfix on-line manual pages. -# -manpage_directory = - -# sample_directory: The location of the Postfix sample configuration files. -# This parameter is obsolete as of Postfix 2.1. -# -sample_directory = - -# readme_directory: The location of the Postfix README files. -# -readme_directory = - -# TLS CONFIGURATION -# -# Basic Postfix TLS configuration by default with self-signed certificate -# for inbound SMTP and also opportunistic TLS for outbound SMTP. - -# The full pathname of a file with the Postfix SMTP server RSA certificate -# in PEM format. Intermediate certificates should be included in general, -# the server certificate first, then the issuing CA(s) (bottom-up order). -# -smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem - -# The full pathname of a file with the Postfix SMTP server RSA private key -# in PEM format. The private key must be accessible without a pass-phrase, -# i.e. it must not be encrypted. -# -smtpd_tls_key_file = /etc/pki/tls/private/postfix.key - -# Announce STARTTLS support to remote SMTP clients, but do not require that -# clients use TLS encryption (opportunistic TLS inbound). -# -smtpd_tls_security_level = may - -# Directory with PEM format Certification Authority certificates that the -# Postfix SMTP client uses to verify a remote SMTP server certificate. -# -smtp_tls_CApath = /etc/pki/tls/certs - -# The full pathname of a file containing CA certificates of root CAs -# trusted to sign either remote SMTP server certificates or intermediate CA -# certificates. -# -smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt - -# Use TLS if this is supported by the remote SMTP server, otherwise use -# plaintext (opportunistic TLS outbound). -# -smtp_tls_security_level = may diff --git a/templates/Fedora/35/etc/postfix/master.cf b/templates/Fedora/35/etc/postfix/master.cf deleted file mode 100644 index 4beb91f..0000000 --- a/templates/Fedora/35/etc/postfix/master.cf +++ /dev/null @@ -1,137 +0,0 @@ -# -# Postfix master process configuration file. For details on the format -# of the file, see the master(5) manual page (command: "man 5 master" or -# on-line: http://www.postfix.org/master.5.html). -# -# Do not forget to execute "postfix reload" after editing this file. -# -# ========================================================================== -# service type private unpriv chroot wakeup maxproc command + args -# (yes) (yes) (no) (never) (100) -# ========================================================================== -smtp inet n - n - - smtpd -#smtp inet n - n - 1 postscreen -#smtpd pass - - n - - smtpd -#dnsblog unix - - n - 0 dnsblog -#tlsproxy unix - - n - 0 tlsproxy -# Choose one: enable submission for loopback clients only, or for any client. -#127.0.0.1:submission inet n - n - - smtpd -# submission inet n - n - - smtpd -# -o syslog_name=postfix/submission -# -o smtpd_tls_security_level=encrypt -# -o smtpd_sasl_auth_enable=yes -# -o smtpd_tls_auth_only=yes -# -o smtpd_reject_unlisted_recipient=no -# -o smtpd_client_restrictions=$mua_client_restrictions -# -o smtpd_helo_restrictions=$mua_helo_restrictions -# -o smtpd_sender_restrictions=$mua_sender_restrictions -# -o smtpd_recipient_restrictions= -# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject -# -o milter_macro_daemon_name=ORIGINATING -# Choose one: enable smtps for loopback clients only, or for any client. -#127.0.0.1:smtps inet n - n - - smtpd -# smtps inet n - n - - smtpd -# -o syslog_name=postfix/smtps -# -o smtpd_tls_wrappermode=yes -# -o smtpd_sasl_auth_enable=yes -# -o smtpd_reject_unlisted_recipient=no -# -o smtpd_client_restrictions=$mua_client_restrictions -# -o smtpd_helo_restrictions=$mua_helo_restrictions -# -o smtpd_sender_restrictions=$mua_sender_restrictions -# -o smtpd_recipient_restrictions= -# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject -# -o milter_macro_daemon_name=ORIGINATING -#628 inet n - n - - qmqpd -pickup unix n - n 60 1 pickup -cleanup unix n - n - 0 cleanup -qmgr unix n - n 300 1 qmgr -#qmgr unix n - n 300 1 oqmgr -tlsmgr unix - - n 1000? 1 tlsmgr -rewrite unix - - n - - trivial-rewrite -bounce unix - - n - 0 bounce -defer unix - - n - 0 bounce -trace unix - - n - 0 bounce -verify unix - - n - 1 verify -flush unix n - n 1000? 0 flush -proxymap unix - - n - - proxymap -proxywrite unix - - n - 1 proxymap -smtp unix - - n - - smtp -relay unix - - n - - smtp - -o syslog_name=postfix/$service_name -# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 -showq unix n - n - - showq -error unix - - n - - error -retry unix - - n - - error -discard unix - - n - - discard -local unix - n n - - local -virtual unix - n n - - virtual -lmtp unix - - n - - lmtp -anvil unix - - n - 1 anvil -scache unix - - n - 1 scache -postlog unix-dgram n - n - 1 postlogd -# -# ==================================================================== -# Interfaces to non-Postfix software. Be sure to examine the manual -# pages of the non-Postfix software to find out what options it wants. -# -# Many of the following services use the Postfix pipe(8) delivery -# agent. See the pipe(8) man page for information about ${recipient} -# and other message envelope options. -# ==================================================================== -# -# maildrop. See the Postfix MAILDROP_README file for details. -# Also specify in main.cf: maildrop_destination_recipient_limit=1 -# -#maildrop unix - n n - - pipe -# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} -# -# ==================================================================== -# -# Recent Cyrus versions can use the existing "lmtp" master.cf entry. -# -# Specify in cyrus.conf: -# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 -# -# Specify in main.cf one or more of the following: -# mailbox_transport = lmtp:inet:localhost -# virtual_transport = lmtp:inet:localhost -# -# ==================================================================== -# -# Cyrus 2.1.5 (Amos Gouaux) -# Also specify in main.cf: cyrus_destination_recipient_limit=1 -# -#cyrus unix - n n - - pipe -# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} -# -# ==================================================================== -# -# Old example of delivery via Cyrus. -# -#old-cyrus unix - n n - - pipe -# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} -# -# ==================================================================== -# -# See the Postfix UUCP_README file for configuration details. -# -#uucp unix - n n - - pipe -# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) -# -# ==================================================================== -# -# Other external delivery methods. -# -#ifmail unix - n n - - pipe -# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) -# -#bsmtp unix - n n - - pipe -# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient -# -#scalemail-backend unix - n n - 2 pipe -# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store -# ${nexthop} ${user} ${extension} -# -#mailman unix - n n - - pipe -# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py -# ${nexthop} ${user} diff --git a/templates/Fedora/35/etc/postfix/master.cf.proto b/templates/Fedora/35/etc/postfix/master.cf.proto deleted file mode 100644 index f33d9dd..0000000 --- a/templates/Fedora/35/etc/postfix/master.cf.proto +++ /dev/null @@ -1,137 +0,0 @@ -# -# Postfix master process configuration file. For details on the format -# of the file, see the master(5) manual page (command: "man 5 master" or -# on-line: http://www.postfix.org/master.5.html). -# -# Do not forget to execute "postfix reload" after editing this file. -# -# ========================================================================== -# service type private unpriv chroot wakeup maxproc command + args -# (yes) (yes) (no) (never) (100) -# ========================================================================== -smtp inet n - n - - smtpd -#smtp inet n - n - 1 postscreen -#smtpd pass - - n - - smtpd -#dnsblog unix - - n - 0 dnsblog -#tlsproxy unix - - n - 0 tlsproxy -# Choose one: enable submission for loopback clients only, or for any client. -#127.0.0.1:submission inet n - n - - smtpd -#submission inet n - n - - smtpd -# -o syslog_name=postfix/submission -# -o smtpd_tls_security_level=encrypt -# -o smtpd_sasl_auth_enable=yes -# -o smtpd_tls_auth_only=yes -# -o smtpd_reject_unlisted_recipient=no -# -o smtpd_client_restrictions=$mua_client_restrictions -# -o smtpd_helo_restrictions=$mua_helo_restrictions -# -o smtpd_sender_restrictions=$mua_sender_restrictions -# -o smtpd_recipient_restrictions= -# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject -# -o milter_macro_daemon_name=ORIGINATING -# Choose one: enable smtps for loopback clients only, or for any client. -#127.0.0.1:smtps inet n - n - - smtpd -#smtps inet n - n - - smtpd -# -o syslog_name=postfix/smtps -# -o smtpd_tls_wrappermode=yes -# -o smtpd_sasl_auth_enable=yes -# -o smtpd_reject_unlisted_recipient=no -# -o smtpd_client_restrictions=$mua_client_restrictions -# -o smtpd_helo_restrictions=$mua_helo_restrictions -# -o smtpd_sender_restrictions=$mua_sender_restrictions -# -o smtpd_recipient_restrictions= -# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject -# -o milter_macro_daemon_name=ORIGINATING -#628 inet n - n - - qmqpd -pickup unix n - n 60 1 pickup -cleanup unix n - n - 0 cleanup -qmgr unix n - n 300 1 qmgr -#qmgr unix n - n 300 1 oqmgr -tlsmgr unix - - n 1000? 1 tlsmgr -rewrite unix - - n - - trivial-rewrite -bounce unix - - n - 0 bounce -defer unix - - n - 0 bounce -trace unix - - n - 0 bounce -verify unix - - n - 1 verify -flush unix n - n 1000? 0 flush -proxymap unix - - n - - proxymap -proxywrite unix - - n - 1 proxymap -smtp unix - - n - - smtp -relay unix - - n - - smtp - -o syslog_name=postfix/$service_name -# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 -showq unix n - n - - showq -error unix - - n - - error -retry unix - - n - - error -discard unix - - n - - discard -local unix - n n - - local -virtual unix - n n - - virtual -lmtp unix - - n - - lmtp -anvil unix - - n - 1 anvil -scache unix - - n - 1 scache -postlog unix-dgram n - n - 1 postlogd -# -# ==================================================================== -# Interfaces to non-Postfix software. Be sure to examine the manual -# pages of the non-Postfix software to find out what options it wants. -# -# Many of the following services use the Postfix pipe(8) delivery -# agent. See the pipe(8) man page for information about ${recipient} -# and other message envelope options. -# ==================================================================== -# -# maildrop. See the Postfix MAILDROP_README file for details. -# Also specify in main.cf: maildrop_destination_recipient_limit=1 -# -#maildrop unix - n n - - pipe -# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} -# -# ==================================================================== -# -# Recent Cyrus versions can use the existing "lmtp" master.cf entry. -# -# Specify in cyrus.conf: -# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 -# -# Specify in main.cf one or more of the following: -# mailbox_transport = lmtp:inet:localhost -# virtual_transport = lmtp:inet:localhost -# -# ==================================================================== -# -# Cyrus 2.1.5 (Amos Gouaux) -# Also specify in main.cf: cyrus_destination_recipient_limit=1 -# -#cyrus unix - n n - - pipe -# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} -# -# ==================================================================== -# -# Old example of delivery via Cyrus. -# -#old-cyrus unix - n n - - pipe -# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} -# -# ==================================================================== -# -# See the Postfix UUCP_README file for configuration details. -# -#uucp unix - n n - - pipe -# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) -# -# ==================================================================== -# -# Other external delivery methods. -# -#ifmail unix - n n - - pipe -# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) -# -#bsmtp unix - n n - - pipe -# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient -# -#scalemail-backend unix - n n - 2 pipe -# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store -# ${nexthop} ${user} ${extension} -# -#mailman unix - n n - - pipe -# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py -# ${nexthop} ${user} diff --git a/templates/Fedora/35/etc/postfix/postfix-files b/templates/Fedora/35/etc/postfix/postfix-files deleted file mode 100644 index 1eda0a3..0000000 --- a/templates/Fedora/35/etc/postfix/postfix-files +++ /dev/null @@ -1,432 +0,0 @@ -# -# Do not edit this file. -# -# This file controls the postfix-install script for installation of -# Postfix programs, configuration files and documentation, as well -# as the post-install script for setting permissions and for updating -# Postfix configuration files. See the respective manual pages within -# the script files. -# -# Do not list $command_directory or $shlib_directory in this file, -# or it will be blown away by a future Postfix uninstallation -# procedure. You would not want to lose all files in /usr/sbin or -# /usr/local/lib. -# -# Each record in this file describes one file or directory. -# Fields are separated by ":". Specify a null field as "-". -# Missing fields or separators at the end are OK. -# -# File format: -# name:type:owner:group:permission:flags -# No group means don't change group ownership. -# -# File types: -# d=directory -# f=regular file -# h=hard link (*) -# l=symbolic link (*) -# -# (*) With hard links and symbolic links, the owner field becomes the -# source pathname, while the group and permissions are ignored. -# -# File flags: -# No flag means the flag is not active. -# p=preserve existing file, do not replace (postfix-install). -# u=update owner/group/mode (post-install upgrade-permissions). -# c=create missing directory (post-install create-missing). -# r=apply owner/group recursively (post-install set/upgrade-permissions). -# o=obsolete, no longer part of Postfix -# 1=optional for non-default instance (config_dir != built-in default). -# -# Note: the "u" flag is for upgrading the permissions of existing files -# or directories after changes in Postfix architecture. For robustness -# it is a good idea to "u" all the files that have special ownership or -# permissions, so that running "make install" fixes any glitches. -# -# Note: order matters. Update shared libraries and database plugins -# before daemon/command-line programs. -$config_directory:d:root:-:755:u -$data_directory:d:$mail_owner:-:700:uc -$daemon_directory:d:root:-:755:u -$queue_directory:d:root:-:755:uc -$sample_directory:d:root:-:755:o -$readme_directory:d:root:-:755 -$html_directory:d:root:-:755 -$queue_directory/active:d:$mail_owner:-:700:ucr -$queue_directory/bounce:d:$mail_owner:-:700:ucr -$queue_directory/corrupt:d:$mail_owner:-:700:ucr -$queue_directory/defer:d:$mail_owner:-:700:ucr -$queue_directory/deferred:d:$mail_owner:-:700:ucr -$queue_directory/flush:d:$mail_owner:-:700:ucr -$queue_directory/hold:d:$mail_owner:-:700:ucr -$queue_directory/incoming:d:$mail_owner:-:700:ucr -$queue_directory/private:d:$mail_owner:-:700:uc -$queue_directory/maildrop:d:$mail_owner:$setgid_group:730:uc -$queue_directory/public:d:$mail_owner:$setgid_group:710:uc -$queue_directory/pid:d:root:-:755:uc -$queue_directory/saved:d:$mail_owner:-:700:ucr -$queue_directory/trace:d:$mail_owner:-:700:ucr -# Update shared libraries and plugins before daemon or command-line programs. -$shlib_directory/libpostfix-util.so:f:root:-:755 -$shlib_directory/libpostfix-global.so:f:root:-:755 -$shlib_directory/libpostfix-dns.so:f:root:-:755 -$shlib_directory/libpostfix-tls.so:f:root:-:755 -$shlib_directory/libpostfix-master.so:f:root:-:755 -$meta_directory/dynamicmaps.cf.d:d:root:-:755 -$meta_directory/dynamicmaps.cf:f:root:-:644 -$meta_directory/main.cf.proto:f:root:-:644 -$meta_directory/master.cf.proto:f:root:-:644 -$meta_directory/postfix-files.d:d:root:-:755 -$meta_directory/postfix-files:f:root:-:644 -$daemon_directory/anvil:f:root:-:755 -$daemon_directory/bounce:f:root:-:755 -$daemon_directory/cleanup:f:root:-:755 -$daemon_directory/discard:f:root:-:755 -$daemon_directory/dnsblog:f:root:-:755 -$daemon_directory/error:f:root:-:755 -$daemon_directory/flush:f:root:-:755 -$daemon_directory/local:f:root:-:755 -$daemon_directory/main.cf:f:root:-:644:o -$daemon_directory/master.cf:f:root:-:644:o -$daemon_directory/master:f:root:-:755 -$daemon_directory/oqmgr:f:root:-:755 -$daemon_directory/pickup:f:root:-:755 -$daemon_directory/pipe:f:root:-:755 -$daemon_directory/post-install:f:root:-:755 -# In case meta_directory == daemon_directory. -#$daemon_directory/postfix-files:f:root:-:644:o -#$daemon_directory/postfix-files.d:d:root:-:755:o -$daemon_directory/postfix-script:f:root:-:755 -$daemon_directory/postfix-tls-script:f:root:-:755 -$daemon_directory/postfix-wrapper:f:root:-:755 -$daemon_directory/postmulti-script:f:root:-:755 -$daemon_directory/postlogd:f:root:-:755 -$daemon_directory/postscreen:f:root:-:755 -$daemon_directory/proxymap:f:root:-:755 -$daemon_directory/qmgr:f:root:-:755 -$daemon_directory/qmqpd:f:root:-:755 -$daemon_directory/scache:f:root:-:755 -$daemon_directory/showq:f:root:-:755 -$daemon_directory/smtp:f:root:-:755 -$daemon_directory/smtpd:f:root:-:755 -$daemon_directory/spawn:f:root:-:755 -$daemon_directory/tlsproxy:f:root:-:755 -$daemon_directory/tlsmgr:f:root:-:755 -$daemon_directory/trivial-rewrite:f:root:-:755 -$daemon_directory/verify:f:root:-:755 -$daemon_directory/virtual:f:root:-:755 -$daemon_directory/nqmgr:h:$daemon_directory/qmgr -$daemon_directory/lmtp:h:$daemon_directory/smtp -$command_directory/postalias:f:root:-:755 -$command_directory/postcat:f:root:-:755 -$command_directory/postconf:f:root:-:755 -$command_directory/postfix:f:root:-:755 -$command_directory/postkick:f:root:-:755 -$command_directory/postlock:f:root:-:755 -$command_directory/postlog:f:root:-:755 -$command_directory/postmap:f:root:-:755 -$command_directory/postmulti:f:root:-:755 -$command_directory/postsuper:f:root:-:755 -$command_directory/postdrop:f:root:$setgid_group:2755:u -$command_directory/postqueue:f:root:$setgid_group:2755:u -$sendmail_path:f:root:-:755 -$newaliases_path:l:$sendmail_path -$mailq_path:l:$sendmail_path -$config_directory/access:f:root:-:644:p1 -$config_directory/canonical:f:root:-:644:p1 -$config_directory/cidr_table:f:root:-:644:o -$config_directory/generic:f:root:-:644:p1 -$config_directory/generics:f:root:-:644:o -$config_directory/header_checks:f:root:-:644:p1 -$config_directory/install.cf:f:root:-:644:o -$config_directory/main.cf:f:root:-:644:p -$config_directory/master.cf:f:root:-:644:p -$config_directory/pcre_table:f:root:-:644:o -$config_directory/regexp_table:f:root:-:644:o -$config_directory/relocated:f:root:-:644:p1 -$config_directory/tcp_table:f:root:-:644:o -$config_directory/transport:f:root:-:644:p1 -$config_directory/virtual:f:root:-:644:p1 -$config_directory/postfix-script:f:root:-:755:o -$config_directory/postfix-script-sgid:f:root:-:755:o -$config_directory/postfix-script-nosgid:f:root:-:755:o -$config_directory/post-install:f:root:-:755:o -$manpage_directory/man1/mailq.postfix.1.gz:f:root:-:644 -$manpage_directory/man1/newaliases.postfix.1.gz:f:root:-:644 -$manpage_directory/man1/postalias.1.gz:f:root:-:644 -$manpage_directory/man1/postcat.1.gz:f:root:-:644 -$manpage_directory/man1/postconf.1.gz:f:root:-:644 -$manpage_directory/man1/postdrop.1.gz:f:root:-:644 -$manpage_directory/man1/postfix.1.gz:f:root:-:644 -$manpage_directory/man1/postfix-tls.1.gz:f:root:-:644 -$manpage_directory/man1/postkick.1.gz:f:root:-:644 -$manpage_directory/man1/postlock.1.gz:f:root:-:644 -$manpage_directory/man1/postlog.1.gz:f:root:-:644 -$manpage_directory/man1/postmap.1.gz:f:root:-:644 -$manpage_directory/man1/postmulti.1.gz:f:root:-:644 -$manpage_directory/man1/postqueue.1.gz:f:root:-:644 -$manpage_directory/man1/postsuper.1.gz:f:root:-:644 -$manpage_directory/man1/sendmail.postfix.1.gz:f:root:-:644 -$manpage_directory/man5/access.5.gz:f:root:-:644 -$manpage_directory/man5/aliases.postfix.5.gz:f:root:-:644 -$manpage_directory/man5/body_checks.5.gz:f:root:-:644 -$manpage_directory/man5/bounce.5.gz:f:root:-:644 -$manpage_directory/man5/canonical.5.gz:f:root:-:644 -$manpage_directory/man5/cidr_table.5.gz:f:root:-:644 -$manpage_directory/man5/generics.5.gz:f:root:-:644:o -$manpage_directory/man5/generic.5.gz:f:root:-:644 -$manpage_directory/man5/header_checks.5.gz:f:root:-:644 -$manpage_directory/man5/master.5.gz:f:root:-:644 -$manpage_directory/man5/memcache_table.5.gz:f:root:-:644 -$manpage_directory/man5/socketmap_table.5.gz:f:root:-:644 -$manpage_directory/man5/nisplus_table.5.gz:f:root:-:644 -$manpage_directory/man5/postconf.5.gz:f:root:-:644 -$manpage_directory/man5/postfix-wrapper.5.gz:f:root:-:644 -$manpage_directory/man5/regexp_table.5.gz:f:root:-:644 -$manpage_directory/man5/relocated.5.gz:f:root:-:644 -$manpage_directory/man5/tcp_table.5.gz:f:root:-:644 -$manpage_directory/man5/transport.5.gz:f:root:-:644 -$manpage_directory/man5/virtual.5.gz:f:root:-:644 -$manpage_directory/man8/bounce.8.gz:f:root:-:644 -$manpage_directory/man8/cleanup.8.gz:f:root:-:644 -$manpage_directory/man8/anvil.8.gz:f:root:-:644 -$manpage_directory/man8/defer.8.gz:f:root:-:644 -$manpage_directory/man8/discard.8.gz:f:root:-:644 -$manpage_directory/man8/dnsblog.8.gz:f:root:-:644 -$manpage_directory/man8/error.8.gz:f:root:-:644 -$manpage_directory/man8/flush.8.gz:f:root:-:644 -$manpage_directory/man8/lmtp.8.gz:f:root:-:644 -$manpage_directory/man8/local.8.gz:f:root:-:644 -$manpage_directory/man8/master.8.gz:f:root:-:644 -$manpage_directory/man8/nqmgr.8.gz:f:root:-:644:o -$manpage_directory/man8/oqmgr.8.gz:f:root:-:644: -$manpage_directory/man8/pickup.8.gz:f:root:-:644 -$manpage_directory/man8/pipe.8.gz:f:root:-:644 -$manpage_directory/man8/postlogd.8.gz:f:root:-:644 -$manpage_directory/man8/postscreen.8.gz:f:root:-:644 -$manpage_directory/man8/proxymap.8.gz:f:root:-:644 -$manpage_directory/man8/qmgr.8.gz:f:root:-:644 -$manpage_directory/man8/qmqpd.8.gz:f:root:-:644 -$manpage_directory/man8/scache.8.gz:f:root:-:644 -$manpage_directory/man8/showq.8.gz:f:root:-:644 -$manpage_directory/man8/smtp.8.gz:f:root:-:644 -$manpage_directory/man8/smtpd.postfix.8.gz:f:root:-:644 -$manpage_directory/man8/spawn.8.gz:f:root:-:644 -$manpage_directory/man8/tlsproxy.8.gz:f:root:-:644 -$manpage_directory/man8/tlsmgr.8.gz:f:root:-:644 -$manpage_directory/man8/trace.8.gz:f:root:-:644 -$manpage_directory/man8/trivial-rewrite.8.gz:f:root:-:644 -$manpage_directory/man8/verify.8.gz:f:root:-:644 -$manpage_directory/man8/virtual.8.gz:f:root:-:644 -$sample_directory/sample-aliases.cf:f:root:-:644:o -$sample_directory/sample-auth.cf:f:root:-:644:o -$sample_directory/sample-canonical.cf:f:root:-:644:o -$sample_directory/sample-compatibility.cf:f:root:-:644:o -$sample_directory/sample-debug.cf:f:root:-:644:o -$sample_directory/sample-filter.cf:f:root:-:644:o -$sample_directory/sample-flush.cf:f:root:-:644:o -$sample_directory/sample-ipv6.cf:f:root:-:644:o -$sample_directory/sample-ldap.cf:f:root:-:644:o -$sample_directory/sample-lmtp.cf:f:root:-:644:o -$sample_directory/sample-local.cf:f:root:-:644:o -$sample_directory/sample-mime.cf:f:root:-:644:o -$sample_directory/sample-misc.cf:f:root:-:644:o -$sample_directory/sample-pcre-access.cf:f:root:-:644:o -$sample_directory/sample-pcre-body.cf:f:root:-:644:o -$sample_directory/sample-pcre-header.cf:f:root:-:644:o -$sample_directory/sample-pgsql-aliases.cf:f:root:-:644:o -$sample_directory/sample-qmqpd.cf:f:root:-:644:o -$sample_directory/sample-rate.cf:f:root:-:644:o -$sample_directory/sample-regexp-access.cf:f:root:-:644:o -$sample_directory/sample-regexp-body.cf:f:root:-:644:o -$sample_directory/sample-regexp-header.cf:f:root:-:644:o -$sample_directory/sample-relocated.cf:f:root:-:644:o -$sample_directory/sample-resource.cf:f:root:-:644:o -$sample_directory/sample-rewrite.cf:f:root:-:644:o -$sample_directory/sample-scheduler.cf:f:root:-:644:o -$sample_directory/sample-smtp.cf:f:root:-:644:o -$sample_directory/sample-smtpd.cf:f:root:-:644:o -$sample_directory/sample-tls.cf:f:root:-:644:o -$sample_directory/sample-transport.cf:f:root:-:644:o -$sample_directory/sample-verify.cf:f:root:-:644:o -$sample_directory/sample-virtual.cf:f:root:-:644:o -$readme_directory/AAAREADME:f:root:-:644 -$readme_directory/ADDRESS_CLASS_README:f:root:-:644 -$readme_directory/ADDRESS_REWRITING_README:f:root:-:644 -$readme_directory/ADDRESS_VERIFICATION_README:f:root:-:644 -$readme_directory/BACKSCATTER_README:f:root:-:644 -$readme_directory/BASIC_CONFIGURATION_README:f:root:-:644 -$readme_directory/BUILTIN_FILTER_README:f:root:-:644 -$readme_directory/COMPATIBILITY_README:f:root:-:644 -$readme_directory/CONNECTION_CACHE_README:f:root:-:644 -$readme_directory/CONTENT_INSPECTION_README:f:root:-:644 -$readme_directory/DATABASE_README:f:root:-:644 -$readme_directory/DB_README:f:root:-:644 -$readme_directory/DEBUG_README:f:root:-:644 -$readme_directory/DSN_README:f:root:-:644 -$readme_directory/ETRN_README:f:root:-:644 -$readme_directory/FILTER_README:f:root:-:644 -$readme_directory/FORWARD_SECRECY_README:f:root:-:644 -$readme_directory/HOSTING_README:f:root:-:644:o -$readme_directory/INSTALL:f:root:-:644 -$readme_directory/IPV6_README:f:root:-:644 -$readme_directory/LINUX_README:f:root:-:644 -$readme_directory/LOCAL_RECIPIENT_README:f:root:-:644 -$readme_directory/MACOSX_README:f:root:-:644:o -$readme_directory/MAILDROP_README:f:root:-:644 -$readme_directory/MEMCACHE_README:f:root:-:644 -$readme_directory/MILTER_README:f:root:-:644 -$readme_directory/MULTI_INSTANCE_README:f:root:-:644 -$readme_directory/NFS_README:f:root:-:644 -$readme_directory/OVERVIEW:f:root:-:644 -$readme_directory/PACKAGE_README:f:root:-:644 -$readme_directory/POSTSCREEN_README:f:root:-:644 -$readme_directory/QMQP_README:f:root:-:644:o -$readme_directory/QSHAPE_README:f:root:-:644 -$readme_directory/RELEASE_NOTES:f:root:-:644 -$readme_directory/RESTRICTION_CLASS_README:f:root:-:644 -$readme_directory/SASL_README:f:root:-:644 -$readme_directory/SCHEDULER_README:f:root:-:644 -$readme_directory/SMTPD_ACCESS_README:f:root:-:644 -$readme_directory/SMTPD_POLICY_README:f:root:-:644 -$readme_directory/SMTPD_PROXY_README:f:root:-:644 -$readme_directory/SOHO_README:f:root:-:644 -$readme_directory/STANDARD_CONFIGURATION_README:f:root:-:644 -$readme_directory/STRESS_README:f:root:-:644 -$readme_directory/TLS_LEGACY_README:f:root:-:644 -$readme_directory/TLS_README:f:root:-:644 -$readme_directory/TUNING_README:f:root:-:644 -$readme_directory/ULTRIX_README:f:root:-:644 -$readme_directory/UUCP_README:f:root:-:644 -$readme_directory/VERP_README:f:root:-:644 -$readme_directory/VIRTUAL_README:f:root:-:644 -$readme_directory/XCLIENT_README:f:root:-:644 -$readme_directory/XFORWARD_README:f:root:-:644 -$html_directory/ADDRESS_CLASS_README.html:f:root:-:644 -$html_directory/ADDRESS_REWRITING_README.html:f:root:-:644 -$html_directory/ADDRESS_VERIFICATION_README.html:f:root:-:644 -$html_directory/BACKSCATTER_README.html:f:root:-:644 -$html_directory/BASIC_CONFIGURATION_README.html:f:root:-:644 -$html_directory/BUILTIN_FILTER_README.html:f:root:-:644 -$html_directory/CDB_README.html:f:root:-:644 -$html_directory/COMPATIBILITY_README.html:f:root:-:644 -$html_directory/CONNECTION_CACHE_README.html:f:root:-:644 -$html_directory/CONTENT_INSPECTION_README.html:f:root:-:644 -$html_directory/CYRUS_README.html:f:root:-:644:o -$html_directory/DATABASE_README.html:f:root:-:644 -$html_directory/DB_README.html:f:root:-:644 -$html_directory/DEBUG_README.html:f:root:-:644 -$html_directory/DSN_README.html:f:root:-:644 -$html_directory/ETRN_README.html:f:root:-:644 -$html_directory/FILTER_README.html:f:root:-:644 -$html_directory/FORWARD_SECRECY_README.html:f:root:-:644 -$html_directory/INSTALL.html:f:root:-:644 -$html_directory/IPV6_README.html:f:root:-:644 -$html_directory/LDAP_README.html:f:root:-:644 -$html_directory/LINUX_README.html:f:root:-:644 -$html_directory/LMDB_README.html:f:root:-:644 -$html_directory/LOCAL_RECIPIENT_README.html:f:root:-:644 -$html_directory/MAILDROP_README.html:f:root:-:644 -$html_directory/MILTER_README.html:f:root:-:644 -$html_directory/MULTI_INSTANCE_README.html:f:root:-:644 -$html_directory/MYSQL_README.html:f:root:-:644 -$html_directory/SQLITE_README.html:f:root:-:644 -$html_directory/NFS_README.html:f:root:-:644 -$html_directory/OVERVIEW.html:f:root:-:644 -$html_directory/PACKAGE_README.html:f:root:-:644 -$html_directory/PCRE_README.html:f:root:-:644 -$html_directory/PGSQL_README.html:f:root:-:644 -$html_directory/POSTSCREEN_README.html:f:root:-:644 -$html_directory/QMQP_README.html:f:root:-:644:o -$html_directory/QSHAPE_README.html:f:root:-:644 -$html_directory/RESTRICTION_CLASS_README.html:f:root:-:644 -$html_directory/SASL_README.html:f:root:-:644 -$html_directory/SCHEDULER_README.html:f:root:-:644 -$html_directory/SMTPD_ACCESS_README.html:f:root:-:644 -$html_directory/SMTPD_POLICY_README.html:f:root:-:644 -$html_directory/SMTPD_PROXY_README.html:f:root:-:644 -$html_directory/SOHO_README.html:f:root:-:644 -$html_directory/STANDARD_CONFIGURATION_README.html:f:root:-:644 -$html_directory/STRESS_README.html:f:root:-:644 -$html_directory/TLS_LEGACY_README.html:f:root:-:644 -$html_directory/TLS_README.html:f:root:-:644 -$html_directory/TUNING_README.html:f:root:-:644 -$html_directory/ULTRIX_README.html:f:root:-:644:o -$html_directory/UUCP_README.html:f:root:-:644 -$html_directory/VERP_README.html:f:root:-:644 -$html_directory/VIRTUAL_README.html:f:root:-:644 -$html_directory/XCLIENT_README.html:f:root:-:644 -$html_directory/XFORWARD_README.html:f:root:-:644 -$html_directory/access.5.html:f:root:-:644 -$html_directory/aliases.5.html:f:root:-:644 -$html_directory/anvil.8.html:f:root:-:644 -$html_directory/bounce.8.html:f:root:-:644 -$html_directory/canonical.5.html:f:root:-:644 -$html_directory/cidr_table.5.html:f:root:-:644 -$html_directory/cleanup.8.html:f:root:-:644 -$html_directory/defer.8.html:h:$html_directory/bounce.8.html:-:644 -$html_directory/discard.8.html:f:root:-:644 -$html_directory/dnsblog.8.html:f:root:-:644 -$html_directory/error.8.html:f:root:-:644 -$html_directory/flush.8.html:f:root:-:644 -$html_directory/generics.5.html:f:root:-:644:o -$html_directory/generic.5.html:f:root:-:644 -$html_directory/header_checks.5.html:f:root:-:644 -$html_directory/index.html:f:root:-:644 -$html_directory/ldap_table.5.html:f:root:-:644 -$html_directory/lmtp.8.html:f:root:-:644 -$html_directory/local.8.html:f:root:-:644 -$html_directory/mailq.1.html:f:root:-:644 -$html_directory/master.5.html:f:root:-:644 -$html_directory/master.8.html:f:root:-:644 -$html_directory/memcache_table.5.html:f:root:-:644 -$html_directory/mysql_table.5.html:f:root:-:644 -$html_directory/sqlite_table.5.html:f:root:-:644 -$html_directory/nisplus_table.5.html:f:root:-:644 -$html_directory/newaliases.1.html:h:$html_directory/mailq.1.html:-:644 -$html_directory/oqmgr.8.html:f:root:-:644 -$html_directory/pcre_table.5.html:f:root:-:644 -$html_directory/pgsql_table.5.html:f:root:-:644 -$html_directory/pickup.8.html:f:root:-:644 -$html_directory/pipe.8.html:f:root:-:644 -$html_directory/postalias.1.html:f:root:-:644 -$html_directory/postcat.1.html:f:root:-:644 -$html_directory/postconf.1.html:f:root:-:644 -$html_directory/postconf.5.html:f:root:-:644 -$html_directory/postdrop.1.html:f:root:-:644 -$html_directory/postfix-logo.jpg:f:root:-:644 -$html_directory/postfix-manuals.html:f:root:-:644 -$html_directory/postfix-wrapper.5.html:f:root:-:644 -$html_directory/postfix.1.html:f:root:-:644 -$html_directory/postkick.1.html:f:root:-:644 -$html_directory/postlock.1.html:f:root:-:644 -$html_directory/postlog.1.html:f:root:-:644 -$html_directory/postmap.1.html:f:root:-:644 -$html_directory/postmulti.1.html:f:root:-:644 -$html_directory/postlogd.8.html:f:root:-:644 -$html_directory/postqueue.1.html:f:root:-:644 -$html_directory/postscreen.8.html:f:root:-:644 -$html_directory/postsuper.1.html:f:root:-:644 -$html_directory/qshape.1.html:f:root:-:644 -$html_directory/proxymap.8.html:f:root:-:644 -$html_directory/qmgr.8.html:f:root:-:644 -$html_directory/qmqp-sink.1.html:f:root:-:644 -$html_directory/qmqp-source.1.html:f:root:-:644 -$html_directory/qmqpd.8.html:f:root:-:644 -$html_directory/regexp_table.5.html:f:root:-:644 -$html_directory/relocated.5.html:f:root:-:644 -$html_directory/sendmail.1.html:h:$html_directory/mailq.1.html:-:644 -$html_directory/showq.8.html:f:root:-:644 -$html_directory/smtp-sink.1.html:f:root:-:644 -$html_directory/smtp-source.1.html:f:root:-:644 -$html_directory/smtp.8.html:h:$html_directory/lmtp.8.html:-:644 -$html_directory/smtpd.8.html:f:root:-:644 -$html_directory/spawn.8.html:f:root:-:644 -$html_directory/tlsproxy.8.html:f:root:-:644 -$html_directory/tcp_table.5.html:f:root:-:644 -$html_directory/trace.8.html:h:$html_directory/bounce.8.html:-:644 -$html_directory/transport.5.html:f:root:-:644 -$html_directory/trivial-rewrite.8.html:f:root:-:644 -$html_directory/verify.8.html:f:root:-:644 -$html_directory/virtual.5.html:f:root:-:644 -$html_directory/virtual.8.html:f:root:-:644 diff --git a/templates/Fedora/35/etc/postfix/postfix-files.d/ldap b/templates/Fedora/35/etc/postfix/postfix-files.d/ldap deleted file mode 100644 index 684b05d..0000000 --- a/templates/Fedora/35/etc/postfix/postfix-files.d/ldap +++ /dev/null @@ -1,3 +0,0 @@ -$shlib_directory/postfix-ldap.so:f:root:-:755 -$manpage_directory/man5/ldap_table.5.gz:f:root:-:644 -$readme_directory/LDAP_README:f:root:-:644 diff --git a/templates/Fedora/35/etc/postfix/postfix-files.d/mysql b/templates/Fedora/35/etc/postfix/postfix-files.d/mysql deleted file mode 100644 index 8e41d61..0000000 --- a/templates/Fedora/35/etc/postfix/postfix-files.d/mysql +++ /dev/null @@ -1,3 +0,0 @@ -$shlib_directory/postfix-mysql.so:f:root:-:755 -$manpage_directory/man5/mysql_table.5.gz:f:root:-:644 -$readme_directory/MYSQL_README:f:root:-:644 diff --git a/templates/Fedora/35/etc/postfix/postfix-files.d/pcre b/templates/Fedora/35/etc/postfix/postfix-files.d/pcre deleted file mode 100644 index a34fd73..0000000 --- a/templates/Fedora/35/etc/postfix/postfix-files.d/pcre +++ /dev/null @@ -1,3 +0,0 @@ -$shlib_directory/postfix-pcre.so:f:root:-:755 -$manpage_directory/man5/pcre_table.5.gz:f:root:-:644 -$readme_directory/PCRE_README:f:root:-:644 diff --git a/templates/Fedora/35/etc/postfix/relocated b/templates/Fedora/35/etc/postfix/relocated deleted file mode 100644 index e50edfd..0000000 --- a/templates/Fedora/35/etc/postfix/relocated +++ /dev/null @@ -1,176 +0,0 @@ -# RELOCATED(5) RELOCATED(5) -# -# NAME -# relocated - Postfix relocated table format -# -# SYNOPSIS -# postmap /etc/postfix/relocated -# -# DESCRIPTION -# The optional relocated(5) table provides the information -# that is used in "user has moved to new_location" bounce -# messages. -# -# Normally, the relocated(5) table is specified as a text -# file that serves as input to the postmap(1) command. The -# result, an indexed file in dbm or db format, is used for -# fast searching by the mail system. Execute the command -# "postmap /etc/postfix/relocated" to rebuild an indexed -# file after changing the corresponding relocated table. -# -# When the table is provided via other means such as NIS, -# LDAP or SQL, the same lookups are done as for ordinary -# indexed files. -# -# Alternatively, the table can be provided as a regu- -# lar-expression map where patterns are given as regular -# expressions, or lookups can be directed to TCP-based -# server. In those case, the lookups are done in a slightly -# different way as described below under "REGULAR EXPRESSION -# TABLES" or "TCP-BASED TABLES". -# -# Table lookups are case insensitive. -# -# CASE FOLDING -# The search string is folded to lowercase before database -# lookup. As of Postfix 2.3, the search string is not case -# folded with database types such as regexp: or pcre: whose -# lookup fields can match both upper and lower case. -# -# TABLE FORMAT -# The input format for the postmap(1) command is as follows: -# -# o An entry has one of the following form: -# -# pattern new_location -# -# Where new_location specifies contact information -# such as an email address, or perhaps a street -# address or telephone number. -# -# o Empty lines and whitespace-only lines are ignored, -# as are lines whose first non-whitespace character -# is a `#'. -# -# o A logical line starts with non-whitespace text. A -# line that starts with whitespace continues a logi- -# cal line. -# -# TABLE SEARCH ORDER -# With lookups from indexed files such as DB or DBM, or from -# networked tables such as NIS, LDAP or SQL, patterns are -# tried in the order as listed below: -# -# user@domain -# Matches user@domain. This form has precedence over -# all other forms. -# -# user Matches user@site when site is $myorigin, when site -# is listed in $mydestination, or when site is listed -# in $inet_interfaces or $proxy_interfaces. -# -# @domain -# Matches other addresses in domain. This form has -# the lowest precedence. -# -# ADDRESS EXTENSION -# When a mail address localpart contains the optional recip- -# ient delimiter (e.g., user+foo@domain), the lookup order -# becomes: user+foo@domain, user@domain, user+foo, user, and -# @domain. -# -# REGULAR EXPRESSION TABLES -# This section describes how the table lookups change when -# the table is given in the form of regular expressions or -# when lookups are directed to a TCP-based server. For a -# description of regular expression lookup table syntax, see -# regexp_table(5) or pcre_table(5). For a description of the -# TCP client/server table lookup protocol, see tcp_table(5). -# This feature is not available up to and including Postfix -# version 2.4. -# -# Each pattern is a regular expression that is applied to -# the entire address being looked up. Thus, user@domain mail -# addresses are not broken up into their user and @domain -# constituent parts, nor is user+foo broken up into user and -# foo. -# -# Patterns are applied in the order as specified in the ta- -# ble, until a pattern is found that matches the search -# string. -# -# Results are the same as with indexed file lookups, with -# the additional feature that parenthesized substrings from -# the pattern can be interpolated as $1, $2 and so on. -# -# TCP-BASED TABLES -# This section describes how the table lookups change when -# lookups are directed to a TCP-based server. For a descrip- -# tion of the TCP client/server lookup protocol, see tcp_ta- -# ble(5). This feature is not available up to and including -# Postfix version 2.4. -# -# Each lookup operation uses the entire address once. Thus, -# user@domain mail addresses are not broken up into their -# user and @domain constituent parts, nor is user+foo broken -# up into user and foo. -# -# Results are the same as with indexed file lookups. -# -# BUGS -# The table format does not understand quoting conventions. -# -# CONFIGURATION PARAMETERS -# The following main.cf parameters are especially relevant. -# The text below provides only a parameter summary. See -# postconf(5) for more details including examples. -# -# relocated_maps -# List of lookup tables for relocated users or sites. -# -# Other parameters of interest: -# -# inet_interfaces -# The network interface addresses that this system -# receives mail on. You need to stop and start Post- -# fix when this parameter changes. -# -# mydestination -# List of domains that this mail system considers -# local. -# -# myorigin -# The domain that is appended to locally-posted mail. -# -# proxy_interfaces -# Other interfaces that this machine receives mail on -# by way of a proxy agent or network address transla- -# tor. -# -# SEE ALSO -# trivial-rewrite(8), address resolver -# postmap(1), Postfix lookup table manager -# postconf(5), configuration parameters -# -# README FILES -# Use "postconf readme_directory" or "postconf html_direc- -# tory" to locate this information. -# DATABASE_README, Postfix lookup table overview -# ADDRESS_REWRITING_README, address rewriting guide -# -# LICENSE -# The Secure Mailer license must be distributed with this -# software. -# -# AUTHOR(S) -# Wietse Venema -# IBM T.J. Watson Research -# P.O. Box 704 -# Yorktown Heights, NY 10598, USA -# -# Wietse Venema -# Google, Inc. -# 111 8th Avenue -# New York, NY 10011, USA -# -# RELOCATED(5) diff --git a/templates/Fedora/35/etc/postfix/transport b/templates/Fedora/35/etc/postfix/transport deleted file mode 100644 index 1dcd787..0000000 --- a/templates/Fedora/35/etc/postfix/transport +++ /dev/null @@ -1,317 +0,0 @@ -# TRANSPORT(5) TRANSPORT(5) -# -# NAME -# transport - Postfix transport table format -# -# SYNOPSIS -# postmap /etc/postfix/transport -# -# postmap -q "string" /etc/postfix/transport -# -# postmap -q - /etc/postfix/transport = 3.5): -# -# example.com smtp:bar.example, foo.example -# -# This tries to deliver to bar.example before trying to -# deliver to foo.example. -# -# The error mailer can be used to bounce mail: -# -# .example.com error:mail for *.example.com is not deliverable -# -# This causes all mail for user@anything.example.com to be -# bounced. -# -# REGULAR EXPRESSION TABLES -# This section describes how the table lookups change when -# the table is given in the form of regular expressions. For -# a description of regular expression lookup table syntax, -# see regexp_table(5) or pcre_table(5). -# -# Each pattern is a regular expression that is applied to -# the entire address being looked up. Thus, -# some.domain.hierarchy is not looked up via its parent -# domains, nor is user+foo@domain looked up as user@domain. -# -# Patterns are applied in the order as specified in the ta- -# ble, until a pattern is found that matches the search -# string. -# -# The trivial-rewrite(8) server disallows regular expression -# substitution of $1 etc. in regular expression lookup -# tables, because that could open a security hole (Postfix -# version 2.3 and later). -# -# TCP-BASED TABLES -# This section describes how the table lookups change when -# lookups are directed to a TCP-based server. For a descrip- -# tion of the TCP client/server lookup protocol, see tcp_ta- -# ble(5). This feature is not available up to and including -# Postfix version 2.4. -# -# Each lookup operation uses the entire recipient address -# once. Thus, some.domain.hierarchy is not looked up via -# its parent domains, nor is user+foo@domain looked up as -# user@domain. -# -# Results are the same as with indexed file lookups. -# -# CONFIGURATION PARAMETERS -# The following main.cf parameters are especially relevant. -# The text below provides only a parameter summary. See -# postconf(5) for more details including examples. -# -# empty_address_recipient (MAILER-DAEMON) -# The recipient of mail addressed to the null -# address. -# -# parent_domain_matches_subdomains (see 'postconf -d' out- -# put) -# A list of Postfix features where the pattern "exam- -# ple.com" also matches subdomains of example.com, -# instead of requiring an explicit ".example.com" -# pattern. -# -# transport_maps (empty) -# Optional lookup tables with mappings from recipient -# address to (message delivery transport, next-hop -# destination). -# -# SEE ALSO -# trivial-rewrite(8), rewrite and resolve addresses -# master(5), master.cf file format -# postconf(5), configuration parameters -# postmap(1), Postfix lookup table manager -# -# README FILES -# Use "postconf readme_directory" or "postconf html_direc- -# tory" to locate this information. -# ADDRESS_REWRITING_README, address rewriting guide -# DATABASE_README, Postfix lookup table overview -# FILTER_README, external content filter -# -# LICENSE -# The Secure Mailer license must be distributed with this -# software. -# -# AUTHOR(S) -# Wietse Venema -# IBM T.J. Watson Research -# P.O. Box 704 -# Yorktown Heights, NY 10598, USA -# -# Wietse Venema -# Google, Inc. -# 111 8th Avenue -# New York, NY 10011, USA -# -# TRANSPORT(5) diff --git a/templates/Fedora/35/etc/postfix/virtual b/templates/Fedora/35/etc/postfix/virtual deleted file mode 100644 index da9cd65..0000000 --- a/templates/Fedora/35/etc/postfix/virtual +++ /dev/null @@ -1,324 +0,0 @@ -# VIRTUAL(5) VIRTUAL(5) -# -# NAME -# virtual - Postfix virtual alias table format -# -# SYNOPSIS -# postmap /etc/postfix/virtual -# -# postmap -q "string" /etc/postfix/virtual -# -# postmap -q - /etc/postfix/virtual -ReportAddress "Postmaster" <{{ postmaster_email }}> - -## Add a DKIM-Filter header field to messages passing through this filter -## to identify messages it has processed. -SoftwareHeader yes - -## SIGNING OPTIONS - -## Selects the canonicalization method(s) to be used when signing messages. -Canonicalization relaxed/relaxed - -## Domain(s) whose mail should be signed by this filter. Mail from other domains will -## be verified rather than being signed. Uncomment and use your domain name. -## This parameter is not required if a SigningTable is in use. -# Domain example.com - -## Defines the name of the selector to be used when signing messages. -Selector default - -## Specifies the minimum number of key bits for acceptable keys and signatures. -MinimumKeyBits 1024 - -## Gives the location of a private key to be used for signing ALL messages. This -## directive is ignored if KeyTable is enabled. -# KeyFile /etc/opendkim/keys/default.private - -## Gives the location of a file mapping key names to signing keys. In simple terms, -## this tells OpenDKIM where to find your keys. If present, overrides any KeyFile -## directive in the configuration file. Requires SigningTable be enabled. -# KeyTable /etc/opendkim/KeyTable - -## Defines a table used to select one or more signatures to apply to a message based -## on the address found in the From: header field. In simple terms, this tells -## OpenDKIM how to use your keys. Requires KeyTable be enabled. -# SigningTable refile:/etc/opendkim/SigningTable - -## Identifies a set of "external" hosts that may send mail through the server as one -## of the signing domains without credentials as such. -# ExternalIgnoreList refile:/etc/opendkim/TrustedHosts - -## Identifies a set "internal" hosts whose mail should be signed rather than verified. -# InternalHosts refile:/etc/opendkim/TrustedHosts - -## Contains a list of IP addresses, CIDR blocks, hostnames or domain names -## whose mail should be neither signed nor verified by this filter. See man -## page for file format. -# PeerList X.X.X.X - -## Always oversign From (sign using actual From and a null From to prevent -## malicious signatures header fields (From and/or others) between the signer -## and the verifier. From is oversigned by default in the Fedora package -## because it is often the identity key used by reputation systems and thus -## somewhat security sensitive. -OversignHeaders From - -## Instructs the DKIM library to maintain its own local cache of keys and -## policies retrieved from DNS, rather than relying on the nameserver for -## caching service. Useful if the nameserver being used by the filter is -## not local. -QueryCache yes diff --git a/templates/Fedora/36/etc/opendkim/KeyTable b/templates/Fedora/36/etc/opendkim/KeyTable deleted file mode 100644 index e804d68..0000000 --- a/templates/Fedora/36/etc/opendkim/KeyTable +++ /dev/null @@ -1,6 +0,0 @@ -# OPENDKIM KEY TABLE -# To use this file, uncomment the #KeyTable option in /etc/opendkim.conf, -# then uncomment the following line and replace example.com with your domain -# name, then restart OpenDKIM. Additional keys may be added on separate lines. - -#default._domainkey.example.com example.com:default:/etc/opendkim/keys/default.private diff --git a/templates/Fedora/36/etc/opendkim/SigningTable b/templates/Fedora/36/etc/opendkim/SigningTable deleted file mode 100644 index e8161a1..0000000 --- a/templates/Fedora/36/etc/opendkim/SigningTable +++ /dev/null @@ -1,25 +0,0 @@ -# OPENDKIM SIGNING TABLE -# This table controls how to apply one or more signatures to outgoing messages based -# on the address found in the From: header field. In simple terms, this tells -# OpenDKIM "how" to apply your keys. - -# To use this file, uncomment the SigningTable option in /etc/opendkim.conf, -# then uncomment one of the usage examples below and replace example.com with your -# domain name, then restart OpenDKIM. - -# WILDCARD EXAMPLE -# Enables signing for any address on the listed domain(s), but will work only if -# "refile:/etc/opendkim/SigningTable" is included in /etc/opendkim.conf. -# Create additional lines for additional domains. - -#*@example.com default._domainkey.example.com - -# NON-WILDCARD EXAMPLE -# If "file:" (instead of "refile:") is specified in /etc/opendkim.conf, then -# wildcards will not work. Instead, full user@host is checked first, then simply host, -# then user@.domain (with all superdomains checked in sequence, so "foo.example.com" -# would first check "user@foo.example.com", then "user@.example.com", then "user@.com"), -# then .domain, then user@*, and finally *. See the opendkim.conf(5) man page under -# "SigningTable" for more details. - -#example.com default._domainkey.example.com diff --git a/templates/Fedora/36/etc/opendkim/TrustedHosts b/templates/Fedora/36/etc/opendkim/TrustedHosts deleted file mode 100644 index 7a086d4..0000000 --- a/templates/Fedora/36/etc/opendkim/TrustedHosts +++ /dev/null @@ -1,9 +0,0 @@ -# OPENDKIM TRUSTED HOSTS -# To use this file, uncomment the #ExternalIgnoreList and/or the #InternalHosts -# option in /etc/opendkim.conf then restart OpenDKIM. Additional hosts -# may be added on separate lines (IP addresses, hostnames, or CIDR ranges). -# The localhost IP (127.0.0.1) should always be the first entry in this file. -127.0.0.1 -::1 -#host.example.com -#192.168.1.0/24 diff --git a/templates/Fedora/36/etc/opendmarc.conf b/templates/Fedora/36/etc/opendmarc.conf deleted file mode 100644 index cc1018d..0000000 --- a/templates/Fedora/36/etc/opendmarc.conf +++ /dev/null @@ -1,442 +0,0 @@ -## opendmarc.conf -- configuration file for OpenDMARC filter -## -## Copyright (c) 2012-2015, 2018, 2021, The Trusted Domain Project. -## All rights reserved. - -## DEPRECATED CONFIGURATION OPTIONS -## -## The following configuration options are no longer valid. They should be -## removed from your existing configuration file to prevent potential issues. -## Failure to do so may result in opendmarc being unable to start. -## -## Renamed in 1.3.0: -## ForensicReports became FailureReports -## ForensicReportsBcc became FailureReportsBcc -## ForensicReportsOnNone became FailureReportsOnNone -## ForensicReportsSentBy became FailureReportsSentBy - -## CONFIGURATION OPTIONS - -## AuthservID (string) -## defaults to MTA name -## -## Sets the "authserv-id" to use when generating the Authentication-Results: -## header field after verifying a message. If the string "HOSTNAME" is -## provided, the name of the host running the filter (as returned by the -## gethostname(3) function) will be used. -# -# AuthservID name - -## AuthservIDWithJobID { true | false } -## default "false" -## -## If "true", requests that the authserv-id portion of the added -## Authentication-Results header fields contain the job ID of the message -## being evaluated. -# -# AuthservIDWithJobID false - -## AutoRestart { true | false } -## default "false" -## -## Automatically re-start on failures. Use with caution; if the filter fails -## instantly after it starts, this can cause a tight fork(2) loop. -# -# AutoRestart false - -## AutoRestartCount n -## default 0 -## -## Sets the maximum automatic restart count. After this number of automatic -## restarts, the filter will give up and terminate. A value of 0 implies no -## limit. -# -# AutoRestartCount 0 - -## AutoRestartRate n/t[u] -## default (no limit) -## -## Sets the maximum automatic restart rate. If the filter begins restarting -## faster than the rate defined here, it will give up and terminate. This -## is a string of the form n/t[u] where n is an integer limiting the count -## of restarts in the given interval and t[u] defines the time interval -## through which the rate is calculated; t is an integer and u defines the -## units thus represented ("s" or "S" for seconds, the default; "m" or "M" -## for minutes; "h" or "H" for hours; "d" or "D" for days). For example, a -## value of "10/1h" limits the restarts to 10 in one hour. There is no -## default, meaning restart rate is not limited. -# -# AutoRestartRate n/t[u] - -## Background { true | false } -## default "true" -## -## Causes opendmarc to fork and exits immediately, leaving the service -## running in the background. -# -# Background true - -## BaseDirectory (string) -## default (none) -## -## If set, instructs the filter to change to the specified directory using -## chdir(2) before doing anything else. This means any files referenced -## elsewhere in the configuration file can be specified relative to this -## directory. It's also useful for arranging that any crash dumps will be -## saved to a specific location. -# -# BaseDirectory /var/run/opendmarc - -## ChangeRootDirectory (string) -## default (none) -## -## Requests that the operating system change the effective root directory of -## the process to the one specified here prior to beginning execution. -## chroot(2) requires superuser access. A warning will be generated if -## UserID is not also set. -# -# ChangeRootDirectory /var/chroot/opendmarc - -## CopyFailuresTo (string) -## default (none) -## -## Requests addition of the specified email address to the envelope of -## any message that fails the DMARC evaluation. -# -# CopyFailuresTo postmaster@localhost - -## DomainWhitelist (string) -## default (none) -## -## A brief list of whitelisted domains for which ARC signature headers are -## trusted as determined by evaluating entries in the "arc.chain" field found -## in a locally generated Authentication-Results header. -## -## This list will be concatenated with DomainWhitelistFile (if provided). -## -# -# DomainWhitelist example.com - -## DomainWhitelistFile path -## default (none) -## -## A comprehensive list of whitelisted domains for which ARC signature headers -## are trusted as determined by evaluating entries in the "arc.chain" field -## found in a locally generated Authentication-Results header. -## -## This list will be concatenated with DomainWhitelist (if provided). -## -# -# DomainWhitelistFile /etc/opendmarc/whitelist.domains - -## DomainWhitelistSize -## default 3000 -## -## The maximum number of entries in the DomainWhitelist including both entries -## in the DomainWhitelist configuration parameter (above) and entries in the -## DomainWhitelistFile. This number will be increased by approximately 20% to -## increase the efficiency of the hashing algorithm. -## -# -# DomainWhitelistSize 3000 - -## DNSTimeout (integer) -## default 5 -## -## Sets the DNS timeout in seconds. A value of 0 causes an infinite wait. -## (NOT YET IMPLEMENTED) -# -# DNSTimeout 5 - -## EnableCoredumps { true | false } -## default "false" -## -## On systems that have such support, make an explicit request to the kernel -## to dump cores when the filter crashes for some reason. Some modern UNIX -## systems suppress core dumps during crashes for security reasons if the -## user ID has changed during the lifetime of the process. Currently only -## supported on Linux. -# -# EnableCoreDumps false - -## FailureReports { true | false } -## default "false" -## -## Enables generation of failure reports when the DMARC test fails and the -## purported sender of the message has requested such reports. Reports are -## formatted per RFC6591. -# -# FailureReports false - -## FailureReportsBcc (string) -## default (none) -## -## When failure reports are enabled and one is to be generated, always -## send one to the address(es) specified here. If a failure report is -## requested by the domain owner, the address(es) are added in a Bcc: field. -## If no request is made, they address(es) are used in a To: field. There -## is no default. -# -# FailureReportsBcc postmaster@example.coom -FailureReportsBcc {{ postmaster_email }} - -## FailureReportsOnNone { true | false } -## default "false" -## -## Supplements the "FailureReports" setting by generating reports for -## domains that advertise "none" policies. By default, reports are only -## generated (when enabled) for sending domains advertising a "quarantine" -## or "reject" policy. -# -# FailureReportsOnNone false - -## FailureReportsSentBy string -## default "USER@HOSTNAME" -## -## Specifies the email address to use in the From: field of failure -## reports generated by the filter. The default is to use the userid of -## the user running the filter and the local hostname to construct an -## email address. "postmaster" is used in place of the userid if a name -## could not be determined. -# -# FailureReportsSentBy USER@HOSTNAME -FailureReportsSentBy {{ postmaster_email }} - -## HistoryFile path -## default (none) -## -## If set, specifies the location of a text file to which records are written -## that can be used to generate DMARC aggregate reports. Records are groups -## of rows containing information about a single received message, and -## include all relevant information needed to generate a DMARC aggregate -## report. It is expected that this will not be used in its raw form, but -## rather periodically imported into a relational database from which the -## aggregate reports can be extracted by a tool such as opendmarc-import(8). -# -# HistoryFile /var/spool/opendmarc/opendmarc.dat - -## HoldQuarantinedMessages { true | false } -## default "false" -## -## If set, the milter will signal to the mta that messages with -## p=quarantine, which fail dmarc authentication, should be held in -## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. -## If false, messsages will be accepted and passed along with the -## regular mail flow, and the quarantine will be left up to downstream -## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, -## including the Authentication-Results header added by OpenDMARC -# -# HoldQuarantinedMessages false - -## IgnoreAuthenticatedClients { true | false } -## default "false" -## -## If set, causes mail from authenticated clients (i.e., those that used -## SMTP AUTH) to be ignored by the filter. -# -# IgnoreAuthenticatedClients false - -## HoldQuarantinedMessages { true | false } -## default "false" -## -## If set, the milter will signal to the mta that messages with -## p=quarantine, which fail dmarc authentication, should be held in -## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. -## If false, messsages will be accepted and passed along with the -## regular mail flow, and the quarantine will be left up to downstream -## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, -## including the Authentication-Results header added by OpenDMARC -# -# HoldQuarantinedMessages false - - -## IgnoreHosts path -## default (internal) -## -## Specifies the path to a file that contains a list of hostnames, IP -## addresses, and/or CIDR expressions identifying hosts whose SMTP -## connections are to be ignored by the filter. If not specified, defaults -## to "127.0.0.1" only. -# -# IgnoreHosts /etc/opendmarc/ignore.hosts - -## IgnoreMailFrom domain[,...] -## default (none) -## -## Gives a list of domain names whose mail (based on the From: domain) is to -## be ignored by the filter. The list should be comma-separated. Matching -## against this list is case-insensitive. The default is an empty list, -## meaning no mail is ignored. -# -# IgnoreMailFrom example.com - -## MilterDebug (integer) -## default 0 -## -## Sets the debug level to be requested from the milter library. -# -# MilterDebug 0 - -## PidFile path -## default (none) -## -## Specifies the path to a file that should be created at process start -## containing the process ID. -# -# PidFile /var/run/opendmarc.pid - -## PublicSuffixList path -## default (none) -## -## Specifies the path to a file that contains top-level domains (TLDs) that -## will be used to compute the Organizational Domain for a given domain name, -## as described in the DMARC specification. If not provided, the filter will -## not be able to determine the Organizational Domain and only the presented -## domain will be evaluated. This file should be periodically updated. -## One location to retrieve the file from is https://publicsuffix.org/list/ -# -# PublicSuffixList path - -## RecordAllMessages { true | false } -## default "false" -## -## If set and "HistoryFile" is in use, all received messages are recorded -## to the history file. If not set (the default), only messages for which -## the From: domain published a DMARC record will be recorded in the -## history file. -# -# RecordAllMessages false - -## RejectFailures { true | false } -## default "false" -## -## If set, messages will be rejected if they fail the DMARC evaluation, or -## temp-failed if evaluation could not be completed. By default, no message -## will be rejected or temp-failed regardless of the outcome of the DMARC -## evaluation of the message. Instead, an Authentication-Results header -## field will be added. -# -# RejectFailures false -RejectFailures true - -## RejectMultiValueFrom { true | false } -## default "false" -## -## If set, messages with multiple addresses in the From: field of the message -## will be rejected unless all domains in the field are the same. They will -## otherwise be ignored by the filter (the default). -# -# RejectMultiValueFrom false - -## ReportCommand string -## default "/usr/sbin/sendmail -t" -## -## Indicates the shell command to which failure reports should be passed for -## delivery when "FailureReports" is enabled. -# -# ReportCommand /usr/sbin/sendmail -t - -## RequiredHeaders { true | false } -## default "false" -## -## If set, the filter will ensure the header of the message conforms to the -## basic header field count restrictions laid out in RFC5322, Section 3.6. -## Messages failing this test are rejected without further processing. A -## From: field from which no domain name could be extracted will also be -## rejected. -# -# RequiredHeaders false - -## Socket socketspec -## default (none) -## -## Specifies the socket that should be established by the filter to receive -## connections from sendmail(8) in order to provide service. socketspec is -## in one of two forms: local:path, which creates a UNIX domain socket at -## the specified path, or inet:port[@host] or inet6:port[@host] which creates -## a TCP socket on the specified port for the appropriate protocol family. -## If the host is not given as either a hostname or an IP address, the -## socket will be listening on all interfaces. This option is mandatory -## either in the configuration file or on the command line. If an IP -## address is used, it must be enclosed in square brackets. -# -Socket inet:8893@localhost - -## SoftwareHeader { true | false } -## default "false" -## -## Causes the filter to add a "DMARC-Filter" header field indicating the -## presence of this filter in the path of the message from injection to -## delivery. The product's name, version, and the job ID are included in -## the header field's contents. -# -SoftwareHeader true - -## SPFIgnoreResults { true | false } -## default "false" -## -## Causes the filter to ignore any SPF results in the header of the -## message. This is useful if you want the filter to perform SPF checks -## itself, or because you don't trust the arriving header. -# -SPFIgnoreResults true - -## SPFSelfValidate { true | false } -## default false -## -## Enable internal spf checking with --with-spf -## To use libspf2 instead: --with-spf --with-spf2-include=path --with-spf2-lib=path -## -## Causes the filter to perform a fallback SPF check itself when -## it can find no SPF results in the message header. If SPFIgnoreResults -## is also set, it never looks for SPF results in headers and -## always performs the SPF check itself when this is set. -# -SPFSelfValidate true - -## Syslog { true | false } -## default "false" -## -## Log via calls to syslog(3) any interesting activity. -# -Syslog true - -## SyslogFacility facility-name -## default "mail" -## -## Log via calls to syslog(3) using the named facility. The facility names -## are the same as the ones allowed in syslog.conf(5). -# -# SyslogFacility mail - -## TrustedAuthservIDs string -## default HOSTNAME -## -## Specifies one or more "authserv-id" values to trust as relaying true -## upstream DKIM and SPF results. The default is to use the name of -## the MTA processing the message. To specify a list, separate each entry -## with a comma. The key word "HOSTNAME" will be replaced by the name of -## the host running the filter as reported by the gethostname(3) function. -# -# TrustedAuthservIDs HOSTNAME - -## UMask mask -## default (none) -## -## Requests a specific permissions mask to be used for file creation. This -## only really applies to creation of the socket when Socket specifies a -## UNIX domain socket, and to the HistoryFile and PidFile (if any); temporary -## files are normally created by the mkstemp(3) function that enforces a -## specific file mode on creation regardless of the process umask. See -## umask(2) for more information. -# -UMask 007 - -## UserID user[:group] -## default (none) -## -## Attempts to become the specified userid before starting operations. -## The process will be assigned all of the groups and primary group ID of -## the named userid unless an alternate group is specified. -# -UserID opendmarc:mail diff --git a/templates/Fedora/36/etc/postfix/access b/templates/Fedora/36/etc/postfix/access deleted file mode 100644 index 257339b..0000000 --- a/templates/Fedora/36/etc/postfix/access +++ /dev/null @@ -1,484 +0,0 @@ -# ACCESS(5) ACCESS(5) -# -# NAME -# access - Postfix SMTP server access table -# -# SYNOPSIS -# postmap /etc/postfix/access -# -# postmap -q "string" /etc/postfix/access -# -# postmap -q - /etc/postfix/access as the lookup key for such addresses. The value is -# specified with the smtpd_null_access_lookup_key parameter -# in the Postfix main.cf file. -# -# EMAIL ADDRESS EXTENSION -# When a mail address localpart contains the optional recip- -# ient delimiter (e.g., user+foo@domain), the lookup order -# becomes: user+foo@domain, user@domain, domain, user+foo@, -# and user@. -# -# HOST NAME/ADDRESS PATTERNS -# With lookups from indexed files such as DB or DBM, or from -# networked tables such as NIS, LDAP or SQL, the following -# lookup patterns are examined in the order as listed: -# -# domain.tld -# Matches domain.tld. -# -# The pattern domain.tld also matches subdomains, but -# only when the string smtpd_access_maps is listed in -# the Postfix parent_domain_matches_subdomains con- -# figuration setting. -# -# .domain.tld -# Matches subdomains of domain.tld, but only when the -# string smtpd_access_maps is not listed in the Post- -# fix parent_domain_matches_subdomains configuration -# setting. -# -# net.work.addr.ess -# -# net.work.addr -# -# net.work -# -# net Matches a remote IPv4 host address or network -# address range. Specify one to four decimal octets -# separated by ".". Do not specify "[]" , "/", lead- -# ing zeros, or hexadecimal forms. -# -# Network ranges are matched by repeatedly truncating -# the last ".octet" from a remote IPv4 host address -# string, until a match is found in the access table, -# or until further truncation is not possible. -# -# NOTE: use the cidr lookup table type to specify -# network/netmask patterns. See cidr_table(5) for -# details. -# -# net:work:addr:ess -# -# net:work:addr -# -# net:work -# -# net Matches a remote IPv6 host address or network -# address range. Specify three to eight hexadecimal -# octet pairs separated by ":", using the compressed -# form "::" for a sequence of zero-valued octet -# pairs. Do not specify "[]", "/", leading zeros, or -# non-compressed forms. -# -# A network range is matched by repeatedly truncating -# the last ":octetpair" from the compressed-form -# remote IPv6 host address string, until a match is -# found in the access table, or until further trunca- -# tion is not possible. -# -# NOTE: use the cidr lookup table type to specify -# network/netmask patterns. See cidr_table(5) for -# details. -# -# IPv6 support is available in Postfix 2.2 and later. -# -# ACCEPT ACTIONS -# OK Accept the address etc. that matches the pattern. -# -# all-numerical -# An all-numerical result is treated as OK. This for- -# mat is generated by address-based relay authoriza- -# tion schemes such as pop-before-smtp. -# -# For other accept actions, see "OTHER ACTIONS" below. -# -# REJECT ACTIONS -# Postfix version 2.3 and later support enhanced status -# codes as defined in RFC 3463. When no code is specified -# at the beginning of the text below, Postfix inserts a -# default enhanced status code of "5.7.1" in the case of -# reject actions, and "4.7.1" in the case of defer actions. -# See "ENHANCED STATUS CODES" below. -# -# 4NN text -# -# 5NN text -# Reject the address etc. that matches the pattern, -# and respond with the numerical three-digit code and -# text. 4NN means "try again later", while 5NN means -# "do not try again". -# -# The following responses have special meaning for -# the Postfix SMTP server: -# -# 421 text (Postfix 2.3 and later) -# -# 521 text (Postfix 2.6 and later) -# After responding with the numerical -# three-digit code and text, disconnect imme- -# diately from the SMTP client. This frees up -# SMTP server resources so that they can be -# made available to another SMTP client. -# -# Note: The "521" response should be used only -# with botnets and other malware where inter- -# operability is of no concern. The "send 521 -# and disconnect" behavior is NOT defined in -# the SMTP standard. -# -# REJECT optional text... -# Reject the address etc. that matches the pattern. -# Reply with "$access_map_reject_code optional -# text..." when the optional text is specified, oth- -# erwise reply with a generic error response message. -# -# DEFER optional text... -# Reject the address etc. that matches the pattern. -# Reply with "$access_map_defer_code optional -# text..." when the optional text is specified, oth- -# erwise reply with a generic error response message. -# -# This feature is available in Postfix 2.6 and later. -# -# DEFER_IF_REJECT optional text... -# Defer the request if some later restriction would -# result in a REJECT action. Reply with -# "$access_map_defer_code 4.7.1 optional text..." -# when the optional text is specified, otherwise -# reply with a generic error response message. -# -# Prior to Postfix 2.6, the SMTP reply code is 450. -# -# This feature is available in Postfix 2.1 and later. -# -# DEFER_IF_PERMIT optional text... -# Defer the request if some later restriction would -# result in a an explicit or implicit PERMIT action. -# Reply with "$access_map_defer_code 4.7.1 optional -# text..." when the optional text is specified, oth- -# erwise reply with a generic error response message. -# -# Prior to Postfix 2.6, the SMTP reply code is 450. -# -# This feature is available in Postfix 2.1 and later. -# -# For other reject actions, see "OTHER ACTIONS" below. -# -# OTHER ACTIONS -# restriction... -# Apply the named UCE restriction(s) (permit, reject, -# reject_unauth_destination, and so on). -# -# BCC user@domain -# Send one copy of the message to the specified -# recipient. -# -# If multiple BCC actions are specified within the -# same SMTP MAIL transaction, with Postfix 3.0 only -# the last action will be used. -# -# This feature is available in Postfix 3.0 and later. -# -# DISCARD optional text... -# Claim successful delivery and silently discard the -# message. Log the optional text if specified, oth- -# erwise log a generic message. -# -# Note: this action currently affects all recipients -# of the message. To discard only one recipient -# without discarding the entire message, use the -# transport(5) table to direct mail to the discard(8) -# service. -# -# This feature is available in Postfix 2.0 and later. -# -# DUNNO Pretend that the lookup key was not found. This -# prevents Postfix from trying substrings of the -# lookup key (such as a subdomain name, or a network -# address subnetwork). -# -# This feature is available in Postfix 2.0 and later. -# -# FILTER transport:destination -# After the message is queued, send the entire mes- -# sage through the specified external content filter. -# The transport name specifies the first field of a -# mail delivery agent definition in master.cf; the -# syntax of the next-hop destination is described in -# the manual page of the corresponding delivery -# agent. More information about external content -# filters is in the Postfix FILTER_README file. -# -# Note 1: do not use $number regular expression sub- -# stitutions for transport or destination unless you -# know that the information has a trusted origin. -# -# Note 2: this action overrides the main.cf con- -# tent_filter setting, and affects all recipients of -# the message. In the case that multiple FILTER -# actions fire, only the last one is executed. -# -# Note 3: the purpose of the FILTER command is to -# override message routing. To override the recipi- -# ent's transport but not the next-hop destination, -# specify an empty filter destination (Postfix 2.7 -# and later), or specify a transport:destination that -# delivers through a different Postfix instance -# (Postfix 2.6 and earlier). Other options are using -# the recipient-dependent transport_maps or the sen- -# der-dependent sender_dependent_default_transport- -# _maps features. -# -# This feature is available in Postfix 2.0 and later. -# -# HOLD optional text... -# Place the message on the hold queue, where it will -# sit until someone either deletes it or releases it -# for delivery. Log the optional text if specified, -# otherwise log a generic message. -# -# Mail that is placed on hold can be examined with -# the postcat(1) command, and can be destroyed or -# released with the postsuper(1) command. -# -# Note: use "postsuper -r" to release mail that was -# kept on hold for a significant fraction of $maxi- -# mal_queue_lifetime or $bounce_queue_lifetime, or -# longer. Use "postsuper -H" only for mail that will -# not expire within a few delivery attempts. -# -# Note: this action currently affects all recipients -# of the message. -# -# This feature is available in Postfix 2.0 and later. -# -# PREPEND headername: headervalue -# Prepend the specified message header to the mes- -# sage. When more than one PREPEND action executes, -# the first prepended header appears before the sec- -# ond etc. prepended header. -# -# Note: this action must execute before the message -# content is received; it cannot execute in the con- -# text of smtpd_end_of_data_restrictions. -# -# This feature is available in Postfix 2.1 and later. -# -# REDIRECT user@domain -# After the message is queued, send the message to -# the specified address instead of the intended -# recipient(s). When multiple REDIRECT actions fire, -# only the last one takes effect. -# -# Note: this action overrides the FILTER action, and -# currently overrides all recipients of the message. -# -# This feature is available in Postfix 2.1 and later. -# -# INFO optional text... -# Log an informational record with the optional text, -# together with client information and if available, -# with helo, sender, recipient and protocol informa- -# tion. -# -# This feature is available in Postfix 3.0 and later. -# -# WARN optional text... -# Log a warning with the optional text, together with -# client information and if available, with helo, -# sender, recipient and protocol information. -# -# This feature is available in Postfix 2.1 and later. -# -# ENHANCED STATUS CODES -# Postfix version 2.3 and later support enhanced status -# codes as defined in RFC 3463. When an enhanced status -# code is specified in an access table, it is subject to -# modification. The following transformations are needed -# when the same access table is used for client, helo, -# sender, or recipient access restrictions; they happen -# regardless of whether Postfix replies to a MAIL FROM, RCPT -# TO or other SMTP command. -# -# o When a sender address matches a REJECT action, the -# Postfix SMTP server will transform a recipient DSN -# status (e.g., 4.1.1-4.1.6) into the corresponding -# sender DSN status, and vice versa. -# -# o When non-address information matches a REJECT -# action (such as the HELO command argument or the -# client hostname/address), the Postfix SMTP server -# will transform a sender or recipient DSN status -# into a generic non-address DSN status (e.g., -# 4.0.0). -# -# REGULAR EXPRESSION TABLES -# This section describes how the table lookups change when -# the table is given in the form of regular expressions. For -# a description of regular expression lookup table syntax, -# see regexp_table(5) or pcre_table(5). -# -# Each pattern is a regular expression that is applied to -# the entire string being looked up. Depending on the appli- -# cation, that string is an entire client hostname, an -# entire client IP address, or an entire mail address. Thus, -# no parent domain or parent network search is done, -# user@domain mail addresses are not broken up into their -# user@ and domain constituent parts, nor is user+foo broken -# up into user and foo. -# -# Patterns are applied in the order as specified in the ta- -# ble, until a pattern is found that matches the search -# string. -# -# Actions are the same as with indexed file lookups, with -# the additional feature that parenthesized substrings from -# the pattern can be interpolated as $1, $2 and so on. -# -# TCP-BASED TABLES -# This section describes how the table lookups change when -# lookups are directed to a TCP-based server. For a descrip- -# tion of the TCP client/server lookup protocol, see tcp_ta- -# ble(5). This feature is not available up to and including -# Postfix version 2.4. -# -# Each lookup operation uses the entire query string once. -# Depending on the application, that string is an entire -# client hostname, an entire client IP address, or an entire -# mail address. Thus, no parent domain or parent network -# search is done, user@domain mail addresses are not broken -# up into their user@ and domain constituent parts, nor is -# user+foo broken up into user and foo. -# -# Actions are the same as with indexed file lookups. -# -# EXAMPLE -# The following example uses an indexed file, so that the -# order of table entries does not matter. The example per- -# mits access by the client at address 1.2.3.4 but rejects -# all other clients in 1.2.3.0/24. Instead of hash lookup -# tables, some systems use dbm. Use the command "postconf -# -m" to find out what lookup tables Postfix supports on -# your system. -# -# /etc/postfix/main.cf: -# smtpd_client_restrictions = -# check_client_access hash:/etc/postfix/access -# -# /etc/postfix/access: -# 1.2.3 REJECT -# 1.2.3.4 OK -# -# Execute the command "postmap /etc/postfix/access" after -# editing the file. -# -# BUGS -# The table format does not understand quoting conventions. -# -# SEE ALSO -# postmap(1), Postfix lookup table manager -# smtpd(8), SMTP server -# postconf(5), configuration parameters -# transport(5), transport:nexthop syntax -# -# README FILES -# Use "postconf readme_directory" or "postconf html_direc- -# tory" to locate this information. -# SMTPD_ACCESS_README, built-in SMTP server access control -# DATABASE_README, Postfix lookup table overview -# -# LICENSE -# The Secure Mailer license must be distributed with this -# software. -# -# AUTHOR(S) -# Wietse Venema -# IBM T.J. Watson Research -# P.O. Box 704 -# Yorktown Heights, NY 10598, USA -# -# Wietse Venema -# Google, Inc. -# 111 8th Avenue -# New York, NY 10011, USA -# -# ACCESS(5) diff --git a/templates/Fedora/36/etc/postfix/canonical b/templates/Fedora/36/etc/postfix/canonical deleted file mode 100644 index 9881f4e..0000000 --- a/templates/Fedora/36/etc/postfix/canonical +++ /dev/null @@ -1,307 +0,0 @@ -# CANONICAL(5) CANONICAL(5) -# -# NAME -# canonical - Postfix canonical table format -# -# SYNOPSIS -# postmap /etc/postfix/canonical -# -# postmap -q "string" /etc/postfix/canonical -# -# postmap -q - /etc/postfix/canonical $/ -# REJECT IFRAME vulnerability exploit -# -# SEE ALSO -# cleanup(8), canonicalize and enqueue Postfix message -# pcre_table(5), format of PCRE lookup tables -# regexp_table(5), format of POSIX regular expression tables -# postconf(1), Postfix configuration utility -# postmap(1), Postfix lookup table management -# postsuper(1), Postfix janitor -# postcat(1), show Postfix queue file contents -# RFC 2045, base64 and quoted-printable encoding rules -# RFC 2047, message header encoding for non-ASCII text -# -# README FILES -# Use "postconf readme_directory" or "postconf html_direc- -# tory" to locate this information. -# DATABASE_README, Postfix lookup table overview -# CONTENT_INSPECTION_README, Postfix content inspection overview -# BUILTIN_FILTER_README, Postfix built-in content inspection -# BACKSCATTER_README, blocking returned forged mail -# -# LICENSE -# The Secure Mailer license must be distributed with this -# software. -# -# AUTHOR(S) -# Wietse Venema -# IBM T.J. Watson Research -# P.O. Box 704 -# Yorktown Heights, NY 10598, USA -# -# Wietse Venema -# Google, Inc. -# 111 8th Avenue -# New York, NY 10011, USA -# -# HEADER_CHECKS(5) diff --git a/templates/Fedora/36/etc/postfix/main.cf b/templates/Fedora/36/etc/postfix/main.cf deleted file mode 100644 index e26183d..0000000 --- a/templates/Fedora/36/etc/postfix/main.cf +++ /dev/null @@ -1,766 +0,0 @@ -# Global Postfix configuration file. This file lists only a subset -# of all parameters. For the syntax, and for a complete parameter -# list, see the postconf(5) manual page (command: "man 5 postconf"). -# -# For common configuration examples, see BASIC_CONFIGURATION_README -# and STANDARD_CONFIGURATION_README. To find these documents, use -# the command "postconf html_directory readme_directory", or go to -# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. -# -# For best results, change no more than 2-3 parameters at a time, -# and test if Postfix still works after every change. - -# COMPATIBILITY -# -# The compatibility_level determines what default settings Postfix -# will use for main.cf and master.cf settings. These defaults will -# change over time. -# -# To avoid breaking things, Postfix will use backwards-compatible -# default settings and log where it uses those old backwards-compatible -# default settings, until the system administrator has determined -# if any backwards-compatible default settings need to be made -# permanent in main.cf or master.cf. -# -# When this review is complete, update the compatibility_level setting -# below as recommended in the RELEASE_NOTES file. -# -# The level below is what should be used with new (not upgrade) installs. -# -compatibility_level = 3.6 - -# SOFT BOUNCE -# -# The soft_bounce parameter provides a limited safety net for -# testing. When soft_bounce is enabled, mail will remain queued that -# would otherwise bounce. This parameter disables locally-generated -# bounces, and prevents the SMTP server from rejecting mail permanently -# (by changing 5xx replies into 4xx replies). However, soft_bounce -# is no cure for address rewriting mistakes or mail routing mistakes. -# -#soft_bounce = no - -# LOCAL PATHNAME INFORMATION -# -# The queue_directory specifies the location of the Postfix queue. -# This is also the root directory of Postfix daemons that run chrooted. -# See the files in examples/chroot-setup for setting up Postfix chroot -# environments on different UNIX systems. -# -queue_directory = /var/spool/postfix - -# The command_directory parameter specifies the location of all -# postXXX commands. -# -command_directory = /usr/sbin - -# The daemon_directory parameter specifies the location of all Postfix -# daemon programs (i.e. programs listed in the master.cf file). This -# directory must be owned by root. -# -daemon_directory = /usr/libexec/postfix - -# The data_directory parameter specifies the location of Postfix-writable -# data files (caches, random numbers). This directory must be owned -# by the mail_owner account (see below). -# -data_directory = /var/lib/postfix - -# QUEUE AND PROCESS OWNERSHIP -# -# The mail_owner parameter specifies the owner of the Postfix queue -# and of most Postfix daemon processes. Specify the name of a user -# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS -# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In -# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED -# USER. -# -mail_owner = postfix - -# The default_privs parameter specifies the default rights used by -# the local delivery agent for delivery to external file or command. -# These rights are used in the absence of a recipient user context. -# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. -# -#default_privs = nobody - -# INTERNET HOST AND DOMAIN NAMES -# -# The myhostname parameter specifies the internet hostname of this -# mail system. The default is to use the fully-qualified domain name -# from gethostname(). $myhostname is used as a default value for many -# other configuration parameters. -# -#myhostname = host.domain.tld -#myhostname = virtual.domain.tld - -# The mydomain parameter specifies the local internet domain name. -# The default is to use $myhostname minus the first component. -# $mydomain is used as a default value for many other configuration -# parameters. -# -#mydomain = domain.tld - -# SENDING MAIL -# -# The myorigin parameter specifies the domain that locally-posted -# mail appears to come from. The default is to append $myhostname, -# which is fine for small sites. If you run a domain with multiple -# machines, you should (1) change this to $mydomain and (2) set up -# a domain-wide alias database that aliases each user to -# user@that.users.mailhost. -# -# For the sake of consistency between sender and recipient addresses, -# myorigin also specifies the default domain name that is appended -# to recipient addresses that have no @domain part. -# -#myorigin = $myhostname -#myorigin = $mydomain - -# RECEIVING MAIL - -# The inet_interfaces parameter specifies the network interface -# addresses that this mail system receives mail on. By default, -# the software claims all active interfaces on the machine. The -# parameter also controls delivery of mail to user@[ip.address]. -# -# See also the proxy_interfaces parameter, for network addresses that -# are forwarded to us via a proxy or network address translator. -# -# Note: you need to stop/start Postfix when this parameter changes. -# -inet_interfaces = all -#inet_interfaces = $myhostname -#inet_interfaces = $myhostname, localhost -#inet_interfaces = localhost - -# Enable IPv4, and IPv6 if supported -inet_protocols = all - -# The proxy_interfaces parameter specifies the network interface -# addresses that this mail system receives mail on by way of a -# proxy or network address translation unit. This setting extends -# the address list specified with the inet_interfaces parameter. -# -# You must specify your proxy/NAT addresses when your system is a -# backup MX host for other domains, otherwise mail delivery loops -# will happen when the primary MX host is down. -# -#proxy_interfaces = -#proxy_interfaces = 1.2.3.4 - -# The mydestination parameter specifies the list of domains that this -# machine considers itself the final destination for. -# -# These domains are routed to the delivery agent specified with the -# local_transport parameter setting. By default, that is the UNIX -# compatible delivery agent that lookups all recipients in /etc/passwd -# and /etc/aliases or their equivalent. -# -# The default is $myhostname + localhost.$mydomain + localhost. On -# a mail domain gateway, you should also include $mydomain. -# -# Do not specify the names of virtual domains - those domains are -# specified elsewhere (see VIRTUAL_README). -# -# Do not specify the names of domains that this machine is backup MX -# host for. Specify those names via the relay_domains settings for -# the SMTP server, or use permit_mx_backup if you are lazy (see -# STANDARD_CONFIGURATION_README). -# -# The local machine is always the final destination for mail addressed -# to user@[the.net.work.address] of an interface that the mail system -# receives mail on (see the inet_interfaces parameter). -# -# Specify a list of host or domain names, /file/name or type:table -# patterns, separated by commas and/or whitespace. A /file/name -# pattern is replaced by its contents; a type:table is matched when -# a name matches a lookup key (the right-hand side is ignored). -# Continue long lines by starting the next line with whitespace. -# -# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". -# -mydestination = $myhostname, localhost.$mydomain, localhost -#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain -#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, -# mail.$mydomain, www.$mydomain, ftp.$mydomain - -# REJECTING MAIL FOR UNKNOWN LOCAL USERS -# -# The local_recipient_maps parameter specifies optional lookup tables -# with all names or addresses of users that are local with respect -# to $mydestination, $inet_interfaces or $proxy_interfaces. -# -# If this parameter is defined, then the SMTP server will reject -# mail for unknown local users. This parameter is defined by default. -# -# To turn off local recipient checking in the SMTP server, specify -# local_recipient_maps = (i.e. empty). -# -# The default setting assumes that you use the default Postfix local -# delivery agent for local delivery. You need to update the -# local_recipient_maps setting if: -# -# - You define $mydestination domain recipients in files other than -# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. -# For example, you define $mydestination domain recipients in -# the $virtual_mailbox_maps files. -# -# - You redefine the local delivery agent in master.cf. -# -# - You redefine the "local_transport" setting in main.cf. -# -# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" -# feature of the Postfix local delivery agent (see local(8)). -# -# Details are described in the LOCAL_RECIPIENT_README file. -# -# Beware: if the Postfix SMTP server runs chrooted, you probably have -# to access the passwd file via the proxymap service, in order to -# overcome chroot restrictions. The alternative, having a copy of -# the system passwd file in the chroot jail is just not practical. -# -# The right-hand side of the lookup tables is conveniently ignored. -# In the left-hand side, specify a bare username, an @domain.tld -# wild-card, or specify a user@domain.tld address. -# -#local_recipient_maps = unix:passwd.byname $alias_maps -#local_recipient_maps = proxy:unix:passwd.byname $alias_maps -#local_recipient_maps = - -# The unknown_local_recipient_reject_code specifies the SMTP server -# response code when a recipient domain matches $mydestination or -# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty -# and the recipient address or address local-part is not found. -# -# The default setting is 550 (reject mail) but it is safer to start -# with 450 (try again later) until you are certain that your -# local_recipient_maps settings are OK. -# -unknown_local_recipient_reject_code = 550 - -# TRUST AND RELAY CONTROL - -# The mynetworks parameter specifies the list of "trusted" SMTP -# clients that have more privileges than "strangers". -# -# In particular, "trusted" SMTP clients are allowed to relay mail -# through Postfix. See the smtpd_recipient_restrictions parameter -# in postconf(5). -# -# You can specify the list of "trusted" network addresses by hand -# or you can let Postfix do it for you (which is the default). -# -# By default (mynetworks_style = subnet), Postfix "trusts" SMTP -# clients in the same IP subnetworks as the local machine. -# On Linux, this works correctly only with interfaces specified -# with the "ifconfig" command. -# -# Specify "mynetworks_style = class" when Postfix should "trust" SMTP -# clients in the same IP class A/B/C networks as the local machine. -# Don't do this with a dialup site - it would cause Postfix to "trust" -# your entire provider's network. Instead, specify an explicit -# mynetworks list by hand, as described below. -# -# Specify "mynetworks_style = host" when Postfix should "trust" -# only the local machine. -# -#mynetworks_style = class -#mynetworks_style = subnet -#mynetworks_style = host - -# Alternatively, you can specify the mynetworks list by hand, in -# which case Postfix ignores the mynetworks_style setting. -# -# Specify an explicit list of network/netmask patterns, where the -# mask specifies the number of bits in the network part of a host -# address. -# -# You can also specify the absolute pathname of a pattern file instead -# of listing the patterns here. Specify type:table for table-based lookups -# (the value on the table right-hand side is not used). -# -#mynetworks = 168.100.3.0/28, 127.0.0.0/8 -#mynetworks = $config_directory/mynetworks -#mynetworks = hash:/etc/postfix/network_table - -# The relay_domains parameter restricts what destinations this system will -# relay mail to. See the smtpd_recipient_restrictions description in -# postconf(5) for detailed information. -# -# By default, Postfix relays mail -# - from "trusted" clients (IP address matches $mynetworks) to any destination, -# - from "untrusted" clients to destinations that match $relay_domains or -# subdomains thereof, except addresses with sender-specified routing. -# The default relay_domains value is $mydestination. -# -# In addition to the above, the Postfix SMTP server by default accepts mail -# that Postfix is final destination for: -# - destinations that match $inet_interfaces or $proxy_interfaces, -# - destinations that match $mydestination -# - destinations that match $virtual_alias_domains, -# - destinations that match $virtual_mailbox_domains. -# These destinations do not need to be listed in $relay_domains. -# -# Specify a list of hosts or domains, /file/name patterns or type:name -# lookup tables, separated by commas and/or whitespace. Continue -# long lines by starting the next line with whitespace. A file name -# is replaced by its contents; a type:name table is matched when a -# (parent) domain appears as lookup key. -# -# NOTE: Postfix will not automatically forward mail for domains that -# list this system as their primary or backup MX host. See the -# permit_mx_backup restriction description in postconf(5). -# -#relay_domains = $mydestination - -# INTERNET OR INTRANET - -# The relayhost parameter specifies the default host to send mail to -# when no entry is matched in the optional transport(5) table. When -# no relayhost is given, mail is routed directly to the destination. -# -# On an intranet, specify the organizational domain name. If your -# internal DNS uses no MX records, specify the name of the intranet -# gateway host instead. -# -# In the case of SMTP, specify a domain, host, host:port, [host]:port, -# [address] or [address]:port; the form [host] turns off MX lookups. -# -# If you're connected via UUCP, see also the default_transport parameter. -# -#relayhost = $mydomain -#relayhost = [gateway.my.domain] -#relayhost = [mailserver.isp.tld] -#relayhost = uucphost -#relayhost = [an.ip.add.ress] - -# REJECTING UNKNOWN RELAY USERS -# -# The relay_recipient_maps parameter specifies optional lookup tables -# with all addresses in the domains that match $relay_domains. -# -# If this parameter is defined, then the SMTP server will reject -# mail for unknown relay users. This feature is off by default. -# -# The right-hand side of the lookup tables is conveniently ignored. -# In the left-hand side, specify an @domain.tld wild-card, or specify -# a user@domain.tld address. -# -#relay_recipient_maps = hash:/etc/postfix/relay_recipients - -# INPUT RATE CONTROL -# -# The in_flow_delay configuration parameter implements mail input -# flow control. This feature is turned on by default, although it -# still needs further development (it's disabled on SCO UNIX due -# to an SCO bug). -# -# A Postfix process will pause for $in_flow_delay seconds before -# accepting a new message, when the message arrival rate exceeds the -# message delivery rate. With the default 100 SMTP server process -# limit, this limits the mail inflow to 100 messages a second more -# than the number of messages delivered per second. -# -# Specify 0 to disable the feature. Valid delays are 0..10. -# -#in_flow_delay = 1s - -# ADDRESS REWRITING -# -# The ADDRESS_REWRITING_README document gives information about -# address masquerading or other forms of address rewriting including -# username->Firstname.Lastname mapping. - -# ADDRESS REDIRECTION (VIRTUAL DOMAIN) -# -# The VIRTUAL_README document gives information about the many forms -# of domain hosting that Postfix supports. - -# "USER HAS MOVED" BOUNCE MESSAGES -# -# See the discussion in the ADDRESS_REWRITING_README document. - -# TRANSPORT MAP -# -# See the discussion in the ADDRESS_REWRITING_README document. - -# ALIAS DATABASE -# -# The alias_maps parameter specifies the list of alias databases used -# by the local delivery agent. The default list is system dependent. -# -# On systems with NIS, the default is to search the local alias -# database, then the NIS alias database. See aliases(5) for syntax -# details. -# -# If you change the alias database, run "postalias /etc/aliases" (or -# wherever your system stores the mail alias file), or simply run -# "newaliases" to build the necessary DBM or DB file. -# -# It will take a minute or so before changes become visible. Use -# "postfix reload" to eliminate the delay. -# -#alias_maps = dbm:/etc/aliases -alias_maps = hash:/etc/aliases -#alias_maps = hash:/etc/aliases, nis:mail.aliases -#alias_maps = netinfo:/aliases - -# The alias_database parameter specifies the alias database(s) that -# are built with "newaliases" or "sendmail -bi". This is a separate -# configuration parameter, because alias_maps (see above) may specify -# tables that are not necessarily all under control by Postfix. -# -#alias_database = dbm:/etc/aliases -#alias_database = dbm:/etc/mail/aliases -alias_database = hash:/etc/aliases -#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases - -# ADDRESS EXTENSIONS (e.g., user+foo) -# -# The recipient_delimiter parameter specifies the separator between -# user names and address extensions (user+foo). See canonical(5), -# local(8), relocated(5) and virtual(5) for the effects this has on -# aliases, canonical, virtual, relocated and .forward file lookups. -# Basically, the software tries user+foo and .forward+foo before -# trying user and .forward. -# -#recipient_delimiter = + - -# DELIVERY TO MAILBOX -# -# The home_mailbox parameter specifies the optional pathname of a -# mailbox file relative to a user's home directory. The default -# mailbox file is /var/spool/mail/user or /var/mail/user. Specify -# "Maildir/" for qmail-style delivery (the / is required). -# -#home_mailbox = Mailbox -#home_mailbox = Maildir/ - -# The mail_spool_directory parameter specifies the directory where -# UNIX-style mailboxes are kept. The default setting depends on the -# system type. -# -#mail_spool_directory = /var/mail -#mail_spool_directory = /var/spool/mail - -# The mailbox_command parameter specifies the optional external -# command to use instead of mailbox delivery. The command is run as -# the recipient with proper HOME, SHELL and LOGNAME environment settings. -# Exception: delivery for root is done as $default_user. -# -# Other environment variables of interest: USER (recipient username), -# EXTENSION (address extension), DOMAIN (domain part of address), -# and LOCAL (the address localpart). -# -# Unlike other Postfix configuration parameters, the mailbox_command -# parameter is not subjected to $parameter substitutions. This is to -# make it easier to specify shell syntax (see example below). -# -# Avoid shell meta characters because they will force Postfix to run -# an expensive shell process. Procmail alone is expensive enough. -# -# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN -# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. -# -#mailbox_command = /some/where/procmail -#mailbox_command = /some/where/procmail -a "$EXTENSION" - -# The mailbox_transport specifies the optional transport in master.cf -# to use after processing aliases and .forward files. This parameter -# has precedence over the mailbox_command, fallback_transport and -# luser_relay parameters. -# -# Specify a string of the form transport:nexthop, where transport is -# the name of a mail delivery transport defined in master.cf. The -# :nexthop part is optional. For more details see the sample transport -# configuration file. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must update the "local_recipient_maps" setting in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" -# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. -#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp -mailbox_transport = lmtp:inet:localhost:24 -virtual_transport = lmtp:inet:localhost:24 - -# If using the cyrus-imapd IMAP server deliver local mail to the IMAP -# server using LMTP (Local Mail Transport Protocol), this is prefered -# over the older cyrus deliver program by setting the -# mailbox_transport as below: -# -# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp -# -# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via -# these settings. -# -# local_destination_recipient_limit = 300 -# local_destination_concurrency_limit = 5 -# -# Of course you should adjust these settings as appropriate for the -# capacity of the hardware you are using. The recipient limit setting -# can be used to take advantage of the single instance message store -# capability of Cyrus. The concurrency limit can be used to control -# how many simultaneous LMTP sessions will be permitted to the Cyrus -# message store. -# -# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and -# subsequent line in master.cf. -#mailbox_transport = cyrus - -# The fallback_transport specifies the optional transport in master.cf -# to use for recipients that are not found in the UNIX passwd database. -# This parameter has precedence over the luser_relay parameter. -# -# Specify a string of the form transport:nexthop, where transport is -# the name of a mail delivery transport defined in master.cf. The -# :nexthop part is optional. For more details see the sample transport -# configuration file. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must update the "local_recipient_maps" setting in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp -#fallback_transport = - -# The luser_relay parameter specifies an optional destination address -# for unknown recipients. By default, mail for unknown@$mydestination, -# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned -# as undeliverable. -# -# The following expansions are done on luser_relay: $user (recipient -# username), $shell (recipient shell), $home (recipient home directory), -# $recipient (full recipient address), $extension (recipient address -# extension), $domain (recipient domain), $local (entire recipient -# localpart), $recipient_delimiter. Specify ${name?value} or -# ${name:value} to expand value only when $name does (does not) exist. -# -# luser_relay works only for the default Postfix local delivery agent. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must specify "local_recipient_maps =" (i.e. empty) in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -#luser_relay = $user@other.host -#luser_relay = $local@other.host -#luser_relay = admin+$local - -# JUNK MAIL CONTROLS -# -# The controls listed here are only a very small subset. The file -# SMTPD_ACCESS_README provides an overview. - -# The header_checks parameter specifies an optional table with patterns -# that each logical message header is matched against, including -# headers that span multiple physical lines. -# -# By default, these patterns also apply to MIME headers and to the -# headers of attached messages. With older Postfix versions, MIME and -# attached message headers were treated as body text. -# -# For details, see "man header_checks". -# -#header_checks = regexp:/etc/postfix/header_checks - -# FAST ETRN SERVICE -# -# Postfix maintains per-destination logfiles with information about -# deferred mail, so that mail can be flushed quickly with the SMTP -# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". -# See the ETRN_README document for a detailed description. -# -# The fast_flush_domains parameter controls what destinations are -# eligible for this service. By default, they are all domains that -# this server is willing to relay mail to. -# -#fast_flush_domains = $relay_domains - -# SHOW SOFTWARE VERSION OR NOT -# -# The smtpd_banner parameter specifies the text that follows the 220 -# code in the SMTP server's greeting banner. Some people like to see -# the mail version advertised. By default, Postfix shows no version. -# -# You MUST specify $myhostname at the start of the text. That is an -# RFC requirement. Postfix itself does not care. -# -#smtpd_banner = $myhostname ESMTP $mail_name -#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) - -# PARALLEL DELIVERY TO THE SAME DESTINATION -# -# How many parallel deliveries to the same user or domain? With local -# delivery, it does not make sense to do massively parallel delivery -# to the same user, because mailbox updates must happen sequentially, -# and expensive pipelines in .forward files can cause disasters when -# too many are run at the same time. With SMTP deliveries, 10 -# simultaneous connections to the same domain could be sufficient to -# raise eyebrows. -# -# Each message delivery transport has its XXX_destination_concurrency_limit -# parameter. The default is $default_destination_concurrency_limit for -# most delivery transports. For the local delivery agent the default is 2. - -#local_destination_concurrency_limit = 2 -#default_destination_concurrency_limit = 20 - -# DEBUGGING CONTROL -# -# The debug_peer_level parameter specifies the increment in verbose -# logging level when an SMTP client or server host name or address -# matches a pattern in the debug_peer_list parameter. -# -debug_peer_level = 2 - -# The debug_peer_list parameter specifies an optional list of domain -# or network patterns, /file/name patterns or type:name tables. When -# an SMTP client or server host name or address matches a pattern, -# increase the verbose logging level by the amount specified in the -# debug_peer_level parameter. -# -#debug_peer_list = 127.0.0.1 -#debug_peer_list = some.domain - -# The debugger_command specifies the external command that is executed -# when a Postfix daemon program is run with the -D option. -# -# Use "command .. & sleep 5" so that the debugger can attach before -# the process marches on. If you use an X-based debugger, be sure to -# set up your XAUTHORITY environment variable before starting Postfix. -# -debugger_command = - PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin - ddd $daemon_directory/$process_name $process_id & sleep 5 - -# If you can't use X, use this to capture the call stack when a -# daemon crashes. The result is in a file in the configuration -# directory, and is named after the process name and the process ID. -# -# debugger_command = -# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; -# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 -# >$config_directory/$process_name.$process_id.log & sleep 5 -# -# Another possibility is to run gdb under a detached screen session. -# To attach to the screen session, su root and run "screen -r -# " where uniquely matches one of the detached -# sessions (from "screen -list"). -# -# debugger_command = -# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen -# -dmS $process_name gdb $daemon_directory/$process_name -# $process_id & sleep 1 - -# INSTALL-TIME CONFIGURATION INFORMATION -# -# The following parameters are used when installing a new Postfix version. -# -# sendmail_path: The full pathname of the Postfix sendmail command. -# This is the Sendmail-compatible mail posting interface. -# -sendmail_path = /usr/sbin/sendmail.postfix - -# newaliases_path: The full pathname of the Postfix newaliases command. -# This is the Sendmail-compatible command to build alias databases. -# -newaliases_path = /usr/bin/newaliases.postfix - -# mailq_path: The full pathname of the Postfix mailq command. This -# is the Sendmail-compatible mail queue listing command. -# -mailq_path = /usr/bin/mailq.postfix - -# setgid_group: The group for mail submission and queue management -# commands. This must be a group name with a numerical group ID that -# is not shared with other accounts, not even with the Postfix account. -# -setgid_group = postdrop - -# html_directory: The location of the Postfix HTML documentation. -# -html_directory = no - -# manpage_directory: The location of the Postfix on-line manual pages. -# -manpage_directory = /usr/share/man - -# sample_directory: The location of the Postfix sample configuration files. -# This parameter is obsolete as of Postfix 2.1. -# -sample_directory = /usr/share/doc/postfix/samples - -# readme_directory: The location of the Postfix README files. -# -readme_directory = /usr/share/doc/postfix/README_FILES - -# TLS CONFIGURATION -# -# Basic Postfix TLS configuration by default with self-signed certificate -# for inbound SMTP and also opportunistic TLS for outbound SMTP. - -# The full pathname of a file with the Postfix SMTP server RSA certificate -# in PEM format. Intermediate certificates should be included in general, -# the server certificate first, then the issuing CA(s) (bottom-up order). -# -# smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem -smtpd_tls_cert_file = /etc/postfix/certificates/pubcert.pem - -# The full pathname of a file with the Postfix SMTP server RSA private key -# in PEM format. The private key must be accessible without a pass-phrase, -# i.e. it must not be encrypted. -# -# smtpd_tls_key_file = /etc/pki/tls/private/postfix.key -smtpd_tls_key_file = /etc/postfix/certificates/privkey.pem - -# Announce STARTTLS support to remote SMTP clients, but do not require that -# clients use TLS encryption (opportunistic TLS inbound). -# -smtpd_tls_security_level = may - -# Directory with PEM format Certification Authority certificates that the -# Postfix SMTP client uses to verify a remote SMTP server certificate. -# -smtp_tls_CApath = /etc/pki/tls/certs - -# The full pathname of a file containing CA certificates of root CAs -# trusted to sign either remote SMTP server certificates or intermediate CA -# certificates. -# -smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt - -# Use TLS if this is supported by the remote SMTP server, otherwise use -# plaintext (opportunistic TLS outbound). -# -smtp_tls_security_level = may -meta_directory = /etc/postfix -shlib_directory = /usr/lib64/postfix - -{% if ensure_postfix.milter_list is defined and ensure_postfix.milter_list is iterable %} -# The Milter List -{% for milter in ensure_postfix.milter_list %} -# -- {{ milter.description }} -- {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} -{% endfor %} -smtpd_milters = {% for milter in ensure_postfix.milter_list %} {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} {% endfor %} -{% endif %} - -{% if postfix_domains is defined and postfix_domains is iterable %} -virtual_mailbox_domains = {% for domain in postfix_domains %} {{ domain }} {% endfor %} -{% endif %} - -2bounce_notice_recipient = {{ postmaster_email }} -bounce_notice_recipient = {{ postmaster_email }} -delay_notice_recipient = {{ postmaster_email }} -error_notice_recipient = {{ postmaster_email }} -smtpd_helo_required = yes -disable_vrfy_command = yes -message_size_limit = {{ postfix_message_size_limit }} -smtpd_helo_restrictions = reject_unknown_helo_hostname -smtpd_client_restrictions = reject_unknown_reverse_client_hostname reject_unauth_pipelining -smtpd_discard_ehlo_keywords = silent-discard, dsn - diff --git a/templates/Fedora/36/etc/postfix/main.cf.proto b/templates/Fedora/36/etc/postfix/main.cf.proto deleted file mode 100644 index 9bef4f2..0000000 --- a/templates/Fedora/36/etc/postfix/main.cf.proto +++ /dev/null @@ -1,736 +0,0 @@ -# Global Postfix configuration file. This file lists only a subset -# of all parameters. For the syntax, and for a complete parameter -# list, see the postconf(5) manual page (command: "man 5 postconf"). -# -# For common configuration examples, see BASIC_CONFIGURATION_README -# and STANDARD_CONFIGURATION_README. To find these documents, use -# the command "postconf html_directory readme_directory", or go to -# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. -# -# For best results, change no more than 2-3 parameters at a time, -# and test if Postfix still works after every change. - -# COMPATIBILITY -# -# The compatibility_level determines what default settings Postfix -# will use for main.cf and master.cf settings. These defaults will -# change over time. -# -# To avoid breaking things, Postfix will use backwards-compatible -# default settings and log where it uses those old backwards-compatible -# default settings, until the system administrator has determined -# if any backwards-compatible default settings need to be made -# permanent in main.cf or master.cf. -# -# When this review is complete, update the compatibility_level setting -# below as recommended in the RELEASE_NOTES file. -# -# The level below is what should be used with new (not upgrade) installs. -# -compatibility_level = 3.6 - -# SOFT BOUNCE -# -# The soft_bounce parameter provides a limited safety net for -# testing. When soft_bounce is enabled, mail will remain queued that -# would otherwise bounce. This parameter disables locally-generated -# bounces, and prevents the SMTP server from rejecting mail permanently -# (by changing 5xx replies into 4xx replies). However, soft_bounce -# is no cure for address rewriting mistakes or mail routing mistakes. -# -#soft_bounce = no - -# LOCAL PATHNAME INFORMATION -# -# The queue_directory specifies the location of the Postfix queue. -# This is also the root directory of Postfix daemons that run chrooted. -# See the files in examples/chroot-setup for setting up Postfix chroot -# environments on different UNIX systems. -# -queue_directory = /var/spool/postfix - -# The command_directory parameter specifies the location of all -# postXXX commands. -# -command_directory = /usr/sbin - -# The daemon_directory parameter specifies the location of all Postfix -# daemon programs (i.e. programs listed in the master.cf file). This -# directory must be owned by root. -# -daemon_directory = /usr/libexec/postfix - -# The data_directory parameter specifies the location of Postfix-writable -# data files (caches, random numbers). This directory must be owned -# by the mail_owner account (see below). -# -data_directory = /var/lib/postfix - -# QUEUE AND PROCESS OWNERSHIP -# -# The mail_owner parameter specifies the owner of the Postfix queue -# and of most Postfix daemon processes. Specify the name of a user -# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS -# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In -# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED -# USER. -# -mail_owner = postfix - -# The default_privs parameter specifies the default rights used by -# the local delivery agent for delivery to external file or command. -# These rights are used in the absence of a recipient user context. -# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. -# -#default_privs = nobody - -# INTERNET HOST AND DOMAIN NAMES -# -# The myhostname parameter specifies the internet hostname of this -# mail system. The default is to use the fully-qualified domain name -# from gethostname(). $myhostname is used as a default value for many -# other configuration parameters. -# -#myhostname = host.domain.tld -#myhostname = virtual.domain.tld - -# The mydomain parameter specifies the local internet domain name. -# The default is to use $myhostname minus the first component. -# $mydomain is used as a default value for many other configuration -# parameters. -# -#mydomain = domain.tld - -# SENDING MAIL -# -# The myorigin parameter specifies the domain that locally-posted -# mail appears to come from. The default is to append $myhostname, -# which is fine for small sites. If you run a domain with multiple -# machines, you should (1) change this to $mydomain and (2) set up -# a domain-wide alias database that aliases each user to -# user@that.users.mailhost. -# -# For the sake of consistency between sender and recipient addresses, -# myorigin also specifies the default domain name that is appended -# to recipient addresses that have no @domain part. -# -#myorigin = $myhostname -#myorigin = $mydomain - -# RECEIVING MAIL - -# The inet_interfaces parameter specifies the network interface -# addresses that this mail system receives mail on. By default, -# the software claims all active interfaces on the machine. The -# parameter also controls delivery of mail to user@[ip.address]. -# -# See also the proxy_interfaces parameter, for network addresses that -# are forwarded to us via a proxy or network address translator. -# -# Note: you need to stop/start Postfix when this parameter changes. -# -#inet_interfaces = all -#inet_interfaces = $myhostname -#inet_interfaces = $myhostname, localhost -inet_interfaces = localhost - -# Enable IPv4, and IPv6 if supported -inet_protocols = all - -# The proxy_interfaces parameter specifies the network interface -# addresses that this mail system receives mail on by way of a -# proxy or network address translation unit. This setting extends -# the address list specified with the inet_interfaces parameter. -# -# You must specify your proxy/NAT addresses when your system is a -# backup MX host for other domains, otherwise mail delivery loops -# will happen when the primary MX host is down. -# -#proxy_interfaces = -#proxy_interfaces = 1.2.3.4 - -# The mydestination parameter specifies the list of domains that this -# machine considers itself the final destination for. -# -# These domains are routed to the delivery agent specified with the -# local_transport parameter setting. By default, that is the UNIX -# compatible delivery agent that lookups all recipients in /etc/passwd -# and /etc/aliases or their equivalent. -# -# The default is $myhostname + localhost.$mydomain + localhost. On -# a mail domain gateway, you should also include $mydomain. -# -# Do not specify the names of virtual domains - those domains are -# specified elsewhere (see VIRTUAL_README). -# -# Do not specify the names of domains that this machine is backup MX -# host for. Specify those names via the relay_domains settings for -# the SMTP server, or use permit_mx_backup if you are lazy (see -# STANDARD_CONFIGURATION_README). -# -# The local machine is always the final destination for mail addressed -# to user@[the.net.work.address] of an interface that the mail system -# receives mail on (see the inet_interfaces parameter). -# -# Specify a list of host or domain names, /file/name or type:table -# patterns, separated by commas and/or whitespace. A /file/name -# pattern is replaced by its contents; a type:table is matched when -# a name matches a lookup key (the right-hand side is ignored). -# Continue long lines by starting the next line with whitespace. -# -# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". -# -mydestination = $myhostname, localhost.$mydomain, localhost -#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain -#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, -# mail.$mydomain, www.$mydomain, ftp.$mydomain - -# REJECTING MAIL FOR UNKNOWN LOCAL USERS -# -# The local_recipient_maps parameter specifies optional lookup tables -# with all names or addresses of users that are local with respect -# to $mydestination, $inet_interfaces or $proxy_interfaces. -# -# If this parameter is defined, then the SMTP server will reject -# mail for unknown local users. This parameter is defined by default. -# -# To turn off local recipient checking in the SMTP server, specify -# local_recipient_maps = (i.e. empty). -# -# The default setting assumes that you use the default Postfix local -# delivery agent for local delivery. You need to update the -# local_recipient_maps setting if: -# -# - You define $mydestination domain recipients in files other than -# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. -# For example, you define $mydestination domain recipients in -# the $virtual_mailbox_maps files. -# -# - You redefine the local delivery agent in master.cf. -# -# - You redefine the "local_transport" setting in main.cf. -# -# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" -# feature of the Postfix local delivery agent (see local(8)). -# -# Details are described in the LOCAL_RECIPIENT_README file. -# -# Beware: if the Postfix SMTP server runs chrooted, you probably have -# to access the passwd file via the proxymap service, in order to -# overcome chroot restrictions. The alternative, having a copy of -# the system passwd file in the chroot jail is just not practical. -# -# The right-hand side of the lookup tables is conveniently ignored. -# In the left-hand side, specify a bare username, an @domain.tld -# wild-card, or specify a user@domain.tld address. -# -#local_recipient_maps = unix:passwd.byname $alias_maps -#local_recipient_maps = proxy:unix:passwd.byname $alias_maps -#local_recipient_maps = - -# The unknown_local_recipient_reject_code specifies the SMTP server -# response code when a recipient domain matches $mydestination or -# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty -# and the recipient address or address local-part is not found. -# -# The default setting is 550 (reject mail) but it is safer to start -# with 450 (try again later) until you are certain that your -# local_recipient_maps settings are OK. -# -unknown_local_recipient_reject_code = 550 - -# TRUST AND RELAY CONTROL - -# The mynetworks parameter specifies the list of "trusted" SMTP -# clients that have more privileges than "strangers". -# -# In particular, "trusted" SMTP clients are allowed to relay mail -# through Postfix. See the smtpd_recipient_restrictions parameter -# in postconf(5). -# -# You can specify the list of "trusted" network addresses by hand -# or you can let Postfix do it for you (which is the default). -# -# By default (mynetworks_style = subnet), Postfix "trusts" SMTP -# clients in the same IP subnetworks as the local machine. -# On Linux, this works correctly only with interfaces specified -# with the "ifconfig" command. -# -# Specify "mynetworks_style = class" when Postfix should "trust" SMTP -# clients in the same IP class A/B/C networks as the local machine. -# Don't do this with a dialup site - it would cause Postfix to "trust" -# your entire provider's network. Instead, specify an explicit -# mynetworks list by hand, as described below. -# -# Specify "mynetworks_style = host" when Postfix should "trust" -# only the local machine. -# -#mynetworks_style = class -#mynetworks_style = subnet -#mynetworks_style = host - -# Alternatively, you can specify the mynetworks list by hand, in -# which case Postfix ignores the mynetworks_style setting. -# -# Specify an explicit list of network/netmask patterns, where the -# mask specifies the number of bits in the network part of a host -# address. -# -# You can also specify the absolute pathname of a pattern file instead -# of listing the patterns here. Specify type:table for table-based lookups -# (the value on the table right-hand side is not used). -# -#mynetworks = 168.100.3.0/28, 127.0.0.0/8 -#mynetworks = $config_directory/mynetworks -#mynetworks = hash:/etc/postfix/network_table - -# The relay_domains parameter restricts what destinations this system will -# relay mail to. See the smtpd_recipient_restrictions description in -# postconf(5) for detailed information. -# -# By default, Postfix relays mail -# - from "trusted" clients (IP address matches $mynetworks) to any destination, -# - from "untrusted" clients to destinations that match $relay_domains or -# subdomains thereof, except addresses with sender-specified routing. -# The default relay_domains value is $mydestination. -# -# In addition to the above, the Postfix SMTP server by default accepts mail -# that Postfix is final destination for: -# - destinations that match $inet_interfaces or $proxy_interfaces, -# - destinations that match $mydestination -# - destinations that match $virtual_alias_domains, -# - destinations that match $virtual_mailbox_domains. -# These destinations do not need to be listed in $relay_domains. -# -# Specify a list of hosts or domains, /file/name patterns or type:name -# lookup tables, separated by commas and/or whitespace. Continue -# long lines by starting the next line with whitespace. A file name -# is replaced by its contents; a type:name table is matched when a -# (parent) domain appears as lookup key. -# -# NOTE: Postfix will not automatically forward mail for domains that -# list this system as their primary or backup MX host. See the -# permit_mx_backup restriction description in postconf(5). -# -#relay_domains = $mydestination - -# INTERNET OR INTRANET - -# The relayhost parameter specifies the default host to send mail to -# when no entry is matched in the optional transport(5) table. When -# no relayhost is given, mail is routed directly to the destination. -# -# On an intranet, specify the organizational domain name. If your -# internal DNS uses no MX records, specify the name of the intranet -# gateway host instead. -# -# In the case of SMTP, specify a domain, host, host:port, [host]:port, -# [address] or [address]:port; the form [host] turns off MX lookups. -# -# If you're connected via UUCP, see also the default_transport parameter. -# -#relayhost = $mydomain -#relayhost = [gateway.my.domain] -#relayhost = [mailserver.isp.tld] -#relayhost = uucphost -#relayhost = [an.ip.add.ress] - -# REJECTING UNKNOWN RELAY USERS -# -# The relay_recipient_maps parameter specifies optional lookup tables -# with all addresses in the domains that match $relay_domains. -# -# If this parameter is defined, then the SMTP server will reject -# mail for unknown relay users. This feature is off by default. -# -# The right-hand side of the lookup tables is conveniently ignored. -# In the left-hand side, specify an @domain.tld wild-card, or specify -# a user@domain.tld address. -# -#relay_recipient_maps = hash:/etc/postfix/relay_recipients - -# INPUT RATE CONTROL -# -# The in_flow_delay configuration parameter implements mail input -# flow control. This feature is turned on by default, although it -# still needs further development (it's disabled on SCO UNIX due -# to an SCO bug). -# -# A Postfix process will pause for $in_flow_delay seconds before -# accepting a new message, when the message arrival rate exceeds the -# message delivery rate. With the default 100 SMTP server process -# limit, this limits the mail inflow to 100 messages a second more -# than the number of messages delivered per second. -# -# Specify 0 to disable the feature. Valid delays are 0..10. -# -#in_flow_delay = 1s - -# ADDRESS REWRITING -# -# The ADDRESS_REWRITING_README document gives information about -# address masquerading or other forms of address rewriting including -# username->Firstname.Lastname mapping. - -# ADDRESS REDIRECTION (VIRTUAL DOMAIN) -# -# The VIRTUAL_README document gives information about the many forms -# of domain hosting that Postfix supports. - -# "USER HAS MOVED" BOUNCE MESSAGES -# -# See the discussion in the ADDRESS_REWRITING_README document. - -# TRANSPORT MAP -# -# See the discussion in the ADDRESS_REWRITING_README document. - -# ALIAS DATABASE -# -# The alias_maps parameter specifies the list of alias databases used -# by the local delivery agent. The default list is system dependent. -# -# On systems with NIS, the default is to search the local alias -# database, then the NIS alias database. See aliases(5) for syntax -# details. -# -# If you change the alias database, run "postalias /etc/aliases" (or -# wherever your system stores the mail alias file), or simply run -# "newaliases" to build the necessary DBM or DB file. -# -# It will take a minute or so before changes become visible. Use -# "postfix reload" to eliminate the delay. -# -#alias_maps = dbm:/etc/aliases -alias_maps = hash:/etc/aliases -#alias_maps = hash:/etc/aliases, nis:mail.aliases -#alias_maps = netinfo:/aliases - -# The alias_database parameter specifies the alias database(s) that -# are built with "newaliases" or "sendmail -bi". This is a separate -# configuration parameter, because alias_maps (see above) may specify -# tables that are not necessarily all under control by Postfix. -# -#alias_database = dbm:/etc/aliases -#alias_database = dbm:/etc/mail/aliases -alias_database = hash:/etc/aliases -#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases - -# ADDRESS EXTENSIONS (e.g., user+foo) -# -# The recipient_delimiter parameter specifies the separator between -# user names and address extensions (user+foo). See canonical(5), -# local(8), relocated(5) and virtual(5) for the effects this has on -# aliases, canonical, virtual, relocated and .forward file lookups. -# Basically, the software tries user+foo and .forward+foo before -# trying user and .forward. -# -#recipient_delimiter = + - -# DELIVERY TO MAILBOX -# -# The home_mailbox parameter specifies the optional pathname of a -# mailbox file relative to a user's home directory. The default -# mailbox file is /var/spool/mail/user or /var/mail/user. Specify -# "Maildir/" for qmail-style delivery (the / is required). -# -#home_mailbox = Mailbox -#home_mailbox = Maildir/ - -# The mail_spool_directory parameter specifies the directory where -# UNIX-style mailboxes are kept. The default setting depends on the -# system type. -# -#mail_spool_directory = /var/mail -#mail_spool_directory = /var/spool/mail - -# The mailbox_command parameter specifies the optional external -# command to use instead of mailbox delivery. The command is run as -# the recipient with proper HOME, SHELL and LOGNAME environment settings. -# Exception: delivery for root is done as $default_user. -# -# Other environment variables of interest: USER (recipient username), -# EXTENSION (address extension), DOMAIN (domain part of address), -# and LOCAL (the address localpart). -# -# Unlike other Postfix configuration parameters, the mailbox_command -# parameter is not subjected to $parameter substitutions. This is to -# make it easier to specify shell syntax (see example below). -# -# Avoid shell meta characters because they will force Postfix to run -# an expensive shell process. Procmail alone is expensive enough. -# -# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN -# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. -# -#mailbox_command = /some/where/procmail -#mailbox_command = /some/where/procmail -a "$EXTENSION" - -# The mailbox_transport specifies the optional transport in master.cf -# to use after processing aliases and .forward files. This parameter -# has precedence over the mailbox_command, fallback_transport and -# luser_relay parameters. -# -# Specify a string of the form transport:nexthop, where transport is -# the name of a mail delivery transport defined in master.cf. The -# :nexthop part is optional. For more details see the sample transport -# configuration file. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must update the "local_recipient_maps" setting in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" -# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. -#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp - -# If using the cyrus-imapd IMAP server deliver local mail to the IMAP -# server using LMTP (Local Mail Transport Protocol), this is prefered -# over the older cyrus deliver program by setting the -# mailbox_transport as below: -# -# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp -# -# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via -# these settings. -# -# local_destination_recipient_limit = 300 -# local_destination_concurrency_limit = 5 -# -# Of course you should adjust these settings as appropriate for the -# capacity of the hardware you are using. The recipient limit setting -# can be used to take advantage of the single instance message store -# capability of Cyrus. The concurrency limit can be used to control -# how many simultaneous LMTP sessions will be permitted to the Cyrus -# message store. -# -# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and -# subsequent line in master.cf. -#mailbox_transport = cyrus - -# The fallback_transport specifies the optional transport in master.cf -# to use for recipients that are not found in the UNIX passwd database. -# This parameter has precedence over the luser_relay parameter. -# -# Specify a string of the form transport:nexthop, where transport is -# the name of a mail delivery transport defined in master.cf. The -# :nexthop part is optional. For more details see the sample transport -# configuration file. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must update the "local_recipient_maps" setting in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp -#fallback_transport = - -# The luser_relay parameter specifies an optional destination address -# for unknown recipients. By default, mail for unknown@$mydestination, -# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned -# as undeliverable. -# -# The following expansions are done on luser_relay: $user (recipient -# username), $shell (recipient shell), $home (recipient home directory), -# $recipient (full recipient address), $extension (recipient address -# extension), $domain (recipient domain), $local (entire recipient -# localpart), $recipient_delimiter. Specify ${name?value} or -# ${name:value} to expand value only when $name does (does not) exist. -# -# luser_relay works only for the default Postfix local delivery agent. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must specify "local_recipient_maps =" (i.e. empty) in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -#luser_relay = $user@other.host -#luser_relay = $local@other.host -#luser_relay = admin+$local - -# JUNK MAIL CONTROLS -# -# The controls listed here are only a very small subset. The file -# SMTPD_ACCESS_README provides an overview. - -# The header_checks parameter specifies an optional table with patterns -# that each logical message header is matched against, including -# headers that span multiple physical lines. -# -# By default, these patterns also apply to MIME headers and to the -# headers of attached messages. With older Postfix versions, MIME and -# attached message headers were treated as body text. -# -# For details, see "man header_checks". -# -#header_checks = regexp:/etc/postfix/header_checks - -# FAST ETRN SERVICE -# -# Postfix maintains per-destination logfiles with information about -# deferred mail, so that mail can be flushed quickly with the SMTP -# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". -# See the ETRN_README document for a detailed description. -# -# The fast_flush_domains parameter controls what destinations are -# eligible for this service. By default, they are all domains that -# this server is willing to relay mail to. -# -#fast_flush_domains = $relay_domains - -# SHOW SOFTWARE VERSION OR NOT -# -# The smtpd_banner parameter specifies the text that follows the 220 -# code in the SMTP server's greeting banner. Some people like to see -# the mail version advertised. By default, Postfix shows no version. -# -# You MUST specify $myhostname at the start of the text. That is an -# RFC requirement. Postfix itself does not care. -# -#smtpd_banner = $myhostname ESMTP $mail_name -#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) - -# PARALLEL DELIVERY TO THE SAME DESTINATION -# -# How many parallel deliveries to the same user or domain? With local -# delivery, it does not make sense to do massively parallel delivery -# to the same user, because mailbox updates must happen sequentially, -# and expensive pipelines in .forward files can cause disasters when -# too many are run at the same time. With SMTP deliveries, 10 -# simultaneous connections to the same domain could be sufficient to -# raise eyebrows. -# -# Each message delivery transport has its XXX_destination_concurrency_limit -# parameter. The default is $default_destination_concurrency_limit for -# most delivery transports. For the local delivery agent the default is 2. - -#local_destination_concurrency_limit = 2 -#default_destination_concurrency_limit = 20 - -# DEBUGGING CONTROL -# -# The debug_peer_level parameter specifies the increment in verbose -# logging level when an SMTP client or server host name or address -# matches a pattern in the debug_peer_list parameter. -# -debug_peer_level = 2 - -# The debug_peer_list parameter specifies an optional list of domain -# or network patterns, /file/name patterns or type:name tables. When -# an SMTP client or server host name or address matches a pattern, -# increase the verbose logging level by the amount specified in the -# debug_peer_level parameter. -# -#debug_peer_list = 127.0.0.1 -#debug_peer_list = some.domain - -# The debugger_command specifies the external command that is executed -# when a Postfix daemon program is run with the -D option. -# -# Use "command .. & sleep 5" so that the debugger can attach before -# the process marches on. If you use an X-based debugger, be sure to -# set up your XAUTHORITY environment variable before starting Postfix. -# -debugger_command = - PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin - ddd $daemon_directory/$process_name $process_id & sleep 5 - -# If you can't use X, use this to capture the call stack when a -# daemon crashes. The result is in a file in the configuration -# directory, and is named after the process name and the process ID. -# -# debugger_command = -# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; -# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 -# >$config_directory/$process_name.$process_id.log & sleep 5 -# -# Another possibility is to run gdb under a detached screen session. -# To attach to the screen session, su root and run "screen -r -# " where uniquely matches one of the detached -# sessions (from "screen -list"). -# -# debugger_command = -# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen -# -dmS $process_name gdb $daemon_directory/$process_name -# $process_id & sleep 1 - -# INSTALL-TIME CONFIGURATION INFORMATION -# -# The following parameters are used when installing a new Postfix version. -# -# sendmail_path: The full pathname of the Postfix sendmail command. -# This is the Sendmail-compatible mail posting interface. -# -sendmail_path = - -# newaliases_path: The full pathname of the Postfix newaliases command. -# This is the Sendmail-compatible command to build alias databases. -# -newaliases_path = - -# mailq_path: The full pathname of the Postfix mailq command. This -# is the Sendmail-compatible mail queue listing command. -# -mailq_path = - -# setgid_group: The group for mail submission and queue management -# commands. This must be a group name with a numerical group ID that -# is not shared with other accounts, not even with the Postfix account. -# -setgid_group = - -# html_directory: The location of the Postfix HTML documentation. -# -html_directory = - -# manpage_directory: The location of the Postfix on-line manual pages. -# -manpage_directory = - -# sample_directory: The location of the Postfix sample configuration files. -# This parameter is obsolete as of Postfix 2.1. -# -sample_directory = - -# readme_directory: The location of the Postfix README files. -# -readme_directory = - -# TLS CONFIGURATION -# -# Basic Postfix TLS configuration by default with self-signed certificate -# for inbound SMTP and also opportunistic TLS for outbound SMTP. - -# The full pathname of a file with the Postfix SMTP server RSA certificate -# in PEM format. Intermediate certificates should be included in general, -# the server certificate first, then the issuing CA(s) (bottom-up order). -# -smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem - -# The full pathname of a file with the Postfix SMTP server RSA private key -# in PEM format. The private key must be accessible without a pass-phrase, -# i.e. it must not be encrypted. -# -smtpd_tls_key_file = /etc/pki/tls/private/postfix.key - -# Announce STARTTLS support to remote SMTP clients, but do not require that -# clients use TLS encryption (opportunistic TLS inbound). -# -smtpd_tls_security_level = may - -# Directory with PEM format Certification Authority certificates that the -# Postfix SMTP client uses to verify a remote SMTP server certificate. -# -smtp_tls_CApath = /etc/pki/tls/certs - -# The full pathname of a file containing CA certificates of root CAs -# trusted to sign either remote SMTP server certificates or intermediate CA -# certificates. -# -smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt - -# Use TLS if this is supported by the remote SMTP server, otherwise use -# plaintext (opportunistic TLS outbound). -# -smtp_tls_security_level = may diff --git a/templates/Fedora/36/etc/postfix/master.cf b/templates/Fedora/36/etc/postfix/master.cf deleted file mode 100644 index 4beb91f..0000000 --- a/templates/Fedora/36/etc/postfix/master.cf +++ /dev/null @@ -1,137 +0,0 @@ -# -# Postfix master process configuration file. For details on the format -# of the file, see the master(5) manual page (command: "man 5 master" or -# on-line: http://www.postfix.org/master.5.html). -# -# Do not forget to execute "postfix reload" after editing this file. -# -# ========================================================================== -# service type private unpriv chroot wakeup maxproc command + args -# (yes) (yes) (no) (never) (100) -# ========================================================================== -smtp inet n - n - - smtpd -#smtp inet n - n - 1 postscreen -#smtpd pass - - n - - smtpd -#dnsblog unix - - n - 0 dnsblog -#tlsproxy unix - - n - 0 tlsproxy -# Choose one: enable submission for loopback clients only, or for any client. -#127.0.0.1:submission inet n - n - - smtpd -# submission inet n - n - - smtpd -# -o syslog_name=postfix/submission -# -o smtpd_tls_security_level=encrypt -# -o smtpd_sasl_auth_enable=yes -# -o smtpd_tls_auth_only=yes -# -o smtpd_reject_unlisted_recipient=no -# -o smtpd_client_restrictions=$mua_client_restrictions -# -o smtpd_helo_restrictions=$mua_helo_restrictions -# -o smtpd_sender_restrictions=$mua_sender_restrictions -# -o smtpd_recipient_restrictions= -# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject -# -o milter_macro_daemon_name=ORIGINATING -# Choose one: enable smtps for loopback clients only, or for any client. -#127.0.0.1:smtps inet n - n - - smtpd -# smtps inet n - n - - smtpd -# -o syslog_name=postfix/smtps -# -o smtpd_tls_wrappermode=yes -# -o smtpd_sasl_auth_enable=yes -# -o smtpd_reject_unlisted_recipient=no -# -o smtpd_client_restrictions=$mua_client_restrictions -# -o smtpd_helo_restrictions=$mua_helo_restrictions -# -o smtpd_sender_restrictions=$mua_sender_restrictions -# -o smtpd_recipient_restrictions= -# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject -# -o milter_macro_daemon_name=ORIGINATING -#628 inet n - n - - qmqpd -pickup unix n - n 60 1 pickup -cleanup unix n - n - 0 cleanup -qmgr unix n - n 300 1 qmgr -#qmgr unix n - n 300 1 oqmgr -tlsmgr unix - - n 1000? 1 tlsmgr -rewrite unix - - n - - trivial-rewrite -bounce unix - - n - 0 bounce -defer unix - - n - 0 bounce -trace unix - - n - 0 bounce -verify unix - - n - 1 verify -flush unix n - n 1000? 0 flush -proxymap unix - - n - - proxymap -proxywrite unix - - n - 1 proxymap -smtp unix - - n - - smtp -relay unix - - n - - smtp - -o syslog_name=postfix/$service_name -# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 -showq unix n - n - - showq -error unix - - n - - error -retry unix - - n - - error -discard unix - - n - - discard -local unix - n n - - local -virtual unix - n n - - virtual -lmtp unix - - n - - lmtp -anvil unix - - n - 1 anvil -scache unix - - n - 1 scache -postlog unix-dgram n - n - 1 postlogd -# -# ==================================================================== -# Interfaces to non-Postfix software. Be sure to examine the manual -# pages of the non-Postfix software to find out what options it wants. -# -# Many of the following services use the Postfix pipe(8) delivery -# agent. See the pipe(8) man page for information about ${recipient} -# and other message envelope options. -# ==================================================================== -# -# maildrop. See the Postfix MAILDROP_README file for details. -# Also specify in main.cf: maildrop_destination_recipient_limit=1 -# -#maildrop unix - n n - - pipe -# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} -# -# ==================================================================== -# -# Recent Cyrus versions can use the existing "lmtp" master.cf entry. -# -# Specify in cyrus.conf: -# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 -# -# Specify in main.cf one or more of the following: -# mailbox_transport = lmtp:inet:localhost -# virtual_transport = lmtp:inet:localhost -# -# ==================================================================== -# -# Cyrus 2.1.5 (Amos Gouaux) -# Also specify in main.cf: cyrus_destination_recipient_limit=1 -# -#cyrus unix - n n - - pipe -# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} -# -# ==================================================================== -# -# Old example of delivery via Cyrus. -# -#old-cyrus unix - n n - - pipe -# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} -# -# ==================================================================== -# -# See the Postfix UUCP_README file for configuration details. -# -#uucp unix - n n - - pipe -# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) -# -# ==================================================================== -# -# Other external delivery methods. -# -#ifmail unix - n n - - pipe -# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) -# -#bsmtp unix - n n - - pipe -# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient -# -#scalemail-backend unix - n n - 2 pipe -# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store -# ${nexthop} ${user} ${extension} -# -#mailman unix - n n - - pipe -# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py -# ${nexthop} ${user} diff --git a/templates/Fedora/36/etc/postfix/master.cf.proto b/templates/Fedora/36/etc/postfix/master.cf.proto deleted file mode 100644 index f33d9dd..0000000 --- a/templates/Fedora/36/etc/postfix/master.cf.proto +++ /dev/null @@ -1,137 +0,0 @@ -# -# Postfix master process configuration file. For details on the format -# of the file, see the master(5) manual page (command: "man 5 master" or -# on-line: http://www.postfix.org/master.5.html). -# -# Do not forget to execute "postfix reload" after editing this file. -# -# ========================================================================== -# service type private unpriv chroot wakeup maxproc command + args -# (yes) (yes) (no) (never) (100) -# ========================================================================== -smtp inet n - n - - smtpd -#smtp inet n - n - 1 postscreen -#smtpd pass - - n - - smtpd -#dnsblog unix - - n - 0 dnsblog -#tlsproxy unix - - n - 0 tlsproxy -# Choose one: enable submission for loopback clients only, or for any client. -#127.0.0.1:submission inet n - n - - smtpd -#submission inet n - n - - smtpd -# -o syslog_name=postfix/submission -# -o smtpd_tls_security_level=encrypt -# -o smtpd_sasl_auth_enable=yes -# -o smtpd_tls_auth_only=yes -# -o smtpd_reject_unlisted_recipient=no -# -o smtpd_client_restrictions=$mua_client_restrictions -# -o smtpd_helo_restrictions=$mua_helo_restrictions -# -o smtpd_sender_restrictions=$mua_sender_restrictions -# -o smtpd_recipient_restrictions= -# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject -# -o milter_macro_daemon_name=ORIGINATING -# Choose one: enable smtps for loopback clients only, or for any client. -#127.0.0.1:smtps inet n - n - - smtpd -#smtps inet n - n - - smtpd -# -o syslog_name=postfix/smtps -# -o smtpd_tls_wrappermode=yes -# -o smtpd_sasl_auth_enable=yes -# -o smtpd_reject_unlisted_recipient=no -# -o smtpd_client_restrictions=$mua_client_restrictions -# -o smtpd_helo_restrictions=$mua_helo_restrictions -# -o smtpd_sender_restrictions=$mua_sender_restrictions -# -o smtpd_recipient_restrictions= -# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject -# -o milter_macro_daemon_name=ORIGINATING -#628 inet n - n - - qmqpd -pickup unix n - n 60 1 pickup -cleanup unix n - n - 0 cleanup -qmgr unix n - n 300 1 qmgr -#qmgr unix n - n 300 1 oqmgr -tlsmgr unix - - n 1000? 1 tlsmgr -rewrite unix - - n - - trivial-rewrite -bounce unix - - n - 0 bounce -defer unix - - n - 0 bounce -trace unix - - n - 0 bounce -verify unix - - n - 1 verify -flush unix n - n 1000? 0 flush -proxymap unix - - n - - proxymap -proxywrite unix - - n - 1 proxymap -smtp unix - - n - - smtp -relay unix - - n - - smtp - -o syslog_name=postfix/$service_name -# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 -showq unix n - n - - showq -error unix - - n - - error -retry unix - - n - - error -discard unix - - n - - discard -local unix - n n - - local -virtual unix - n n - - virtual -lmtp unix - - n - - lmtp -anvil unix - - n - 1 anvil -scache unix - - n - 1 scache -postlog unix-dgram n - n - 1 postlogd -# -# ==================================================================== -# Interfaces to non-Postfix software. Be sure to examine the manual -# pages of the non-Postfix software to find out what options it wants. -# -# Many of the following services use the Postfix pipe(8) delivery -# agent. See the pipe(8) man page for information about ${recipient} -# and other message envelope options. -# ==================================================================== -# -# maildrop. See the Postfix MAILDROP_README file for details. -# Also specify in main.cf: maildrop_destination_recipient_limit=1 -# -#maildrop unix - n n - - pipe -# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} -# -# ==================================================================== -# -# Recent Cyrus versions can use the existing "lmtp" master.cf entry. -# -# Specify in cyrus.conf: -# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 -# -# Specify in main.cf one or more of the following: -# mailbox_transport = lmtp:inet:localhost -# virtual_transport = lmtp:inet:localhost -# -# ==================================================================== -# -# Cyrus 2.1.5 (Amos Gouaux) -# Also specify in main.cf: cyrus_destination_recipient_limit=1 -# -#cyrus unix - n n - - pipe -# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} -# -# ==================================================================== -# -# Old example of delivery via Cyrus. -# -#old-cyrus unix - n n - - pipe -# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} -# -# ==================================================================== -# -# See the Postfix UUCP_README file for configuration details. -# -#uucp unix - n n - - pipe -# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) -# -# ==================================================================== -# -# Other external delivery methods. -# -#ifmail unix - n n - - pipe -# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) -# -#bsmtp unix - n n - - pipe -# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient -# -#scalemail-backend unix - n n - 2 pipe -# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store -# ${nexthop} ${user} ${extension} -# -#mailman unix - n n - - pipe -# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py -# ${nexthop} ${user} diff --git a/templates/Fedora/36/etc/postfix/postfix-files b/templates/Fedora/36/etc/postfix/postfix-files deleted file mode 100644 index 1eda0a3..0000000 --- a/templates/Fedora/36/etc/postfix/postfix-files +++ /dev/null @@ -1,432 +0,0 @@ -# -# Do not edit this file. -# -# This file controls the postfix-install script for installation of -# Postfix programs, configuration files and documentation, as well -# as the post-install script for setting permissions and for updating -# Postfix configuration files. See the respective manual pages within -# the script files. -# -# Do not list $command_directory or $shlib_directory in this file, -# or it will be blown away by a future Postfix uninstallation -# procedure. You would not want to lose all files in /usr/sbin or -# /usr/local/lib. -# -# Each record in this file describes one file or directory. -# Fields are separated by ":". Specify a null field as "-". -# Missing fields or separators at the end are OK. -# -# File format: -# name:type:owner:group:permission:flags -# No group means don't change group ownership. -# -# File types: -# d=directory -# f=regular file -# h=hard link (*) -# l=symbolic link (*) -# -# (*) With hard links and symbolic links, the owner field becomes the -# source pathname, while the group and permissions are ignored. -# -# File flags: -# No flag means the flag is not active. -# p=preserve existing file, do not replace (postfix-install). -# u=update owner/group/mode (post-install upgrade-permissions). -# c=create missing directory (post-install create-missing). -# r=apply owner/group recursively (post-install set/upgrade-permissions). -# o=obsolete, no longer part of Postfix -# 1=optional for non-default instance (config_dir != built-in default). -# -# Note: the "u" flag is for upgrading the permissions of existing files -# or directories after changes in Postfix architecture. For robustness -# it is a good idea to "u" all the files that have special ownership or -# permissions, so that running "make install" fixes any glitches. -# -# Note: order matters. Update shared libraries and database plugins -# before daemon/command-line programs. -$config_directory:d:root:-:755:u -$data_directory:d:$mail_owner:-:700:uc -$daemon_directory:d:root:-:755:u -$queue_directory:d:root:-:755:uc -$sample_directory:d:root:-:755:o -$readme_directory:d:root:-:755 -$html_directory:d:root:-:755 -$queue_directory/active:d:$mail_owner:-:700:ucr -$queue_directory/bounce:d:$mail_owner:-:700:ucr -$queue_directory/corrupt:d:$mail_owner:-:700:ucr -$queue_directory/defer:d:$mail_owner:-:700:ucr -$queue_directory/deferred:d:$mail_owner:-:700:ucr -$queue_directory/flush:d:$mail_owner:-:700:ucr -$queue_directory/hold:d:$mail_owner:-:700:ucr -$queue_directory/incoming:d:$mail_owner:-:700:ucr -$queue_directory/private:d:$mail_owner:-:700:uc -$queue_directory/maildrop:d:$mail_owner:$setgid_group:730:uc -$queue_directory/public:d:$mail_owner:$setgid_group:710:uc -$queue_directory/pid:d:root:-:755:uc -$queue_directory/saved:d:$mail_owner:-:700:ucr -$queue_directory/trace:d:$mail_owner:-:700:ucr -# Update shared libraries and plugins before daemon or command-line programs. -$shlib_directory/libpostfix-util.so:f:root:-:755 -$shlib_directory/libpostfix-global.so:f:root:-:755 -$shlib_directory/libpostfix-dns.so:f:root:-:755 -$shlib_directory/libpostfix-tls.so:f:root:-:755 -$shlib_directory/libpostfix-master.so:f:root:-:755 -$meta_directory/dynamicmaps.cf.d:d:root:-:755 -$meta_directory/dynamicmaps.cf:f:root:-:644 -$meta_directory/main.cf.proto:f:root:-:644 -$meta_directory/master.cf.proto:f:root:-:644 -$meta_directory/postfix-files.d:d:root:-:755 -$meta_directory/postfix-files:f:root:-:644 -$daemon_directory/anvil:f:root:-:755 -$daemon_directory/bounce:f:root:-:755 -$daemon_directory/cleanup:f:root:-:755 -$daemon_directory/discard:f:root:-:755 -$daemon_directory/dnsblog:f:root:-:755 -$daemon_directory/error:f:root:-:755 -$daemon_directory/flush:f:root:-:755 -$daemon_directory/local:f:root:-:755 -$daemon_directory/main.cf:f:root:-:644:o -$daemon_directory/master.cf:f:root:-:644:o -$daemon_directory/master:f:root:-:755 -$daemon_directory/oqmgr:f:root:-:755 -$daemon_directory/pickup:f:root:-:755 -$daemon_directory/pipe:f:root:-:755 -$daemon_directory/post-install:f:root:-:755 -# In case meta_directory == daemon_directory. -#$daemon_directory/postfix-files:f:root:-:644:o -#$daemon_directory/postfix-files.d:d:root:-:755:o -$daemon_directory/postfix-script:f:root:-:755 -$daemon_directory/postfix-tls-script:f:root:-:755 -$daemon_directory/postfix-wrapper:f:root:-:755 -$daemon_directory/postmulti-script:f:root:-:755 -$daemon_directory/postlogd:f:root:-:755 -$daemon_directory/postscreen:f:root:-:755 -$daemon_directory/proxymap:f:root:-:755 -$daemon_directory/qmgr:f:root:-:755 -$daemon_directory/qmqpd:f:root:-:755 -$daemon_directory/scache:f:root:-:755 -$daemon_directory/showq:f:root:-:755 -$daemon_directory/smtp:f:root:-:755 -$daemon_directory/smtpd:f:root:-:755 -$daemon_directory/spawn:f:root:-:755 -$daemon_directory/tlsproxy:f:root:-:755 -$daemon_directory/tlsmgr:f:root:-:755 -$daemon_directory/trivial-rewrite:f:root:-:755 -$daemon_directory/verify:f:root:-:755 -$daemon_directory/virtual:f:root:-:755 -$daemon_directory/nqmgr:h:$daemon_directory/qmgr -$daemon_directory/lmtp:h:$daemon_directory/smtp -$command_directory/postalias:f:root:-:755 -$command_directory/postcat:f:root:-:755 -$command_directory/postconf:f:root:-:755 -$command_directory/postfix:f:root:-:755 -$command_directory/postkick:f:root:-:755 -$command_directory/postlock:f:root:-:755 -$command_directory/postlog:f:root:-:755 -$command_directory/postmap:f:root:-:755 -$command_directory/postmulti:f:root:-:755 -$command_directory/postsuper:f:root:-:755 -$command_directory/postdrop:f:root:$setgid_group:2755:u -$command_directory/postqueue:f:root:$setgid_group:2755:u -$sendmail_path:f:root:-:755 -$newaliases_path:l:$sendmail_path -$mailq_path:l:$sendmail_path -$config_directory/access:f:root:-:644:p1 -$config_directory/canonical:f:root:-:644:p1 -$config_directory/cidr_table:f:root:-:644:o -$config_directory/generic:f:root:-:644:p1 -$config_directory/generics:f:root:-:644:o -$config_directory/header_checks:f:root:-:644:p1 -$config_directory/install.cf:f:root:-:644:o -$config_directory/main.cf:f:root:-:644:p -$config_directory/master.cf:f:root:-:644:p -$config_directory/pcre_table:f:root:-:644:o -$config_directory/regexp_table:f:root:-:644:o -$config_directory/relocated:f:root:-:644:p1 -$config_directory/tcp_table:f:root:-:644:o -$config_directory/transport:f:root:-:644:p1 -$config_directory/virtual:f:root:-:644:p1 -$config_directory/postfix-script:f:root:-:755:o -$config_directory/postfix-script-sgid:f:root:-:755:o -$config_directory/postfix-script-nosgid:f:root:-:755:o -$config_directory/post-install:f:root:-:755:o -$manpage_directory/man1/mailq.postfix.1.gz:f:root:-:644 -$manpage_directory/man1/newaliases.postfix.1.gz:f:root:-:644 -$manpage_directory/man1/postalias.1.gz:f:root:-:644 -$manpage_directory/man1/postcat.1.gz:f:root:-:644 -$manpage_directory/man1/postconf.1.gz:f:root:-:644 -$manpage_directory/man1/postdrop.1.gz:f:root:-:644 -$manpage_directory/man1/postfix.1.gz:f:root:-:644 -$manpage_directory/man1/postfix-tls.1.gz:f:root:-:644 -$manpage_directory/man1/postkick.1.gz:f:root:-:644 -$manpage_directory/man1/postlock.1.gz:f:root:-:644 -$manpage_directory/man1/postlog.1.gz:f:root:-:644 -$manpage_directory/man1/postmap.1.gz:f:root:-:644 -$manpage_directory/man1/postmulti.1.gz:f:root:-:644 -$manpage_directory/man1/postqueue.1.gz:f:root:-:644 -$manpage_directory/man1/postsuper.1.gz:f:root:-:644 -$manpage_directory/man1/sendmail.postfix.1.gz:f:root:-:644 -$manpage_directory/man5/access.5.gz:f:root:-:644 -$manpage_directory/man5/aliases.postfix.5.gz:f:root:-:644 -$manpage_directory/man5/body_checks.5.gz:f:root:-:644 -$manpage_directory/man5/bounce.5.gz:f:root:-:644 -$manpage_directory/man5/canonical.5.gz:f:root:-:644 -$manpage_directory/man5/cidr_table.5.gz:f:root:-:644 -$manpage_directory/man5/generics.5.gz:f:root:-:644:o -$manpage_directory/man5/generic.5.gz:f:root:-:644 -$manpage_directory/man5/header_checks.5.gz:f:root:-:644 -$manpage_directory/man5/master.5.gz:f:root:-:644 -$manpage_directory/man5/memcache_table.5.gz:f:root:-:644 -$manpage_directory/man5/socketmap_table.5.gz:f:root:-:644 -$manpage_directory/man5/nisplus_table.5.gz:f:root:-:644 -$manpage_directory/man5/postconf.5.gz:f:root:-:644 -$manpage_directory/man5/postfix-wrapper.5.gz:f:root:-:644 -$manpage_directory/man5/regexp_table.5.gz:f:root:-:644 -$manpage_directory/man5/relocated.5.gz:f:root:-:644 -$manpage_directory/man5/tcp_table.5.gz:f:root:-:644 -$manpage_directory/man5/transport.5.gz:f:root:-:644 -$manpage_directory/man5/virtual.5.gz:f:root:-:644 -$manpage_directory/man8/bounce.8.gz:f:root:-:644 -$manpage_directory/man8/cleanup.8.gz:f:root:-:644 -$manpage_directory/man8/anvil.8.gz:f:root:-:644 -$manpage_directory/man8/defer.8.gz:f:root:-:644 -$manpage_directory/man8/discard.8.gz:f:root:-:644 -$manpage_directory/man8/dnsblog.8.gz:f:root:-:644 -$manpage_directory/man8/error.8.gz:f:root:-:644 -$manpage_directory/man8/flush.8.gz:f:root:-:644 -$manpage_directory/man8/lmtp.8.gz:f:root:-:644 -$manpage_directory/man8/local.8.gz:f:root:-:644 -$manpage_directory/man8/master.8.gz:f:root:-:644 -$manpage_directory/man8/nqmgr.8.gz:f:root:-:644:o -$manpage_directory/man8/oqmgr.8.gz:f:root:-:644: -$manpage_directory/man8/pickup.8.gz:f:root:-:644 -$manpage_directory/man8/pipe.8.gz:f:root:-:644 -$manpage_directory/man8/postlogd.8.gz:f:root:-:644 -$manpage_directory/man8/postscreen.8.gz:f:root:-:644 -$manpage_directory/man8/proxymap.8.gz:f:root:-:644 -$manpage_directory/man8/qmgr.8.gz:f:root:-:644 -$manpage_directory/man8/qmqpd.8.gz:f:root:-:644 -$manpage_directory/man8/scache.8.gz:f:root:-:644 -$manpage_directory/man8/showq.8.gz:f:root:-:644 -$manpage_directory/man8/smtp.8.gz:f:root:-:644 -$manpage_directory/man8/smtpd.postfix.8.gz:f:root:-:644 -$manpage_directory/man8/spawn.8.gz:f:root:-:644 -$manpage_directory/man8/tlsproxy.8.gz:f:root:-:644 -$manpage_directory/man8/tlsmgr.8.gz:f:root:-:644 -$manpage_directory/man8/trace.8.gz:f:root:-:644 -$manpage_directory/man8/trivial-rewrite.8.gz:f:root:-:644 -$manpage_directory/man8/verify.8.gz:f:root:-:644 -$manpage_directory/man8/virtual.8.gz:f:root:-:644 -$sample_directory/sample-aliases.cf:f:root:-:644:o -$sample_directory/sample-auth.cf:f:root:-:644:o -$sample_directory/sample-canonical.cf:f:root:-:644:o -$sample_directory/sample-compatibility.cf:f:root:-:644:o -$sample_directory/sample-debug.cf:f:root:-:644:o -$sample_directory/sample-filter.cf:f:root:-:644:o -$sample_directory/sample-flush.cf:f:root:-:644:o -$sample_directory/sample-ipv6.cf:f:root:-:644:o -$sample_directory/sample-ldap.cf:f:root:-:644:o -$sample_directory/sample-lmtp.cf:f:root:-:644:o -$sample_directory/sample-local.cf:f:root:-:644:o -$sample_directory/sample-mime.cf:f:root:-:644:o -$sample_directory/sample-misc.cf:f:root:-:644:o -$sample_directory/sample-pcre-access.cf:f:root:-:644:o -$sample_directory/sample-pcre-body.cf:f:root:-:644:o -$sample_directory/sample-pcre-header.cf:f:root:-:644:o -$sample_directory/sample-pgsql-aliases.cf:f:root:-:644:o -$sample_directory/sample-qmqpd.cf:f:root:-:644:o -$sample_directory/sample-rate.cf:f:root:-:644:o -$sample_directory/sample-regexp-access.cf:f:root:-:644:o -$sample_directory/sample-regexp-body.cf:f:root:-:644:o -$sample_directory/sample-regexp-header.cf:f:root:-:644:o -$sample_directory/sample-relocated.cf:f:root:-:644:o -$sample_directory/sample-resource.cf:f:root:-:644:o -$sample_directory/sample-rewrite.cf:f:root:-:644:o -$sample_directory/sample-scheduler.cf:f:root:-:644:o -$sample_directory/sample-smtp.cf:f:root:-:644:o -$sample_directory/sample-smtpd.cf:f:root:-:644:o -$sample_directory/sample-tls.cf:f:root:-:644:o -$sample_directory/sample-transport.cf:f:root:-:644:o -$sample_directory/sample-verify.cf:f:root:-:644:o -$sample_directory/sample-virtual.cf:f:root:-:644:o -$readme_directory/AAAREADME:f:root:-:644 -$readme_directory/ADDRESS_CLASS_README:f:root:-:644 -$readme_directory/ADDRESS_REWRITING_README:f:root:-:644 -$readme_directory/ADDRESS_VERIFICATION_README:f:root:-:644 -$readme_directory/BACKSCATTER_README:f:root:-:644 -$readme_directory/BASIC_CONFIGURATION_README:f:root:-:644 -$readme_directory/BUILTIN_FILTER_README:f:root:-:644 -$readme_directory/COMPATIBILITY_README:f:root:-:644 -$readme_directory/CONNECTION_CACHE_README:f:root:-:644 -$readme_directory/CONTENT_INSPECTION_README:f:root:-:644 -$readme_directory/DATABASE_README:f:root:-:644 -$readme_directory/DB_README:f:root:-:644 -$readme_directory/DEBUG_README:f:root:-:644 -$readme_directory/DSN_README:f:root:-:644 -$readme_directory/ETRN_README:f:root:-:644 -$readme_directory/FILTER_README:f:root:-:644 -$readme_directory/FORWARD_SECRECY_README:f:root:-:644 -$readme_directory/HOSTING_README:f:root:-:644:o -$readme_directory/INSTALL:f:root:-:644 -$readme_directory/IPV6_README:f:root:-:644 -$readme_directory/LINUX_README:f:root:-:644 -$readme_directory/LOCAL_RECIPIENT_README:f:root:-:644 -$readme_directory/MACOSX_README:f:root:-:644:o -$readme_directory/MAILDROP_README:f:root:-:644 -$readme_directory/MEMCACHE_README:f:root:-:644 -$readme_directory/MILTER_README:f:root:-:644 -$readme_directory/MULTI_INSTANCE_README:f:root:-:644 -$readme_directory/NFS_README:f:root:-:644 -$readme_directory/OVERVIEW:f:root:-:644 -$readme_directory/PACKAGE_README:f:root:-:644 -$readme_directory/POSTSCREEN_README:f:root:-:644 -$readme_directory/QMQP_README:f:root:-:644:o -$readme_directory/QSHAPE_README:f:root:-:644 -$readme_directory/RELEASE_NOTES:f:root:-:644 -$readme_directory/RESTRICTION_CLASS_README:f:root:-:644 -$readme_directory/SASL_README:f:root:-:644 -$readme_directory/SCHEDULER_README:f:root:-:644 -$readme_directory/SMTPD_ACCESS_README:f:root:-:644 -$readme_directory/SMTPD_POLICY_README:f:root:-:644 -$readme_directory/SMTPD_PROXY_README:f:root:-:644 -$readme_directory/SOHO_README:f:root:-:644 -$readme_directory/STANDARD_CONFIGURATION_README:f:root:-:644 -$readme_directory/STRESS_README:f:root:-:644 -$readme_directory/TLS_LEGACY_README:f:root:-:644 -$readme_directory/TLS_README:f:root:-:644 -$readme_directory/TUNING_README:f:root:-:644 -$readme_directory/ULTRIX_README:f:root:-:644 -$readme_directory/UUCP_README:f:root:-:644 -$readme_directory/VERP_README:f:root:-:644 -$readme_directory/VIRTUAL_README:f:root:-:644 -$readme_directory/XCLIENT_README:f:root:-:644 -$readme_directory/XFORWARD_README:f:root:-:644 -$html_directory/ADDRESS_CLASS_README.html:f:root:-:644 -$html_directory/ADDRESS_REWRITING_README.html:f:root:-:644 -$html_directory/ADDRESS_VERIFICATION_README.html:f:root:-:644 -$html_directory/BACKSCATTER_README.html:f:root:-:644 -$html_directory/BASIC_CONFIGURATION_README.html:f:root:-:644 -$html_directory/BUILTIN_FILTER_README.html:f:root:-:644 -$html_directory/CDB_README.html:f:root:-:644 -$html_directory/COMPATIBILITY_README.html:f:root:-:644 -$html_directory/CONNECTION_CACHE_README.html:f:root:-:644 -$html_directory/CONTENT_INSPECTION_README.html:f:root:-:644 -$html_directory/CYRUS_README.html:f:root:-:644:o -$html_directory/DATABASE_README.html:f:root:-:644 -$html_directory/DB_README.html:f:root:-:644 -$html_directory/DEBUG_README.html:f:root:-:644 -$html_directory/DSN_README.html:f:root:-:644 -$html_directory/ETRN_README.html:f:root:-:644 -$html_directory/FILTER_README.html:f:root:-:644 -$html_directory/FORWARD_SECRECY_README.html:f:root:-:644 -$html_directory/INSTALL.html:f:root:-:644 -$html_directory/IPV6_README.html:f:root:-:644 -$html_directory/LDAP_README.html:f:root:-:644 -$html_directory/LINUX_README.html:f:root:-:644 -$html_directory/LMDB_README.html:f:root:-:644 -$html_directory/LOCAL_RECIPIENT_README.html:f:root:-:644 -$html_directory/MAILDROP_README.html:f:root:-:644 -$html_directory/MILTER_README.html:f:root:-:644 -$html_directory/MULTI_INSTANCE_README.html:f:root:-:644 -$html_directory/MYSQL_README.html:f:root:-:644 -$html_directory/SQLITE_README.html:f:root:-:644 -$html_directory/NFS_README.html:f:root:-:644 -$html_directory/OVERVIEW.html:f:root:-:644 -$html_directory/PACKAGE_README.html:f:root:-:644 -$html_directory/PCRE_README.html:f:root:-:644 -$html_directory/PGSQL_README.html:f:root:-:644 -$html_directory/POSTSCREEN_README.html:f:root:-:644 -$html_directory/QMQP_README.html:f:root:-:644:o -$html_directory/QSHAPE_README.html:f:root:-:644 -$html_directory/RESTRICTION_CLASS_README.html:f:root:-:644 -$html_directory/SASL_README.html:f:root:-:644 -$html_directory/SCHEDULER_README.html:f:root:-:644 -$html_directory/SMTPD_ACCESS_README.html:f:root:-:644 -$html_directory/SMTPD_POLICY_README.html:f:root:-:644 -$html_directory/SMTPD_PROXY_README.html:f:root:-:644 -$html_directory/SOHO_README.html:f:root:-:644 -$html_directory/STANDARD_CONFIGURATION_README.html:f:root:-:644 -$html_directory/STRESS_README.html:f:root:-:644 -$html_directory/TLS_LEGACY_README.html:f:root:-:644 -$html_directory/TLS_README.html:f:root:-:644 -$html_directory/TUNING_README.html:f:root:-:644 -$html_directory/ULTRIX_README.html:f:root:-:644:o -$html_directory/UUCP_README.html:f:root:-:644 -$html_directory/VERP_README.html:f:root:-:644 -$html_directory/VIRTUAL_README.html:f:root:-:644 -$html_directory/XCLIENT_README.html:f:root:-:644 -$html_directory/XFORWARD_README.html:f:root:-:644 -$html_directory/access.5.html:f:root:-:644 -$html_directory/aliases.5.html:f:root:-:644 -$html_directory/anvil.8.html:f:root:-:644 -$html_directory/bounce.8.html:f:root:-:644 -$html_directory/canonical.5.html:f:root:-:644 -$html_directory/cidr_table.5.html:f:root:-:644 -$html_directory/cleanup.8.html:f:root:-:644 -$html_directory/defer.8.html:h:$html_directory/bounce.8.html:-:644 -$html_directory/discard.8.html:f:root:-:644 -$html_directory/dnsblog.8.html:f:root:-:644 -$html_directory/error.8.html:f:root:-:644 -$html_directory/flush.8.html:f:root:-:644 -$html_directory/generics.5.html:f:root:-:644:o -$html_directory/generic.5.html:f:root:-:644 -$html_directory/header_checks.5.html:f:root:-:644 -$html_directory/index.html:f:root:-:644 -$html_directory/ldap_table.5.html:f:root:-:644 -$html_directory/lmtp.8.html:f:root:-:644 -$html_directory/local.8.html:f:root:-:644 -$html_directory/mailq.1.html:f:root:-:644 -$html_directory/master.5.html:f:root:-:644 -$html_directory/master.8.html:f:root:-:644 -$html_directory/memcache_table.5.html:f:root:-:644 -$html_directory/mysql_table.5.html:f:root:-:644 -$html_directory/sqlite_table.5.html:f:root:-:644 -$html_directory/nisplus_table.5.html:f:root:-:644 -$html_directory/newaliases.1.html:h:$html_directory/mailq.1.html:-:644 -$html_directory/oqmgr.8.html:f:root:-:644 -$html_directory/pcre_table.5.html:f:root:-:644 -$html_directory/pgsql_table.5.html:f:root:-:644 -$html_directory/pickup.8.html:f:root:-:644 -$html_directory/pipe.8.html:f:root:-:644 -$html_directory/postalias.1.html:f:root:-:644 -$html_directory/postcat.1.html:f:root:-:644 -$html_directory/postconf.1.html:f:root:-:644 -$html_directory/postconf.5.html:f:root:-:644 -$html_directory/postdrop.1.html:f:root:-:644 -$html_directory/postfix-logo.jpg:f:root:-:644 -$html_directory/postfix-manuals.html:f:root:-:644 -$html_directory/postfix-wrapper.5.html:f:root:-:644 -$html_directory/postfix.1.html:f:root:-:644 -$html_directory/postkick.1.html:f:root:-:644 -$html_directory/postlock.1.html:f:root:-:644 -$html_directory/postlog.1.html:f:root:-:644 -$html_directory/postmap.1.html:f:root:-:644 -$html_directory/postmulti.1.html:f:root:-:644 -$html_directory/postlogd.8.html:f:root:-:644 -$html_directory/postqueue.1.html:f:root:-:644 -$html_directory/postscreen.8.html:f:root:-:644 -$html_directory/postsuper.1.html:f:root:-:644 -$html_directory/qshape.1.html:f:root:-:644 -$html_directory/proxymap.8.html:f:root:-:644 -$html_directory/qmgr.8.html:f:root:-:644 -$html_directory/qmqp-sink.1.html:f:root:-:644 -$html_directory/qmqp-source.1.html:f:root:-:644 -$html_directory/qmqpd.8.html:f:root:-:644 -$html_directory/regexp_table.5.html:f:root:-:644 -$html_directory/relocated.5.html:f:root:-:644 -$html_directory/sendmail.1.html:h:$html_directory/mailq.1.html:-:644 -$html_directory/showq.8.html:f:root:-:644 -$html_directory/smtp-sink.1.html:f:root:-:644 -$html_directory/smtp-source.1.html:f:root:-:644 -$html_directory/smtp.8.html:h:$html_directory/lmtp.8.html:-:644 -$html_directory/smtpd.8.html:f:root:-:644 -$html_directory/spawn.8.html:f:root:-:644 -$html_directory/tlsproxy.8.html:f:root:-:644 -$html_directory/tcp_table.5.html:f:root:-:644 -$html_directory/trace.8.html:h:$html_directory/bounce.8.html:-:644 -$html_directory/transport.5.html:f:root:-:644 -$html_directory/trivial-rewrite.8.html:f:root:-:644 -$html_directory/verify.8.html:f:root:-:644 -$html_directory/virtual.5.html:f:root:-:644 -$html_directory/virtual.8.html:f:root:-:644 diff --git a/templates/Fedora/36/etc/postfix/postfix-files.d/ldap b/templates/Fedora/36/etc/postfix/postfix-files.d/ldap deleted file mode 100644 index 684b05d..0000000 --- a/templates/Fedora/36/etc/postfix/postfix-files.d/ldap +++ /dev/null @@ -1,3 +0,0 @@ -$shlib_directory/postfix-ldap.so:f:root:-:755 -$manpage_directory/man5/ldap_table.5.gz:f:root:-:644 -$readme_directory/LDAP_README:f:root:-:644 diff --git a/templates/Fedora/36/etc/postfix/postfix-files.d/mysql b/templates/Fedora/36/etc/postfix/postfix-files.d/mysql deleted file mode 100644 index 8e41d61..0000000 --- a/templates/Fedora/36/etc/postfix/postfix-files.d/mysql +++ /dev/null @@ -1,3 +0,0 @@ -$shlib_directory/postfix-mysql.so:f:root:-:755 -$manpage_directory/man5/mysql_table.5.gz:f:root:-:644 -$readme_directory/MYSQL_README:f:root:-:644 diff --git a/templates/Fedora/36/etc/postfix/postfix-files.d/pcre b/templates/Fedora/36/etc/postfix/postfix-files.d/pcre deleted file mode 100644 index a34fd73..0000000 --- a/templates/Fedora/36/etc/postfix/postfix-files.d/pcre +++ /dev/null @@ -1,3 +0,0 @@ -$shlib_directory/postfix-pcre.so:f:root:-:755 -$manpage_directory/man5/pcre_table.5.gz:f:root:-:644 -$readme_directory/PCRE_README:f:root:-:644 diff --git a/templates/Fedora/36/etc/postfix/relocated b/templates/Fedora/36/etc/postfix/relocated deleted file mode 100644 index e50edfd..0000000 --- a/templates/Fedora/36/etc/postfix/relocated +++ /dev/null @@ -1,176 +0,0 @@ -# RELOCATED(5) RELOCATED(5) -# -# NAME -# relocated - Postfix relocated table format -# -# SYNOPSIS -# postmap /etc/postfix/relocated -# -# DESCRIPTION -# The optional relocated(5) table provides the information -# that is used in "user has moved to new_location" bounce -# messages. -# -# Normally, the relocated(5) table is specified as a text -# file that serves as input to the postmap(1) command. The -# result, an indexed file in dbm or db format, is used for -# fast searching by the mail system. Execute the command -# "postmap /etc/postfix/relocated" to rebuild an indexed -# file after changing the corresponding relocated table. -# -# When the table is provided via other means such as NIS, -# LDAP or SQL, the same lookups are done as for ordinary -# indexed files. -# -# Alternatively, the table can be provided as a regu- -# lar-expression map where patterns are given as regular -# expressions, or lookups can be directed to TCP-based -# server. In those case, the lookups are done in a slightly -# different way as described below under "REGULAR EXPRESSION -# TABLES" or "TCP-BASED TABLES". -# -# Table lookups are case insensitive. -# -# CASE FOLDING -# The search string is folded to lowercase before database -# lookup. As of Postfix 2.3, the search string is not case -# folded with database types such as regexp: or pcre: whose -# lookup fields can match both upper and lower case. -# -# TABLE FORMAT -# The input format for the postmap(1) command is as follows: -# -# o An entry has one of the following form: -# -# pattern new_location -# -# Where new_location specifies contact information -# such as an email address, or perhaps a street -# address or telephone number. -# -# o Empty lines and whitespace-only lines are ignored, -# as are lines whose first non-whitespace character -# is a `#'. -# -# o A logical line starts with non-whitespace text. A -# line that starts with whitespace continues a logi- -# cal line. -# -# TABLE SEARCH ORDER -# With lookups from indexed files such as DB or DBM, or from -# networked tables such as NIS, LDAP or SQL, patterns are -# tried in the order as listed below: -# -# user@domain -# Matches user@domain. This form has precedence over -# all other forms. -# -# user Matches user@site when site is $myorigin, when site -# is listed in $mydestination, or when site is listed -# in $inet_interfaces or $proxy_interfaces. -# -# @domain -# Matches other addresses in domain. This form has -# the lowest precedence. -# -# ADDRESS EXTENSION -# When a mail address localpart contains the optional recip- -# ient delimiter (e.g., user+foo@domain), the lookup order -# becomes: user+foo@domain, user@domain, user+foo, user, and -# @domain. -# -# REGULAR EXPRESSION TABLES -# This section describes how the table lookups change when -# the table is given in the form of regular expressions or -# when lookups are directed to a TCP-based server. For a -# description of regular expression lookup table syntax, see -# regexp_table(5) or pcre_table(5). For a description of the -# TCP client/server table lookup protocol, see tcp_table(5). -# This feature is not available up to and including Postfix -# version 2.4. -# -# Each pattern is a regular expression that is applied to -# the entire address being looked up. Thus, user@domain mail -# addresses are not broken up into their user and @domain -# constituent parts, nor is user+foo broken up into user and -# foo. -# -# Patterns are applied in the order as specified in the ta- -# ble, until a pattern is found that matches the search -# string. -# -# Results are the same as with indexed file lookups, with -# the additional feature that parenthesized substrings from -# the pattern can be interpolated as $1, $2 and so on. -# -# TCP-BASED TABLES -# This section describes how the table lookups change when -# lookups are directed to a TCP-based server. For a descrip- -# tion of the TCP client/server lookup protocol, see tcp_ta- -# ble(5). This feature is not available up to and including -# Postfix version 2.4. -# -# Each lookup operation uses the entire address once. Thus, -# user@domain mail addresses are not broken up into their -# user and @domain constituent parts, nor is user+foo broken -# up into user and foo. -# -# Results are the same as with indexed file lookups. -# -# BUGS -# The table format does not understand quoting conventions. -# -# CONFIGURATION PARAMETERS -# The following main.cf parameters are especially relevant. -# The text below provides only a parameter summary. See -# postconf(5) for more details including examples. -# -# relocated_maps -# List of lookup tables for relocated users or sites. -# -# Other parameters of interest: -# -# inet_interfaces -# The network interface addresses that this system -# receives mail on. You need to stop and start Post- -# fix when this parameter changes. -# -# mydestination -# List of domains that this mail system considers -# local. -# -# myorigin -# The domain that is appended to locally-posted mail. -# -# proxy_interfaces -# Other interfaces that this machine receives mail on -# by way of a proxy agent or network address transla- -# tor. -# -# SEE ALSO -# trivial-rewrite(8), address resolver -# postmap(1), Postfix lookup table manager -# postconf(5), configuration parameters -# -# README FILES -# Use "postconf readme_directory" or "postconf html_direc- -# tory" to locate this information. -# DATABASE_README, Postfix lookup table overview -# ADDRESS_REWRITING_README, address rewriting guide -# -# LICENSE -# The Secure Mailer license must be distributed with this -# software. -# -# AUTHOR(S) -# Wietse Venema -# IBM T.J. Watson Research -# P.O. Box 704 -# Yorktown Heights, NY 10598, USA -# -# Wietse Venema -# Google, Inc. -# 111 8th Avenue -# New York, NY 10011, USA -# -# RELOCATED(5) diff --git a/templates/Fedora/36/etc/postfix/transport b/templates/Fedora/36/etc/postfix/transport deleted file mode 100644 index 1dcd787..0000000 --- a/templates/Fedora/36/etc/postfix/transport +++ /dev/null @@ -1,317 +0,0 @@ -# TRANSPORT(5) TRANSPORT(5) -# -# NAME -# transport - Postfix transport table format -# -# SYNOPSIS -# postmap /etc/postfix/transport -# -# postmap -q "string" /etc/postfix/transport -# -# postmap -q - /etc/postfix/transport = 3.5): -# -# example.com smtp:bar.example, foo.example -# -# This tries to deliver to bar.example before trying to -# deliver to foo.example. -# -# The error mailer can be used to bounce mail: -# -# .example.com error:mail for *.example.com is not deliverable -# -# This causes all mail for user@anything.example.com to be -# bounced. -# -# REGULAR EXPRESSION TABLES -# This section describes how the table lookups change when -# the table is given in the form of regular expressions. For -# a description of regular expression lookup table syntax, -# see regexp_table(5) or pcre_table(5). -# -# Each pattern is a regular expression that is applied to -# the entire address being looked up. Thus, -# some.domain.hierarchy is not looked up via its parent -# domains, nor is user+foo@domain looked up as user@domain. -# -# Patterns are applied in the order as specified in the ta- -# ble, until a pattern is found that matches the search -# string. -# -# The trivial-rewrite(8) server disallows regular expression -# substitution of $1 etc. in regular expression lookup -# tables, because that could open a security hole (Postfix -# version 2.3 and later). -# -# TCP-BASED TABLES -# This section describes how the table lookups change when -# lookups are directed to a TCP-based server. For a descrip- -# tion of the TCP client/server lookup protocol, see tcp_ta- -# ble(5). This feature is not available up to and including -# Postfix version 2.4. -# -# Each lookup operation uses the entire recipient address -# once. Thus, some.domain.hierarchy is not looked up via -# its parent domains, nor is user+foo@domain looked up as -# user@domain. -# -# Results are the same as with indexed file lookups. -# -# CONFIGURATION PARAMETERS -# The following main.cf parameters are especially relevant. -# The text below provides only a parameter summary. See -# postconf(5) for more details including examples. -# -# empty_address_recipient (MAILER-DAEMON) -# The recipient of mail addressed to the null -# address. -# -# parent_domain_matches_subdomains (see 'postconf -d' out- -# put) -# A list of Postfix features where the pattern "exam- -# ple.com" also matches subdomains of example.com, -# instead of requiring an explicit ".example.com" -# pattern. -# -# transport_maps (empty) -# Optional lookup tables with mappings from recipient -# address to (message delivery transport, next-hop -# destination). -# -# SEE ALSO -# trivial-rewrite(8), rewrite and resolve addresses -# master(5), master.cf file format -# postconf(5), configuration parameters -# postmap(1), Postfix lookup table manager -# -# README FILES -# Use "postconf readme_directory" or "postconf html_direc- -# tory" to locate this information. -# ADDRESS_REWRITING_README, address rewriting guide -# DATABASE_README, Postfix lookup table overview -# FILTER_README, external content filter -# -# LICENSE -# The Secure Mailer license must be distributed with this -# software. -# -# AUTHOR(S) -# Wietse Venema -# IBM T.J. Watson Research -# P.O. Box 704 -# Yorktown Heights, NY 10598, USA -# -# Wietse Venema -# Google, Inc. -# 111 8th Avenue -# New York, NY 10011, USA -# -# TRANSPORT(5) diff --git a/templates/Fedora/36/etc/postfix/virtual b/templates/Fedora/36/etc/postfix/virtual deleted file mode 100644 index da9cd65..0000000 --- a/templates/Fedora/36/etc/postfix/virtual +++ /dev/null @@ -1,324 +0,0 @@ -# VIRTUAL(5) VIRTUAL(5) -# -# NAME -# virtual - Postfix virtual alias table format -# -# SYNOPSIS -# postmap /etc/postfix/virtual -# -# postmap -q "string" /etc/postfix/virtual -# -# postmap -q - /etc/postfix/virtual -ReportAddress "Postmaster" <{{ postmaster_email }}> - -## Add a DKIM-Filter header field to messages passing through this filter -## to identify messages it has processed. -SoftwareHeader yes - -## SIGNING OPTIONS - -## Selects the canonicalization method(s) to be used when signing messages. -Canonicalization relaxed/relaxed - -## Domain(s) whose mail should be signed by this filter. Mail from other domains will -## be verified rather than being signed. Uncomment and use your domain name. -## This parameter is not required if a SigningTable is in use. -# Domain example.com - -## Defines the name of the selector to be used when signing messages. -Selector default - -## Specifies the minimum number of key bits for acceptable keys and signatures. -MinimumKeyBits 1024 - -## Gives the location of a private key to be used for signing ALL messages. This -## directive is ignored if KeyTable is enabled. -# KeyFile /etc/opendkim/keys/default.private - -## Gives the location of a file mapping key names to signing keys. In simple terms, -## this tells OpenDKIM where to find your keys. If present, overrides any KeyFile -## directive in the configuration file. Requires SigningTable be enabled. -# KeyTable /etc/opendkim/KeyTable - -## Defines a table used to select one or more signatures to apply to a message based -## on the address found in the From: header field. In simple terms, this tells -## OpenDKIM how to use your keys. Requires KeyTable be enabled. -# SigningTable refile:/etc/opendkim/SigningTable - -## Identifies a set of "external" hosts that may send mail through the server as one -## of the signing domains without credentials as such. -# ExternalIgnoreList refile:/etc/opendkim/TrustedHosts - -## Identifies a set "internal" hosts whose mail should be signed rather than verified. -# InternalHosts refile:/etc/opendkim/TrustedHosts - -## Contains a list of IP addresses, CIDR blocks, hostnames or domain names -## whose mail should be neither signed nor verified by this filter. See man -## page for file format. -# PeerList X.X.X.X - -## Always oversign From (sign using actual From and a null From to prevent -## malicious signatures header fields (From and/or others) between the signer -## and the verifier. From is oversigned by default in the Fedora package -## because it is often the identity key used by reputation systems and thus -## somewhat security sensitive. -OversignHeaders From - -## Instructs the DKIM library to maintain its own local cache of keys and -## policies retrieved from DNS, rather than relying on the nameserver for -## caching service. Useful if the nameserver being used by the filter is -## not local. -QueryCache yes diff --git a/templates/Fedora/37/etc/opendkim/KeyTable b/templates/Fedora/37/etc/opendkim/KeyTable deleted file mode 100644 index e804d68..0000000 --- a/templates/Fedora/37/etc/opendkim/KeyTable +++ /dev/null @@ -1,6 +0,0 @@ -# OPENDKIM KEY TABLE -# To use this file, uncomment the #KeyTable option in /etc/opendkim.conf, -# then uncomment the following line and replace example.com with your domain -# name, then restart OpenDKIM. Additional keys may be added on separate lines. - -#default._domainkey.example.com example.com:default:/etc/opendkim/keys/default.private diff --git a/templates/Fedora/37/etc/opendkim/SigningTable b/templates/Fedora/37/etc/opendkim/SigningTable deleted file mode 100644 index e8161a1..0000000 --- a/templates/Fedora/37/etc/opendkim/SigningTable +++ /dev/null @@ -1,25 +0,0 @@ -# OPENDKIM SIGNING TABLE -# This table controls how to apply one or more signatures to outgoing messages based -# on the address found in the From: header field. In simple terms, this tells -# OpenDKIM "how" to apply your keys. - -# To use this file, uncomment the SigningTable option in /etc/opendkim.conf, -# then uncomment one of the usage examples below and replace example.com with your -# domain name, then restart OpenDKIM. - -# WILDCARD EXAMPLE -# Enables signing for any address on the listed domain(s), but will work only if -# "refile:/etc/opendkim/SigningTable" is included in /etc/opendkim.conf. -# Create additional lines for additional domains. - -#*@example.com default._domainkey.example.com - -# NON-WILDCARD EXAMPLE -# If "file:" (instead of "refile:") is specified in /etc/opendkim.conf, then -# wildcards will not work. Instead, full user@host is checked first, then simply host, -# then user@.domain (with all superdomains checked in sequence, so "foo.example.com" -# would first check "user@foo.example.com", then "user@.example.com", then "user@.com"), -# then .domain, then user@*, and finally *. See the opendkim.conf(5) man page under -# "SigningTable" for more details. - -#example.com default._domainkey.example.com diff --git a/templates/Fedora/37/etc/opendkim/TrustedHosts b/templates/Fedora/37/etc/opendkim/TrustedHosts deleted file mode 100644 index 7a086d4..0000000 --- a/templates/Fedora/37/etc/opendkim/TrustedHosts +++ /dev/null @@ -1,9 +0,0 @@ -# OPENDKIM TRUSTED HOSTS -# To use this file, uncomment the #ExternalIgnoreList and/or the #InternalHosts -# option in /etc/opendkim.conf then restart OpenDKIM. Additional hosts -# may be added on separate lines (IP addresses, hostnames, or CIDR ranges). -# The localhost IP (127.0.0.1) should always be the first entry in this file. -127.0.0.1 -::1 -#host.example.com -#192.168.1.0/24 diff --git a/templates/Fedora/37/etc/opendmarc.conf b/templates/Fedora/37/etc/opendmarc.conf deleted file mode 100644 index cc1018d..0000000 --- a/templates/Fedora/37/etc/opendmarc.conf +++ /dev/null @@ -1,442 +0,0 @@ -## opendmarc.conf -- configuration file for OpenDMARC filter -## -## Copyright (c) 2012-2015, 2018, 2021, The Trusted Domain Project. -## All rights reserved. - -## DEPRECATED CONFIGURATION OPTIONS -## -## The following configuration options are no longer valid. They should be -## removed from your existing configuration file to prevent potential issues. -## Failure to do so may result in opendmarc being unable to start. -## -## Renamed in 1.3.0: -## ForensicReports became FailureReports -## ForensicReportsBcc became FailureReportsBcc -## ForensicReportsOnNone became FailureReportsOnNone -## ForensicReportsSentBy became FailureReportsSentBy - -## CONFIGURATION OPTIONS - -## AuthservID (string) -## defaults to MTA name -## -## Sets the "authserv-id" to use when generating the Authentication-Results: -## header field after verifying a message. If the string "HOSTNAME" is -## provided, the name of the host running the filter (as returned by the -## gethostname(3) function) will be used. -# -# AuthservID name - -## AuthservIDWithJobID { true | false } -## default "false" -## -## If "true", requests that the authserv-id portion of the added -## Authentication-Results header fields contain the job ID of the message -## being evaluated. -# -# AuthservIDWithJobID false - -## AutoRestart { true | false } -## default "false" -## -## Automatically re-start on failures. Use with caution; if the filter fails -## instantly after it starts, this can cause a tight fork(2) loop. -# -# AutoRestart false - -## AutoRestartCount n -## default 0 -## -## Sets the maximum automatic restart count. After this number of automatic -## restarts, the filter will give up and terminate. A value of 0 implies no -## limit. -# -# AutoRestartCount 0 - -## AutoRestartRate n/t[u] -## default (no limit) -## -## Sets the maximum automatic restart rate. If the filter begins restarting -## faster than the rate defined here, it will give up and terminate. This -## is a string of the form n/t[u] where n is an integer limiting the count -## of restarts in the given interval and t[u] defines the time interval -## through which the rate is calculated; t is an integer and u defines the -## units thus represented ("s" or "S" for seconds, the default; "m" or "M" -## for minutes; "h" or "H" for hours; "d" or "D" for days). For example, a -## value of "10/1h" limits the restarts to 10 in one hour. There is no -## default, meaning restart rate is not limited. -# -# AutoRestartRate n/t[u] - -## Background { true | false } -## default "true" -## -## Causes opendmarc to fork and exits immediately, leaving the service -## running in the background. -# -# Background true - -## BaseDirectory (string) -## default (none) -## -## If set, instructs the filter to change to the specified directory using -## chdir(2) before doing anything else. This means any files referenced -## elsewhere in the configuration file can be specified relative to this -## directory. It's also useful for arranging that any crash dumps will be -## saved to a specific location. -# -# BaseDirectory /var/run/opendmarc - -## ChangeRootDirectory (string) -## default (none) -## -## Requests that the operating system change the effective root directory of -## the process to the one specified here prior to beginning execution. -## chroot(2) requires superuser access. A warning will be generated if -## UserID is not also set. -# -# ChangeRootDirectory /var/chroot/opendmarc - -## CopyFailuresTo (string) -## default (none) -## -## Requests addition of the specified email address to the envelope of -## any message that fails the DMARC evaluation. -# -# CopyFailuresTo postmaster@localhost - -## DomainWhitelist (string) -## default (none) -## -## A brief list of whitelisted domains for which ARC signature headers are -## trusted as determined by evaluating entries in the "arc.chain" field found -## in a locally generated Authentication-Results header. -## -## This list will be concatenated with DomainWhitelistFile (if provided). -## -# -# DomainWhitelist example.com - -## DomainWhitelistFile path -## default (none) -## -## A comprehensive list of whitelisted domains for which ARC signature headers -## are trusted as determined by evaluating entries in the "arc.chain" field -## found in a locally generated Authentication-Results header. -## -## This list will be concatenated with DomainWhitelist (if provided). -## -# -# DomainWhitelistFile /etc/opendmarc/whitelist.domains - -## DomainWhitelistSize -## default 3000 -## -## The maximum number of entries in the DomainWhitelist including both entries -## in the DomainWhitelist configuration parameter (above) and entries in the -## DomainWhitelistFile. This number will be increased by approximately 20% to -## increase the efficiency of the hashing algorithm. -## -# -# DomainWhitelistSize 3000 - -## DNSTimeout (integer) -## default 5 -## -## Sets the DNS timeout in seconds. A value of 0 causes an infinite wait. -## (NOT YET IMPLEMENTED) -# -# DNSTimeout 5 - -## EnableCoredumps { true | false } -## default "false" -## -## On systems that have such support, make an explicit request to the kernel -## to dump cores when the filter crashes for some reason. Some modern UNIX -## systems suppress core dumps during crashes for security reasons if the -## user ID has changed during the lifetime of the process. Currently only -## supported on Linux. -# -# EnableCoreDumps false - -## FailureReports { true | false } -## default "false" -## -## Enables generation of failure reports when the DMARC test fails and the -## purported sender of the message has requested such reports. Reports are -## formatted per RFC6591. -# -# FailureReports false - -## FailureReportsBcc (string) -## default (none) -## -## When failure reports are enabled and one is to be generated, always -## send one to the address(es) specified here. If a failure report is -## requested by the domain owner, the address(es) are added in a Bcc: field. -## If no request is made, they address(es) are used in a To: field. There -## is no default. -# -# FailureReportsBcc postmaster@example.coom -FailureReportsBcc {{ postmaster_email }} - -## FailureReportsOnNone { true | false } -## default "false" -## -## Supplements the "FailureReports" setting by generating reports for -## domains that advertise "none" policies. By default, reports are only -## generated (when enabled) for sending domains advertising a "quarantine" -## or "reject" policy. -# -# FailureReportsOnNone false - -## FailureReportsSentBy string -## default "USER@HOSTNAME" -## -## Specifies the email address to use in the From: field of failure -## reports generated by the filter. The default is to use the userid of -## the user running the filter and the local hostname to construct an -## email address. "postmaster" is used in place of the userid if a name -## could not be determined. -# -# FailureReportsSentBy USER@HOSTNAME -FailureReportsSentBy {{ postmaster_email }} - -## HistoryFile path -## default (none) -## -## If set, specifies the location of a text file to which records are written -## that can be used to generate DMARC aggregate reports. Records are groups -## of rows containing information about a single received message, and -## include all relevant information needed to generate a DMARC aggregate -## report. It is expected that this will not be used in its raw form, but -## rather periodically imported into a relational database from which the -## aggregate reports can be extracted by a tool such as opendmarc-import(8). -# -# HistoryFile /var/spool/opendmarc/opendmarc.dat - -## HoldQuarantinedMessages { true | false } -## default "false" -## -## If set, the milter will signal to the mta that messages with -## p=quarantine, which fail dmarc authentication, should be held in -## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. -## If false, messsages will be accepted and passed along with the -## regular mail flow, and the quarantine will be left up to downstream -## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, -## including the Authentication-Results header added by OpenDMARC -# -# HoldQuarantinedMessages false - -## IgnoreAuthenticatedClients { true | false } -## default "false" -## -## If set, causes mail from authenticated clients (i.e., those that used -## SMTP AUTH) to be ignored by the filter. -# -# IgnoreAuthenticatedClients false - -## HoldQuarantinedMessages { true | false } -## default "false" -## -## If set, the milter will signal to the mta that messages with -## p=quarantine, which fail dmarc authentication, should be held in -## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. -## If false, messsages will be accepted and passed along with the -## regular mail flow, and the quarantine will be left up to downstream -## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, -## including the Authentication-Results header added by OpenDMARC -# -# HoldQuarantinedMessages false - - -## IgnoreHosts path -## default (internal) -## -## Specifies the path to a file that contains a list of hostnames, IP -## addresses, and/or CIDR expressions identifying hosts whose SMTP -## connections are to be ignored by the filter. If not specified, defaults -## to "127.0.0.1" only. -# -# IgnoreHosts /etc/opendmarc/ignore.hosts - -## IgnoreMailFrom domain[,...] -## default (none) -## -## Gives a list of domain names whose mail (based on the From: domain) is to -## be ignored by the filter. The list should be comma-separated. Matching -## against this list is case-insensitive. The default is an empty list, -## meaning no mail is ignored. -# -# IgnoreMailFrom example.com - -## MilterDebug (integer) -## default 0 -## -## Sets the debug level to be requested from the milter library. -# -# MilterDebug 0 - -## PidFile path -## default (none) -## -## Specifies the path to a file that should be created at process start -## containing the process ID. -# -# PidFile /var/run/opendmarc.pid - -## PublicSuffixList path -## default (none) -## -## Specifies the path to a file that contains top-level domains (TLDs) that -## will be used to compute the Organizational Domain for a given domain name, -## as described in the DMARC specification. If not provided, the filter will -## not be able to determine the Organizational Domain and only the presented -## domain will be evaluated. This file should be periodically updated. -## One location to retrieve the file from is https://publicsuffix.org/list/ -# -# PublicSuffixList path - -## RecordAllMessages { true | false } -## default "false" -## -## If set and "HistoryFile" is in use, all received messages are recorded -## to the history file. If not set (the default), only messages for which -## the From: domain published a DMARC record will be recorded in the -## history file. -# -# RecordAllMessages false - -## RejectFailures { true | false } -## default "false" -## -## If set, messages will be rejected if they fail the DMARC evaluation, or -## temp-failed if evaluation could not be completed. By default, no message -## will be rejected or temp-failed regardless of the outcome of the DMARC -## evaluation of the message. Instead, an Authentication-Results header -## field will be added. -# -# RejectFailures false -RejectFailures true - -## RejectMultiValueFrom { true | false } -## default "false" -## -## If set, messages with multiple addresses in the From: field of the message -## will be rejected unless all domains in the field are the same. They will -## otherwise be ignored by the filter (the default). -# -# RejectMultiValueFrom false - -## ReportCommand string -## default "/usr/sbin/sendmail -t" -## -## Indicates the shell command to which failure reports should be passed for -## delivery when "FailureReports" is enabled. -# -# ReportCommand /usr/sbin/sendmail -t - -## RequiredHeaders { true | false } -## default "false" -## -## If set, the filter will ensure the header of the message conforms to the -## basic header field count restrictions laid out in RFC5322, Section 3.6. -## Messages failing this test are rejected without further processing. A -## From: field from which no domain name could be extracted will also be -## rejected. -# -# RequiredHeaders false - -## Socket socketspec -## default (none) -## -## Specifies the socket that should be established by the filter to receive -## connections from sendmail(8) in order to provide service. socketspec is -## in one of two forms: local:path, which creates a UNIX domain socket at -## the specified path, or inet:port[@host] or inet6:port[@host] which creates -## a TCP socket on the specified port for the appropriate protocol family. -## If the host is not given as either a hostname or an IP address, the -## socket will be listening on all interfaces. This option is mandatory -## either in the configuration file or on the command line. If an IP -## address is used, it must be enclosed in square brackets. -# -Socket inet:8893@localhost - -## SoftwareHeader { true | false } -## default "false" -## -## Causes the filter to add a "DMARC-Filter" header field indicating the -## presence of this filter in the path of the message from injection to -## delivery. The product's name, version, and the job ID are included in -## the header field's contents. -# -SoftwareHeader true - -## SPFIgnoreResults { true | false } -## default "false" -## -## Causes the filter to ignore any SPF results in the header of the -## message. This is useful if you want the filter to perform SPF checks -## itself, or because you don't trust the arriving header. -# -SPFIgnoreResults true - -## SPFSelfValidate { true | false } -## default false -## -## Enable internal spf checking with --with-spf -## To use libspf2 instead: --with-spf --with-spf2-include=path --with-spf2-lib=path -## -## Causes the filter to perform a fallback SPF check itself when -## it can find no SPF results in the message header. If SPFIgnoreResults -## is also set, it never looks for SPF results in headers and -## always performs the SPF check itself when this is set. -# -SPFSelfValidate true - -## Syslog { true | false } -## default "false" -## -## Log via calls to syslog(3) any interesting activity. -# -Syslog true - -## SyslogFacility facility-name -## default "mail" -## -## Log via calls to syslog(3) using the named facility. The facility names -## are the same as the ones allowed in syslog.conf(5). -# -# SyslogFacility mail - -## TrustedAuthservIDs string -## default HOSTNAME -## -## Specifies one or more "authserv-id" values to trust as relaying true -## upstream DKIM and SPF results. The default is to use the name of -## the MTA processing the message. To specify a list, separate each entry -## with a comma. The key word "HOSTNAME" will be replaced by the name of -## the host running the filter as reported by the gethostname(3) function. -# -# TrustedAuthservIDs HOSTNAME - -## UMask mask -## default (none) -## -## Requests a specific permissions mask to be used for file creation. This -## only really applies to creation of the socket when Socket specifies a -## UNIX domain socket, and to the HistoryFile and PidFile (if any); temporary -## files are normally created by the mkstemp(3) function that enforces a -## specific file mode on creation regardless of the process umask. See -## umask(2) for more information. -# -UMask 007 - -## UserID user[:group] -## default (none) -## -## Attempts to become the specified userid before starting operations. -## The process will be assigned all of the groups and primary group ID of -## the named userid unless an alternate group is specified. -# -UserID opendmarc:mail diff --git a/templates/Fedora/37/etc/postfix/access b/templates/Fedora/37/etc/postfix/access deleted file mode 100644 index 257339b..0000000 --- a/templates/Fedora/37/etc/postfix/access +++ /dev/null @@ -1,484 +0,0 @@ -# ACCESS(5) ACCESS(5) -# -# NAME -# access - Postfix SMTP server access table -# -# SYNOPSIS -# postmap /etc/postfix/access -# -# postmap -q "string" /etc/postfix/access -# -# postmap -q - /etc/postfix/access as the lookup key for such addresses. The value is -# specified with the smtpd_null_access_lookup_key parameter -# in the Postfix main.cf file. -# -# EMAIL ADDRESS EXTENSION -# When a mail address localpart contains the optional recip- -# ient delimiter (e.g., user+foo@domain), the lookup order -# becomes: user+foo@domain, user@domain, domain, user+foo@, -# and user@. -# -# HOST NAME/ADDRESS PATTERNS -# With lookups from indexed files such as DB or DBM, or from -# networked tables such as NIS, LDAP or SQL, the following -# lookup patterns are examined in the order as listed: -# -# domain.tld -# Matches domain.tld. -# -# The pattern domain.tld also matches subdomains, but -# only when the string smtpd_access_maps is listed in -# the Postfix parent_domain_matches_subdomains con- -# figuration setting. -# -# .domain.tld -# Matches subdomains of domain.tld, but only when the -# string smtpd_access_maps is not listed in the Post- -# fix parent_domain_matches_subdomains configuration -# setting. -# -# net.work.addr.ess -# -# net.work.addr -# -# net.work -# -# net Matches a remote IPv4 host address or network -# address range. Specify one to four decimal octets -# separated by ".". Do not specify "[]" , "/", lead- -# ing zeros, or hexadecimal forms. -# -# Network ranges are matched by repeatedly truncating -# the last ".octet" from a remote IPv4 host address -# string, until a match is found in the access table, -# or until further truncation is not possible. -# -# NOTE: use the cidr lookup table type to specify -# network/netmask patterns. See cidr_table(5) for -# details. -# -# net:work:addr:ess -# -# net:work:addr -# -# net:work -# -# net Matches a remote IPv6 host address or network -# address range. Specify three to eight hexadecimal -# octet pairs separated by ":", using the compressed -# form "::" for a sequence of zero-valued octet -# pairs. Do not specify "[]", "/", leading zeros, or -# non-compressed forms. -# -# A network range is matched by repeatedly truncating -# the last ":octetpair" from the compressed-form -# remote IPv6 host address string, until a match is -# found in the access table, or until further trunca- -# tion is not possible. -# -# NOTE: use the cidr lookup table type to specify -# network/netmask patterns. See cidr_table(5) for -# details. -# -# IPv6 support is available in Postfix 2.2 and later. -# -# ACCEPT ACTIONS -# OK Accept the address etc. that matches the pattern. -# -# all-numerical -# An all-numerical result is treated as OK. This for- -# mat is generated by address-based relay authoriza- -# tion schemes such as pop-before-smtp. -# -# For other accept actions, see "OTHER ACTIONS" below. -# -# REJECT ACTIONS -# Postfix version 2.3 and later support enhanced status -# codes as defined in RFC 3463. When no code is specified -# at the beginning of the text below, Postfix inserts a -# default enhanced status code of "5.7.1" in the case of -# reject actions, and "4.7.1" in the case of defer actions. -# See "ENHANCED STATUS CODES" below. -# -# 4NN text -# -# 5NN text -# Reject the address etc. that matches the pattern, -# and respond with the numerical three-digit code and -# text. 4NN means "try again later", while 5NN means -# "do not try again". -# -# The following responses have special meaning for -# the Postfix SMTP server: -# -# 421 text (Postfix 2.3 and later) -# -# 521 text (Postfix 2.6 and later) -# After responding with the numerical -# three-digit code and text, disconnect imme- -# diately from the SMTP client. This frees up -# SMTP server resources so that they can be -# made available to another SMTP client. -# -# Note: The "521" response should be used only -# with botnets and other malware where inter- -# operability is of no concern. The "send 521 -# and disconnect" behavior is NOT defined in -# the SMTP standard. -# -# REJECT optional text... -# Reject the address etc. that matches the pattern. -# Reply with "$access_map_reject_code optional -# text..." when the optional text is specified, oth- -# erwise reply with a generic error response message. -# -# DEFER optional text... -# Reject the address etc. that matches the pattern. -# Reply with "$access_map_defer_code optional -# text..." when the optional text is specified, oth- -# erwise reply with a generic error response message. -# -# This feature is available in Postfix 2.6 and later. -# -# DEFER_IF_REJECT optional text... -# Defer the request if some later restriction would -# result in a REJECT action. Reply with -# "$access_map_defer_code 4.7.1 optional text..." -# when the optional text is specified, otherwise -# reply with a generic error response message. -# -# Prior to Postfix 2.6, the SMTP reply code is 450. -# -# This feature is available in Postfix 2.1 and later. -# -# DEFER_IF_PERMIT optional text... -# Defer the request if some later restriction would -# result in a an explicit or implicit PERMIT action. -# Reply with "$access_map_defer_code 4.7.1 optional -# text..." when the optional text is specified, oth- -# erwise reply with a generic error response message. -# -# Prior to Postfix 2.6, the SMTP reply code is 450. -# -# This feature is available in Postfix 2.1 and later. -# -# For other reject actions, see "OTHER ACTIONS" below. -# -# OTHER ACTIONS -# restriction... -# Apply the named UCE restriction(s) (permit, reject, -# reject_unauth_destination, and so on). -# -# BCC user@domain -# Send one copy of the message to the specified -# recipient. -# -# If multiple BCC actions are specified within the -# same SMTP MAIL transaction, with Postfix 3.0 only -# the last action will be used. -# -# This feature is available in Postfix 3.0 and later. -# -# DISCARD optional text... -# Claim successful delivery and silently discard the -# message. Log the optional text if specified, oth- -# erwise log a generic message. -# -# Note: this action currently affects all recipients -# of the message. To discard only one recipient -# without discarding the entire message, use the -# transport(5) table to direct mail to the discard(8) -# service. -# -# This feature is available in Postfix 2.0 and later. -# -# DUNNO Pretend that the lookup key was not found. This -# prevents Postfix from trying substrings of the -# lookup key (such as a subdomain name, or a network -# address subnetwork). -# -# This feature is available in Postfix 2.0 and later. -# -# FILTER transport:destination -# After the message is queued, send the entire mes- -# sage through the specified external content filter. -# The transport name specifies the first field of a -# mail delivery agent definition in master.cf; the -# syntax of the next-hop destination is described in -# the manual page of the corresponding delivery -# agent. More information about external content -# filters is in the Postfix FILTER_README file. -# -# Note 1: do not use $number regular expression sub- -# stitutions for transport or destination unless you -# know that the information has a trusted origin. -# -# Note 2: this action overrides the main.cf con- -# tent_filter setting, and affects all recipients of -# the message. In the case that multiple FILTER -# actions fire, only the last one is executed. -# -# Note 3: the purpose of the FILTER command is to -# override message routing. To override the recipi- -# ent's transport but not the next-hop destination, -# specify an empty filter destination (Postfix 2.7 -# and later), or specify a transport:destination that -# delivers through a different Postfix instance -# (Postfix 2.6 and earlier). Other options are using -# the recipient-dependent transport_maps or the sen- -# der-dependent sender_dependent_default_transport- -# _maps features. -# -# This feature is available in Postfix 2.0 and later. -# -# HOLD optional text... -# Place the message on the hold queue, where it will -# sit until someone either deletes it or releases it -# for delivery. Log the optional text if specified, -# otherwise log a generic message. -# -# Mail that is placed on hold can be examined with -# the postcat(1) command, and can be destroyed or -# released with the postsuper(1) command. -# -# Note: use "postsuper -r" to release mail that was -# kept on hold for a significant fraction of $maxi- -# mal_queue_lifetime or $bounce_queue_lifetime, or -# longer. Use "postsuper -H" only for mail that will -# not expire within a few delivery attempts. -# -# Note: this action currently affects all recipients -# of the message. -# -# This feature is available in Postfix 2.0 and later. -# -# PREPEND headername: headervalue -# Prepend the specified message header to the mes- -# sage. When more than one PREPEND action executes, -# the first prepended header appears before the sec- -# ond etc. prepended header. -# -# Note: this action must execute before the message -# content is received; it cannot execute in the con- -# text of smtpd_end_of_data_restrictions. -# -# This feature is available in Postfix 2.1 and later. -# -# REDIRECT user@domain -# After the message is queued, send the message to -# the specified address instead of the intended -# recipient(s). When multiple REDIRECT actions fire, -# only the last one takes effect. -# -# Note: this action overrides the FILTER action, and -# currently overrides all recipients of the message. -# -# This feature is available in Postfix 2.1 and later. -# -# INFO optional text... -# Log an informational record with the optional text, -# together with client information and if available, -# with helo, sender, recipient and protocol informa- -# tion. -# -# This feature is available in Postfix 3.0 and later. -# -# WARN optional text... -# Log a warning with the optional text, together with -# client information and if available, with helo, -# sender, recipient and protocol information. -# -# This feature is available in Postfix 2.1 and later. -# -# ENHANCED STATUS CODES -# Postfix version 2.3 and later support enhanced status -# codes as defined in RFC 3463. When an enhanced status -# code is specified in an access table, it is subject to -# modification. The following transformations are needed -# when the same access table is used for client, helo, -# sender, or recipient access restrictions; they happen -# regardless of whether Postfix replies to a MAIL FROM, RCPT -# TO or other SMTP command. -# -# o When a sender address matches a REJECT action, the -# Postfix SMTP server will transform a recipient DSN -# status (e.g., 4.1.1-4.1.6) into the corresponding -# sender DSN status, and vice versa. -# -# o When non-address information matches a REJECT -# action (such as the HELO command argument or the -# client hostname/address), the Postfix SMTP server -# will transform a sender or recipient DSN status -# into a generic non-address DSN status (e.g., -# 4.0.0). -# -# REGULAR EXPRESSION TABLES -# This section describes how the table lookups change when -# the table is given in the form of regular expressions. For -# a description of regular expression lookup table syntax, -# see regexp_table(5) or pcre_table(5). -# -# Each pattern is a regular expression that is applied to -# the entire string being looked up. Depending on the appli- -# cation, that string is an entire client hostname, an -# entire client IP address, or an entire mail address. Thus, -# no parent domain or parent network search is done, -# user@domain mail addresses are not broken up into their -# user@ and domain constituent parts, nor is user+foo broken -# up into user and foo. -# -# Patterns are applied in the order as specified in the ta- -# ble, until a pattern is found that matches the search -# string. -# -# Actions are the same as with indexed file lookups, with -# the additional feature that parenthesized substrings from -# the pattern can be interpolated as $1, $2 and so on. -# -# TCP-BASED TABLES -# This section describes how the table lookups change when -# lookups are directed to a TCP-based server. For a descrip- -# tion of the TCP client/server lookup protocol, see tcp_ta- -# ble(5). This feature is not available up to and including -# Postfix version 2.4. -# -# Each lookup operation uses the entire query string once. -# Depending on the application, that string is an entire -# client hostname, an entire client IP address, or an entire -# mail address. Thus, no parent domain or parent network -# search is done, user@domain mail addresses are not broken -# up into their user@ and domain constituent parts, nor is -# user+foo broken up into user and foo. -# -# Actions are the same as with indexed file lookups. -# -# EXAMPLE -# The following example uses an indexed file, so that the -# order of table entries does not matter. The example per- -# mits access by the client at address 1.2.3.4 but rejects -# all other clients in 1.2.3.0/24. Instead of hash lookup -# tables, some systems use dbm. Use the command "postconf -# -m" to find out what lookup tables Postfix supports on -# your system. -# -# /etc/postfix/main.cf: -# smtpd_client_restrictions = -# check_client_access hash:/etc/postfix/access -# -# /etc/postfix/access: -# 1.2.3 REJECT -# 1.2.3.4 OK -# -# Execute the command "postmap /etc/postfix/access" after -# editing the file. -# -# BUGS -# The table format does not understand quoting conventions. -# -# SEE ALSO -# postmap(1), Postfix lookup table manager -# smtpd(8), SMTP server -# postconf(5), configuration parameters -# transport(5), transport:nexthop syntax -# -# README FILES -# Use "postconf readme_directory" or "postconf html_direc- -# tory" to locate this information. -# SMTPD_ACCESS_README, built-in SMTP server access control -# DATABASE_README, Postfix lookup table overview -# -# LICENSE -# The Secure Mailer license must be distributed with this -# software. -# -# AUTHOR(S) -# Wietse Venema -# IBM T.J. Watson Research -# P.O. Box 704 -# Yorktown Heights, NY 10598, USA -# -# Wietse Venema -# Google, Inc. -# 111 8th Avenue -# New York, NY 10011, USA -# -# ACCESS(5) diff --git a/templates/Fedora/37/etc/postfix/canonical b/templates/Fedora/37/etc/postfix/canonical deleted file mode 100644 index 9881f4e..0000000 --- a/templates/Fedora/37/etc/postfix/canonical +++ /dev/null @@ -1,307 +0,0 @@ -# CANONICAL(5) CANONICAL(5) -# -# NAME -# canonical - Postfix canonical table format -# -# SYNOPSIS -# postmap /etc/postfix/canonical -# -# postmap -q "string" /etc/postfix/canonical -# -# postmap -q - /etc/postfix/canonical $/ -# REJECT IFRAME vulnerability exploit -# -# SEE ALSO -# cleanup(8), canonicalize and enqueue Postfix message -# pcre_table(5), format of PCRE lookup tables -# regexp_table(5), format of POSIX regular expression tables -# postconf(1), Postfix configuration utility -# postmap(1), Postfix lookup table management -# postsuper(1), Postfix janitor -# postcat(1), show Postfix queue file contents -# RFC 2045, base64 and quoted-printable encoding rules -# RFC 2047, message header encoding for non-ASCII text -# -# README FILES -# Use "postconf readme_directory" or "postconf html_direc- -# tory" to locate this information. -# DATABASE_README, Postfix lookup table overview -# CONTENT_INSPECTION_README, Postfix content inspection overview -# BUILTIN_FILTER_README, Postfix built-in content inspection -# BACKSCATTER_README, blocking returned forged mail -# -# LICENSE -# The Secure Mailer license must be distributed with this -# software. -# -# AUTHOR(S) -# Wietse Venema -# IBM T.J. Watson Research -# P.O. Box 704 -# Yorktown Heights, NY 10598, USA -# -# Wietse Venema -# Google, Inc. -# 111 8th Avenue -# New York, NY 10011, USA -# -# HEADER_CHECKS(5) diff --git a/templates/Fedora/37/etc/postfix/main.cf b/templates/Fedora/37/etc/postfix/main.cf deleted file mode 100644 index e26183d..0000000 --- a/templates/Fedora/37/etc/postfix/main.cf +++ /dev/null @@ -1,766 +0,0 @@ -# Global Postfix configuration file. This file lists only a subset -# of all parameters. For the syntax, and for a complete parameter -# list, see the postconf(5) manual page (command: "man 5 postconf"). -# -# For common configuration examples, see BASIC_CONFIGURATION_README -# and STANDARD_CONFIGURATION_README. To find these documents, use -# the command "postconf html_directory readme_directory", or go to -# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. -# -# For best results, change no more than 2-3 parameters at a time, -# and test if Postfix still works after every change. - -# COMPATIBILITY -# -# The compatibility_level determines what default settings Postfix -# will use for main.cf and master.cf settings. These defaults will -# change over time. -# -# To avoid breaking things, Postfix will use backwards-compatible -# default settings and log where it uses those old backwards-compatible -# default settings, until the system administrator has determined -# if any backwards-compatible default settings need to be made -# permanent in main.cf or master.cf. -# -# When this review is complete, update the compatibility_level setting -# below as recommended in the RELEASE_NOTES file. -# -# The level below is what should be used with new (not upgrade) installs. -# -compatibility_level = 3.6 - -# SOFT BOUNCE -# -# The soft_bounce parameter provides a limited safety net for -# testing. When soft_bounce is enabled, mail will remain queued that -# would otherwise bounce. This parameter disables locally-generated -# bounces, and prevents the SMTP server from rejecting mail permanently -# (by changing 5xx replies into 4xx replies). However, soft_bounce -# is no cure for address rewriting mistakes or mail routing mistakes. -# -#soft_bounce = no - -# LOCAL PATHNAME INFORMATION -# -# The queue_directory specifies the location of the Postfix queue. -# This is also the root directory of Postfix daemons that run chrooted. -# See the files in examples/chroot-setup for setting up Postfix chroot -# environments on different UNIX systems. -# -queue_directory = /var/spool/postfix - -# The command_directory parameter specifies the location of all -# postXXX commands. -# -command_directory = /usr/sbin - -# The daemon_directory parameter specifies the location of all Postfix -# daemon programs (i.e. programs listed in the master.cf file). This -# directory must be owned by root. -# -daemon_directory = /usr/libexec/postfix - -# The data_directory parameter specifies the location of Postfix-writable -# data files (caches, random numbers). This directory must be owned -# by the mail_owner account (see below). -# -data_directory = /var/lib/postfix - -# QUEUE AND PROCESS OWNERSHIP -# -# The mail_owner parameter specifies the owner of the Postfix queue -# and of most Postfix daemon processes. Specify the name of a user -# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS -# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In -# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED -# USER. -# -mail_owner = postfix - -# The default_privs parameter specifies the default rights used by -# the local delivery agent for delivery to external file or command. -# These rights are used in the absence of a recipient user context. -# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. -# -#default_privs = nobody - -# INTERNET HOST AND DOMAIN NAMES -# -# The myhostname parameter specifies the internet hostname of this -# mail system. The default is to use the fully-qualified domain name -# from gethostname(). $myhostname is used as a default value for many -# other configuration parameters. -# -#myhostname = host.domain.tld -#myhostname = virtual.domain.tld - -# The mydomain parameter specifies the local internet domain name. -# The default is to use $myhostname minus the first component. -# $mydomain is used as a default value for many other configuration -# parameters. -# -#mydomain = domain.tld - -# SENDING MAIL -# -# The myorigin parameter specifies the domain that locally-posted -# mail appears to come from. The default is to append $myhostname, -# which is fine for small sites. If you run a domain with multiple -# machines, you should (1) change this to $mydomain and (2) set up -# a domain-wide alias database that aliases each user to -# user@that.users.mailhost. -# -# For the sake of consistency between sender and recipient addresses, -# myorigin also specifies the default domain name that is appended -# to recipient addresses that have no @domain part. -# -#myorigin = $myhostname -#myorigin = $mydomain - -# RECEIVING MAIL - -# The inet_interfaces parameter specifies the network interface -# addresses that this mail system receives mail on. By default, -# the software claims all active interfaces on the machine. The -# parameter also controls delivery of mail to user@[ip.address]. -# -# See also the proxy_interfaces parameter, for network addresses that -# are forwarded to us via a proxy or network address translator. -# -# Note: you need to stop/start Postfix when this parameter changes. -# -inet_interfaces = all -#inet_interfaces = $myhostname -#inet_interfaces = $myhostname, localhost -#inet_interfaces = localhost - -# Enable IPv4, and IPv6 if supported -inet_protocols = all - -# The proxy_interfaces parameter specifies the network interface -# addresses that this mail system receives mail on by way of a -# proxy or network address translation unit. This setting extends -# the address list specified with the inet_interfaces parameter. -# -# You must specify your proxy/NAT addresses when your system is a -# backup MX host for other domains, otherwise mail delivery loops -# will happen when the primary MX host is down. -# -#proxy_interfaces = -#proxy_interfaces = 1.2.3.4 - -# The mydestination parameter specifies the list of domains that this -# machine considers itself the final destination for. -# -# These domains are routed to the delivery agent specified with the -# local_transport parameter setting. By default, that is the UNIX -# compatible delivery agent that lookups all recipients in /etc/passwd -# and /etc/aliases or their equivalent. -# -# The default is $myhostname + localhost.$mydomain + localhost. On -# a mail domain gateway, you should also include $mydomain. -# -# Do not specify the names of virtual domains - those domains are -# specified elsewhere (see VIRTUAL_README). -# -# Do not specify the names of domains that this machine is backup MX -# host for. Specify those names via the relay_domains settings for -# the SMTP server, or use permit_mx_backup if you are lazy (see -# STANDARD_CONFIGURATION_README). -# -# The local machine is always the final destination for mail addressed -# to user@[the.net.work.address] of an interface that the mail system -# receives mail on (see the inet_interfaces parameter). -# -# Specify a list of host or domain names, /file/name or type:table -# patterns, separated by commas and/or whitespace. A /file/name -# pattern is replaced by its contents; a type:table is matched when -# a name matches a lookup key (the right-hand side is ignored). -# Continue long lines by starting the next line with whitespace. -# -# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". -# -mydestination = $myhostname, localhost.$mydomain, localhost -#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain -#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, -# mail.$mydomain, www.$mydomain, ftp.$mydomain - -# REJECTING MAIL FOR UNKNOWN LOCAL USERS -# -# The local_recipient_maps parameter specifies optional lookup tables -# with all names or addresses of users that are local with respect -# to $mydestination, $inet_interfaces or $proxy_interfaces. -# -# If this parameter is defined, then the SMTP server will reject -# mail for unknown local users. This parameter is defined by default. -# -# To turn off local recipient checking in the SMTP server, specify -# local_recipient_maps = (i.e. empty). -# -# The default setting assumes that you use the default Postfix local -# delivery agent for local delivery. You need to update the -# local_recipient_maps setting if: -# -# - You define $mydestination domain recipients in files other than -# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. -# For example, you define $mydestination domain recipients in -# the $virtual_mailbox_maps files. -# -# - You redefine the local delivery agent in master.cf. -# -# - You redefine the "local_transport" setting in main.cf. -# -# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" -# feature of the Postfix local delivery agent (see local(8)). -# -# Details are described in the LOCAL_RECIPIENT_README file. -# -# Beware: if the Postfix SMTP server runs chrooted, you probably have -# to access the passwd file via the proxymap service, in order to -# overcome chroot restrictions. The alternative, having a copy of -# the system passwd file in the chroot jail is just not practical. -# -# The right-hand side of the lookup tables is conveniently ignored. -# In the left-hand side, specify a bare username, an @domain.tld -# wild-card, or specify a user@domain.tld address. -# -#local_recipient_maps = unix:passwd.byname $alias_maps -#local_recipient_maps = proxy:unix:passwd.byname $alias_maps -#local_recipient_maps = - -# The unknown_local_recipient_reject_code specifies the SMTP server -# response code when a recipient domain matches $mydestination or -# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty -# and the recipient address or address local-part is not found. -# -# The default setting is 550 (reject mail) but it is safer to start -# with 450 (try again later) until you are certain that your -# local_recipient_maps settings are OK. -# -unknown_local_recipient_reject_code = 550 - -# TRUST AND RELAY CONTROL - -# The mynetworks parameter specifies the list of "trusted" SMTP -# clients that have more privileges than "strangers". -# -# In particular, "trusted" SMTP clients are allowed to relay mail -# through Postfix. See the smtpd_recipient_restrictions parameter -# in postconf(5). -# -# You can specify the list of "trusted" network addresses by hand -# or you can let Postfix do it for you (which is the default). -# -# By default (mynetworks_style = subnet), Postfix "trusts" SMTP -# clients in the same IP subnetworks as the local machine. -# On Linux, this works correctly only with interfaces specified -# with the "ifconfig" command. -# -# Specify "mynetworks_style = class" when Postfix should "trust" SMTP -# clients in the same IP class A/B/C networks as the local machine. -# Don't do this with a dialup site - it would cause Postfix to "trust" -# your entire provider's network. Instead, specify an explicit -# mynetworks list by hand, as described below. -# -# Specify "mynetworks_style = host" when Postfix should "trust" -# only the local machine. -# -#mynetworks_style = class -#mynetworks_style = subnet -#mynetworks_style = host - -# Alternatively, you can specify the mynetworks list by hand, in -# which case Postfix ignores the mynetworks_style setting. -# -# Specify an explicit list of network/netmask patterns, where the -# mask specifies the number of bits in the network part of a host -# address. -# -# You can also specify the absolute pathname of a pattern file instead -# of listing the patterns here. Specify type:table for table-based lookups -# (the value on the table right-hand side is not used). -# -#mynetworks = 168.100.3.0/28, 127.0.0.0/8 -#mynetworks = $config_directory/mynetworks -#mynetworks = hash:/etc/postfix/network_table - -# The relay_domains parameter restricts what destinations this system will -# relay mail to. See the smtpd_recipient_restrictions description in -# postconf(5) for detailed information. -# -# By default, Postfix relays mail -# - from "trusted" clients (IP address matches $mynetworks) to any destination, -# - from "untrusted" clients to destinations that match $relay_domains or -# subdomains thereof, except addresses with sender-specified routing. -# The default relay_domains value is $mydestination. -# -# In addition to the above, the Postfix SMTP server by default accepts mail -# that Postfix is final destination for: -# - destinations that match $inet_interfaces or $proxy_interfaces, -# - destinations that match $mydestination -# - destinations that match $virtual_alias_domains, -# - destinations that match $virtual_mailbox_domains. -# These destinations do not need to be listed in $relay_domains. -# -# Specify a list of hosts or domains, /file/name patterns or type:name -# lookup tables, separated by commas and/or whitespace. Continue -# long lines by starting the next line with whitespace. A file name -# is replaced by its contents; a type:name table is matched when a -# (parent) domain appears as lookup key. -# -# NOTE: Postfix will not automatically forward mail for domains that -# list this system as their primary or backup MX host. See the -# permit_mx_backup restriction description in postconf(5). -# -#relay_domains = $mydestination - -# INTERNET OR INTRANET - -# The relayhost parameter specifies the default host to send mail to -# when no entry is matched in the optional transport(5) table. When -# no relayhost is given, mail is routed directly to the destination. -# -# On an intranet, specify the organizational domain name. If your -# internal DNS uses no MX records, specify the name of the intranet -# gateway host instead. -# -# In the case of SMTP, specify a domain, host, host:port, [host]:port, -# [address] or [address]:port; the form [host] turns off MX lookups. -# -# If you're connected via UUCP, see also the default_transport parameter. -# -#relayhost = $mydomain -#relayhost = [gateway.my.domain] -#relayhost = [mailserver.isp.tld] -#relayhost = uucphost -#relayhost = [an.ip.add.ress] - -# REJECTING UNKNOWN RELAY USERS -# -# The relay_recipient_maps parameter specifies optional lookup tables -# with all addresses in the domains that match $relay_domains. -# -# If this parameter is defined, then the SMTP server will reject -# mail for unknown relay users. This feature is off by default. -# -# The right-hand side of the lookup tables is conveniently ignored. -# In the left-hand side, specify an @domain.tld wild-card, or specify -# a user@domain.tld address. -# -#relay_recipient_maps = hash:/etc/postfix/relay_recipients - -# INPUT RATE CONTROL -# -# The in_flow_delay configuration parameter implements mail input -# flow control. This feature is turned on by default, although it -# still needs further development (it's disabled on SCO UNIX due -# to an SCO bug). -# -# A Postfix process will pause for $in_flow_delay seconds before -# accepting a new message, when the message arrival rate exceeds the -# message delivery rate. With the default 100 SMTP server process -# limit, this limits the mail inflow to 100 messages a second more -# than the number of messages delivered per second. -# -# Specify 0 to disable the feature. Valid delays are 0..10. -# -#in_flow_delay = 1s - -# ADDRESS REWRITING -# -# The ADDRESS_REWRITING_README document gives information about -# address masquerading or other forms of address rewriting including -# username->Firstname.Lastname mapping. - -# ADDRESS REDIRECTION (VIRTUAL DOMAIN) -# -# The VIRTUAL_README document gives information about the many forms -# of domain hosting that Postfix supports. - -# "USER HAS MOVED" BOUNCE MESSAGES -# -# See the discussion in the ADDRESS_REWRITING_README document. - -# TRANSPORT MAP -# -# See the discussion in the ADDRESS_REWRITING_README document. - -# ALIAS DATABASE -# -# The alias_maps parameter specifies the list of alias databases used -# by the local delivery agent. The default list is system dependent. -# -# On systems with NIS, the default is to search the local alias -# database, then the NIS alias database. See aliases(5) for syntax -# details. -# -# If you change the alias database, run "postalias /etc/aliases" (or -# wherever your system stores the mail alias file), or simply run -# "newaliases" to build the necessary DBM or DB file. -# -# It will take a minute or so before changes become visible. Use -# "postfix reload" to eliminate the delay. -# -#alias_maps = dbm:/etc/aliases -alias_maps = hash:/etc/aliases -#alias_maps = hash:/etc/aliases, nis:mail.aliases -#alias_maps = netinfo:/aliases - -# The alias_database parameter specifies the alias database(s) that -# are built with "newaliases" or "sendmail -bi". This is a separate -# configuration parameter, because alias_maps (see above) may specify -# tables that are not necessarily all under control by Postfix. -# -#alias_database = dbm:/etc/aliases -#alias_database = dbm:/etc/mail/aliases -alias_database = hash:/etc/aliases -#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases - -# ADDRESS EXTENSIONS (e.g., user+foo) -# -# The recipient_delimiter parameter specifies the separator between -# user names and address extensions (user+foo). See canonical(5), -# local(8), relocated(5) and virtual(5) for the effects this has on -# aliases, canonical, virtual, relocated and .forward file lookups. -# Basically, the software tries user+foo and .forward+foo before -# trying user and .forward. -# -#recipient_delimiter = + - -# DELIVERY TO MAILBOX -# -# The home_mailbox parameter specifies the optional pathname of a -# mailbox file relative to a user's home directory. The default -# mailbox file is /var/spool/mail/user or /var/mail/user. Specify -# "Maildir/" for qmail-style delivery (the / is required). -# -#home_mailbox = Mailbox -#home_mailbox = Maildir/ - -# The mail_spool_directory parameter specifies the directory where -# UNIX-style mailboxes are kept. The default setting depends on the -# system type. -# -#mail_spool_directory = /var/mail -#mail_spool_directory = /var/spool/mail - -# The mailbox_command parameter specifies the optional external -# command to use instead of mailbox delivery. The command is run as -# the recipient with proper HOME, SHELL and LOGNAME environment settings. -# Exception: delivery for root is done as $default_user. -# -# Other environment variables of interest: USER (recipient username), -# EXTENSION (address extension), DOMAIN (domain part of address), -# and LOCAL (the address localpart). -# -# Unlike other Postfix configuration parameters, the mailbox_command -# parameter is not subjected to $parameter substitutions. This is to -# make it easier to specify shell syntax (see example below). -# -# Avoid shell meta characters because they will force Postfix to run -# an expensive shell process. Procmail alone is expensive enough. -# -# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN -# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. -# -#mailbox_command = /some/where/procmail -#mailbox_command = /some/where/procmail -a "$EXTENSION" - -# The mailbox_transport specifies the optional transport in master.cf -# to use after processing aliases and .forward files. This parameter -# has precedence over the mailbox_command, fallback_transport and -# luser_relay parameters. -# -# Specify a string of the form transport:nexthop, where transport is -# the name of a mail delivery transport defined in master.cf. The -# :nexthop part is optional. For more details see the sample transport -# configuration file. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must update the "local_recipient_maps" setting in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" -# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. -#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp -mailbox_transport = lmtp:inet:localhost:24 -virtual_transport = lmtp:inet:localhost:24 - -# If using the cyrus-imapd IMAP server deliver local mail to the IMAP -# server using LMTP (Local Mail Transport Protocol), this is prefered -# over the older cyrus deliver program by setting the -# mailbox_transport as below: -# -# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp -# -# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via -# these settings. -# -# local_destination_recipient_limit = 300 -# local_destination_concurrency_limit = 5 -# -# Of course you should adjust these settings as appropriate for the -# capacity of the hardware you are using. The recipient limit setting -# can be used to take advantage of the single instance message store -# capability of Cyrus. The concurrency limit can be used to control -# how many simultaneous LMTP sessions will be permitted to the Cyrus -# message store. -# -# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and -# subsequent line in master.cf. -#mailbox_transport = cyrus - -# The fallback_transport specifies the optional transport in master.cf -# to use for recipients that are not found in the UNIX passwd database. -# This parameter has precedence over the luser_relay parameter. -# -# Specify a string of the form transport:nexthop, where transport is -# the name of a mail delivery transport defined in master.cf. The -# :nexthop part is optional. For more details see the sample transport -# configuration file. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must update the "local_recipient_maps" setting in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp -#fallback_transport = - -# The luser_relay parameter specifies an optional destination address -# for unknown recipients. By default, mail for unknown@$mydestination, -# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned -# as undeliverable. -# -# The following expansions are done on luser_relay: $user (recipient -# username), $shell (recipient shell), $home (recipient home directory), -# $recipient (full recipient address), $extension (recipient address -# extension), $domain (recipient domain), $local (entire recipient -# localpart), $recipient_delimiter. Specify ${name?value} or -# ${name:value} to expand value only when $name does (does not) exist. -# -# luser_relay works only for the default Postfix local delivery agent. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must specify "local_recipient_maps =" (i.e. empty) in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -#luser_relay = $user@other.host -#luser_relay = $local@other.host -#luser_relay = admin+$local - -# JUNK MAIL CONTROLS -# -# The controls listed here are only a very small subset. The file -# SMTPD_ACCESS_README provides an overview. - -# The header_checks parameter specifies an optional table with patterns -# that each logical message header is matched against, including -# headers that span multiple physical lines. -# -# By default, these patterns also apply to MIME headers and to the -# headers of attached messages. With older Postfix versions, MIME and -# attached message headers were treated as body text. -# -# For details, see "man header_checks". -# -#header_checks = regexp:/etc/postfix/header_checks - -# FAST ETRN SERVICE -# -# Postfix maintains per-destination logfiles with information about -# deferred mail, so that mail can be flushed quickly with the SMTP -# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". -# See the ETRN_README document for a detailed description. -# -# The fast_flush_domains parameter controls what destinations are -# eligible for this service. By default, they are all domains that -# this server is willing to relay mail to. -# -#fast_flush_domains = $relay_domains - -# SHOW SOFTWARE VERSION OR NOT -# -# The smtpd_banner parameter specifies the text that follows the 220 -# code in the SMTP server's greeting banner. Some people like to see -# the mail version advertised. By default, Postfix shows no version. -# -# You MUST specify $myhostname at the start of the text. That is an -# RFC requirement. Postfix itself does not care. -# -#smtpd_banner = $myhostname ESMTP $mail_name -#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) - -# PARALLEL DELIVERY TO THE SAME DESTINATION -# -# How many parallel deliveries to the same user or domain? With local -# delivery, it does not make sense to do massively parallel delivery -# to the same user, because mailbox updates must happen sequentially, -# and expensive pipelines in .forward files can cause disasters when -# too many are run at the same time. With SMTP deliveries, 10 -# simultaneous connections to the same domain could be sufficient to -# raise eyebrows. -# -# Each message delivery transport has its XXX_destination_concurrency_limit -# parameter. The default is $default_destination_concurrency_limit for -# most delivery transports. For the local delivery agent the default is 2. - -#local_destination_concurrency_limit = 2 -#default_destination_concurrency_limit = 20 - -# DEBUGGING CONTROL -# -# The debug_peer_level parameter specifies the increment in verbose -# logging level when an SMTP client or server host name or address -# matches a pattern in the debug_peer_list parameter. -# -debug_peer_level = 2 - -# The debug_peer_list parameter specifies an optional list of domain -# or network patterns, /file/name patterns or type:name tables. When -# an SMTP client or server host name or address matches a pattern, -# increase the verbose logging level by the amount specified in the -# debug_peer_level parameter. -# -#debug_peer_list = 127.0.0.1 -#debug_peer_list = some.domain - -# The debugger_command specifies the external command that is executed -# when a Postfix daemon program is run with the -D option. -# -# Use "command .. & sleep 5" so that the debugger can attach before -# the process marches on. If you use an X-based debugger, be sure to -# set up your XAUTHORITY environment variable before starting Postfix. -# -debugger_command = - PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin - ddd $daemon_directory/$process_name $process_id & sleep 5 - -# If you can't use X, use this to capture the call stack when a -# daemon crashes. The result is in a file in the configuration -# directory, and is named after the process name and the process ID. -# -# debugger_command = -# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; -# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 -# >$config_directory/$process_name.$process_id.log & sleep 5 -# -# Another possibility is to run gdb under a detached screen session. -# To attach to the screen session, su root and run "screen -r -# " where uniquely matches one of the detached -# sessions (from "screen -list"). -# -# debugger_command = -# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen -# -dmS $process_name gdb $daemon_directory/$process_name -# $process_id & sleep 1 - -# INSTALL-TIME CONFIGURATION INFORMATION -# -# The following parameters are used when installing a new Postfix version. -# -# sendmail_path: The full pathname of the Postfix sendmail command. -# This is the Sendmail-compatible mail posting interface. -# -sendmail_path = /usr/sbin/sendmail.postfix - -# newaliases_path: The full pathname of the Postfix newaliases command. -# This is the Sendmail-compatible command to build alias databases. -# -newaliases_path = /usr/bin/newaliases.postfix - -# mailq_path: The full pathname of the Postfix mailq command. This -# is the Sendmail-compatible mail queue listing command. -# -mailq_path = /usr/bin/mailq.postfix - -# setgid_group: The group for mail submission and queue management -# commands. This must be a group name with a numerical group ID that -# is not shared with other accounts, not even with the Postfix account. -# -setgid_group = postdrop - -# html_directory: The location of the Postfix HTML documentation. -# -html_directory = no - -# manpage_directory: The location of the Postfix on-line manual pages. -# -manpage_directory = /usr/share/man - -# sample_directory: The location of the Postfix sample configuration files. -# This parameter is obsolete as of Postfix 2.1. -# -sample_directory = /usr/share/doc/postfix/samples - -# readme_directory: The location of the Postfix README files. -# -readme_directory = /usr/share/doc/postfix/README_FILES - -# TLS CONFIGURATION -# -# Basic Postfix TLS configuration by default with self-signed certificate -# for inbound SMTP and also opportunistic TLS for outbound SMTP. - -# The full pathname of a file with the Postfix SMTP server RSA certificate -# in PEM format. Intermediate certificates should be included in general, -# the server certificate first, then the issuing CA(s) (bottom-up order). -# -# smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem -smtpd_tls_cert_file = /etc/postfix/certificates/pubcert.pem - -# The full pathname of a file with the Postfix SMTP server RSA private key -# in PEM format. The private key must be accessible without a pass-phrase, -# i.e. it must not be encrypted. -# -# smtpd_tls_key_file = /etc/pki/tls/private/postfix.key -smtpd_tls_key_file = /etc/postfix/certificates/privkey.pem - -# Announce STARTTLS support to remote SMTP clients, but do not require that -# clients use TLS encryption (opportunistic TLS inbound). -# -smtpd_tls_security_level = may - -# Directory with PEM format Certification Authority certificates that the -# Postfix SMTP client uses to verify a remote SMTP server certificate. -# -smtp_tls_CApath = /etc/pki/tls/certs - -# The full pathname of a file containing CA certificates of root CAs -# trusted to sign either remote SMTP server certificates or intermediate CA -# certificates. -# -smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt - -# Use TLS if this is supported by the remote SMTP server, otherwise use -# plaintext (opportunistic TLS outbound). -# -smtp_tls_security_level = may -meta_directory = /etc/postfix -shlib_directory = /usr/lib64/postfix - -{% if ensure_postfix.milter_list is defined and ensure_postfix.milter_list is iterable %} -# The Milter List -{% for milter in ensure_postfix.milter_list %} -# -- {{ milter.description }} -- {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} -{% endfor %} -smtpd_milters = {% for milter in ensure_postfix.milter_list %} {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} {% endfor %} -{% endif %} - -{% if postfix_domains is defined and postfix_domains is iterable %} -virtual_mailbox_domains = {% for domain in postfix_domains %} {{ domain }} {% endfor %} -{% endif %} - -2bounce_notice_recipient = {{ postmaster_email }} -bounce_notice_recipient = {{ postmaster_email }} -delay_notice_recipient = {{ postmaster_email }} -error_notice_recipient = {{ postmaster_email }} -smtpd_helo_required = yes -disable_vrfy_command = yes -message_size_limit = {{ postfix_message_size_limit }} -smtpd_helo_restrictions = reject_unknown_helo_hostname -smtpd_client_restrictions = reject_unknown_reverse_client_hostname reject_unauth_pipelining -smtpd_discard_ehlo_keywords = silent-discard, dsn - diff --git a/templates/Fedora/37/etc/postfix/main.cf.proto b/templates/Fedora/37/etc/postfix/main.cf.proto deleted file mode 100644 index 9bef4f2..0000000 --- a/templates/Fedora/37/etc/postfix/main.cf.proto +++ /dev/null @@ -1,736 +0,0 @@ -# Global Postfix configuration file. This file lists only a subset -# of all parameters. For the syntax, and for a complete parameter -# list, see the postconf(5) manual page (command: "man 5 postconf"). -# -# For common configuration examples, see BASIC_CONFIGURATION_README -# and STANDARD_CONFIGURATION_README. To find these documents, use -# the command "postconf html_directory readme_directory", or go to -# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. -# -# For best results, change no more than 2-3 parameters at a time, -# and test if Postfix still works after every change. - -# COMPATIBILITY -# -# The compatibility_level determines what default settings Postfix -# will use for main.cf and master.cf settings. These defaults will -# change over time. -# -# To avoid breaking things, Postfix will use backwards-compatible -# default settings and log where it uses those old backwards-compatible -# default settings, until the system administrator has determined -# if any backwards-compatible default settings need to be made -# permanent in main.cf or master.cf. -# -# When this review is complete, update the compatibility_level setting -# below as recommended in the RELEASE_NOTES file. -# -# The level below is what should be used with new (not upgrade) installs. -# -compatibility_level = 3.6 - -# SOFT BOUNCE -# -# The soft_bounce parameter provides a limited safety net for -# testing. When soft_bounce is enabled, mail will remain queued that -# would otherwise bounce. This parameter disables locally-generated -# bounces, and prevents the SMTP server from rejecting mail permanently -# (by changing 5xx replies into 4xx replies). However, soft_bounce -# is no cure for address rewriting mistakes or mail routing mistakes. -# -#soft_bounce = no - -# LOCAL PATHNAME INFORMATION -# -# The queue_directory specifies the location of the Postfix queue. -# This is also the root directory of Postfix daemons that run chrooted. -# See the files in examples/chroot-setup for setting up Postfix chroot -# environments on different UNIX systems. -# -queue_directory = /var/spool/postfix - -# The command_directory parameter specifies the location of all -# postXXX commands. -# -command_directory = /usr/sbin - -# The daemon_directory parameter specifies the location of all Postfix -# daemon programs (i.e. programs listed in the master.cf file). This -# directory must be owned by root. -# -daemon_directory = /usr/libexec/postfix - -# The data_directory parameter specifies the location of Postfix-writable -# data files (caches, random numbers). This directory must be owned -# by the mail_owner account (see below). -# -data_directory = /var/lib/postfix - -# QUEUE AND PROCESS OWNERSHIP -# -# The mail_owner parameter specifies the owner of the Postfix queue -# and of most Postfix daemon processes. Specify the name of a user -# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS -# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In -# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED -# USER. -# -mail_owner = postfix - -# The default_privs parameter specifies the default rights used by -# the local delivery agent for delivery to external file or command. -# These rights are used in the absence of a recipient user context. -# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. -# -#default_privs = nobody - -# INTERNET HOST AND DOMAIN NAMES -# -# The myhostname parameter specifies the internet hostname of this -# mail system. The default is to use the fully-qualified domain name -# from gethostname(). $myhostname is used as a default value for many -# other configuration parameters. -# -#myhostname = host.domain.tld -#myhostname = virtual.domain.tld - -# The mydomain parameter specifies the local internet domain name. -# The default is to use $myhostname minus the first component. -# $mydomain is used as a default value for many other configuration -# parameters. -# -#mydomain = domain.tld - -# SENDING MAIL -# -# The myorigin parameter specifies the domain that locally-posted -# mail appears to come from. The default is to append $myhostname, -# which is fine for small sites. If you run a domain with multiple -# machines, you should (1) change this to $mydomain and (2) set up -# a domain-wide alias database that aliases each user to -# user@that.users.mailhost. -# -# For the sake of consistency between sender and recipient addresses, -# myorigin also specifies the default domain name that is appended -# to recipient addresses that have no @domain part. -# -#myorigin = $myhostname -#myorigin = $mydomain - -# RECEIVING MAIL - -# The inet_interfaces parameter specifies the network interface -# addresses that this mail system receives mail on. By default, -# the software claims all active interfaces on the machine. The -# parameter also controls delivery of mail to user@[ip.address]. -# -# See also the proxy_interfaces parameter, for network addresses that -# are forwarded to us via a proxy or network address translator. -# -# Note: you need to stop/start Postfix when this parameter changes. -# -#inet_interfaces = all -#inet_interfaces = $myhostname -#inet_interfaces = $myhostname, localhost -inet_interfaces = localhost - -# Enable IPv4, and IPv6 if supported -inet_protocols = all - -# The proxy_interfaces parameter specifies the network interface -# addresses that this mail system receives mail on by way of a -# proxy or network address translation unit. This setting extends -# the address list specified with the inet_interfaces parameter. -# -# You must specify your proxy/NAT addresses when your system is a -# backup MX host for other domains, otherwise mail delivery loops -# will happen when the primary MX host is down. -# -#proxy_interfaces = -#proxy_interfaces = 1.2.3.4 - -# The mydestination parameter specifies the list of domains that this -# machine considers itself the final destination for. -# -# These domains are routed to the delivery agent specified with the -# local_transport parameter setting. By default, that is the UNIX -# compatible delivery agent that lookups all recipients in /etc/passwd -# and /etc/aliases or their equivalent. -# -# The default is $myhostname + localhost.$mydomain + localhost. On -# a mail domain gateway, you should also include $mydomain. -# -# Do not specify the names of virtual domains - those domains are -# specified elsewhere (see VIRTUAL_README). -# -# Do not specify the names of domains that this machine is backup MX -# host for. Specify those names via the relay_domains settings for -# the SMTP server, or use permit_mx_backup if you are lazy (see -# STANDARD_CONFIGURATION_README). -# -# The local machine is always the final destination for mail addressed -# to user@[the.net.work.address] of an interface that the mail system -# receives mail on (see the inet_interfaces parameter). -# -# Specify a list of host or domain names, /file/name or type:table -# patterns, separated by commas and/or whitespace. A /file/name -# pattern is replaced by its contents; a type:table is matched when -# a name matches a lookup key (the right-hand side is ignored). -# Continue long lines by starting the next line with whitespace. -# -# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". -# -mydestination = $myhostname, localhost.$mydomain, localhost -#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain -#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, -# mail.$mydomain, www.$mydomain, ftp.$mydomain - -# REJECTING MAIL FOR UNKNOWN LOCAL USERS -# -# The local_recipient_maps parameter specifies optional lookup tables -# with all names or addresses of users that are local with respect -# to $mydestination, $inet_interfaces or $proxy_interfaces. -# -# If this parameter is defined, then the SMTP server will reject -# mail for unknown local users. This parameter is defined by default. -# -# To turn off local recipient checking in the SMTP server, specify -# local_recipient_maps = (i.e. empty). -# -# The default setting assumes that you use the default Postfix local -# delivery agent for local delivery. You need to update the -# local_recipient_maps setting if: -# -# - You define $mydestination domain recipients in files other than -# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. -# For example, you define $mydestination domain recipients in -# the $virtual_mailbox_maps files. -# -# - You redefine the local delivery agent in master.cf. -# -# - You redefine the "local_transport" setting in main.cf. -# -# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" -# feature of the Postfix local delivery agent (see local(8)). -# -# Details are described in the LOCAL_RECIPIENT_README file. -# -# Beware: if the Postfix SMTP server runs chrooted, you probably have -# to access the passwd file via the proxymap service, in order to -# overcome chroot restrictions. The alternative, having a copy of -# the system passwd file in the chroot jail is just not practical. -# -# The right-hand side of the lookup tables is conveniently ignored. -# In the left-hand side, specify a bare username, an @domain.tld -# wild-card, or specify a user@domain.tld address. -# -#local_recipient_maps = unix:passwd.byname $alias_maps -#local_recipient_maps = proxy:unix:passwd.byname $alias_maps -#local_recipient_maps = - -# The unknown_local_recipient_reject_code specifies the SMTP server -# response code when a recipient domain matches $mydestination or -# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty -# and the recipient address or address local-part is not found. -# -# The default setting is 550 (reject mail) but it is safer to start -# with 450 (try again later) until you are certain that your -# local_recipient_maps settings are OK. -# -unknown_local_recipient_reject_code = 550 - -# TRUST AND RELAY CONTROL - -# The mynetworks parameter specifies the list of "trusted" SMTP -# clients that have more privileges than "strangers". -# -# In particular, "trusted" SMTP clients are allowed to relay mail -# through Postfix. See the smtpd_recipient_restrictions parameter -# in postconf(5). -# -# You can specify the list of "trusted" network addresses by hand -# or you can let Postfix do it for you (which is the default). -# -# By default (mynetworks_style = subnet), Postfix "trusts" SMTP -# clients in the same IP subnetworks as the local machine. -# On Linux, this works correctly only with interfaces specified -# with the "ifconfig" command. -# -# Specify "mynetworks_style = class" when Postfix should "trust" SMTP -# clients in the same IP class A/B/C networks as the local machine. -# Don't do this with a dialup site - it would cause Postfix to "trust" -# your entire provider's network. Instead, specify an explicit -# mynetworks list by hand, as described below. -# -# Specify "mynetworks_style = host" when Postfix should "trust" -# only the local machine. -# -#mynetworks_style = class -#mynetworks_style = subnet -#mynetworks_style = host - -# Alternatively, you can specify the mynetworks list by hand, in -# which case Postfix ignores the mynetworks_style setting. -# -# Specify an explicit list of network/netmask patterns, where the -# mask specifies the number of bits in the network part of a host -# address. -# -# You can also specify the absolute pathname of a pattern file instead -# of listing the patterns here. Specify type:table for table-based lookups -# (the value on the table right-hand side is not used). -# -#mynetworks = 168.100.3.0/28, 127.0.0.0/8 -#mynetworks = $config_directory/mynetworks -#mynetworks = hash:/etc/postfix/network_table - -# The relay_domains parameter restricts what destinations this system will -# relay mail to. See the smtpd_recipient_restrictions description in -# postconf(5) for detailed information. -# -# By default, Postfix relays mail -# - from "trusted" clients (IP address matches $mynetworks) to any destination, -# - from "untrusted" clients to destinations that match $relay_domains or -# subdomains thereof, except addresses with sender-specified routing. -# The default relay_domains value is $mydestination. -# -# In addition to the above, the Postfix SMTP server by default accepts mail -# that Postfix is final destination for: -# - destinations that match $inet_interfaces or $proxy_interfaces, -# - destinations that match $mydestination -# - destinations that match $virtual_alias_domains, -# - destinations that match $virtual_mailbox_domains. -# These destinations do not need to be listed in $relay_domains. -# -# Specify a list of hosts or domains, /file/name patterns or type:name -# lookup tables, separated by commas and/or whitespace. Continue -# long lines by starting the next line with whitespace. A file name -# is replaced by its contents; a type:name table is matched when a -# (parent) domain appears as lookup key. -# -# NOTE: Postfix will not automatically forward mail for domains that -# list this system as their primary or backup MX host. See the -# permit_mx_backup restriction description in postconf(5). -# -#relay_domains = $mydestination - -# INTERNET OR INTRANET - -# The relayhost parameter specifies the default host to send mail to -# when no entry is matched in the optional transport(5) table. When -# no relayhost is given, mail is routed directly to the destination. -# -# On an intranet, specify the organizational domain name. If your -# internal DNS uses no MX records, specify the name of the intranet -# gateway host instead. -# -# In the case of SMTP, specify a domain, host, host:port, [host]:port, -# [address] or [address]:port; the form [host] turns off MX lookups. -# -# If you're connected via UUCP, see also the default_transport parameter. -# -#relayhost = $mydomain -#relayhost = [gateway.my.domain] -#relayhost = [mailserver.isp.tld] -#relayhost = uucphost -#relayhost = [an.ip.add.ress] - -# REJECTING UNKNOWN RELAY USERS -# -# The relay_recipient_maps parameter specifies optional lookup tables -# with all addresses in the domains that match $relay_domains. -# -# If this parameter is defined, then the SMTP server will reject -# mail for unknown relay users. This feature is off by default. -# -# The right-hand side of the lookup tables is conveniently ignored. -# In the left-hand side, specify an @domain.tld wild-card, or specify -# a user@domain.tld address. -# -#relay_recipient_maps = hash:/etc/postfix/relay_recipients - -# INPUT RATE CONTROL -# -# The in_flow_delay configuration parameter implements mail input -# flow control. This feature is turned on by default, although it -# still needs further development (it's disabled on SCO UNIX due -# to an SCO bug). -# -# A Postfix process will pause for $in_flow_delay seconds before -# accepting a new message, when the message arrival rate exceeds the -# message delivery rate. With the default 100 SMTP server process -# limit, this limits the mail inflow to 100 messages a second more -# than the number of messages delivered per second. -# -# Specify 0 to disable the feature. Valid delays are 0..10. -# -#in_flow_delay = 1s - -# ADDRESS REWRITING -# -# The ADDRESS_REWRITING_README document gives information about -# address masquerading or other forms of address rewriting including -# username->Firstname.Lastname mapping. - -# ADDRESS REDIRECTION (VIRTUAL DOMAIN) -# -# The VIRTUAL_README document gives information about the many forms -# of domain hosting that Postfix supports. - -# "USER HAS MOVED" BOUNCE MESSAGES -# -# See the discussion in the ADDRESS_REWRITING_README document. - -# TRANSPORT MAP -# -# See the discussion in the ADDRESS_REWRITING_README document. - -# ALIAS DATABASE -# -# The alias_maps parameter specifies the list of alias databases used -# by the local delivery agent. The default list is system dependent. -# -# On systems with NIS, the default is to search the local alias -# database, then the NIS alias database. See aliases(5) for syntax -# details. -# -# If you change the alias database, run "postalias /etc/aliases" (or -# wherever your system stores the mail alias file), or simply run -# "newaliases" to build the necessary DBM or DB file. -# -# It will take a minute or so before changes become visible. Use -# "postfix reload" to eliminate the delay. -# -#alias_maps = dbm:/etc/aliases -alias_maps = hash:/etc/aliases -#alias_maps = hash:/etc/aliases, nis:mail.aliases -#alias_maps = netinfo:/aliases - -# The alias_database parameter specifies the alias database(s) that -# are built with "newaliases" or "sendmail -bi". This is a separate -# configuration parameter, because alias_maps (see above) may specify -# tables that are not necessarily all under control by Postfix. -# -#alias_database = dbm:/etc/aliases -#alias_database = dbm:/etc/mail/aliases -alias_database = hash:/etc/aliases -#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases - -# ADDRESS EXTENSIONS (e.g., user+foo) -# -# The recipient_delimiter parameter specifies the separator between -# user names and address extensions (user+foo). See canonical(5), -# local(8), relocated(5) and virtual(5) for the effects this has on -# aliases, canonical, virtual, relocated and .forward file lookups. -# Basically, the software tries user+foo and .forward+foo before -# trying user and .forward. -# -#recipient_delimiter = + - -# DELIVERY TO MAILBOX -# -# The home_mailbox parameter specifies the optional pathname of a -# mailbox file relative to a user's home directory. The default -# mailbox file is /var/spool/mail/user or /var/mail/user. Specify -# "Maildir/" for qmail-style delivery (the / is required). -# -#home_mailbox = Mailbox -#home_mailbox = Maildir/ - -# The mail_spool_directory parameter specifies the directory where -# UNIX-style mailboxes are kept. The default setting depends on the -# system type. -# -#mail_spool_directory = /var/mail -#mail_spool_directory = /var/spool/mail - -# The mailbox_command parameter specifies the optional external -# command to use instead of mailbox delivery. The command is run as -# the recipient with proper HOME, SHELL and LOGNAME environment settings. -# Exception: delivery for root is done as $default_user. -# -# Other environment variables of interest: USER (recipient username), -# EXTENSION (address extension), DOMAIN (domain part of address), -# and LOCAL (the address localpart). -# -# Unlike other Postfix configuration parameters, the mailbox_command -# parameter is not subjected to $parameter substitutions. This is to -# make it easier to specify shell syntax (see example below). -# -# Avoid shell meta characters because they will force Postfix to run -# an expensive shell process. Procmail alone is expensive enough. -# -# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN -# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. -# -#mailbox_command = /some/where/procmail -#mailbox_command = /some/where/procmail -a "$EXTENSION" - -# The mailbox_transport specifies the optional transport in master.cf -# to use after processing aliases and .forward files. This parameter -# has precedence over the mailbox_command, fallback_transport and -# luser_relay parameters. -# -# Specify a string of the form transport:nexthop, where transport is -# the name of a mail delivery transport defined in master.cf. The -# :nexthop part is optional. For more details see the sample transport -# configuration file. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must update the "local_recipient_maps" setting in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" -# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. -#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp - -# If using the cyrus-imapd IMAP server deliver local mail to the IMAP -# server using LMTP (Local Mail Transport Protocol), this is prefered -# over the older cyrus deliver program by setting the -# mailbox_transport as below: -# -# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp -# -# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via -# these settings. -# -# local_destination_recipient_limit = 300 -# local_destination_concurrency_limit = 5 -# -# Of course you should adjust these settings as appropriate for the -# capacity of the hardware you are using. The recipient limit setting -# can be used to take advantage of the single instance message store -# capability of Cyrus. The concurrency limit can be used to control -# how many simultaneous LMTP sessions will be permitted to the Cyrus -# message store. -# -# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and -# subsequent line in master.cf. -#mailbox_transport = cyrus - -# The fallback_transport specifies the optional transport in master.cf -# to use for recipients that are not found in the UNIX passwd database. -# This parameter has precedence over the luser_relay parameter. -# -# Specify a string of the form transport:nexthop, where transport is -# the name of a mail delivery transport defined in master.cf. The -# :nexthop part is optional. For more details see the sample transport -# configuration file. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must update the "local_recipient_maps" setting in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp -#fallback_transport = - -# The luser_relay parameter specifies an optional destination address -# for unknown recipients. By default, mail for unknown@$mydestination, -# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned -# as undeliverable. -# -# The following expansions are done on luser_relay: $user (recipient -# username), $shell (recipient shell), $home (recipient home directory), -# $recipient (full recipient address), $extension (recipient address -# extension), $domain (recipient domain), $local (entire recipient -# localpart), $recipient_delimiter. Specify ${name?value} or -# ${name:value} to expand value only when $name does (does not) exist. -# -# luser_relay works only for the default Postfix local delivery agent. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must specify "local_recipient_maps =" (i.e. empty) in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -#luser_relay = $user@other.host -#luser_relay = $local@other.host -#luser_relay = admin+$local - -# JUNK MAIL CONTROLS -# -# The controls listed here are only a very small subset. The file -# SMTPD_ACCESS_README provides an overview. - -# The header_checks parameter specifies an optional table with patterns -# that each logical message header is matched against, including -# headers that span multiple physical lines. -# -# By default, these patterns also apply to MIME headers and to the -# headers of attached messages. With older Postfix versions, MIME and -# attached message headers were treated as body text. -# -# For details, see "man header_checks". -# -#header_checks = regexp:/etc/postfix/header_checks - -# FAST ETRN SERVICE -# -# Postfix maintains per-destination logfiles with information about -# deferred mail, so that mail can be flushed quickly with the SMTP -# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". -# See the ETRN_README document for a detailed description. -# -# The fast_flush_domains parameter controls what destinations are -# eligible for this service. By default, they are all domains that -# this server is willing to relay mail to. -# -#fast_flush_domains = $relay_domains - -# SHOW SOFTWARE VERSION OR NOT -# -# The smtpd_banner parameter specifies the text that follows the 220 -# code in the SMTP server's greeting banner. Some people like to see -# the mail version advertised. By default, Postfix shows no version. -# -# You MUST specify $myhostname at the start of the text. That is an -# RFC requirement. Postfix itself does not care. -# -#smtpd_banner = $myhostname ESMTP $mail_name -#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) - -# PARALLEL DELIVERY TO THE SAME DESTINATION -# -# How many parallel deliveries to the same user or domain? With local -# delivery, it does not make sense to do massively parallel delivery -# to the same user, because mailbox updates must happen sequentially, -# and expensive pipelines in .forward files can cause disasters when -# too many are run at the same time. With SMTP deliveries, 10 -# simultaneous connections to the same domain could be sufficient to -# raise eyebrows. -# -# Each message delivery transport has its XXX_destination_concurrency_limit -# parameter. The default is $default_destination_concurrency_limit for -# most delivery transports. For the local delivery agent the default is 2. - -#local_destination_concurrency_limit = 2 -#default_destination_concurrency_limit = 20 - -# DEBUGGING CONTROL -# -# The debug_peer_level parameter specifies the increment in verbose -# logging level when an SMTP client or server host name or address -# matches a pattern in the debug_peer_list parameter. -# -debug_peer_level = 2 - -# The debug_peer_list parameter specifies an optional list of domain -# or network patterns, /file/name patterns or type:name tables. When -# an SMTP client or server host name or address matches a pattern, -# increase the verbose logging level by the amount specified in the -# debug_peer_level parameter. -# -#debug_peer_list = 127.0.0.1 -#debug_peer_list = some.domain - -# The debugger_command specifies the external command that is executed -# when a Postfix daemon program is run with the -D option. -# -# Use "command .. & sleep 5" so that the debugger can attach before -# the process marches on. If you use an X-based debugger, be sure to -# set up your XAUTHORITY environment variable before starting Postfix. -# -debugger_command = - PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin - ddd $daemon_directory/$process_name $process_id & sleep 5 - -# If you can't use X, use this to capture the call stack when a -# daemon crashes. The result is in a file in the configuration -# directory, and is named after the process name and the process ID. -# -# debugger_command = -# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; -# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 -# >$config_directory/$process_name.$process_id.log & sleep 5 -# -# Another possibility is to run gdb under a detached screen session. -# To attach to the screen session, su root and run "screen -r -# " where uniquely matches one of the detached -# sessions (from "screen -list"). -# -# debugger_command = -# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen -# -dmS $process_name gdb $daemon_directory/$process_name -# $process_id & sleep 1 - -# INSTALL-TIME CONFIGURATION INFORMATION -# -# The following parameters are used when installing a new Postfix version. -# -# sendmail_path: The full pathname of the Postfix sendmail command. -# This is the Sendmail-compatible mail posting interface. -# -sendmail_path = - -# newaliases_path: The full pathname of the Postfix newaliases command. -# This is the Sendmail-compatible command to build alias databases. -# -newaliases_path = - -# mailq_path: The full pathname of the Postfix mailq command. This -# is the Sendmail-compatible mail queue listing command. -# -mailq_path = - -# setgid_group: The group for mail submission and queue management -# commands. This must be a group name with a numerical group ID that -# is not shared with other accounts, not even with the Postfix account. -# -setgid_group = - -# html_directory: The location of the Postfix HTML documentation. -# -html_directory = - -# manpage_directory: The location of the Postfix on-line manual pages. -# -manpage_directory = - -# sample_directory: The location of the Postfix sample configuration files. -# This parameter is obsolete as of Postfix 2.1. -# -sample_directory = - -# readme_directory: The location of the Postfix README files. -# -readme_directory = - -# TLS CONFIGURATION -# -# Basic Postfix TLS configuration by default with self-signed certificate -# for inbound SMTP and also opportunistic TLS for outbound SMTP. - -# The full pathname of a file with the Postfix SMTP server RSA certificate -# in PEM format. Intermediate certificates should be included in general, -# the server certificate first, then the issuing CA(s) (bottom-up order). -# -smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem - -# The full pathname of a file with the Postfix SMTP server RSA private key -# in PEM format. The private key must be accessible without a pass-phrase, -# i.e. it must not be encrypted. -# -smtpd_tls_key_file = /etc/pki/tls/private/postfix.key - -# Announce STARTTLS support to remote SMTP clients, but do not require that -# clients use TLS encryption (opportunistic TLS inbound). -# -smtpd_tls_security_level = may - -# Directory with PEM format Certification Authority certificates that the -# Postfix SMTP client uses to verify a remote SMTP server certificate. -# -smtp_tls_CApath = /etc/pki/tls/certs - -# The full pathname of a file containing CA certificates of root CAs -# trusted to sign either remote SMTP server certificates or intermediate CA -# certificates. -# -smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt - -# Use TLS if this is supported by the remote SMTP server, otherwise use -# plaintext (opportunistic TLS outbound). -# -smtp_tls_security_level = may diff --git a/templates/Fedora/37/etc/postfix/master.cf b/templates/Fedora/37/etc/postfix/master.cf deleted file mode 100644 index 4beb91f..0000000 --- a/templates/Fedora/37/etc/postfix/master.cf +++ /dev/null @@ -1,137 +0,0 @@ -# -# Postfix master process configuration file. For details on the format -# of the file, see the master(5) manual page (command: "man 5 master" or -# on-line: http://www.postfix.org/master.5.html). -# -# Do not forget to execute "postfix reload" after editing this file. -# -# ========================================================================== -# service type private unpriv chroot wakeup maxproc command + args -# (yes) (yes) (no) (never) (100) -# ========================================================================== -smtp inet n - n - - smtpd -#smtp inet n - n - 1 postscreen -#smtpd pass - - n - - smtpd -#dnsblog unix - - n - 0 dnsblog -#tlsproxy unix - - n - 0 tlsproxy -# Choose one: enable submission for loopback clients only, or for any client. -#127.0.0.1:submission inet n - n - - smtpd -# submission inet n - n - - smtpd -# -o syslog_name=postfix/submission -# -o smtpd_tls_security_level=encrypt -# -o smtpd_sasl_auth_enable=yes -# -o smtpd_tls_auth_only=yes -# -o smtpd_reject_unlisted_recipient=no -# -o smtpd_client_restrictions=$mua_client_restrictions -# -o smtpd_helo_restrictions=$mua_helo_restrictions -# -o smtpd_sender_restrictions=$mua_sender_restrictions -# -o smtpd_recipient_restrictions= -# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject -# -o milter_macro_daemon_name=ORIGINATING -# Choose one: enable smtps for loopback clients only, or for any client. -#127.0.0.1:smtps inet n - n - - smtpd -# smtps inet n - n - - smtpd -# -o syslog_name=postfix/smtps -# -o smtpd_tls_wrappermode=yes -# -o smtpd_sasl_auth_enable=yes -# -o smtpd_reject_unlisted_recipient=no -# -o smtpd_client_restrictions=$mua_client_restrictions -# -o smtpd_helo_restrictions=$mua_helo_restrictions -# -o smtpd_sender_restrictions=$mua_sender_restrictions -# -o smtpd_recipient_restrictions= -# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject -# -o milter_macro_daemon_name=ORIGINATING -#628 inet n - n - - qmqpd -pickup unix n - n 60 1 pickup -cleanup unix n - n - 0 cleanup -qmgr unix n - n 300 1 qmgr -#qmgr unix n - n 300 1 oqmgr -tlsmgr unix - - n 1000? 1 tlsmgr -rewrite unix - - n - - trivial-rewrite -bounce unix - - n - 0 bounce -defer unix - - n - 0 bounce -trace unix - - n - 0 bounce -verify unix - - n - 1 verify -flush unix n - n 1000? 0 flush -proxymap unix - - n - - proxymap -proxywrite unix - - n - 1 proxymap -smtp unix - - n - - smtp -relay unix - - n - - smtp - -o syslog_name=postfix/$service_name -# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 -showq unix n - n - - showq -error unix - - n - - error -retry unix - - n - - error -discard unix - - n - - discard -local unix - n n - - local -virtual unix - n n - - virtual -lmtp unix - - n - - lmtp -anvil unix - - n - 1 anvil -scache unix - - n - 1 scache -postlog unix-dgram n - n - 1 postlogd -# -# ==================================================================== -# Interfaces to non-Postfix software. Be sure to examine the manual -# pages of the non-Postfix software to find out what options it wants. -# -# Many of the following services use the Postfix pipe(8) delivery -# agent. See the pipe(8) man page for information about ${recipient} -# and other message envelope options. -# ==================================================================== -# -# maildrop. See the Postfix MAILDROP_README file for details. -# Also specify in main.cf: maildrop_destination_recipient_limit=1 -# -#maildrop unix - n n - - pipe -# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} -# -# ==================================================================== -# -# Recent Cyrus versions can use the existing "lmtp" master.cf entry. -# -# Specify in cyrus.conf: -# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 -# -# Specify in main.cf one or more of the following: -# mailbox_transport = lmtp:inet:localhost -# virtual_transport = lmtp:inet:localhost -# -# ==================================================================== -# -# Cyrus 2.1.5 (Amos Gouaux) -# Also specify in main.cf: cyrus_destination_recipient_limit=1 -# -#cyrus unix - n n - - pipe -# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} -# -# ==================================================================== -# -# Old example of delivery via Cyrus. -# -#old-cyrus unix - n n - - pipe -# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} -# -# ==================================================================== -# -# See the Postfix UUCP_README file for configuration details. -# -#uucp unix - n n - - pipe -# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) -# -# ==================================================================== -# -# Other external delivery methods. -# -#ifmail unix - n n - - pipe -# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) -# -#bsmtp unix - n n - - pipe -# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient -# -#scalemail-backend unix - n n - 2 pipe -# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store -# ${nexthop} ${user} ${extension} -# -#mailman unix - n n - - pipe -# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py -# ${nexthop} ${user} diff --git a/templates/Fedora/37/etc/postfix/master.cf.proto b/templates/Fedora/37/etc/postfix/master.cf.proto deleted file mode 100644 index f33d9dd..0000000 --- a/templates/Fedora/37/etc/postfix/master.cf.proto +++ /dev/null @@ -1,137 +0,0 @@ -# -# Postfix master process configuration file. For details on the format -# of the file, see the master(5) manual page (command: "man 5 master" or -# on-line: http://www.postfix.org/master.5.html). -# -# Do not forget to execute "postfix reload" after editing this file. -# -# ========================================================================== -# service type private unpriv chroot wakeup maxproc command + args -# (yes) (yes) (no) (never) (100) -# ========================================================================== -smtp inet n - n - - smtpd -#smtp inet n - n - 1 postscreen -#smtpd pass - - n - - smtpd -#dnsblog unix - - n - 0 dnsblog -#tlsproxy unix - - n - 0 tlsproxy -# Choose one: enable submission for loopback clients only, or for any client. -#127.0.0.1:submission inet n - n - - smtpd -#submission inet n - n - - smtpd -# -o syslog_name=postfix/submission -# -o smtpd_tls_security_level=encrypt -# -o smtpd_sasl_auth_enable=yes -# -o smtpd_tls_auth_only=yes -# -o smtpd_reject_unlisted_recipient=no -# -o smtpd_client_restrictions=$mua_client_restrictions -# -o smtpd_helo_restrictions=$mua_helo_restrictions -# -o smtpd_sender_restrictions=$mua_sender_restrictions -# -o smtpd_recipient_restrictions= -# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject -# -o milter_macro_daemon_name=ORIGINATING -# Choose one: enable smtps for loopback clients only, or for any client. -#127.0.0.1:smtps inet n - n - - smtpd -#smtps inet n - n - - smtpd -# -o syslog_name=postfix/smtps -# -o smtpd_tls_wrappermode=yes -# -o smtpd_sasl_auth_enable=yes -# -o smtpd_reject_unlisted_recipient=no -# -o smtpd_client_restrictions=$mua_client_restrictions -# -o smtpd_helo_restrictions=$mua_helo_restrictions -# -o smtpd_sender_restrictions=$mua_sender_restrictions -# -o smtpd_recipient_restrictions= -# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject -# -o milter_macro_daemon_name=ORIGINATING -#628 inet n - n - - qmqpd -pickup unix n - n 60 1 pickup -cleanup unix n - n - 0 cleanup -qmgr unix n - n 300 1 qmgr -#qmgr unix n - n 300 1 oqmgr -tlsmgr unix - - n 1000? 1 tlsmgr -rewrite unix - - n - - trivial-rewrite -bounce unix - - n - 0 bounce -defer unix - - n - 0 bounce -trace unix - - n - 0 bounce -verify unix - - n - 1 verify -flush unix n - n 1000? 0 flush -proxymap unix - - n - - proxymap -proxywrite unix - - n - 1 proxymap -smtp unix - - n - - smtp -relay unix - - n - - smtp - -o syslog_name=postfix/$service_name -# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 -showq unix n - n - - showq -error unix - - n - - error -retry unix - - n - - error -discard unix - - n - - discard -local unix - n n - - local -virtual unix - n n - - virtual -lmtp unix - - n - - lmtp -anvil unix - - n - 1 anvil -scache unix - - n - 1 scache -postlog unix-dgram n - n - 1 postlogd -# -# ==================================================================== -# Interfaces to non-Postfix software. Be sure to examine the manual -# pages of the non-Postfix software to find out what options it wants. -# -# Many of the following services use the Postfix pipe(8) delivery -# agent. See the pipe(8) man page for information about ${recipient} -# and other message envelope options. -# ==================================================================== -# -# maildrop. See the Postfix MAILDROP_README file for details. -# Also specify in main.cf: maildrop_destination_recipient_limit=1 -# -#maildrop unix - n n - - pipe -# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} -# -# ==================================================================== -# -# Recent Cyrus versions can use the existing "lmtp" master.cf entry. -# -# Specify in cyrus.conf: -# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 -# -# Specify in main.cf one or more of the following: -# mailbox_transport = lmtp:inet:localhost -# virtual_transport = lmtp:inet:localhost -# -# ==================================================================== -# -# Cyrus 2.1.5 (Amos Gouaux) -# Also specify in main.cf: cyrus_destination_recipient_limit=1 -# -#cyrus unix - n n - - pipe -# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} -# -# ==================================================================== -# -# Old example of delivery via Cyrus. -# -#old-cyrus unix - n n - - pipe -# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} -# -# ==================================================================== -# -# See the Postfix UUCP_README file for configuration details. -# -#uucp unix - n n - - pipe -# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) -# -# ==================================================================== -# -# Other external delivery methods. -# -#ifmail unix - n n - - pipe -# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) -# -#bsmtp unix - n n - - pipe -# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient -# -#scalemail-backend unix - n n - 2 pipe -# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store -# ${nexthop} ${user} ${extension} -# -#mailman unix - n n - - pipe -# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py -# ${nexthop} ${user} diff --git a/templates/Fedora/37/etc/postfix/postfix-files b/templates/Fedora/37/etc/postfix/postfix-files deleted file mode 100644 index 1eda0a3..0000000 --- a/templates/Fedora/37/etc/postfix/postfix-files +++ /dev/null @@ -1,432 +0,0 @@ -# -# Do not edit this file. -# -# This file controls the postfix-install script for installation of -# Postfix programs, configuration files and documentation, as well -# as the post-install script for setting permissions and for updating -# Postfix configuration files. See the respective manual pages within -# the script files. -# -# Do not list $command_directory or $shlib_directory in this file, -# or it will be blown away by a future Postfix uninstallation -# procedure. You would not want to lose all files in /usr/sbin or -# /usr/local/lib. -# -# Each record in this file describes one file or directory. -# Fields are separated by ":". Specify a null field as "-". -# Missing fields or separators at the end are OK. -# -# File format: -# name:type:owner:group:permission:flags -# No group means don't change group ownership. -# -# File types: -# d=directory -# f=regular file -# h=hard link (*) -# l=symbolic link (*) -# -# (*) With hard links and symbolic links, the owner field becomes the -# source pathname, while the group and permissions are ignored. -# -# File flags: -# No flag means the flag is not active. -# p=preserve existing file, do not replace (postfix-install). -# u=update owner/group/mode (post-install upgrade-permissions). -# c=create missing directory (post-install create-missing). -# r=apply owner/group recursively (post-install set/upgrade-permissions). -# o=obsolete, no longer part of Postfix -# 1=optional for non-default instance (config_dir != built-in default). -# -# Note: the "u" flag is for upgrading the permissions of existing files -# or directories after changes in Postfix architecture. For robustness -# it is a good idea to "u" all the files that have special ownership or -# permissions, so that running "make install" fixes any glitches. -# -# Note: order matters. Update shared libraries and database plugins -# before daemon/command-line programs. -$config_directory:d:root:-:755:u -$data_directory:d:$mail_owner:-:700:uc -$daemon_directory:d:root:-:755:u -$queue_directory:d:root:-:755:uc -$sample_directory:d:root:-:755:o -$readme_directory:d:root:-:755 -$html_directory:d:root:-:755 -$queue_directory/active:d:$mail_owner:-:700:ucr -$queue_directory/bounce:d:$mail_owner:-:700:ucr -$queue_directory/corrupt:d:$mail_owner:-:700:ucr -$queue_directory/defer:d:$mail_owner:-:700:ucr -$queue_directory/deferred:d:$mail_owner:-:700:ucr -$queue_directory/flush:d:$mail_owner:-:700:ucr -$queue_directory/hold:d:$mail_owner:-:700:ucr -$queue_directory/incoming:d:$mail_owner:-:700:ucr -$queue_directory/private:d:$mail_owner:-:700:uc -$queue_directory/maildrop:d:$mail_owner:$setgid_group:730:uc -$queue_directory/public:d:$mail_owner:$setgid_group:710:uc -$queue_directory/pid:d:root:-:755:uc -$queue_directory/saved:d:$mail_owner:-:700:ucr -$queue_directory/trace:d:$mail_owner:-:700:ucr -# Update shared libraries and plugins before daemon or command-line programs. -$shlib_directory/libpostfix-util.so:f:root:-:755 -$shlib_directory/libpostfix-global.so:f:root:-:755 -$shlib_directory/libpostfix-dns.so:f:root:-:755 -$shlib_directory/libpostfix-tls.so:f:root:-:755 -$shlib_directory/libpostfix-master.so:f:root:-:755 -$meta_directory/dynamicmaps.cf.d:d:root:-:755 -$meta_directory/dynamicmaps.cf:f:root:-:644 -$meta_directory/main.cf.proto:f:root:-:644 -$meta_directory/master.cf.proto:f:root:-:644 -$meta_directory/postfix-files.d:d:root:-:755 -$meta_directory/postfix-files:f:root:-:644 -$daemon_directory/anvil:f:root:-:755 -$daemon_directory/bounce:f:root:-:755 -$daemon_directory/cleanup:f:root:-:755 -$daemon_directory/discard:f:root:-:755 -$daemon_directory/dnsblog:f:root:-:755 -$daemon_directory/error:f:root:-:755 -$daemon_directory/flush:f:root:-:755 -$daemon_directory/local:f:root:-:755 -$daemon_directory/main.cf:f:root:-:644:o -$daemon_directory/master.cf:f:root:-:644:o -$daemon_directory/master:f:root:-:755 -$daemon_directory/oqmgr:f:root:-:755 -$daemon_directory/pickup:f:root:-:755 -$daemon_directory/pipe:f:root:-:755 -$daemon_directory/post-install:f:root:-:755 -# In case meta_directory == daemon_directory. -#$daemon_directory/postfix-files:f:root:-:644:o -#$daemon_directory/postfix-files.d:d:root:-:755:o -$daemon_directory/postfix-script:f:root:-:755 -$daemon_directory/postfix-tls-script:f:root:-:755 -$daemon_directory/postfix-wrapper:f:root:-:755 -$daemon_directory/postmulti-script:f:root:-:755 -$daemon_directory/postlogd:f:root:-:755 -$daemon_directory/postscreen:f:root:-:755 -$daemon_directory/proxymap:f:root:-:755 -$daemon_directory/qmgr:f:root:-:755 -$daemon_directory/qmqpd:f:root:-:755 -$daemon_directory/scache:f:root:-:755 -$daemon_directory/showq:f:root:-:755 -$daemon_directory/smtp:f:root:-:755 -$daemon_directory/smtpd:f:root:-:755 -$daemon_directory/spawn:f:root:-:755 -$daemon_directory/tlsproxy:f:root:-:755 -$daemon_directory/tlsmgr:f:root:-:755 -$daemon_directory/trivial-rewrite:f:root:-:755 -$daemon_directory/verify:f:root:-:755 -$daemon_directory/virtual:f:root:-:755 -$daemon_directory/nqmgr:h:$daemon_directory/qmgr -$daemon_directory/lmtp:h:$daemon_directory/smtp -$command_directory/postalias:f:root:-:755 -$command_directory/postcat:f:root:-:755 -$command_directory/postconf:f:root:-:755 -$command_directory/postfix:f:root:-:755 -$command_directory/postkick:f:root:-:755 -$command_directory/postlock:f:root:-:755 -$command_directory/postlog:f:root:-:755 -$command_directory/postmap:f:root:-:755 -$command_directory/postmulti:f:root:-:755 -$command_directory/postsuper:f:root:-:755 -$command_directory/postdrop:f:root:$setgid_group:2755:u -$command_directory/postqueue:f:root:$setgid_group:2755:u -$sendmail_path:f:root:-:755 -$newaliases_path:l:$sendmail_path -$mailq_path:l:$sendmail_path -$config_directory/access:f:root:-:644:p1 -$config_directory/canonical:f:root:-:644:p1 -$config_directory/cidr_table:f:root:-:644:o -$config_directory/generic:f:root:-:644:p1 -$config_directory/generics:f:root:-:644:o -$config_directory/header_checks:f:root:-:644:p1 -$config_directory/install.cf:f:root:-:644:o -$config_directory/main.cf:f:root:-:644:p -$config_directory/master.cf:f:root:-:644:p -$config_directory/pcre_table:f:root:-:644:o -$config_directory/regexp_table:f:root:-:644:o -$config_directory/relocated:f:root:-:644:p1 -$config_directory/tcp_table:f:root:-:644:o -$config_directory/transport:f:root:-:644:p1 -$config_directory/virtual:f:root:-:644:p1 -$config_directory/postfix-script:f:root:-:755:o -$config_directory/postfix-script-sgid:f:root:-:755:o -$config_directory/postfix-script-nosgid:f:root:-:755:o -$config_directory/post-install:f:root:-:755:o -$manpage_directory/man1/mailq.postfix.1.gz:f:root:-:644 -$manpage_directory/man1/newaliases.postfix.1.gz:f:root:-:644 -$manpage_directory/man1/postalias.1.gz:f:root:-:644 -$manpage_directory/man1/postcat.1.gz:f:root:-:644 -$manpage_directory/man1/postconf.1.gz:f:root:-:644 -$manpage_directory/man1/postdrop.1.gz:f:root:-:644 -$manpage_directory/man1/postfix.1.gz:f:root:-:644 -$manpage_directory/man1/postfix-tls.1.gz:f:root:-:644 -$manpage_directory/man1/postkick.1.gz:f:root:-:644 -$manpage_directory/man1/postlock.1.gz:f:root:-:644 -$manpage_directory/man1/postlog.1.gz:f:root:-:644 -$manpage_directory/man1/postmap.1.gz:f:root:-:644 -$manpage_directory/man1/postmulti.1.gz:f:root:-:644 -$manpage_directory/man1/postqueue.1.gz:f:root:-:644 -$manpage_directory/man1/postsuper.1.gz:f:root:-:644 -$manpage_directory/man1/sendmail.postfix.1.gz:f:root:-:644 -$manpage_directory/man5/access.5.gz:f:root:-:644 -$manpage_directory/man5/aliases.postfix.5.gz:f:root:-:644 -$manpage_directory/man5/body_checks.5.gz:f:root:-:644 -$manpage_directory/man5/bounce.5.gz:f:root:-:644 -$manpage_directory/man5/canonical.5.gz:f:root:-:644 -$manpage_directory/man5/cidr_table.5.gz:f:root:-:644 -$manpage_directory/man5/generics.5.gz:f:root:-:644:o -$manpage_directory/man5/generic.5.gz:f:root:-:644 -$manpage_directory/man5/header_checks.5.gz:f:root:-:644 -$manpage_directory/man5/master.5.gz:f:root:-:644 -$manpage_directory/man5/memcache_table.5.gz:f:root:-:644 -$manpage_directory/man5/socketmap_table.5.gz:f:root:-:644 -$manpage_directory/man5/nisplus_table.5.gz:f:root:-:644 -$manpage_directory/man5/postconf.5.gz:f:root:-:644 -$manpage_directory/man5/postfix-wrapper.5.gz:f:root:-:644 -$manpage_directory/man5/regexp_table.5.gz:f:root:-:644 -$manpage_directory/man5/relocated.5.gz:f:root:-:644 -$manpage_directory/man5/tcp_table.5.gz:f:root:-:644 -$manpage_directory/man5/transport.5.gz:f:root:-:644 -$manpage_directory/man5/virtual.5.gz:f:root:-:644 -$manpage_directory/man8/bounce.8.gz:f:root:-:644 -$manpage_directory/man8/cleanup.8.gz:f:root:-:644 -$manpage_directory/man8/anvil.8.gz:f:root:-:644 -$manpage_directory/man8/defer.8.gz:f:root:-:644 -$manpage_directory/man8/discard.8.gz:f:root:-:644 -$manpage_directory/man8/dnsblog.8.gz:f:root:-:644 -$manpage_directory/man8/error.8.gz:f:root:-:644 -$manpage_directory/man8/flush.8.gz:f:root:-:644 -$manpage_directory/man8/lmtp.8.gz:f:root:-:644 -$manpage_directory/man8/local.8.gz:f:root:-:644 -$manpage_directory/man8/master.8.gz:f:root:-:644 -$manpage_directory/man8/nqmgr.8.gz:f:root:-:644:o -$manpage_directory/man8/oqmgr.8.gz:f:root:-:644: -$manpage_directory/man8/pickup.8.gz:f:root:-:644 -$manpage_directory/man8/pipe.8.gz:f:root:-:644 -$manpage_directory/man8/postlogd.8.gz:f:root:-:644 -$manpage_directory/man8/postscreen.8.gz:f:root:-:644 -$manpage_directory/man8/proxymap.8.gz:f:root:-:644 -$manpage_directory/man8/qmgr.8.gz:f:root:-:644 -$manpage_directory/man8/qmqpd.8.gz:f:root:-:644 -$manpage_directory/man8/scache.8.gz:f:root:-:644 -$manpage_directory/man8/showq.8.gz:f:root:-:644 -$manpage_directory/man8/smtp.8.gz:f:root:-:644 -$manpage_directory/man8/smtpd.postfix.8.gz:f:root:-:644 -$manpage_directory/man8/spawn.8.gz:f:root:-:644 -$manpage_directory/man8/tlsproxy.8.gz:f:root:-:644 -$manpage_directory/man8/tlsmgr.8.gz:f:root:-:644 -$manpage_directory/man8/trace.8.gz:f:root:-:644 -$manpage_directory/man8/trivial-rewrite.8.gz:f:root:-:644 -$manpage_directory/man8/verify.8.gz:f:root:-:644 -$manpage_directory/man8/virtual.8.gz:f:root:-:644 -$sample_directory/sample-aliases.cf:f:root:-:644:o -$sample_directory/sample-auth.cf:f:root:-:644:o -$sample_directory/sample-canonical.cf:f:root:-:644:o -$sample_directory/sample-compatibility.cf:f:root:-:644:o -$sample_directory/sample-debug.cf:f:root:-:644:o -$sample_directory/sample-filter.cf:f:root:-:644:o -$sample_directory/sample-flush.cf:f:root:-:644:o -$sample_directory/sample-ipv6.cf:f:root:-:644:o -$sample_directory/sample-ldap.cf:f:root:-:644:o -$sample_directory/sample-lmtp.cf:f:root:-:644:o -$sample_directory/sample-local.cf:f:root:-:644:o -$sample_directory/sample-mime.cf:f:root:-:644:o -$sample_directory/sample-misc.cf:f:root:-:644:o -$sample_directory/sample-pcre-access.cf:f:root:-:644:o -$sample_directory/sample-pcre-body.cf:f:root:-:644:o -$sample_directory/sample-pcre-header.cf:f:root:-:644:o -$sample_directory/sample-pgsql-aliases.cf:f:root:-:644:o -$sample_directory/sample-qmqpd.cf:f:root:-:644:o -$sample_directory/sample-rate.cf:f:root:-:644:o -$sample_directory/sample-regexp-access.cf:f:root:-:644:o -$sample_directory/sample-regexp-body.cf:f:root:-:644:o -$sample_directory/sample-regexp-header.cf:f:root:-:644:o -$sample_directory/sample-relocated.cf:f:root:-:644:o -$sample_directory/sample-resource.cf:f:root:-:644:o -$sample_directory/sample-rewrite.cf:f:root:-:644:o -$sample_directory/sample-scheduler.cf:f:root:-:644:o -$sample_directory/sample-smtp.cf:f:root:-:644:o -$sample_directory/sample-smtpd.cf:f:root:-:644:o -$sample_directory/sample-tls.cf:f:root:-:644:o -$sample_directory/sample-transport.cf:f:root:-:644:o -$sample_directory/sample-verify.cf:f:root:-:644:o -$sample_directory/sample-virtual.cf:f:root:-:644:o -$readme_directory/AAAREADME:f:root:-:644 -$readme_directory/ADDRESS_CLASS_README:f:root:-:644 -$readme_directory/ADDRESS_REWRITING_README:f:root:-:644 -$readme_directory/ADDRESS_VERIFICATION_README:f:root:-:644 -$readme_directory/BACKSCATTER_README:f:root:-:644 -$readme_directory/BASIC_CONFIGURATION_README:f:root:-:644 -$readme_directory/BUILTIN_FILTER_README:f:root:-:644 -$readme_directory/COMPATIBILITY_README:f:root:-:644 -$readme_directory/CONNECTION_CACHE_README:f:root:-:644 -$readme_directory/CONTENT_INSPECTION_README:f:root:-:644 -$readme_directory/DATABASE_README:f:root:-:644 -$readme_directory/DB_README:f:root:-:644 -$readme_directory/DEBUG_README:f:root:-:644 -$readme_directory/DSN_README:f:root:-:644 -$readme_directory/ETRN_README:f:root:-:644 -$readme_directory/FILTER_README:f:root:-:644 -$readme_directory/FORWARD_SECRECY_README:f:root:-:644 -$readme_directory/HOSTING_README:f:root:-:644:o -$readme_directory/INSTALL:f:root:-:644 -$readme_directory/IPV6_README:f:root:-:644 -$readme_directory/LINUX_README:f:root:-:644 -$readme_directory/LOCAL_RECIPIENT_README:f:root:-:644 -$readme_directory/MACOSX_README:f:root:-:644:o -$readme_directory/MAILDROP_README:f:root:-:644 -$readme_directory/MEMCACHE_README:f:root:-:644 -$readme_directory/MILTER_README:f:root:-:644 -$readme_directory/MULTI_INSTANCE_README:f:root:-:644 -$readme_directory/NFS_README:f:root:-:644 -$readme_directory/OVERVIEW:f:root:-:644 -$readme_directory/PACKAGE_README:f:root:-:644 -$readme_directory/POSTSCREEN_README:f:root:-:644 -$readme_directory/QMQP_README:f:root:-:644:o -$readme_directory/QSHAPE_README:f:root:-:644 -$readme_directory/RELEASE_NOTES:f:root:-:644 -$readme_directory/RESTRICTION_CLASS_README:f:root:-:644 -$readme_directory/SASL_README:f:root:-:644 -$readme_directory/SCHEDULER_README:f:root:-:644 -$readme_directory/SMTPD_ACCESS_README:f:root:-:644 -$readme_directory/SMTPD_POLICY_README:f:root:-:644 -$readme_directory/SMTPD_PROXY_README:f:root:-:644 -$readme_directory/SOHO_README:f:root:-:644 -$readme_directory/STANDARD_CONFIGURATION_README:f:root:-:644 -$readme_directory/STRESS_README:f:root:-:644 -$readme_directory/TLS_LEGACY_README:f:root:-:644 -$readme_directory/TLS_README:f:root:-:644 -$readme_directory/TUNING_README:f:root:-:644 -$readme_directory/ULTRIX_README:f:root:-:644 -$readme_directory/UUCP_README:f:root:-:644 -$readme_directory/VERP_README:f:root:-:644 -$readme_directory/VIRTUAL_README:f:root:-:644 -$readme_directory/XCLIENT_README:f:root:-:644 -$readme_directory/XFORWARD_README:f:root:-:644 -$html_directory/ADDRESS_CLASS_README.html:f:root:-:644 -$html_directory/ADDRESS_REWRITING_README.html:f:root:-:644 -$html_directory/ADDRESS_VERIFICATION_README.html:f:root:-:644 -$html_directory/BACKSCATTER_README.html:f:root:-:644 -$html_directory/BASIC_CONFIGURATION_README.html:f:root:-:644 -$html_directory/BUILTIN_FILTER_README.html:f:root:-:644 -$html_directory/CDB_README.html:f:root:-:644 -$html_directory/COMPATIBILITY_README.html:f:root:-:644 -$html_directory/CONNECTION_CACHE_README.html:f:root:-:644 -$html_directory/CONTENT_INSPECTION_README.html:f:root:-:644 -$html_directory/CYRUS_README.html:f:root:-:644:o -$html_directory/DATABASE_README.html:f:root:-:644 -$html_directory/DB_README.html:f:root:-:644 -$html_directory/DEBUG_README.html:f:root:-:644 -$html_directory/DSN_README.html:f:root:-:644 -$html_directory/ETRN_README.html:f:root:-:644 -$html_directory/FILTER_README.html:f:root:-:644 -$html_directory/FORWARD_SECRECY_README.html:f:root:-:644 -$html_directory/INSTALL.html:f:root:-:644 -$html_directory/IPV6_README.html:f:root:-:644 -$html_directory/LDAP_README.html:f:root:-:644 -$html_directory/LINUX_README.html:f:root:-:644 -$html_directory/LMDB_README.html:f:root:-:644 -$html_directory/LOCAL_RECIPIENT_README.html:f:root:-:644 -$html_directory/MAILDROP_README.html:f:root:-:644 -$html_directory/MILTER_README.html:f:root:-:644 -$html_directory/MULTI_INSTANCE_README.html:f:root:-:644 -$html_directory/MYSQL_README.html:f:root:-:644 -$html_directory/SQLITE_README.html:f:root:-:644 -$html_directory/NFS_README.html:f:root:-:644 -$html_directory/OVERVIEW.html:f:root:-:644 -$html_directory/PACKAGE_README.html:f:root:-:644 -$html_directory/PCRE_README.html:f:root:-:644 -$html_directory/PGSQL_README.html:f:root:-:644 -$html_directory/POSTSCREEN_README.html:f:root:-:644 -$html_directory/QMQP_README.html:f:root:-:644:o -$html_directory/QSHAPE_README.html:f:root:-:644 -$html_directory/RESTRICTION_CLASS_README.html:f:root:-:644 -$html_directory/SASL_README.html:f:root:-:644 -$html_directory/SCHEDULER_README.html:f:root:-:644 -$html_directory/SMTPD_ACCESS_README.html:f:root:-:644 -$html_directory/SMTPD_POLICY_README.html:f:root:-:644 -$html_directory/SMTPD_PROXY_README.html:f:root:-:644 -$html_directory/SOHO_README.html:f:root:-:644 -$html_directory/STANDARD_CONFIGURATION_README.html:f:root:-:644 -$html_directory/STRESS_README.html:f:root:-:644 -$html_directory/TLS_LEGACY_README.html:f:root:-:644 -$html_directory/TLS_README.html:f:root:-:644 -$html_directory/TUNING_README.html:f:root:-:644 -$html_directory/ULTRIX_README.html:f:root:-:644:o -$html_directory/UUCP_README.html:f:root:-:644 -$html_directory/VERP_README.html:f:root:-:644 -$html_directory/VIRTUAL_README.html:f:root:-:644 -$html_directory/XCLIENT_README.html:f:root:-:644 -$html_directory/XFORWARD_README.html:f:root:-:644 -$html_directory/access.5.html:f:root:-:644 -$html_directory/aliases.5.html:f:root:-:644 -$html_directory/anvil.8.html:f:root:-:644 -$html_directory/bounce.8.html:f:root:-:644 -$html_directory/canonical.5.html:f:root:-:644 -$html_directory/cidr_table.5.html:f:root:-:644 -$html_directory/cleanup.8.html:f:root:-:644 -$html_directory/defer.8.html:h:$html_directory/bounce.8.html:-:644 -$html_directory/discard.8.html:f:root:-:644 -$html_directory/dnsblog.8.html:f:root:-:644 -$html_directory/error.8.html:f:root:-:644 -$html_directory/flush.8.html:f:root:-:644 -$html_directory/generics.5.html:f:root:-:644:o -$html_directory/generic.5.html:f:root:-:644 -$html_directory/header_checks.5.html:f:root:-:644 -$html_directory/index.html:f:root:-:644 -$html_directory/ldap_table.5.html:f:root:-:644 -$html_directory/lmtp.8.html:f:root:-:644 -$html_directory/local.8.html:f:root:-:644 -$html_directory/mailq.1.html:f:root:-:644 -$html_directory/master.5.html:f:root:-:644 -$html_directory/master.8.html:f:root:-:644 -$html_directory/memcache_table.5.html:f:root:-:644 -$html_directory/mysql_table.5.html:f:root:-:644 -$html_directory/sqlite_table.5.html:f:root:-:644 -$html_directory/nisplus_table.5.html:f:root:-:644 -$html_directory/newaliases.1.html:h:$html_directory/mailq.1.html:-:644 -$html_directory/oqmgr.8.html:f:root:-:644 -$html_directory/pcre_table.5.html:f:root:-:644 -$html_directory/pgsql_table.5.html:f:root:-:644 -$html_directory/pickup.8.html:f:root:-:644 -$html_directory/pipe.8.html:f:root:-:644 -$html_directory/postalias.1.html:f:root:-:644 -$html_directory/postcat.1.html:f:root:-:644 -$html_directory/postconf.1.html:f:root:-:644 -$html_directory/postconf.5.html:f:root:-:644 -$html_directory/postdrop.1.html:f:root:-:644 -$html_directory/postfix-logo.jpg:f:root:-:644 -$html_directory/postfix-manuals.html:f:root:-:644 -$html_directory/postfix-wrapper.5.html:f:root:-:644 -$html_directory/postfix.1.html:f:root:-:644 -$html_directory/postkick.1.html:f:root:-:644 -$html_directory/postlock.1.html:f:root:-:644 -$html_directory/postlog.1.html:f:root:-:644 -$html_directory/postmap.1.html:f:root:-:644 -$html_directory/postmulti.1.html:f:root:-:644 -$html_directory/postlogd.8.html:f:root:-:644 -$html_directory/postqueue.1.html:f:root:-:644 -$html_directory/postscreen.8.html:f:root:-:644 -$html_directory/postsuper.1.html:f:root:-:644 -$html_directory/qshape.1.html:f:root:-:644 -$html_directory/proxymap.8.html:f:root:-:644 -$html_directory/qmgr.8.html:f:root:-:644 -$html_directory/qmqp-sink.1.html:f:root:-:644 -$html_directory/qmqp-source.1.html:f:root:-:644 -$html_directory/qmqpd.8.html:f:root:-:644 -$html_directory/regexp_table.5.html:f:root:-:644 -$html_directory/relocated.5.html:f:root:-:644 -$html_directory/sendmail.1.html:h:$html_directory/mailq.1.html:-:644 -$html_directory/showq.8.html:f:root:-:644 -$html_directory/smtp-sink.1.html:f:root:-:644 -$html_directory/smtp-source.1.html:f:root:-:644 -$html_directory/smtp.8.html:h:$html_directory/lmtp.8.html:-:644 -$html_directory/smtpd.8.html:f:root:-:644 -$html_directory/spawn.8.html:f:root:-:644 -$html_directory/tlsproxy.8.html:f:root:-:644 -$html_directory/tcp_table.5.html:f:root:-:644 -$html_directory/trace.8.html:h:$html_directory/bounce.8.html:-:644 -$html_directory/transport.5.html:f:root:-:644 -$html_directory/trivial-rewrite.8.html:f:root:-:644 -$html_directory/verify.8.html:f:root:-:644 -$html_directory/virtual.5.html:f:root:-:644 -$html_directory/virtual.8.html:f:root:-:644 diff --git a/templates/Fedora/37/etc/postfix/postfix-files.d/ldap b/templates/Fedora/37/etc/postfix/postfix-files.d/ldap deleted file mode 100644 index 684b05d..0000000 --- a/templates/Fedora/37/etc/postfix/postfix-files.d/ldap +++ /dev/null @@ -1,3 +0,0 @@ -$shlib_directory/postfix-ldap.so:f:root:-:755 -$manpage_directory/man5/ldap_table.5.gz:f:root:-:644 -$readme_directory/LDAP_README:f:root:-:644 diff --git a/templates/Fedora/37/etc/postfix/postfix-files.d/mysql b/templates/Fedora/37/etc/postfix/postfix-files.d/mysql deleted file mode 100644 index 8e41d61..0000000 --- a/templates/Fedora/37/etc/postfix/postfix-files.d/mysql +++ /dev/null @@ -1,3 +0,0 @@ -$shlib_directory/postfix-mysql.so:f:root:-:755 -$manpage_directory/man5/mysql_table.5.gz:f:root:-:644 -$readme_directory/MYSQL_README:f:root:-:644 diff --git a/templates/Fedora/37/etc/postfix/postfix-files.d/pcre b/templates/Fedora/37/etc/postfix/postfix-files.d/pcre deleted file mode 100644 index a34fd73..0000000 --- a/templates/Fedora/37/etc/postfix/postfix-files.d/pcre +++ /dev/null @@ -1,3 +0,0 @@ -$shlib_directory/postfix-pcre.so:f:root:-:755 -$manpage_directory/man5/pcre_table.5.gz:f:root:-:644 -$readme_directory/PCRE_README:f:root:-:644 diff --git a/templates/Fedora/37/etc/postfix/relocated b/templates/Fedora/37/etc/postfix/relocated deleted file mode 100644 index e50edfd..0000000 --- a/templates/Fedora/37/etc/postfix/relocated +++ /dev/null @@ -1,176 +0,0 @@ -# RELOCATED(5) RELOCATED(5) -# -# NAME -# relocated - Postfix relocated table format -# -# SYNOPSIS -# postmap /etc/postfix/relocated -# -# DESCRIPTION -# The optional relocated(5) table provides the information -# that is used in "user has moved to new_location" bounce -# messages. -# -# Normally, the relocated(5) table is specified as a text -# file that serves as input to the postmap(1) command. The -# result, an indexed file in dbm or db format, is used for -# fast searching by the mail system. Execute the command -# "postmap /etc/postfix/relocated" to rebuild an indexed -# file after changing the corresponding relocated table. -# -# When the table is provided via other means such as NIS, -# LDAP or SQL, the same lookups are done as for ordinary -# indexed files. -# -# Alternatively, the table can be provided as a regu- -# lar-expression map where patterns are given as regular -# expressions, or lookups can be directed to TCP-based -# server. In those case, the lookups are done in a slightly -# different way as described below under "REGULAR EXPRESSION -# TABLES" or "TCP-BASED TABLES". -# -# Table lookups are case insensitive. -# -# CASE FOLDING -# The search string is folded to lowercase before database -# lookup. As of Postfix 2.3, the search string is not case -# folded with database types such as regexp: or pcre: whose -# lookup fields can match both upper and lower case. -# -# TABLE FORMAT -# The input format for the postmap(1) command is as follows: -# -# o An entry has one of the following form: -# -# pattern new_location -# -# Where new_location specifies contact information -# such as an email address, or perhaps a street -# address or telephone number. -# -# o Empty lines and whitespace-only lines are ignored, -# as are lines whose first non-whitespace character -# is a `#'. -# -# o A logical line starts with non-whitespace text. A -# line that starts with whitespace continues a logi- -# cal line. -# -# TABLE SEARCH ORDER -# With lookups from indexed files such as DB or DBM, or from -# networked tables such as NIS, LDAP or SQL, patterns are -# tried in the order as listed below: -# -# user@domain -# Matches user@domain. This form has precedence over -# all other forms. -# -# user Matches user@site when site is $myorigin, when site -# is listed in $mydestination, or when site is listed -# in $inet_interfaces or $proxy_interfaces. -# -# @domain -# Matches other addresses in domain. This form has -# the lowest precedence. -# -# ADDRESS EXTENSION -# When a mail address localpart contains the optional recip- -# ient delimiter (e.g., user+foo@domain), the lookup order -# becomes: user+foo@domain, user@domain, user+foo, user, and -# @domain. -# -# REGULAR EXPRESSION TABLES -# This section describes how the table lookups change when -# the table is given in the form of regular expressions or -# when lookups are directed to a TCP-based server. For a -# description of regular expression lookup table syntax, see -# regexp_table(5) or pcre_table(5). For a description of the -# TCP client/server table lookup protocol, see tcp_table(5). -# This feature is not available up to and including Postfix -# version 2.4. -# -# Each pattern is a regular expression that is applied to -# the entire address being looked up. Thus, user@domain mail -# addresses are not broken up into their user and @domain -# constituent parts, nor is user+foo broken up into user and -# foo. -# -# Patterns are applied in the order as specified in the ta- -# ble, until a pattern is found that matches the search -# string. -# -# Results are the same as with indexed file lookups, with -# the additional feature that parenthesized substrings from -# the pattern can be interpolated as $1, $2 and so on. -# -# TCP-BASED TABLES -# This section describes how the table lookups change when -# lookups are directed to a TCP-based server. For a descrip- -# tion of the TCP client/server lookup protocol, see tcp_ta- -# ble(5). This feature is not available up to and including -# Postfix version 2.4. -# -# Each lookup operation uses the entire address once. Thus, -# user@domain mail addresses are not broken up into their -# user and @domain constituent parts, nor is user+foo broken -# up into user and foo. -# -# Results are the same as with indexed file lookups. -# -# BUGS -# The table format does not understand quoting conventions. -# -# CONFIGURATION PARAMETERS -# The following main.cf parameters are especially relevant. -# The text below provides only a parameter summary. See -# postconf(5) for more details including examples. -# -# relocated_maps -# List of lookup tables for relocated users or sites. -# -# Other parameters of interest: -# -# inet_interfaces -# The network interface addresses that this system -# receives mail on. You need to stop and start Post- -# fix when this parameter changes. -# -# mydestination -# List of domains that this mail system considers -# local. -# -# myorigin -# The domain that is appended to locally-posted mail. -# -# proxy_interfaces -# Other interfaces that this machine receives mail on -# by way of a proxy agent or network address transla- -# tor. -# -# SEE ALSO -# trivial-rewrite(8), address resolver -# postmap(1), Postfix lookup table manager -# postconf(5), configuration parameters -# -# README FILES -# Use "postconf readme_directory" or "postconf html_direc- -# tory" to locate this information. -# DATABASE_README, Postfix lookup table overview -# ADDRESS_REWRITING_README, address rewriting guide -# -# LICENSE -# The Secure Mailer license must be distributed with this -# software. -# -# AUTHOR(S) -# Wietse Venema -# IBM T.J. Watson Research -# P.O. Box 704 -# Yorktown Heights, NY 10598, USA -# -# Wietse Venema -# Google, Inc. -# 111 8th Avenue -# New York, NY 10011, USA -# -# RELOCATED(5) diff --git a/templates/Fedora/37/etc/postfix/transport b/templates/Fedora/37/etc/postfix/transport deleted file mode 100644 index 1dcd787..0000000 --- a/templates/Fedora/37/etc/postfix/transport +++ /dev/null @@ -1,317 +0,0 @@ -# TRANSPORT(5) TRANSPORT(5) -# -# NAME -# transport - Postfix transport table format -# -# SYNOPSIS -# postmap /etc/postfix/transport -# -# postmap -q "string" /etc/postfix/transport -# -# postmap -q - /etc/postfix/transport = 3.5): -# -# example.com smtp:bar.example, foo.example -# -# This tries to deliver to bar.example before trying to -# deliver to foo.example. -# -# The error mailer can be used to bounce mail: -# -# .example.com error:mail for *.example.com is not deliverable -# -# This causes all mail for user@anything.example.com to be -# bounced. -# -# REGULAR EXPRESSION TABLES -# This section describes how the table lookups change when -# the table is given in the form of regular expressions. For -# a description of regular expression lookup table syntax, -# see regexp_table(5) or pcre_table(5). -# -# Each pattern is a regular expression that is applied to -# the entire address being looked up. Thus, -# some.domain.hierarchy is not looked up via its parent -# domains, nor is user+foo@domain looked up as user@domain. -# -# Patterns are applied in the order as specified in the ta- -# ble, until a pattern is found that matches the search -# string. -# -# The trivial-rewrite(8) server disallows regular expression -# substitution of $1 etc. in regular expression lookup -# tables, because that could open a security hole (Postfix -# version 2.3 and later). -# -# TCP-BASED TABLES -# This section describes how the table lookups change when -# lookups are directed to a TCP-based server. For a descrip- -# tion of the TCP client/server lookup protocol, see tcp_ta- -# ble(5). This feature is not available up to and including -# Postfix version 2.4. -# -# Each lookup operation uses the entire recipient address -# once. Thus, some.domain.hierarchy is not looked up via -# its parent domains, nor is user+foo@domain looked up as -# user@domain. -# -# Results are the same as with indexed file lookups. -# -# CONFIGURATION PARAMETERS -# The following main.cf parameters are especially relevant. -# The text below provides only a parameter summary. See -# postconf(5) for more details including examples. -# -# empty_address_recipient (MAILER-DAEMON) -# The recipient of mail addressed to the null -# address. -# -# parent_domain_matches_subdomains (see 'postconf -d' out- -# put) -# A list of Postfix features where the pattern "exam- -# ple.com" also matches subdomains of example.com, -# instead of requiring an explicit ".example.com" -# pattern. -# -# transport_maps (empty) -# Optional lookup tables with mappings from recipient -# address to (message delivery transport, next-hop -# destination). -# -# SEE ALSO -# trivial-rewrite(8), rewrite and resolve addresses -# master(5), master.cf file format -# postconf(5), configuration parameters -# postmap(1), Postfix lookup table manager -# -# README FILES -# Use "postconf readme_directory" or "postconf html_direc- -# tory" to locate this information. -# ADDRESS_REWRITING_README, address rewriting guide -# DATABASE_README, Postfix lookup table overview -# FILTER_README, external content filter -# -# LICENSE -# The Secure Mailer license must be distributed with this -# software. -# -# AUTHOR(S) -# Wietse Venema -# IBM T.J. Watson Research -# P.O. Box 704 -# Yorktown Heights, NY 10598, USA -# -# Wietse Venema -# Google, Inc. -# 111 8th Avenue -# New York, NY 10011, USA -# -# TRANSPORT(5) diff --git a/templates/Fedora/37/etc/postfix/virtual b/templates/Fedora/37/etc/postfix/virtual deleted file mode 100644 index da9cd65..0000000 --- a/templates/Fedora/37/etc/postfix/virtual +++ /dev/null @@ -1,324 +0,0 @@ -# VIRTUAL(5) VIRTUAL(5) -# -# NAME -# virtual - Postfix virtual alias table format -# -# SYNOPSIS -# postmap /etc/postfix/virtual -# -# postmap -q "string" /etc/postfix/virtual -# -# postmap -q - /etc/postfix/virtual -ReportAddress "Postmaster" <{{ postmaster_email }}> - -## Add a DKIM-Filter header field to messages passing through this filter -## to identify messages it has processed. -SoftwareHeader yes - -## SIGNING OPTIONS - -## Selects the canonicalization method(s) to be used when signing messages. -Canonicalization relaxed/relaxed - -## Domain(s) whose mail should be signed by this filter. Mail from other domains will -## be verified rather than being signed. Uncomment and use your domain name. -## This parameter is not required if a SigningTable is in use. -# Domain example.com - -## Defines the name of the selector to be used when signing messages. -Selector default - -## Specifies the minimum number of key bits for acceptable keys and signatures. -MinimumKeyBits 1024 - -## Gives the location of a private key to be used for signing ALL messages. This -## directive is ignored if KeyTable is enabled. -# KeyFile /etc/opendkim/keys/default.private - -## Gives the location of a file mapping key names to signing keys. In simple terms, -## this tells OpenDKIM where to find your keys. If present, overrides any KeyFile -## directive in the configuration file. Requires SigningTable be enabled. -# KeyTable /etc/opendkim/KeyTable - -## Defines a table used to select one or more signatures to apply to a message based -## on the address found in the From: header field. In simple terms, this tells -## OpenDKIM how to use your keys. Requires KeyTable be enabled. -# SigningTable refile:/etc/opendkim/SigningTable - -## Identifies a set of "external" hosts that may send mail through the server as one -## of the signing domains without credentials as such. -# ExternalIgnoreList refile:/etc/opendkim/TrustedHosts - -## Identifies a set "internal" hosts whose mail should be signed rather than verified. -# InternalHosts refile:/etc/opendkim/TrustedHosts - -## Contains a list of IP addresses, CIDR blocks, hostnames or domain names -## whose mail should be neither signed nor verified by this filter. See man -## page for file format. -# PeerList X.X.X.X - -## Always oversign From (sign using actual From and a null From to prevent -## malicious signatures header fields (From and/or others) between the signer -## and the verifier. From is oversigned by default in the Fedora package -## because it is often the identity key used by reputation systems and thus -## somewhat security sensitive. -OversignHeaders From - -## Instructs the DKIM library to maintain its own local cache of keys and -## policies retrieved from DNS, rather than relying on the nameserver for -## caching service. Useful if the nameserver being used by the filter is -## not local. -# QueryCache yes diff --git a/templates/Fedora/38/etc/opendkim/KeyTable b/templates/Fedora/38/etc/opendkim/KeyTable deleted file mode 100644 index e804d68..0000000 --- a/templates/Fedora/38/etc/opendkim/KeyTable +++ /dev/null @@ -1,6 +0,0 @@ -# OPENDKIM KEY TABLE -# To use this file, uncomment the #KeyTable option in /etc/opendkim.conf, -# then uncomment the following line and replace example.com with your domain -# name, then restart OpenDKIM. Additional keys may be added on separate lines. - -#default._domainkey.example.com example.com:default:/etc/opendkim/keys/default.private diff --git a/templates/Fedora/38/etc/opendkim/SigningTable b/templates/Fedora/38/etc/opendkim/SigningTable deleted file mode 100644 index e8161a1..0000000 --- a/templates/Fedora/38/etc/opendkim/SigningTable +++ /dev/null @@ -1,25 +0,0 @@ -# OPENDKIM SIGNING TABLE -# This table controls how to apply one or more signatures to outgoing messages based -# on the address found in the From: header field. In simple terms, this tells -# OpenDKIM "how" to apply your keys. - -# To use this file, uncomment the SigningTable option in /etc/opendkim.conf, -# then uncomment one of the usage examples below and replace example.com with your -# domain name, then restart OpenDKIM. - -# WILDCARD EXAMPLE -# Enables signing for any address on the listed domain(s), but will work only if -# "refile:/etc/opendkim/SigningTable" is included in /etc/opendkim.conf. -# Create additional lines for additional domains. - -#*@example.com default._domainkey.example.com - -# NON-WILDCARD EXAMPLE -# If "file:" (instead of "refile:") is specified in /etc/opendkim.conf, then -# wildcards will not work. Instead, full user@host is checked first, then simply host, -# then user@.domain (with all superdomains checked in sequence, so "foo.example.com" -# would first check "user@foo.example.com", then "user@.example.com", then "user@.com"), -# then .domain, then user@*, and finally *. See the opendkim.conf(5) man page under -# "SigningTable" for more details. - -#example.com default._domainkey.example.com diff --git a/templates/Fedora/38/etc/opendkim/TrustedHosts b/templates/Fedora/38/etc/opendkim/TrustedHosts deleted file mode 100644 index 7a086d4..0000000 --- a/templates/Fedora/38/etc/opendkim/TrustedHosts +++ /dev/null @@ -1,9 +0,0 @@ -# OPENDKIM TRUSTED HOSTS -# To use this file, uncomment the #ExternalIgnoreList and/or the #InternalHosts -# option in /etc/opendkim.conf then restart OpenDKIM. Additional hosts -# may be added on separate lines (IP addresses, hostnames, or CIDR ranges). -# The localhost IP (127.0.0.1) should always be the first entry in this file. -127.0.0.1 -::1 -#host.example.com -#192.168.1.0/24 diff --git a/templates/Fedora/38/etc/opendmarc.conf b/templates/Fedora/38/etc/opendmarc.conf deleted file mode 100644 index 19f6b7b..0000000 --- a/templates/Fedora/38/etc/opendmarc.conf +++ /dev/null @@ -1,443 +0,0 @@ -## opendmarc.conf -- configuration file for OpenDMARC filter -## -## Copyright (c) 2012-2015, 2018, 2021, The Trusted Domain Project. -## All rights reserved. - -## DEPRECATED CONFIGURATION OPTIONS -## -## The following configuration options are no longer valid. They should be -## removed from your existing configuration file to prevent potential issues. -## Failure to do so may result in opendmarc being unable to start. -## -## Renamed in 1.3.0: -## ForensicReports became FailureReports -## ForensicReportsBcc became FailureReportsBcc -## ForensicReportsOnNone became FailureReportsOnNone -## ForensicReportsSentBy became FailureReportsSentBy - -## CONFIGURATION OPTIONS - -## AuthservID (string) -## defaults to MTA name -## -## Sets the "authserv-id" to use when generating the Authentication-Results: -## header field after verifying a message. If the string "HOSTNAME" is -## provided, the name of the host running the filter (as returned by the -## gethostname(3) function) will be used. -# -# AuthservID name - -## AuthservIDWithJobID { true | false } -## default "false" -## -## If "true", requests that the authserv-id portion of the added -## Authentication-Results header fields contain the job ID of the message -## being evaluated. -# -# AuthservIDWithJobID false - -## AutoRestart { true | false } -## default "false" -## -## Automatically re-start on failures. Use with caution; if the filter fails -## instantly after it starts, this can cause a tight fork(2) loop. -# -# AutoRestart false - -## AutoRestartCount n -## default 0 -## -## Sets the maximum automatic restart count. After this number of automatic -## restarts, the filter will give up and terminate. A value of 0 implies no -## limit. -# -# AutoRestartCount 0 - -## AutoRestartRate n/t[u] -## default (no limit) -## -## Sets the maximum automatic restart rate. If the filter begins restarting -## faster than the rate defined here, it will give up and terminate. This -## is a string of the form n/t[u] where n is an integer limiting the count -## of restarts in the given interval and t[u] defines the time interval -## through which the rate is calculated; t is an integer and u defines the -## units thus represented ("s" or "S" for seconds, the default; "m" or "M" -## for minutes; "h" or "H" for hours; "d" or "D" for days). For example, a -## value of "10/1h" limits the restarts to 10 in one hour. There is no -## default, meaning restart rate is not limited. -# -# AutoRestartRate n/t[u] - -## Background { true | false } -## default "true" -## -## Causes opendmarc to fork and exits immediately, leaving the service -## running in the background. -# -# Background true - -## BaseDirectory (string) -## default (none) -## -## If set, instructs the filter to change to the specified directory using -## chdir(2) before doing anything else. This means any files referenced -## elsewhere in the configuration file can be specified relative to this -## directory. It's also useful for arranging that any crash dumps will be -## saved to a specific location. -# -# BaseDirectory /var/run/opendmarc - -## ChangeRootDirectory (string) -## default (none) -## -## Requests that the operating system change the effective root directory of -## the process to the one specified here prior to beginning execution. -## chroot(2) requires superuser access. A warning will be generated if -## UserID is not also set. -# -# ChangeRootDirectory /var/chroot/opendmarc - -## CopyFailuresTo (string) -## default (none) -## -## Requests addition of the specified email address to the envelope of -## any message that fails the DMARC evaluation. -# -# CopyFailuresTo postmaster@localhost - -## DomainWhitelist (string) -## default (none) -## -## A brief list of whitelisted domains for which ARC signature headers are -## trusted as determined by evaluating entries in the "arc.chain" field found -## in a locally generated Authentication-Results header. -## -## This list will be concatenated with DomainWhitelistFile (if provided). -## -# -# DomainWhitelist example.com - -## DomainWhitelistFile path -## default (none) -## -## A comprehensive list of whitelisted domains for which ARC signature headers -## are trusted as determined by evaluating entries in the "arc.chain" field -## found in a locally generated Authentication-Results header. -## -## This list will be concatenated with DomainWhitelist (if provided). -## -# -# DomainWhitelistFile /etc/opendmarc/whitelist.domains - -## DomainWhitelistSize -## default 3000 -## -## The maximum number of entries in the DomainWhitelist including both entries -## in the DomainWhitelist configuration parameter (above) and entries in the -## DomainWhitelistFile. This number will be increased by approximately 20% to -## increase the efficiency of the hashing algorithm. -## -# -# DomainWhitelistSize 3000 - -## DNSTimeout (integer) -## default 5 -## -## Sets the DNS timeout in seconds. A value of 0 causes an infinite wait. -## (NOT YET IMPLEMENTED) -# -# DNSTimeout 5 - -## EnableCoredumps { true | false } -## default "false" -## -## On systems that have such support, make an explicit request to the kernel -## to dump cores when the filter crashes for some reason. Some modern UNIX -## systems suppress core dumps during crashes for security reasons if the -## user ID has changed during the lifetime of the process. Currently only -## supported on Linux. -# -# EnableCoreDumps false - -## FailureReports { true | false } -## default "false" -## -## Enables generation of failure reports when the DMARC test fails and the -## purported sender of the message has requested such reports. Reports are -## formatted per RFC6591. -# -# FailureReports false - -## FailureReportsBcc (string) -## default (none) -## -## When failure reports are enabled and one is to be generated, always -## send one to the address(es) specified here. If a failure report is -## requested by the domain owner, the address(es) are added in a Bcc: field. -## If no request is made, they address(es) are used in a To: field. There -## is no default. -# -# FailureReportsBcc postmaster@example.coom -FailureReportsBcc {{ postmaster_email }} - -## FailureReportsOnNone { true | false } -## default "false" -## -## Supplements the "FailureReports" setting by generating reports for -## domains that advertise "none" policies. By default, reports are only -## generated (when enabled) for sending domains advertising a "quarantine" -## or "reject" policy. -# -# FailureReportsOnNone false - -## FailureReportsSentBy string -## default "USER@HOSTNAME" -## -## Specifies the email address to use in the From: field of failure -## reports generated by the filter. The default is to use the userid of -## the user running the filter and the local hostname to construct an -## email address. "postmaster" is used in place of the userid if a name -## could not be determined. -# -# FailureReportsSentBy USER@HOSTNAME -FailureReportsSentBy {{ postmaster_email }} - -## HistoryFile path -## default (none) -## -## If set, specifies the location of a text file to which records are written -## that can be used to generate DMARC aggregate reports. Records are groups -## of rows containing information about a single received message, and -## include all relevant information needed to generate a DMARC aggregate -## report. It is expected that this will not be used in its raw form, but -## rather periodically imported into a relational database from which the -## aggregate reports can be extracted by a tool such as opendmarc-import(8). -# -# HistoryFile /var/spool/opendmarc/opendmarc.dat - -## HoldQuarantinedMessages { true | false } -## default "false" -## -## If set, the milter will signal to the mta that messages with -## p=quarantine, which fail dmarc authentication, should be held in -## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. -## If false, messsages will be accepted and passed along with the -## regular mail flow, and the quarantine will be left up to downstream -## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, -## including the Authentication-Results header added by OpenDMARC -# -# HoldQuarantinedMessages false - -## IgnoreAuthenticatedClients { true | false } -## default "false" -## -## If set, causes mail from authenticated clients (i.e., those that used -## SMTP AUTH) to be ignored by the filter. -# -# IgnoreAuthenticatedClients false - -## HoldQuarantinedMessages { true | false } -## default "false" -## -## If set, the milter will signal to the mta that messages with -## p=quarantine, which fail dmarc authentication, should be held in -## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. -## If false, messsages will be accepted and passed along with the -## regular mail flow, and the quarantine will be left up to downstream -## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, -## including the Authentication-Results header added by OpenDMARC -# -# HoldQuarantinedMessages false - - -## IgnoreHosts path -## default (internal) -## -## Specifies the path to a file that contains a list of hostnames, IP -## addresses, and/or CIDR expressions identifying hosts whose SMTP -## connections are to be ignored by the filter. If not specified, defaults -## to "127.0.0.1" only. -# -# IgnoreHosts /etc/opendmarc/ignore.hosts - -## IgnoreMailFrom domain[,...] -## default (none) -## -## Gives a list of domain names whose mail (based on the From: domain) is to -## be ignored by the filter. The list should be comma-separated. Matching -## against this list is case-insensitive. The default is an empty list, -## meaning no mail is ignored. -# -# IgnoreMailFrom example.com - -## MilterDebug (integer) -## default 0 -## -## Sets the debug level to be requested from the milter library. -# -# MilterDebug 0 - -## PidFile path -## default (none) -## -## Specifies the path to a file that should be created at process start -## containing the process ID. -# -# PidFile /var/run/opendmarc.pid - -## PublicSuffixList path -## default (none) -## -## Specifies the path to a file that contains top-level domains (TLDs) that -## will be used to compute the Organizational Domain for a given domain name, -## as described in the DMARC specification. If not provided, the filter will -## not be able to determine the Organizational Domain and only the presented -## domain will be evaluated. This file should be periodically updated. -## One location to retrieve the file from is https://publicsuffix.org/list/ -# -# PublicSuffixList path - -## RecordAllMessages { true | false } -## default "false" -## -## If set and "HistoryFile" is in use, all received messages are recorded -## to the history file. If not set (the default), only messages for which -## the From: domain published a DMARC record will be recorded in the -## history file. -# -# RecordAllMessages false - -## RejectFailures { true | false } -## default "false" -## -## If set, messages will be rejected if they fail the DMARC evaluation, or -## temp-failed if evaluation could not be completed. By default, no message -## will be rejected or temp-failed regardless of the outcome of the DMARC -## evaluation of the message. Instead, an Authentication-Results header -## field will be added. -# -# RejectFailures false -RejectFailures true - -## RejectMultiValueFrom { true | false } -## default "false" -## -## If set, messages with multiple addresses in the From: field of the message -## will be rejected unless all domains in the field are the same. They will -## otherwise be ignored by the filter (the default). -# -# RejectMultiValueFrom false - -## ReportCommand string -## default "/usr/sbin/sendmail -t" -## -## Indicates the shell command to which failure reports should be passed for -## delivery when "FailureReports" is enabled. -# -# ReportCommand /usr/sbin/sendmail -t - -## RequiredHeaders { true | false } -## default "false" -## -## If set, the filter will ensure the header of the message conforms to the -## basic header field count restrictions laid out in RFC5322, Section 3.6. -## Messages failing this test are rejected without further processing. A -## From: field from which no domain name could be extracted will also be -## rejected. -# -# RequiredHeaders false - -## Socket socketspec -## default (none) -## -## Specifies the socket that should be established by the filter to receive -## connections from sendmail(8) in order to provide service. socketspec is -## in one of two forms: local:path, which creates a UNIX domain socket at -## the specified path, or inet:port[@host] or inet6:port[@host] which creates -## a TCP socket on the specified port for the appropriate protocol family. -## If the host is not given as either a hostname or an IP address, the -## socket will be listening on all interfaces. This option is mandatory -## either in the configuration file or on the command line. If an IP -## address is used, it must be enclosed in square brackets. -# -Socket inet:8893@localhost -#Socket local:/run/opendmarc/opendmarc.sock - -## SoftwareHeader { true | false } -## default "false" -## -## Causes the filter to add a "DMARC-Filter" header field indicating the -## presence of this filter in the path of the message from injection to -## delivery. The product's name, version, and the job ID are included in -## the header field's contents. -# -SoftwareHeader true - -## SPFIgnoreResults { true | false } -## default "false" -## -## Causes the filter to ignore any SPF results in the header of the -## message. This is useful if you want the filter to perform SPF checks -## itself, or because you don't trust the arriving header. -# -SPFIgnoreResults true - -## SPFSelfValidate { true | false } -## default false -## -## Enable internal spf checking with --with-spf -## To use libspf2 instead: --with-spf --with-spf2-include=path --with-spf2-lib=path -## -## Causes the filter to perform a fallback SPF check itself when -## it can find no SPF results in the message header. If SPFIgnoreResults -## is also set, it never looks for SPF results in headers and -## always performs the SPF check itself when this is set. -# -SPFSelfValidate true - -## Syslog { true | false } -## default "false" -## -## Log via calls to syslog(3) any interesting activity. -# -Syslog true - -## SyslogFacility facility-name -## default "mail" -## -## Log via calls to syslog(3) using the named facility. The facility names -## are the same as the ones allowed in syslog.conf(5). -# -# SyslogFacility mail - -## TrustedAuthservIDs string -## default HOSTNAME -## -## Specifies one or more "authserv-id" values to trust as relaying true -## upstream DKIM and SPF results. The default is to use the name of -## the MTA processing the message. To specify a list, separate each entry -## with a comma. The key word "HOSTNAME" will be replaced by the name of -## the host running the filter as reported by the gethostname(3) function. -# -# TrustedAuthservIDs HOSTNAME - -## UMask mask -## default (none) -## -## Requests a specific permissions mask to be used for file creation. This -## only really applies to creation of the socket when Socket specifies a -## UNIX domain socket, and to the HistoryFile and PidFile (if any); temporary -## files are normally created by the mkstemp(3) function that enforces a -## specific file mode on creation regardless of the process umask. See -## umask(2) for more information. -# -UMask 007 - -## UserID user[:group] -## default (none) -## -## Attempts to become the specified userid before starting operations. -## The process will be assigned all of the groups and primary group ID of -## the named userid unless an alternate group is specified. -# -UserID opendmarc:mail diff --git a/templates/Fedora/38/etc/postfix/access b/templates/Fedora/38/etc/postfix/access deleted file mode 100644 index 97892eb..0000000 --- a/templates/Fedora/38/etc/postfix/access +++ /dev/null @@ -1,484 +0,0 @@ -# ACCESS(5) ACCESS(5) -# -# NAME -# access - Postfix SMTP server access table -# -# SYNOPSIS -# postmap /etc/postfix/access -# -# postmap -q "string" /etc/postfix/access -# -# postmap -q - /etc/postfix/access as the lookup key for such addresses. The value is -# specified with the smtpd_null_access_lookup_key parameter -# in the Postfix main.cf file. -# -# EMAIL ADDRESS EXTENSION -# When a mail address localpart contains the optional recip- -# ient delimiter (e.g., user+foo@domain), the lookup order -# becomes: user+foo@domain, user@domain, domain, user+foo@, -# and user@. -# -# HOST NAME/ADDRESS PATTERNS -# With lookups from indexed files such as DB or DBM, or from -# networked tables such as NIS, LDAP or SQL, the following -# lookup patterns are examined in the order as listed: -# -# domain.tld -# Matches domain.tld. -# -# The pattern domain.tld also matches subdomains, but -# only when the string smtpd_access_maps is listed in -# the Postfix parent_domain_matches_subdomains con- -# figuration setting. -# -# .domain.tld -# Matches subdomains of domain.tld, but only when the -# string smtpd_access_maps is not listed in the Post- -# fix parent_domain_matches_subdomains configuration -# setting. -# -# net.work.addr.ess -# -# net.work.addr -# -# net.work -# -# net Matches a remote IPv4 host address or network -# address range. Specify one to four decimal octets -# separated by ".". Do not specify "[]" , "/", lead- -# ing zeros, or hexadecimal forms. -# -# Network ranges are matched by repeatedly truncating -# the last ".octet" from a remote IPv4 host address -# string, until a match is found in the access table, -# or until further truncation is not possible. -# -# NOTE: use the cidr lookup table type to specify -# network/netmask patterns. See cidr_table(5) for -# details. -# -# net:work:addr:ess -# -# net:work:addr -# -# net:work -# -# net Matches a remote IPv6 host address or network -# address range. Specify three to eight hexadecimal -# octet pairs separated by ":", using the compressed -# form "::" for a sequence of zero-valued octet -# pairs. Do not specify "[]", "/", leading zeros, or -# non-compressed forms. -# -# A network range is matched by repeatedly truncating -# the last ":octetpair" from the compressed-form -# remote IPv6 host address string, until a match is -# found in the access table, or until further trunca- -# tion is not possible. -# -# NOTE: use the cidr lookup table type to specify -# network/netmask patterns. See cidr_table(5) for -# details. -# -# IPv6 support is available in Postfix 2.2 and later. -# -# ACCEPT ACTIONS -# OK Accept the address etc. that matches the pattern. -# -# all-numerical -# An all-numerical result is treated as OK. This for- -# mat is generated by address-based relay authoriza- -# tion schemes such as pop-before-smtp. -# -# For other accept actions, see "OTHER ACTIONS" below. -# -# REJECT ACTIONS -# Postfix version 2.3 and later support enhanced status -# codes as defined in RFC 3463. When no code is specified -# at the beginning of the text below, Postfix inserts a -# default enhanced status code of "5.7.1" in the case of -# reject actions, and "4.7.1" in the case of defer actions. -# See "ENHANCED STATUS CODES" below. -# -# 4NN text -# -# 5NN text -# Reject the address etc. that matches the pattern, -# and respond with the numerical three-digit code and -# text. 4NN means "try again later", while 5NN means -# "do not try again". -# -# The following responses have special meaning for -# the Postfix SMTP server: -# -# 421 text (Postfix 2.3 and later) -# -# 521 text (Postfix 2.6 and later) -# After responding with the numerical -# three-digit code and text, disconnect imme- -# diately from the SMTP client. This frees up -# SMTP server resources so that they can be -# made available to another SMTP client. -# -# Note: The "521" response should be used only -# with botnets and other malware where inter- -# operability is of no concern. The "send 521 -# and disconnect" behavior is NOT defined in -# the SMTP standard. -# -# REJECT optional text... -# Reject the address etc. that matches the pattern. -# Reply with "$access_map_reject_code optional -# text..." when the optional text is specified, oth- -# erwise reply with a generic error response message. -# -# DEFER optional text... -# Reject the address etc. that matches the pattern. -# Reply with "$access_map_defer_code optional -# text..." when the optional text is specified, oth- -# erwise reply with a generic error response message. -# -# This feature is available in Postfix 2.6 and later. -# -# DEFER_IF_REJECT optional text... -# Defer the request if some later restriction would -# result in a REJECT action. Reply with -# "$access_map_defer_code 4.7.1 optional text..." -# when the optional text is specified, otherwise -# reply with a generic error response message. -# -# Prior to Postfix 2.6, the SMTP reply code is 450. -# -# This feature is available in Postfix 2.1 and later. -# -# DEFER_IF_PERMIT optional text... -# Defer the request if some later restriction would -# result in an explicit or implicit PERMIT action. -# Reply with "$access_map_defer_code 4.7.1 optional -# text..." when the optional text is specified, oth- -# erwise reply with a generic error response message. -# -# Prior to Postfix 2.6, the SMTP reply code is 450. -# -# This feature is available in Postfix 2.1 and later. -# -# For other reject actions, see "OTHER ACTIONS" below. -# -# OTHER ACTIONS -# restriction... -# Apply the named UCE restriction(s) (permit, reject, -# reject_unauth_destination, and so on). -# -# BCC user@domain -# Send one copy of the message to the specified -# recipient. -# -# If multiple BCC actions are specified within the -# same SMTP MAIL transaction, with Postfix 3.0 only -# the last action will be used. -# -# This feature is available in Postfix 3.0 and later. -# -# DISCARD optional text... -# Claim successful delivery and silently discard the -# message. Log the optional text if specified, oth- -# erwise log a generic message. -# -# Note: this action currently affects all recipients -# of the message. To discard only one recipient -# without discarding the entire message, use the -# transport(5) table to direct mail to the discard(8) -# service. -# -# This feature is available in Postfix 2.0 and later. -# -# DUNNO Pretend that the lookup key was not found. This -# prevents Postfix from trying substrings of the -# lookup key (such as a subdomain name, or a network -# address subnetwork). -# -# This feature is available in Postfix 2.0 and later. -# -# FILTER transport:destination -# After the message is queued, send the entire mes- -# sage through the specified external content filter. -# The transport name specifies the first field of a -# mail delivery agent definition in master.cf; the -# syntax of the next-hop destination is described in -# the manual page of the corresponding delivery -# agent. More information about external content -# filters is in the Postfix FILTER_README file. -# -# Note 1: do not use $number regular expression sub- -# stitutions for transport or destination unless you -# know that the information has a trusted origin. -# -# Note 2: this action overrides the main.cf con- -# tent_filter setting, and affects all recipients of -# the message. In the case that multiple FILTER -# actions fire, only the last one is executed. -# -# Note 3: the purpose of the FILTER command is to -# override message routing. To override the recipi- -# ent's transport but not the next-hop destination, -# specify an empty filter destination (Postfix 2.7 -# and later), or specify a transport:destination that -# delivers through a different Postfix instance -# (Postfix 2.6 and earlier). Other options are using -# the recipient-dependent transport_maps or the sen- -# der-dependent sender_dependent_default_transport- -# _maps features. -# -# This feature is available in Postfix 2.0 and later. -# -# HOLD optional text... -# Place the message on the hold queue, where it will -# sit until someone either deletes it or releases it -# for delivery. Log the optional text if specified, -# otherwise log a generic message. -# -# Mail that is placed on hold can be examined with -# the postcat(1) command, and can be destroyed or -# released with the postsuper(1) command. -# -# Note: use "postsuper -r" to release mail that was -# kept on hold for a significant fraction of $maxi- -# mal_queue_lifetime or $bounce_queue_lifetime, or -# longer. Use "postsuper -H" only for mail that will -# not expire within a few delivery attempts. -# -# Note: this action currently affects all recipients -# of the message. -# -# This feature is available in Postfix 2.0 and later. -# -# PREPEND headername: headervalue -# Prepend the specified message header to the mes- -# sage. When more than one PREPEND action executes, -# the first prepended header appears before the sec- -# ond etc. prepended header. -# -# Note: this action must execute before the message -# content is received; it cannot execute in the con- -# text of smtpd_end_of_data_restrictions. -# -# This feature is available in Postfix 2.1 and later. -# -# REDIRECT user@domain -# After the message is queued, send the message to -# the specified address instead of the intended -# recipient(s). When multiple REDIRECT actions fire, -# only the last one takes effect. -# -# Note: this action overrides the FILTER action, and -# currently overrides all recipients of the message. -# -# This feature is available in Postfix 2.1 and later. -# -# INFO optional text... -# Log an informational record with the optional text, -# together with client information and if available, -# with helo, sender, recipient and protocol informa- -# tion. -# -# This feature is available in Postfix 3.0 and later. -# -# WARN optional text... -# Log a warning with the optional text, together with -# client information and if available, with helo, -# sender, recipient and protocol information. -# -# This feature is available in Postfix 2.1 and later. -# -# ENHANCED STATUS CODES -# Postfix version 2.3 and later support enhanced status -# codes as defined in RFC 3463. When an enhanced status -# code is specified in an access table, it is subject to -# modification. The following transformations are needed -# when the same access table is used for client, helo, -# sender, or recipient access restrictions; they happen -# regardless of whether Postfix replies to a MAIL FROM, RCPT -# TO or other SMTP command. -# -# o When a sender address matches a REJECT action, the -# Postfix SMTP server will transform a recipient DSN -# status (e.g., 4.1.1-4.1.6) into the corresponding -# sender DSN status, and vice versa. -# -# o When non-address information matches a REJECT -# action (such as the HELO command argument or the -# client hostname/address), the Postfix SMTP server -# will transform a sender or recipient DSN status -# into a generic non-address DSN status (e.g., -# 4.0.0). -# -# REGULAR EXPRESSION TABLES -# This section describes how the table lookups change when -# the table is given in the form of regular expressions. For -# a description of regular expression lookup table syntax, -# see regexp_table(5) or pcre_table(5). -# -# Each pattern is a regular expression that is applied to -# the entire string being looked up. Depending on the appli- -# cation, that string is an entire client hostname, an -# entire client IP address, or an entire mail address. Thus, -# no parent domain or parent network search is done, -# user@domain mail addresses are not broken up into their -# user@ and domain constituent parts, nor is user+foo broken -# up into user and foo. -# -# Patterns are applied in the order as specified in the ta- -# ble, until a pattern is found that matches the search -# string. -# -# Actions are the same as with indexed file lookups, with -# the additional feature that parenthesized substrings from -# the pattern can be interpolated as $1, $2 and so on. -# -# TCP-BASED TABLES -# This section describes how the table lookups change when -# lookups are directed to a TCP-based server. For a descrip- -# tion of the TCP client/server lookup protocol, see tcp_ta- -# ble(5). This feature is not available up to and including -# Postfix version 2.4. -# -# Each lookup operation uses the entire query string once. -# Depending on the application, that string is an entire -# client hostname, an entire client IP address, or an entire -# mail address. Thus, no parent domain or parent network -# search is done, user@domain mail addresses are not broken -# up into their user@ and domain constituent parts, nor is -# user+foo broken up into user and foo. -# -# Actions are the same as with indexed file lookups. -# -# EXAMPLE -# The following example uses an indexed file, so that the -# order of table entries does not matter. The example per- -# mits access by the client at address 1.2.3.4 but rejects -# all other clients in 1.2.3.0/24. Instead of hash lookup -# tables, some systems use dbm. Use the command "postconf -# -m" to find out what lookup tables Postfix supports on -# your system. -# -# /etc/postfix/main.cf: -# smtpd_client_restrictions = -# check_client_access hash:/etc/postfix/access -# -# /etc/postfix/access: -# 1.2.3 REJECT -# 1.2.3.4 OK -# -# Execute the command "postmap /etc/postfix/access" after -# editing the file. -# -# BUGS -# The table format does not understand quoting conventions. -# -# SEE ALSO -# postmap(1), Postfix lookup table manager -# smtpd(8), SMTP server -# postconf(5), configuration parameters -# transport(5), transport:nexthop syntax -# -# README FILES -# Use "postconf readme_directory" or "postconf html_direc- -# tory" to locate this information. -# SMTPD_ACCESS_README, built-in SMTP server access control -# DATABASE_README, Postfix lookup table overview -# -# LICENSE -# The Secure Mailer license must be distributed with this -# software. -# -# AUTHOR(S) -# Wietse Venema -# IBM T.J. Watson Research -# P.O. Box 704 -# Yorktown Heights, NY 10598, USA -# -# Wietse Venema -# Google, Inc. -# 111 8th Avenue -# New York, NY 10011, USA -# -# ACCESS(5) diff --git a/templates/Fedora/38/etc/postfix/canonical b/templates/Fedora/38/etc/postfix/canonical deleted file mode 100644 index 4957fcc..0000000 --- a/templates/Fedora/38/etc/postfix/canonical +++ /dev/null @@ -1,307 +0,0 @@ -# CANONICAL(5) CANONICAL(5) -# -# NAME -# canonical - Postfix canonical table format -# -# SYNOPSIS -# postmap /etc/postfix/canonical -# -# postmap -q "string" /etc/postfix/canonical -# -# postmap -q - /etc/postfix/canonical $/ -# REJECT IFRAME vulnerability exploit -# -# SEE ALSO -# cleanup(8), canonicalize and enqueue Postfix message -# pcre_table(5), format of PCRE lookup tables -# regexp_table(5), format of POSIX regular expression tables -# postconf(1), Postfix configuration utility -# postmap(1), Postfix lookup table management -# postsuper(1), Postfix janitor -# postcat(1), show Postfix queue file contents -# RFC 2045, base64 and quoted-printable encoding rules -# RFC 2047, message header encoding for non-ASCII text -# -# README FILES -# Use "postconf readme_directory" or "postconf html_direc- -# tory" to locate this information. -# DATABASE_README, Postfix lookup table overview -# CONTENT_INSPECTION_README, Postfix content inspection overview -# BUILTIN_FILTER_README, Postfix built-in content inspection -# BACKSCATTER_README, blocking returned forged mail -# -# LICENSE -# The Secure Mailer license must be distributed with this -# software. -# -# AUTHOR(S) -# Wietse Venema -# IBM T.J. Watson Research -# P.O. Box 704 -# Yorktown Heights, NY 10598, USA -# -# Wietse Venema -# Google, Inc. -# 111 8th Avenue -# New York, NY 10011, USA -# -# HEADER_CHECKS(5) diff --git a/templates/Fedora/38/etc/postfix/main.cf b/templates/Fedora/38/etc/postfix/main.cf deleted file mode 100644 index e7c5ce2..0000000 --- a/templates/Fedora/38/etc/postfix/main.cf +++ /dev/null @@ -1,774 +0,0 @@ -# Global Postfix configuration file. This file lists only a subset -# of all parameters. For the syntax, and for a complete parameter -# list, see the postconf(5) manual page (command: "man 5 postconf"). -# -# TIP: use the command "postconf -n" to view main.cf parameter -# settings, "postconf parametername" to view a specific parameter, -# and "postconf 'parametername=value'" to set a specific parameter. -# -# For common configuration examples, see BASIC_CONFIGURATION_README -# and STANDARD_CONFIGURATION_README. To find these documents, use -# the command "postconf html_directory readme_directory", or go to -# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. -# -# For best results, change no more than 2-3 parameters at a time, -# and test if Postfix still works after every change. - -# COMPATIBILITY -# -# The compatibility_level determines what default settings Postfix -# will use for main.cf and master.cf settings. These defaults will -# change over time. -# -# To avoid breaking things, Postfix will use backwards-compatible -# default settings and log where it uses those old backwards-compatible -# default settings, until the system administrator has determined -# if any backwards-compatible default settings need to be made -# permanent in main.cf or master.cf. -# -# When this review is complete, update the compatibility_level setting -# below as recommended in the RELEASE_NOTES file. -# -# The level below is what should be used with new (not upgrade) installs. -# -compatibility_level = 3.7 - -# SOFT BOUNCE -# -# The soft_bounce parameter provides a limited safety net for -# testing. When soft_bounce is enabled, mail will remain queued that -# would otherwise bounce. This parameter disables locally-generated -# bounces, and prevents the SMTP server from rejecting mail permanently -# (by changing 5xx replies into 4xx replies). However, soft_bounce -# is no cure for address rewriting mistakes or mail routing mistakes. -# -#soft_bounce = no - -# LOCAL PATHNAME INFORMATION -# -# The queue_directory specifies the location of the Postfix queue. -# This is also the root directory of Postfix daemons that run chrooted. -# See the files in examples/chroot-setup for setting up Postfix chroot -# environments on different UNIX systems. -# -queue_directory = /var/spool/postfix - -# The command_directory parameter specifies the location of all -# postXXX commands. -# -command_directory = /usr/sbin - -# The daemon_directory parameter specifies the location of all Postfix -# daemon programs (i.e. programs listed in the master.cf file). This -# directory must be owned by root. -# -daemon_directory = /usr/libexec/postfix - -# The data_directory parameter specifies the location of Postfix-writable -# data files (caches, random numbers). This directory must be owned -# by the mail_owner account (see below). -# -data_directory = /var/lib/postfix - -# QUEUE AND PROCESS OWNERSHIP -# -# The mail_owner parameter specifies the owner of the Postfix queue -# and of most Postfix daemon processes. Specify the name of a user -# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS -# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In -# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED -# USER. -# -mail_owner = postfix - -# The default_privs parameter specifies the default rights used by -# the local delivery agent for delivery to external file or command. -# These rights are used in the absence of a recipient user context. -# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. -# -#default_privs = nobody - -# INTERNET HOST AND DOMAIN NAMES -# -# The myhostname parameter specifies the internet hostname of this -# mail system. The default is to use the fully-qualified domain name -# from gethostname(). $myhostname is used as a default value for many -# other configuration parameters. -# -#myhostname = host.domain.tld -#myhostname = virtual.domain.tld - -# The mydomain parameter specifies the local internet domain name. -# The default is to use $myhostname minus the first component. -# $mydomain is used as a default value for many other configuration -# parameters. -# -#mydomain = domain.tld - -# SENDING MAIL -# -# The myorigin parameter specifies the domain that locally-posted -# mail appears to come from. The default is to append $myhostname, -# which is fine for small sites. If you run a domain with multiple -# machines, you should (1) change this to $mydomain and (2) set up -# a domain-wide alias database that aliases each user to -# user@that.users.mailhost. -# -# For the sake of consistency between sender and recipient addresses, -# myorigin also specifies the default domain name that is appended -# to recipient addresses that have no @domain part. -# -#myorigin = $myhostname -#myorigin = $mydomain - -# RECEIVING MAIL - -# The inet_interfaces parameter specifies the network interface -# addresses that this mail system receives mail on. By default, -# the software claims all active interfaces on the machine. The -# parameter also controls delivery of mail to user@[ip.address]. -# -# See also the proxy_interfaces parameter, for network addresses that -# are forwarded to us via a proxy or network address translator. -# -# Note: you need to stop/start Postfix when this parameter changes. -# -inet_interfaces = all -#inet_interfaces = $myhostname -#inet_interfaces = $myhostname, localhost -#inet_interfaces = localhost - -# Enable IPv4, and IPv6 if supported -inet_protocols = all - -# The proxy_interfaces parameter specifies the network interface -# addresses that this mail system receives mail on by way of a -# proxy or network address translation unit. This setting extends -# the address list specified with the inet_interfaces parameter. -# -# You must specify your proxy/NAT addresses when your system is a -# backup MX host for other domains, otherwise mail delivery loops -# will happen when the primary MX host is down. -# -#proxy_interfaces = -#proxy_interfaces = 1.2.3.4 - -# The mydestination parameter specifies the list of domains that this -# machine considers itself the final destination for. -# -# These domains are routed to the delivery agent specified with the -# local_transport parameter setting. By default, that is the UNIX -# compatible delivery agent that lookups all recipients in /etc/passwd -# and /etc/aliases or their equivalent. -# -# The default is $myhostname + localhost.$mydomain + localhost. On -# a mail domain gateway, you should also include $mydomain. -# -# Do not specify the names of virtual domains - those domains are -# specified elsewhere (see VIRTUAL_README). -# -# Do not specify the names of domains that this machine is backup MX -# host for. Specify those names via the relay_domains settings for -# the SMTP server, or use permit_mx_backup if you are lazy (see -# STANDARD_CONFIGURATION_README). -# -# The local machine is always the final destination for mail addressed -# to user@[the.net.work.address] of an interface that the mail system -# receives mail on (see the inet_interfaces parameter). -# -# Specify a list of host or domain names, /file/name or type:table -# patterns, separated by commas and/or whitespace. A /file/name -# pattern is replaced by its contents; a type:table is matched when -# a name matches a lookup key (the right-hand side is ignored). -# Continue long lines by starting the next line with whitespace. -# -# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". -# -mydestination = $myhostname, localhost.$mydomain, localhost -#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain -#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, -# mail.$mydomain, www.$mydomain, ftp.$mydomain - -# REJECTING MAIL FOR UNKNOWN LOCAL USERS -# -# The local_recipient_maps parameter specifies optional lookup tables -# with all names or addresses of users that are local with respect -# to $mydestination, $inet_interfaces or $proxy_interfaces. -# -# If this parameter is defined, then the SMTP server will reject -# mail for unknown local users. This parameter is defined by default. -# -# To turn off local recipient checking in the SMTP server, specify -# local_recipient_maps = (i.e. empty). -# -# The default setting assumes that you use the default Postfix local -# delivery agent for local delivery. You need to update the -# local_recipient_maps setting if: -# -# - You define $mydestination domain recipients in files other than -# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. -# For example, you define $mydestination domain recipients in -# the $virtual_mailbox_maps files. -# -# - You redefine the local delivery agent in master.cf. -# -# - You redefine the "local_transport" setting in main.cf. -# -# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" -# feature of the Postfix local delivery agent (see local(8)). -# -# Details are described in the LOCAL_RECIPIENT_README file. -# -# Beware: if the Postfix SMTP server runs chrooted, you probably have -# to access the passwd file via the proxymap service, in order to -# overcome chroot restrictions. The alternative, having a copy of -# the system passwd file in the chroot jail is just not practical. -# -# The right-hand side of the lookup tables is conveniently ignored. -# In the left-hand side, specify a bare username, an @domain.tld -# wild-card, or specify a user@domain.tld address. -# -#local_recipient_maps = unix:passwd.byname $alias_maps -#local_recipient_maps = proxy:unix:passwd.byname $alias_maps -#local_recipient_maps = - -# The unknown_local_recipient_reject_code specifies the SMTP server -# response code when a recipient domain matches $mydestination or -# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty -# and the recipient address or address local-part is not found. -# -# The default setting is 550 (reject mail) but it is safer to start -# with 450 (try again later) until you are certain that your -# local_recipient_maps settings are OK. -# -unknown_local_recipient_reject_code = 550 - -# TRUST AND RELAY CONTROL - -# The mynetworks parameter specifies the list of "trusted" SMTP -# clients that have more privileges than "strangers". -# -# In particular, "trusted" SMTP clients are allowed to relay mail -# through Postfix. See the smtpd_recipient_restrictions parameter -# in postconf(5). -# -# You can specify the list of "trusted" network addresses by hand -# or you can let Postfix do it for you (which is the default). -# -# By default (mynetworks_style = host), Postfix "trusts" only -# the local machine. -# -# Specify "mynetworks_style = subnet" when Postfix should "trust" -# SMTP clients in the same IP subnetworks as the local machine. -# On Linux, this works correctly only with interfaces specified -# with the "ifconfig" or "ip" command. -# -# Specify "mynetworks_style = class" when Postfix should "trust" SMTP -# clients in the same IP class A/B/C networks as the local machine. -# Don't do this with a dialup site - it would cause Postfix to "trust" -# your entire provider's network. Instead, specify an explicit -# mynetworks list by hand, as described below. -# -# Specify "mynetworks_style = host" when Postfix should "trust" -# only the local machine. -# -#mynetworks_style = class -#mynetworks_style = subnet -#mynetworks_style = host - -# Alternatively, you can specify the mynetworks list by hand, in -# which case Postfix ignores the mynetworks_style setting. -# -# Specify an explicit list of network/netmask patterns, where the -# mask specifies the number of bits in the network part of a host -# address. -# -# You can also specify the absolute pathname of a pattern file instead -# of listing the patterns here. Specify type:table for table-based lookups -# (the value on the table right-hand side is not used). -# -#mynetworks = 168.100.3.0/28, 127.0.0.0/8 -#mynetworks = $config_directory/mynetworks -#mynetworks = hash:/etc/postfix/network_table - -# The relay_domains parameter restricts what destinations this system will -# relay mail to. See the smtpd_relay_restrictions and -# smtpd_recipient_restrictions descriptions in postconf(5) for detailed -# information. -# -# By default, Postfix relays mail -# - from "trusted" clients (IP address matches $mynetworks, or is -# SASL authenticated) to any destination, -# - from "untrusted" clients to destinations that match $relay_domains or -# subdomains thereof, except addresses with sender-specified routing. -# The default relay_domains value is empty. -# -# In addition to the above, the Postfix SMTP server by default accepts mail -# that Postfix is final destination for: -# - destinations that match $inet_interfaces or $proxy_interfaces, -# - destinations that match $mydestination -# - destinations that match $virtual_alias_domains, -# - destinations that match $virtual_mailbox_domains. -# These destinations do not need to be listed in $relay_domains. -# -# Specify a list of hosts or domains, /file/name patterns or type:name -# lookup tables, separated by commas and/or whitespace. Continue -# long lines by starting the next line with whitespace. A file name -# is replaced by its contents; a type:name table is matched when a -# (parent) domain appears as lookup key. -# -# NOTE: Postfix will not automatically forward mail for domains that -# list this system as their primary or backup MX host. See the -# permit_mx_backup restriction description in postconf(5). -# -#relay_domains = - -# INTERNET OR INTRANET - -# The relayhost parameter specifies the default host to send mail to -# when no entry is matched in the optional transport(5) table. When -# no relayhost is given, mail is routed directly to the destination. -# -# On an intranet, specify the organizational domain name. If your -# internal DNS uses no MX records, specify the name of the intranet -# gateway host instead. -# -# In the case of SMTP, specify a domain, host, host:port, [host]:port, -# [address] or [address]:port; the form [host] turns off MX lookups. -# -# If you're connected via UUCP, see also the default_transport parameter. -# -#relayhost = $mydomain -#relayhost = [gateway.my.domain] -#relayhost = [mailserver.isp.tld] -#relayhost = uucphost -#relayhost = [an.ip.add.ress] - -# REJECTING UNKNOWN RELAY USERS -# -# The relay_recipient_maps parameter specifies optional lookup tables -# with all addresses in the domains that match $relay_domains. -# -# If this parameter is defined, then the SMTP server will reject -# mail for unknown relay users. This feature is off by default. -# -# The right-hand side of the lookup tables is conveniently ignored. -# In the left-hand side, specify an @domain.tld wild-card, or specify -# a user@domain.tld address. -# -#relay_recipient_maps = hash:/etc/postfix/relay_recipients - -# INPUT RATE CONTROL -# -# The in_flow_delay configuration parameter implements mail input -# flow control. This feature is turned on by default, although it -# still needs further development (it's disabled on SCO UNIX due -# to an SCO bug). -# -# A Postfix process will pause for $in_flow_delay seconds before -# accepting a new message, when the message arrival rate exceeds the -# message delivery rate. With the default 100 SMTP server process -# limit, this limits the mail inflow to 100 messages a second more -# than the number of messages delivered per second. -# -# Specify 0 to disable the feature. Valid delays are 0..10. -# -#in_flow_delay = 1s - -# ADDRESS REWRITING -# -# The ADDRESS_REWRITING_README document gives information about -# address masquerading or other forms of address rewriting including -# username->Firstname.Lastname mapping. - -# ADDRESS REDIRECTION (VIRTUAL DOMAIN) -# -# The VIRTUAL_README document gives information about the many forms -# of domain hosting that Postfix supports. - -# "USER HAS MOVED" BOUNCE MESSAGES -# -# See the discussion in the ADDRESS_REWRITING_README document. - -# TRANSPORT MAP -# -# See the discussion in the ADDRESS_REWRITING_README document. - -# ALIAS DATABASE -# -# The alias_maps parameter specifies the list of alias databases used -# by the local delivery agent. The default list is system dependent. -# -# On systems with NIS, the default is to search the local alias -# database, then the NIS alias database. See aliases(5) for syntax -# details. -# -# If you change the alias database, run "postalias /etc/aliases" (or -# wherever your system stores the mail alias file), or simply run -# "newaliases" to build the necessary DBM or DB file. -# -# It will take a minute or so before changes become visible. Use -# "postfix reload" to eliminate the delay. -# -#alias_maps = dbm:/etc/aliases -alias_maps = hash:/etc/aliases -#alias_maps = hash:/etc/aliases, nis:mail.aliases -#alias_maps = netinfo:/aliases - -# The alias_database parameter specifies the alias database(s) that -# are built with "newaliases" or "sendmail -bi". This is a separate -# configuration parameter, because alias_maps (see above) may specify -# tables that are not necessarily all under control by Postfix. -# -#alias_database = dbm:/etc/aliases -#alias_database = dbm:/etc/mail/aliases -alias_database = hash:/etc/aliases -#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases - -# ADDRESS EXTENSIONS (e.g., user+foo) -# -# The recipient_delimiter parameter specifies the separator between -# user names and address extensions (user+foo). See canonical(5), -# local(8), relocated(5) and virtual(5) for the effects this has on -# aliases, canonical, virtual, relocated and .forward file lookups. -# Basically, the software tries user+foo and .forward+foo before -# trying user and .forward. -# -#recipient_delimiter = + - -# DELIVERY TO MAILBOX -# -# The home_mailbox parameter specifies the optional pathname of a -# mailbox file relative to a user's home directory. The default -# mailbox file is /var/spool/mail/user or /var/mail/user. Specify -# "Maildir/" for qmail-style delivery (the / is required). -# -#home_mailbox = Mailbox -#home_mailbox = Maildir/ - -# The mail_spool_directory parameter specifies the directory where -# UNIX-style mailboxes are kept. The default setting depends on the -# system type. -# -#mail_spool_directory = /var/mail -#mail_spool_directory = /var/spool/mail - -# The mailbox_command parameter specifies the optional external -# command to use instead of mailbox delivery. The command is run as -# the recipient with proper HOME, SHELL and LOGNAME environment settings. -# Exception: delivery for root is done as $default_user. -# -# Other environment variables of interest: USER (recipient username), -# EXTENSION (address extension), DOMAIN (domain part of address), -# and LOCAL (the address localpart). -# -# Unlike other Postfix configuration parameters, the mailbox_command -# parameter is not subjected to $parameter substitutions. This is to -# make it easier to specify shell syntax (see example below). -# -# Avoid shell meta characters because they will force Postfix to run -# an expensive shell process. Procmail alone is expensive enough. -# -# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN -# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. -# -#mailbox_command = /some/where/procmail -#mailbox_command = /some/where/procmail -a "$EXTENSION" - -# The mailbox_transport specifies the optional transport in master.cf -# to use after processing aliases and .forward files. This parameter -# has precedence over the mailbox_command, fallback_transport and -# luser_relay parameters. -# -# Specify a string of the form transport:nexthop, where transport is -# the name of a mail delivery transport defined in master.cf. The -# :nexthop part is optional. For more details see the sample transport -# configuration file. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must update the "local_recipient_maps" setting in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" -# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. -#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp -mailbox_transport = lmtp:inet:localhost:24 -virtual_transport = lmtp:inet:localhost:24 - -# If using the cyrus-imapd IMAP server deliver local mail to the IMAP -# server using LMTP (Local Mail Transport Protocol), this is prefered -# over the older cyrus deliver program by setting the -# mailbox_transport as below: -# -# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp -# -# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via -# these settings. -# -# local_destination_recipient_limit = 300 -# local_destination_concurrency_limit = 5 -# -# Of course you should adjust these settings as appropriate for the -# capacity of the hardware you are using. The recipient limit setting -# can be used to take advantage of the single instance message store -# capability of Cyrus. The concurrency limit can be used to control -# how many simultaneous LMTP sessions will be permitted to the Cyrus -# message store. -# -# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and -# subsequent line in master.cf. -#mailbox_transport = cyrus - -# The fallback_transport specifies the optional transport in master.cf -# to use for recipients that are not found in the UNIX passwd database. -# This parameter has precedence over the luser_relay parameter. -# -# Specify a string of the form transport:nexthop, where transport is -# the name of a mail delivery transport defined in master.cf. The -# :nexthop part is optional. For more details see the sample transport -# configuration file. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must update the "local_recipient_maps" setting in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp -#fallback_transport = - -# The luser_relay parameter specifies an optional destination address -# for unknown recipients. By default, mail for unknown@$mydestination, -# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned -# as undeliverable. -# -# The following expansions are done on luser_relay: $user (recipient -# username), $shell (recipient shell), $home (recipient home directory), -# $recipient (full recipient address), $extension (recipient address -# extension), $domain (recipient domain), $local (entire recipient -# localpart), $recipient_delimiter. Specify ${name?value} or -# ${name:value} to expand value only when $name does (does not) exist. -# -# luser_relay works only for the default Postfix local delivery agent. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must specify "local_recipient_maps =" (i.e. empty) in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -#luser_relay = $user@other.host -#luser_relay = $local@other.host -#luser_relay = admin+$local - -# JUNK MAIL CONTROLS -# -# The controls listed here are only a very small subset. The file -# SMTPD_ACCESS_README provides an overview. - -# The header_checks parameter specifies an optional table with patterns -# that each logical message header is matched against, including -# headers that span multiple physical lines. -# -# By default, these patterns also apply to MIME headers and to the -# headers of attached messages. With older Postfix versions, MIME and -# attached message headers were treated as body text. -# -# For details, see "man header_checks". -# -#header_checks = regexp:/etc/postfix/header_checks - -# FAST ETRN SERVICE -# -# Postfix maintains per-destination logfiles with information about -# deferred mail, so that mail can be flushed quickly with the SMTP -# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". -# See the ETRN_README document for a detailed description. -# -# The fast_flush_domains parameter controls what destinations are -# eligible for this service. By default, they are all domains that -# this server is willing to relay mail to. -# -#fast_flush_domains = $relay_domains - -# SHOW SOFTWARE VERSION OR NOT -# -# The smtpd_banner parameter specifies the text that follows the 220 -# code in the SMTP server's greeting banner. Some people like to see -# the mail version advertised. By default, Postfix shows no version. -# -# You MUST specify $myhostname at the start of the text. That is an -# RFC requirement. Postfix itself does not care. -# -#smtpd_banner = $myhostname ESMTP $mail_name -#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) - -# PARALLEL DELIVERY TO THE SAME DESTINATION -# -# How many parallel deliveries to the same user or domain? With local -# delivery, it does not make sense to do massively parallel delivery -# to the same user, because mailbox updates must happen sequentially, -# and expensive pipelines in .forward files can cause disasters when -# too many are run at the same time. With SMTP deliveries, 10 -# simultaneous connections to the same domain could be sufficient to -# raise eyebrows. -# -# Each message delivery transport has its XXX_destination_concurrency_limit -# parameter. The default is $default_destination_concurrency_limit for -# most delivery transports. For the local delivery agent the default is 2. - -#local_destination_concurrency_limit = 2 -#default_destination_concurrency_limit = 20 - -# DEBUGGING CONTROL -# -# The debug_peer_level parameter specifies the increment in verbose -# logging level when an SMTP client or server host name or address -# matches a pattern in the debug_peer_list parameter. -# -debug_peer_level = 2 - -# The debug_peer_list parameter specifies an optional list of domain -# or network patterns, /file/name patterns or type:name tables. When -# an SMTP client or server host name or address matches a pattern, -# increase the verbose logging level by the amount specified in the -# debug_peer_level parameter. -# -#debug_peer_list = 127.0.0.1 -#debug_peer_list = some.domain - -# The debugger_command specifies the external command that is executed -# when a Postfix daemon program is run with the -D option. -# -# Use "command .. & sleep 5" so that the debugger can attach before -# the process marches on. If you use an X-based debugger, be sure to -# set up your XAUTHORITY environment variable before starting Postfix. -# -debugger_command = - PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin - ddd $daemon_directory/$process_name $process_id & sleep 5 - -# If you can't use X, use this to capture the call stack when a -# daemon crashes. The result is in a file in the configuration -# directory, and is named after the process name and the process ID. -# -# debugger_command = -# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; -# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 -# >$config_directory/$process_name.$process_id.log & sleep 5 -# -# Another possibility is to run gdb under a detached screen session. -# To attach to the screen session, su root and run "screen -r -# " where uniquely matches one of the detached -# sessions (from "screen -list"). -# -# debugger_command = -# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen -# -dmS $process_name gdb $daemon_directory/$process_name -# $process_id & sleep 1 - -# INSTALL-TIME CONFIGURATION INFORMATION -# -# The following parameters are used when installing a new Postfix version. -# -# sendmail_path: The full pathname of the Postfix sendmail command. -# This is the Sendmail-compatible mail posting interface. -# -sendmail_path = /usr/sbin/sendmail.postfix - -# newaliases_path: The full pathname of the Postfix newaliases command. -# This is the Sendmail-compatible command to build alias databases. -# -newaliases_path = /usr/bin/newaliases.postfix - -# mailq_path: The full pathname of the Postfix mailq command. This -# is the Sendmail-compatible mail queue listing command. -# -mailq_path = /usr/bin/mailq.postfix - -# setgid_group: The group for mail submission and queue management -# commands. This must be a group name with a numerical group ID that -# is not shared with other accounts, not even with the Postfix account. -# -setgid_group = postdrop - -# html_directory: The location of the Postfix HTML documentation. -# -html_directory = no - -# manpage_directory: The location of the Postfix on-line manual pages. -# -manpage_directory = /usr/share/man - -# sample_directory: The location of the Postfix sample configuration files. -# This parameter is obsolete as of Postfix 2.1. -# -sample_directory = /usr/share/doc/postfix/samples - -# readme_directory: The location of the Postfix README files. -# -readme_directory = /usr/share/doc/postfix/README_FILES - -# TLS CONFIGURATION -# -# Basic Postfix TLS configuration by default with self-signed certificate -# for inbound SMTP and also opportunistic TLS for outbound SMTP. - -# The full pathname of a file with the Postfix SMTP server RSA certificate -# in PEM format. Intermediate certificates should be included in general, -# the server certificate first, then the issuing CA(s) (bottom-up order). -# -# smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem -smtpd_tls_cert_file = /etc/postfix/certificates/pubcert.pem - -# The full pathname of a file with the Postfix SMTP server RSA private key -# in PEM format. The private key must be accessible without a pass-phrase, -# i.e. it must not be encrypted. -# -# smtpd_tls_key_file = /etc/pki/tls/private/postfix.key -smtpd_tls_key_file = /etc/postfix/certificates/privkey.pem - -# Announce STARTTLS support to remote SMTP clients, but do not require that -# clients use TLS encryption (opportunistic TLS inbound). -# -smtpd_tls_security_level = may - -# Directory with PEM format Certification Authority certificates that the -# Postfix SMTP client uses to verify a remote SMTP server certificate. -# -smtp_tls_CApath = /etc/pki/tls/certs - -# The full pathname of a file containing CA certificates of root CAs -# trusted to sign either remote SMTP server certificates or intermediate CA -# certificates. -# -smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt - -# Use TLS if this is supported by the remote SMTP server, otherwise use -# plaintext (opportunistic TLS outbound). -# -smtp_tls_security_level = may -meta_directory = /etc/postfix -shlib_directory = /usr/lib64/postfix - -{% if ensure_postfix.milter_list is defined and ensure_postfix.milter_list is iterable %} -# The Milter List -{% for milter in ensure_postfix.milter_list %} -# -- {{ milter.description }} -- {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} -{% endfor %} -smtpd_milters = {% for milter in ensure_postfix.milter_list %} {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} {% endfor %} -{% endif %} - -{% if postfix_domains is defined and postfix_domains is iterable %} -virtual_mailbox_domains = {% for domain in postfix_domains %} {{ domain }} {% endfor %} -{% endif %} - -2bounce_notice_recipient = {{ postmaster_email }} -bounce_notice_recipient = {{ postmaster_email }} -delay_notice_recipient = {{ postmaster_email }} -error_notice_recipient = {{ postmaster_email }} -smtpd_helo_required = yes -disable_vrfy_command = yes -message_size_limit = {{ postfix_message_size_limit }} -smtpd_helo_restrictions = reject_unknown_helo_hostname -smtpd_client_restrictions = reject_unknown_reverse_client_hostname reject_unauth_pipelining -smtpd_discard_ehlo_keywords = silent-discard, dsn diff --git a/templates/Fedora/38/etc/postfix/main.cf.proto b/templates/Fedora/38/etc/postfix/main.cf.proto deleted file mode 100644 index 112c1f1..0000000 --- a/templates/Fedora/38/etc/postfix/main.cf.proto +++ /dev/null @@ -1,745 +0,0 @@ -# Global Postfix configuration file. This file lists only a subset -# of all parameters. For the syntax, and for a complete parameter -# list, see the postconf(5) manual page (command: "man 5 postconf"). -# -# TIP: use the command "postconf -n" to view main.cf parameter -# settings, "postconf parametername" to view a specific parameter, -# and "postconf 'parametername=value'" to set a specific parameter. -# -# For common configuration examples, see BASIC_CONFIGURATION_README -# and STANDARD_CONFIGURATION_README. To find these documents, use -# the command "postconf html_directory readme_directory", or go to -# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. -# -# For best results, change no more than 2-3 parameters at a time, -# and test if Postfix still works after every change. - -# COMPATIBILITY -# -# The compatibility_level determines what default settings Postfix -# will use for main.cf and master.cf settings. These defaults will -# change over time. -# -# To avoid breaking things, Postfix will use backwards-compatible -# default settings and log where it uses those old backwards-compatible -# default settings, until the system administrator has determined -# if any backwards-compatible default settings need to be made -# permanent in main.cf or master.cf. -# -# When this review is complete, update the compatibility_level setting -# below as recommended in the RELEASE_NOTES file. -# -# The level below is what should be used with new (not upgrade) installs. -# -compatibility_level = 3.7 - -# SOFT BOUNCE -# -# The soft_bounce parameter provides a limited safety net for -# testing. When soft_bounce is enabled, mail will remain queued that -# would otherwise bounce. This parameter disables locally-generated -# bounces, and prevents the SMTP server from rejecting mail permanently -# (by changing 5xx replies into 4xx replies). However, soft_bounce -# is no cure for address rewriting mistakes or mail routing mistakes. -# -#soft_bounce = no - -# LOCAL PATHNAME INFORMATION -# -# The queue_directory specifies the location of the Postfix queue. -# This is also the root directory of Postfix daemons that run chrooted. -# See the files in examples/chroot-setup for setting up Postfix chroot -# environments on different UNIX systems. -# -queue_directory = /var/spool/postfix - -# The command_directory parameter specifies the location of all -# postXXX commands. -# -command_directory = /usr/sbin - -# The daemon_directory parameter specifies the location of all Postfix -# daemon programs (i.e. programs listed in the master.cf file). This -# directory must be owned by root. -# -daemon_directory = /usr/libexec/postfix - -# The data_directory parameter specifies the location of Postfix-writable -# data files (caches, random numbers). This directory must be owned -# by the mail_owner account (see below). -# -data_directory = /var/lib/postfix - -# QUEUE AND PROCESS OWNERSHIP -# -# The mail_owner parameter specifies the owner of the Postfix queue -# and of most Postfix daemon processes. Specify the name of a user -# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS -# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In -# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED -# USER. -# -mail_owner = postfix - -# The default_privs parameter specifies the default rights used by -# the local delivery agent for delivery to external file or command. -# These rights are used in the absence of a recipient user context. -# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. -# -#default_privs = nobody - -# INTERNET HOST AND DOMAIN NAMES -# -# The myhostname parameter specifies the internet hostname of this -# mail system. The default is to use the fully-qualified domain name -# from gethostname(). $myhostname is used as a default value for many -# other configuration parameters. -# -#myhostname = host.domain.tld -#myhostname = virtual.domain.tld - -# The mydomain parameter specifies the local internet domain name. -# The default is to use $myhostname minus the first component. -# $mydomain is used as a default value for many other configuration -# parameters. -# -#mydomain = domain.tld - -# SENDING MAIL -# -# The myorigin parameter specifies the domain that locally-posted -# mail appears to come from. The default is to append $myhostname, -# which is fine for small sites. If you run a domain with multiple -# machines, you should (1) change this to $mydomain and (2) set up -# a domain-wide alias database that aliases each user to -# user@that.users.mailhost. -# -# For the sake of consistency between sender and recipient addresses, -# myorigin also specifies the default domain name that is appended -# to recipient addresses that have no @domain part. -# -#myorigin = $myhostname -#myorigin = $mydomain - -# RECEIVING MAIL - -# The inet_interfaces parameter specifies the network interface -# addresses that this mail system receives mail on. By default, -# the software claims all active interfaces on the machine. The -# parameter also controls delivery of mail to user@[ip.address]. -# -# See also the proxy_interfaces parameter, for network addresses that -# are forwarded to us via a proxy or network address translator. -# -# Note: you need to stop/start Postfix when this parameter changes. -# -#inet_interfaces = all -#inet_interfaces = $myhostname -#inet_interfaces = $myhostname, localhost -inet_interfaces = localhost - -# Enable IPv4, and IPv6 if supported -inet_protocols = all - -# The proxy_interfaces parameter specifies the network interface -# addresses that this mail system receives mail on by way of a -# proxy or network address translation unit. This setting extends -# the address list specified with the inet_interfaces parameter. -# -# You must specify your proxy/NAT addresses when your system is a -# backup MX host for other domains, otherwise mail delivery loops -# will happen when the primary MX host is down. -# -#proxy_interfaces = -#proxy_interfaces = 1.2.3.4 - -# The mydestination parameter specifies the list of domains that this -# machine considers itself the final destination for. -# -# These domains are routed to the delivery agent specified with the -# local_transport parameter setting. By default, that is the UNIX -# compatible delivery agent that lookups all recipients in /etc/passwd -# and /etc/aliases or their equivalent. -# -# The default is $myhostname + localhost.$mydomain + localhost. On -# a mail domain gateway, you should also include $mydomain. -# -# Do not specify the names of virtual domains - those domains are -# specified elsewhere (see VIRTUAL_README). -# -# Do not specify the names of domains that this machine is backup MX -# host for. Specify those names via the relay_domains settings for -# the SMTP server, or use permit_mx_backup if you are lazy (see -# STANDARD_CONFIGURATION_README). -# -# The local machine is always the final destination for mail addressed -# to user@[the.net.work.address] of an interface that the mail system -# receives mail on (see the inet_interfaces parameter). -# -# Specify a list of host or domain names, /file/name or type:table -# patterns, separated by commas and/or whitespace. A /file/name -# pattern is replaced by its contents; a type:table is matched when -# a name matches a lookup key (the right-hand side is ignored). -# Continue long lines by starting the next line with whitespace. -# -# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". -# -mydestination = $myhostname, localhost.$mydomain, localhost -#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain -#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, -# mail.$mydomain, www.$mydomain, ftp.$mydomain - -# REJECTING MAIL FOR UNKNOWN LOCAL USERS -# -# The local_recipient_maps parameter specifies optional lookup tables -# with all names or addresses of users that are local with respect -# to $mydestination, $inet_interfaces or $proxy_interfaces. -# -# If this parameter is defined, then the SMTP server will reject -# mail for unknown local users. This parameter is defined by default. -# -# To turn off local recipient checking in the SMTP server, specify -# local_recipient_maps = (i.e. empty). -# -# The default setting assumes that you use the default Postfix local -# delivery agent for local delivery. You need to update the -# local_recipient_maps setting if: -# -# - You define $mydestination domain recipients in files other than -# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. -# For example, you define $mydestination domain recipients in -# the $virtual_mailbox_maps files. -# -# - You redefine the local delivery agent in master.cf. -# -# - You redefine the "local_transport" setting in main.cf. -# -# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" -# feature of the Postfix local delivery agent (see local(8)). -# -# Details are described in the LOCAL_RECIPIENT_README file. -# -# Beware: if the Postfix SMTP server runs chrooted, you probably have -# to access the passwd file via the proxymap service, in order to -# overcome chroot restrictions. The alternative, having a copy of -# the system passwd file in the chroot jail is just not practical. -# -# The right-hand side of the lookup tables is conveniently ignored. -# In the left-hand side, specify a bare username, an @domain.tld -# wild-card, or specify a user@domain.tld address. -# -#local_recipient_maps = unix:passwd.byname $alias_maps -#local_recipient_maps = proxy:unix:passwd.byname $alias_maps -#local_recipient_maps = - -# The unknown_local_recipient_reject_code specifies the SMTP server -# response code when a recipient domain matches $mydestination or -# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty -# and the recipient address or address local-part is not found. -# -# The default setting is 550 (reject mail) but it is safer to start -# with 450 (try again later) until you are certain that your -# local_recipient_maps settings are OK. -# -unknown_local_recipient_reject_code = 550 - -# TRUST AND RELAY CONTROL - -# The mynetworks parameter specifies the list of "trusted" SMTP -# clients that have more privileges than "strangers". -# -# In particular, "trusted" SMTP clients are allowed to relay mail -# through Postfix. See the smtpd_recipient_restrictions parameter -# in postconf(5). -# -# You can specify the list of "trusted" network addresses by hand -# or you can let Postfix do it for you (which is the default). -# -# By default (mynetworks_style = host), Postfix "trusts" only -# the local machine. -# -# Specify "mynetworks_style = subnet" when Postfix should "trust" -# SMTP clients in the same IP subnetworks as the local machine. -# On Linux, this works correctly only with interfaces specified -# with the "ifconfig" or "ip" command. -# -# Specify "mynetworks_style = class" when Postfix should "trust" SMTP -# clients in the same IP class A/B/C networks as the local machine. -# Don't do this with a dialup site - it would cause Postfix to "trust" -# your entire provider's network. Instead, specify an explicit -# mynetworks list by hand, as described below. -# -# Specify "mynetworks_style = host" when Postfix should "trust" -# only the local machine. -# -#mynetworks_style = class -#mynetworks_style = subnet -#mynetworks_style = host - -# Alternatively, you can specify the mynetworks list by hand, in -# which case Postfix ignores the mynetworks_style setting. -# -# Specify an explicit list of network/netmask patterns, where the -# mask specifies the number of bits in the network part of a host -# address. -# -# You can also specify the absolute pathname of a pattern file instead -# of listing the patterns here. Specify type:table for table-based lookups -# (the value on the table right-hand side is not used). -# -#mynetworks = 168.100.3.0/28, 127.0.0.0/8 -#mynetworks = $config_directory/mynetworks -#mynetworks = hash:/etc/postfix/network_table - -# The relay_domains parameter restricts what destinations this system will -# relay mail to. See the smtpd_relay_restrictions and -# smtpd_recipient_restrictions descriptions in postconf(5) for detailed -# information. -# -# By default, Postfix relays mail -# - from "trusted" clients (IP address matches $mynetworks, or is -# SASL authenticated) to any destination, -# - from "untrusted" clients to destinations that match $relay_domains or -# subdomains thereof, except addresses with sender-specified routing. -# The default relay_domains value is empty. -# -# In addition to the above, the Postfix SMTP server by default accepts mail -# that Postfix is final destination for: -# - destinations that match $inet_interfaces or $proxy_interfaces, -# - destinations that match $mydestination -# - destinations that match $virtual_alias_domains, -# - destinations that match $virtual_mailbox_domains. -# These destinations do not need to be listed in $relay_domains. -# -# Specify a list of hosts or domains, /file/name patterns or type:name -# lookup tables, separated by commas and/or whitespace. Continue -# long lines by starting the next line with whitespace. A file name -# is replaced by its contents; a type:name table is matched when a -# (parent) domain appears as lookup key. -# -# NOTE: Postfix will not automatically forward mail for domains that -# list this system as their primary or backup MX host. See the -# permit_mx_backup restriction description in postconf(5). -# -#relay_domains = - -# INTERNET OR INTRANET - -# The relayhost parameter specifies the default host to send mail to -# when no entry is matched in the optional transport(5) table. When -# no relayhost is given, mail is routed directly to the destination. -# -# On an intranet, specify the organizational domain name. If your -# internal DNS uses no MX records, specify the name of the intranet -# gateway host instead. -# -# In the case of SMTP, specify a domain, host, host:port, [host]:port, -# [address] or [address]:port; the form [host] turns off MX lookups. -# -# If you're connected via UUCP, see also the default_transport parameter. -# -#relayhost = $mydomain -#relayhost = [gateway.my.domain] -#relayhost = [mailserver.isp.tld] -#relayhost = uucphost -#relayhost = [an.ip.add.ress] - -# REJECTING UNKNOWN RELAY USERS -# -# The relay_recipient_maps parameter specifies optional lookup tables -# with all addresses in the domains that match $relay_domains. -# -# If this parameter is defined, then the SMTP server will reject -# mail for unknown relay users. This feature is off by default. -# -# The right-hand side of the lookup tables is conveniently ignored. -# In the left-hand side, specify an @domain.tld wild-card, or specify -# a user@domain.tld address. -# -#relay_recipient_maps = hash:/etc/postfix/relay_recipients - -# INPUT RATE CONTROL -# -# The in_flow_delay configuration parameter implements mail input -# flow control. This feature is turned on by default, although it -# still needs further development (it's disabled on SCO UNIX due -# to an SCO bug). -# -# A Postfix process will pause for $in_flow_delay seconds before -# accepting a new message, when the message arrival rate exceeds the -# message delivery rate. With the default 100 SMTP server process -# limit, this limits the mail inflow to 100 messages a second more -# than the number of messages delivered per second. -# -# Specify 0 to disable the feature. Valid delays are 0..10. -# -#in_flow_delay = 1s - -# ADDRESS REWRITING -# -# The ADDRESS_REWRITING_README document gives information about -# address masquerading or other forms of address rewriting including -# username->Firstname.Lastname mapping. - -# ADDRESS REDIRECTION (VIRTUAL DOMAIN) -# -# The VIRTUAL_README document gives information about the many forms -# of domain hosting that Postfix supports. - -# "USER HAS MOVED" BOUNCE MESSAGES -# -# See the discussion in the ADDRESS_REWRITING_README document. - -# TRANSPORT MAP -# -# See the discussion in the ADDRESS_REWRITING_README document. - -# ALIAS DATABASE -# -# The alias_maps parameter specifies the list of alias databases used -# by the local delivery agent. The default list is system dependent. -# -# On systems with NIS, the default is to search the local alias -# database, then the NIS alias database. See aliases(5) for syntax -# details. -# -# If you change the alias database, run "postalias /etc/aliases" (or -# wherever your system stores the mail alias file), or simply run -# "newaliases" to build the necessary DBM or DB file. -# -# It will take a minute or so before changes become visible. Use -# "postfix reload" to eliminate the delay. -# -#alias_maps = dbm:/etc/aliases -alias_maps = hash:/etc/aliases -#alias_maps = hash:/etc/aliases, nis:mail.aliases -#alias_maps = netinfo:/aliases - -# The alias_database parameter specifies the alias database(s) that -# are built with "newaliases" or "sendmail -bi". This is a separate -# configuration parameter, because alias_maps (see above) may specify -# tables that are not necessarily all under control by Postfix. -# -#alias_database = dbm:/etc/aliases -#alias_database = dbm:/etc/mail/aliases -alias_database = hash:/etc/aliases -#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases - -# ADDRESS EXTENSIONS (e.g., user+foo) -# -# The recipient_delimiter parameter specifies the separator between -# user names and address extensions (user+foo). See canonical(5), -# local(8), relocated(5) and virtual(5) for the effects this has on -# aliases, canonical, virtual, relocated and .forward file lookups. -# Basically, the software tries user+foo and .forward+foo before -# trying user and .forward. -# -#recipient_delimiter = + - -# DELIVERY TO MAILBOX -# -# The home_mailbox parameter specifies the optional pathname of a -# mailbox file relative to a user's home directory. The default -# mailbox file is /var/spool/mail/user or /var/mail/user. Specify -# "Maildir/" for qmail-style delivery (the / is required). -# -#home_mailbox = Mailbox -#home_mailbox = Maildir/ - -# The mail_spool_directory parameter specifies the directory where -# UNIX-style mailboxes are kept. The default setting depends on the -# system type. -# -#mail_spool_directory = /var/mail -#mail_spool_directory = /var/spool/mail - -# The mailbox_command parameter specifies the optional external -# command to use instead of mailbox delivery. The command is run as -# the recipient with proper HOME, SHELL and LOGNAME environment settings. -# Exception: delivery for root is done as $default_user. -# -# Other environment variables of interest: USER (recipient username), -# EXTENSION (address extension), DOMAIN (domain part of address), -# and LOCAL (the address localpart). -# -# Unlike other Postfix configuration parameters, the mailbox_command -# parameter is not subjected to $parameter substitutions. This is to -# make it easier to specify shell syntax (see example below). -# -# Avoid shell meta characters because they will force Postfix to run -# an expensive shell process. Procmail alone is expensive enough. -# -# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN -# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. -# -#mailbox_command = /some/where/procmail -#mailbox_command = /some/where/procmail -a "$EXTENSION" - -# The mailbox_transport specifies the optional transport in master.cf -# to use after processing aliases and .forward files. This parameter -# has precedence over the mailbox_command, fallback_transport and -# luser_relay parameters. -# -# Specify a string of the form transport:nexthop, where transport is -# the name of a mail delivery transport defined in master.cf. The -# :nexthop part is optional. For more details see the sample transport -# configuration file. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must update the "local_recipient_maps" setting in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" -# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. -#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp - -# If using the cyrus-imapd IMAP server deliver local mail to the IMAP -# server using LMTP (Local Mail Transport Protocol), this is prefered -# over the older cyrus deliver program by setting the -# mailbox_transport as below: -# -# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp -# -# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via -# these settings. -# -# local_destination_recipient_limit = 300 -# local_destination_concurrency_limit = 5 -# -# Of course you should adjust these settings as appropriate for the -# capacity of the hardware you are using. The recipient limit setting -# can be used to take advantage of the single instance message store -# capability of Cyrus. The concurrency limit can be used to control -# how many simultaneous LMTP sessions will be permitted to the Cyrus -# message store. -# -# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and -# subsequent line in master.cf. -#mailbox_transport = cyrus - -# The fallback_transport specifies the optional transport in master.cf -# to use for recipients that are not found in the UNIX passwd database. -# This parameter has precedence over the luser_relay parameter. -# -# Specify a string of the form transport:nexthop, where transport is -# the name of a mail delivery transport defined in master.cf. The -# :nexthop part is optional. For more details see the sample transport -# configuration file. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must update the "local_recipient_maps" setting in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp -#fallback_transport = - -# The luser_relay parameter specifies an optional destination address -# for unknown recipients. By default, mail for unknown@$mydestination, -# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned -# as undeliverable. -# -# The following expansions are done on luser_relay: $user (recipient -# username), $shell (recipient shell), $home (recipient home directory), -# $recipient (full recipient address), $extension (recipient address -# extension), $domain (recipient domain), $local (entire recipient -# localpart), $recipient_delimiter. Specify ${name?value} or -# ${name:value} to expand value only when $name does (does not) exist. -# -# luser_relay works only for the default Postfix local delivery agent. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must specify "local_recipient_maps =" (i.e. empty) in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -#luser_relay = $user@other.host -#luser_relay = $local@other.host -#luser_relay = admin+$local - -# JUNK MAIL CONTROLS -# -# The controls listed here are only a very small subset. The file -# SMTPD_ACCESS_README provides an overview. - -# The header_checks parameter specifies an optional table with patterns -# that each logical message header is matched against, including -# headers that span multiple physical lines. -# -# By default, these patterns also apply to MIME headers and to the -# headers of attached messages. With older Postfix versions, MIME and -# attached message headers were treated as body text. -# -# For details, see "man header_checks". -# -#header_checks = regexp:/etc/postfix/header_checks - -# FAST ETRN SERVICE -# -# Postfix maintains per-destination logfiles with information about -# deferred mail, so that mail can be flushed quickly with the SMTP -# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". -# See the ETRN_README document for a detailed description. -# -# The fast_flush_domains parameter controls what destinations are -# eligible for this service. By default, they are all domains that -# this server is willing to relay mail to. -# -#fast_flush_domains = $relay_domains - -# SHOW SOFTWARE VERSION OR NOT -# -# The smtpd_banner parameter specifies the text that follows the 220 -# code in the SMTP server's greeting banner. Some people like to see -# the mail version advertised. By default, Postfix shows no version. -# -# You MUST specify $myhostname at the start of the text. That is an -# RFC requirement. Postfix itself does not care. -# -#smtpd_banner = $myhostname ESMTP $mail_name -#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) - -# PARALLEL DELIVERY TO THE SAME DESTINATION -# -# How many parallel deliveries to the same user or domain? With local -# delivery, it does not make sense to do massively parallel delivery -# to the same user, because mailbox updates must happen sequentially, -# and expensive pipelines in .forward files can cause disasters when -# too many are run at the same time. With SMTP deliveries, 10 -# simultaneous connections to the same domain could be sufficient to -# raise eyebrows. -# -# Each message delivery transport has its XXX_destination_concurrency_limit -# parameter. The default is $default_destination_concurrency_limit for -# most delivery transports. For the local delivery agent the default is 2. - -#local_destination_concurrency_limit = 2 -#default_destination_concurrency_limit = 20 - -# DEBUGGING CONTROL -# -# The debug_peer_level parameter specifies the increment in verbose -# logging level when an SMTP client or server host name or address -# matches a pattern in the debug_peer_list parameter. -# -debug_peer_level = 2 - -# The debug_peer_list parameter specifies an optional list of domain -# or network patterns, /file/name patterns or type:name tables. When -# an SMTP client or server host name or address matches a pattern, -# increase the verbose logging level by the amount specified in the -# debug_peer_level parameter. -# -#debug_peer_list = 127.0.0.1 -#debug_peer_list = some.domain - -# The debugger_command specifies the external command that is executed -# when a Postfix daemon program is run with the -D option. -# -# Use "command .. & sleep 5" so that the debugger can attach before -# the process marches on. If you use an X-based debugger, be sure to -# set up your XAUTHORITY environment variable before starting Postfix. -# -debugger_command = - PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin - ddd $daemon_directory/$process_name $process_id & sleep 5 - -# If you can't use X, use this to capture the call stack when a -# daemon crashes. The result is in a file in the configuration -# directory, and is named after the process name and the process ID. -# -# debugger_command = -# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; -# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 -# >$config_directory/$process_name.$process_id.log & sleep 5 -# -# Another possibility is to run gdb under a detached screen session. -# To attach to the screen session, su root and run "screen -r -# " where uniquely matches one of the detached -# sessions (from "screen -list"). -# -# debugger_command = -# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen -# -dmS $process_name gdb $daemon_directory/$process_name -# $process_id & sleep 1 - -# INSTALL-TIME CONFIGURATION INFORMATION -# -# The following parameters are used when installing a new Postfix version. -# -# sendmail_path: The full pathname of the Postfix sendmail command. -# This is the Sendmail-compatible mail posting interface. -# -sendmail_path = - -# newaliases_path: The full pathname of the Postfix newaliases command. -# This is the Sendmail-compatible command to build alias databases. -# -newaliases_path = - -# mailq_path: The full pathname of the Postfix mailq command. This -# is the Sendmail-compatible mail queue listing command. -# -mailq_path = - -# setgid_group: The group for mail submission and queue management -# commands. This must be a group name with a numerical group ID that -# is not shared with other accounts, not even with the Postfix account. -# -setgid_group = - -# html_directory: The location of the Postfix HTML documentation. -# -html_directory = - -# manpage_directory: The location of the Postfix on-line manual pages. -# -manpage_directory = - -# sample_directory: The location of the Postfix sample configuration files. -# This parameter is obsolete as of Postfix 2.1. -# -sample_directory = - -# readme_directory: The location of the Postfix README files. -# -readme_directory = - -# TLS CONFIGURATION -# -# Basic Postfix TLS configuration by default with self-signed certificate -# for inbound SMTP and also opportunistic TLS for outbound SMTP. - -# The full pathname of a file with the Postfix SMTP server RSA certificate -# in PEM format. Intermediate certificates should be included in general, -# the server certificate first, then the issuing CA(s) (bottom-up order). -# -smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem - -# The full pathname of a file with the Postfix SMTP server RSA private key -# in PEM format. The private key must be accessible without a pass-phrase, -# i.e. it must not be encrypted. -# -smtpd_tls_key_file = /etc/pki/tls/private/postfix.key - -# Announce STARTTLS support to remote SMTP clients, but do not require that -# clients use TLS encryption (opportunistic TLS inbound). -# -smtpd_tls_security_level = may - -# Directory with PEM format Certification Authority certificates that the -# Postfix SMTP client uses to verify a remote SMTP server certificate. -# -smtp_tls_CApath = /etc/pki/tls/certs - -# The full pathname of a file containing CA certificates of root CAs -# trusted to sign either remote SMTP server certificates or intermediate CA -# certificates. -# -smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt - -# Use TLS if this is supported by the remote SMTP server, otherwise use -# plaintext (opportunistic TLS outbound). -# -smtp_tls_security_level = may diff --git a/templates/Fedora/38/etc/postfix/master.cf b/templates/Fedora/38/etc/postfix/master.cf deleted file mode 100644 index bb0eae9..0000000 --- a/templates/Fedora/38/etc/postfix/master.cf +++ /dev/null @@ -1,145 +0,0 @@ -# -# Postfix master process configuration file. For details on the format -# of the file, see the master(5) manual page (command: "man 5 master" or -# on-line: http://www.postfix.org/master.5.html). -# -# Do not forget to execute "postfix reload" after editing this file. -# -# ========================================================================== -# service type private unpriv chroot wakeup maxproc command + args -# (yes) (yes) (no) (never) (100) -# ========================================================================== -smtp inet n - n - - smtpd -#smtp inet n - n - 1 postscreen -#smtpd pass - - n - - smtpd -#dnsblog unix - - n - 0 dnsblog -#tlsproxy unix - - n - 0 tlsproxy -# Choose one: enable submission for loopback clients only, or for any client. -#127.0.0.1:submission inet n - n - - smtpd -#submission inet n - n - - smtpd -# -o syslog_name=postfix/submission -# -o smtpd_tls_security_level=encrypt -# -o smtpd_sasl_auth_enable=yes -# -o smtpd_tls_auth_only=yes -# -o smtpd_reject_unlisted_recipient=no -# Instead of specifying complex smtpd__restrictions here, -# specify "smtpd__restrictions=$mua__restrictions" -# here, and specify mua__restrictions in main.cf (where -# "" is "client", "helo", "sender", "relay", or "recipient"). -# -o smtpd_client_restrictions= -# -o smtpd_helo_restrictions= -# -o smtpd_sender_restrictions= -# -o smtpd_relay_restrictions= -# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject -# -o milter_macro_daemon_name=ORIGINATING -# Choose one: enable submissions for loopback clients only, or for any client. -#127.0.0.1:submissions inet n - n - - smtpd -#submissions inet n - n - - smtpd -# -o syslog_name=postfix/submissions -# -o smtpd_tls_wrappermode=yes -# -o smtpd_sasl_auth_enable=yes -# -o smtpd_reject_unlisted_recipient=no -# Instead of specifying complex smtpd__restrictions here, -# specify "smtpd__restrictions=$mua__restrictions" -# here, and specify mua__restrictions in main.cf (where -# "" is "client", "helo", "sender", "relay", or "recipient"). -# -o smtpd_client_restrictions= -# -o smtpd_helo_restrictions= -# -o smtpd_sender_restrictions= -# -o smtpd_relay_restrictions= -# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject -# -o milter_macro_daemon_name=ORIGINATING -#628 inet n - n - - qmqpd -pickup unix n - n 60 1 pickup -cleanup unix n - n - 0 cleanup -qmgr unix n - n 300 1 qmgr -#qmgr unix n - n 300 1 oqmgr -tlsmgr unix - - n 1000? 1 tlsmgr -rewrite unix - - n - - trivial-rewrite -bounce unix - - n - 0 bounce -defer unix - - n - 0 bounce -trace unix - - n - 0 bounce -verify unix - - n - 1 verify -flush unix n - n 1000? 0 flush -proxymap unix - - n - - proxymap -proxywrite unix - - n - 1 proxymap -smtp unix - - n - - smtp -relay unix - - n - - smtp - -o syslog_name=postfix/$service_name -# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 -showq unix n - n - - showq -error unix - - n - - error -retry unix - - n - - error -discard unix - - n - - discard -local unix - n n - - local -virtual unix - n n - - virtual -lmtp unix - - n - - lmtp -anvil unix - - n - 1 anvil -scache unix - - n - 1 scache -postlog unix-dgram n - n - 1 postlogd -# -# ==================================================================== -# Interfaces to non-Postfix software. Be sure to examine the manual -# pages of the non-Postfix software to find out what options it wants. -# -# Many of the following services use the Postfix pipe(8) delivery -# agent. See the pipe(8) man page for information about ${recipient} -# and other message envelope options. -# ==================================================================== -# -# maildrop. See the Postfix MAILDROP_README file for details. -# Also specify in main.cf: maildrop_destination_recipient_limit=1 -# -#maildrop unix - n n - - pipe -# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} -# -# ==================================================================== -# -# Recent Cyrus versions can use the existing "lmtp" master.cf entry. -# -# Specify in cyrus.conf: -# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 -# -# Specify in main.cf one or more of the following: -# mailbox_transport = lmtp:inet:localhost -# virtual_transport = lmtp:inet:localhost -# -# ==================================================================== -# -# Cyrus 2.1.5 (Amos Gouaux) -# Also specify in main.cf: cyrus_destination_recipient_limit=1 -# -#cyrus unix - n n - - pipe -# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} -# -# ==================================================================== -# -# Old example of delivery via Cyrus. -# -#old-cyrus unix - n n - - pipe -# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} -# -# ==================================================================== -# -# See the Postfix UUCP_README file for configuration details. -# -#uucp unix - n n - - pipe -# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) -# -# ==================================================================== -# -# Other external delivery methods. -# -#ifmail unix - n n - - pipe -# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) -# -#bsmtp unix - n n - - pipe -# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient -# -#scalemail-backend unix - n n - 2 pipe -# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store -# ${nexthop} ${user} ${extension} -# -#mailman unix - n n - - pipe -# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py -# ${nexthop} ${user} diff --git a/templates/Fedora/38/etc/postfix/master.cf.proto b/templates/Fedora/38/etc/postfix/master.cf.proto deleted file mode 100644 index bb0eae9..0000000 --- a/templates/Fedora/38/etc/postfix/master.cf.proto +++ /dev/null @@ -1,145 +0,0 @@ -# -# Postfix master process configuration file. For details on the format -# of the file, see the master(5) manual page (command: "man 5 master" or -# on-line: http://www.postfix.org/master.5.html). -# -# Do not forget to execute "postfix reload" after editing this file. -# -# ========================================================================== -# service type private unpriv chroot wakeup maxproc command + args -# (yes) (yes) (no) (never) (100) -# ========================================================================== -smtp inet n - n - - smtpd -#smtp inet n - n - 1 postscreen -#smtpd pass - - n - - smtpd -#dnsblog unix - - n - 0 dnsblog -#tlsproxy unix - - n - 0 tlsproxy -# Choose one: enable submission for loopback clients only, or for any client. -#127.0.0.1:submission inet n - n - - smtpd -#submission inet n - n - - smtpd -# -o syslog_name=postfix/submission -# -o smtpd_tls_security_level=encrypt -# -o smtpd_sasl_auth_enable=yes -# -o smtpd_tls_auth_only=yes -# -o smtpd_reject_unlisted_recipient=no -# Instead of specifying complex smtpd__restrictions here, -# specify "smtpd__restrictions=$mua__restrictions" -# here, and specify mua__restrictions in main.cf (where -# "" is "client", "helo", "sender", "relay", or "recipient"). -# -o smtpd_client_restrictions= -# -o smtpd_helo_restrictions= -# -o smtpd_sender_restrictions= -# -o smtpd_relay_restrictions= -# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject -# -o milter_macro_daemon_name=ORIGINATING -# Choose one: enable submissions for loopback clients only, or for any client. -#127.0.0.1:submissions inet n - n - - smtpd -#submissions inet n - n - - smtpd -# -o syslog_name=postfix/submissions -# -o smtpd_tls_wrappermode=yes -# -o smtpd_sasl_auth_enable=yes -# -o smtpd_reject_unlisted_recipient=no -# Instead of specifying complex smtpd__restrictions here, -# specify "smtpd__restrictions=$mua__restrictions" -# here, and specify mua__restrictions in main.cf (where -# "" is "client", "helo", "sender", "relay", or "recipient"). -# -o smtpd_client_restrictions= -# -o smtpd_helo_restrictions= -# -o smtpd_sender_restrictions= -# -o smtpd_relay_restrictions= -# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject -# -o milter_macro_daemon_name=ORIGINATING -#628 inet n - n - - qmqpd -pickup unix n - n 60 1 pickup -cleanup unix n - n - 0 cleanup -qmgr unix n - n 300 1 qmgr -#qmgr unix n - n 300 1 oqmgr -tlsmgr unix - - n 1000? 1 tlsmgr -rewrite unix - - n - - trivial-rewrite -bounce unix - - n - 0 bounce -defer unix - - n - 0 bounce -trace unix - - n - 0 bounce -verify unix - - n - 1 verify -flush unix n - n 1000? 0 flush -proxymap unix - - n - - proxymap -proxywrite unix - - n - 1 proxymap -smtp unix - - n - - smtp -relay unix - - n - - smtp - -o syslog_name=postfix/$service_name -# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 -showq unix n - n - - showq -error unix - - n - - error -retry unix - - n - - error -discard unix - - n - - discard -local unix - n n - - local -virtual unix - n n - - virtual -lmtp unix - - n - - lmtp -anvil unix - - n - 1 anvil -scache unix - - n - 1 scache -postlog unix-dgram n - n - 1 postlogd -# -# ==================================================================== -# Interfaces to non-Postfix software. Be sure to examine the manual -# pages of the non-Postfix software to find out what options it wants. -# -# Many of the following services use the Postfix pipe(8) delivery -# agent. See the pipe(8) man page for information about ${recipient} -# and other message envelope options. -# ==================================================================== -# -# maildrop. See the Postfix MAILDROP_README file for details. -# Also specify in main.cf: maildrop_destination_recipient_limit=1 -# -#maildrop unix - n n - - pipe -# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} -# -# ==================================================================== -# -# Recent Cyrus versions can use the existing "lmtp" master.cf entry. -# -# Specify in cyrus.conf: -# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 -# -# Specify in main.cf one or more of the following: -# mailbox_transport = lmtp:inet:localhost -# virtual_transport = lmtp:inet:localhost -# -# ==================================================================== -# -# Cyrus 2.1.5 (Amos Gouaux) -# Also specify in main.cf: cyrus_destination_recipient_limit=1 -# -#cyrus unix - n n - - pipe -# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} -# -# ==================================================================== -# -# Old example of delivery via Cyrus. -# -#old-cyrus unix - n n - - pipe -# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} -# -# ==================================================================== -# -# See the Postfix UUCP_README file for configuration details. -# -#uucp unix - n n - - pipe -# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) -# -# ==================================================================== -# -# Other external delivery methods. -# -#ifmail unix - n n - - pipe -# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) -# -#bsmtp unix - n n - - pipe -# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient -# -#scalemail-backend unix - n n - 2 pipe -# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store -# ${nexthop} ${user} ${extension} -# -#mailman unix - n n - - pipe -# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py -# ${nexthop} ${user} diff --git a/templates/Fedora/38/etc/postfix/postfix-files b/templates/Fedora/38/etc/postfix/postfix-files deleted file mode 100644 index b3ed234..0000000 --- a/templates/Fedora/38/etc/postfix/postfix-files +++ /dev/null @@ -1,447 +0,0 @@ -# -# Do not edit this file. -# -# This file controls the postfix-install script for installation of -# Postfix programs, configuration files and documentation, as well -# as the post-install script for setting permissions and for updating -# Postfix configuration files. See the respective manual pages within -# the script files. -# -# Do not list $command_directory or $shlib_directory in this file, -# or it will be blown away by a future Postfix uninstallation -# procedure. You would not want to lose all files in /usr/sbin or -# /usr/local/lib. -# -# Each record in this file describes one file or directory. -# Fields are separated by ":". Specify a null field as "-". -# Missing fields or separators at the end are OK. -# -# File format: -# name:type:owner:group:permission:flags -# No group means don't change group ownership. -# -# File types: -# d=directory -# f=regular file -# h=hard link (*) -# l=symbolic link (*) -# -# (*) With hard links and symbolic links, the owner field becomes the -# source pathname, while the group and permissions are ignored. -# -# File flags: -# No flag means the flag is not active. -# p=preserve existing file, do not replace (postfix-install). -# u=update owner/group/mode (post-install upgrade-permissions). -# c=create missing directory (post-install create-missing). -# r=apply owner/group recursively (post-install set/upgrade-permissions). -# o=obsolete, no longer part of Postfix -# 1=optional for non-default instance (config_dir != built-in default). -# -# Note: the "u" flag is for upgrading the permissions of existing files -# or directories after changes in Postfix architecture. For robustness -# it is a good idea to "u" all the files that have special ownership or -# permissions, so that running "make install" fixes any glitches. -# -# Note: order matters. Update shared libraries and database plugins -# before daemon/command-line programs. -$config_directory:d:root:-:755:u -$data_directory:d:$mail_owner:-:700:uc -$daemon_directory:d:root:-:755:u -$queue_directory:d:root:-:755:uc -$sample_directory:d:root:-:755:o -$readme_directory:d:root:-:755 -$html_directory:d:root:-:755 -$queue_directory/active:d:$mail_owner:-:700:ucr -$queue_directory/bounce:d:$mail_owner:-:700:ucr -$queue_directory/corrupt:d:$mail_owner:-:700:ucr -$queue_directory/defer:d:$mail_owner:-:700:ucr -$queue_directory/deferred:d:$mail_owner:-:700:ucr -$queue_directory/flush:d:$mail_owner:-:700:ucr -$queue_directory/hold:d:$mail_owner:-:700:ucr -$queue_directory/incoming:d:$mail_owner:-:700:ucr -$queue_directory/private:d:$mail_owner:-:700:uc -$queue_directory/maildrop:d:$mail_owner:$setgid_group:730:uc -$queue_directory/public:d:$mail_owner:$setgid_group:710:uc -$queue_directory/pid:d:root:-:755:uc -$queue_directory/saved:d:$mail_owner:-:700:ucr -$queue_directory/trace:d:$mail_owner:-:700:ucr -# Update shared libraries and plugins before daemon or command-line programs. -$shlib_directory/libpostfix-util.so:f:root:-:755 -$shlib_directory/libpostfix-global.so:f:root:-:755 -$shlib_directory/libpostfix-dns.so:f:root:-:755 -$shlib_directory/libpostfix-tls.so:f:root:-:755 -$shlib_directory/libpostfix-master.so:f:root:-:755 -$meta_directory/dynamicmaps.cf.d:d:root:-:755 -$meta_directory/dynamicmaps.cf:f:root:-:644 -$meta_directory/main.cf.proto:f:root:-:644 -$meta_directory/master.cf.proto:f:root:-:644 -$meta_directory/postfix-files.d:d:root:-:755 -$meta_directory/postfix-files:f:root:-:644 -$daemon_directory/anvil:f:root:-:755 -$daemon_directory/bounce:f:root:-:755 -$daemon_directory/cleanup:f:root:-:755 -$daemon_directory/discard:f:root:-:755 -$daemon_directory/dnsblog:f:root:-:755 -$daemon_directory/error:f:root:-:755 -$daemon_directory/flush:f:root:-:755 -$daemon_directory/local:f:root:-:755 -$daemon_directory/main.cf:f:root:-:644:o -$daemon_directory/master.cf:f:root:-:644:o -$daemon_directory/master:f:root:-:755 -$daemon_directory/oqmgr:f:root:-:755 -$daemon_directory/pickup:f:root:-:755 -$daemon_directory/pipe:f:root:-:755 -$daemon_directory/post-install:f:root:-:755 -# In case meta_directory == daemon_directory. -#$daemon_directory/postfix-files:f:root:-:644:o -#$daemon_directory/postfix-files.d:d:root:-:755:o -$daemon_directory/postfix-script:f:root:-:755 -$daemon_directory/postfix-tls-script:f:root:-:755 -$daemon_directory/postfix-wrapper:f:root:-:755 -$daemon_directory/postmulti-script:f:root:-:755 -$daemon_directory/postlogd:f:root:-:755 -$daemon_directory/postscreen:f:root:-:755 -$daemon_directory/proxymap:f:root:-:755 -$daemon_directory/qmgr:f:root:-:755 -$daemon_directory/qmqpd:f:root:-:755 -$daemon_directory/scache:f:root:-:755 -$daemon_directory/showq:f:root:-:755 -$daemon_directory/smtp:f:root:-:755 -$daemon_directory/smtpd:f:root:-:755 -$daemon_directory/spawn:f:root:-:755 -$daemon_directory/tlsproxy:f:root:-:755 -$daemon_directory/tlsmgr:f:root:-:755 -$daemon_directory/trivial-rewrite:f:root:-:755 -$daemon_directory/verify:f:root:-:755 -$daemon_directory/virtual:f:root:-:755 -$daemon_directory/nqmgr:h:$daemon_directory/qmgr -$daemon_directory/lmtp:h:$daemon_directory/smtp -$command_directory/postalias:f:root:-:755 -$command_directory/postcat:f:root:-:755 -$command_directory/postconf:f:root:-:755 -$command_directory/postfix:f:root:-:755 -$command_directory/postkick:f:root:-:755 -$command_directory/postlock:f:root:-:755 -$command_directory/postlog:f:root:$setgid_group:2755:u -$command_directory/postmap:f:root:-:755 -$command_directory/postmulti:f:root:-:755 -$command_directory/postsuper:f:root:-:755 -$command_directory/postdrop:f:root:$setgid_group:2755:u -$command_directory/postqueue:f:root:$setgid_group:2755:u -$sendmail_path:f:root:-:755 -$newaliases_path:l:$sendmail_path -$mailq_path:l:$sendmail_path -$config_directory/access:f:root:-:644:p1 -$config_directory/canonical:f:root:-:644:p1 -$config_directory/cidr_table:f:root:-:644:o -$config_directory/generic:f:root:-:644:p1 -$config_directory/generics:f:root:-:644:o -$config_directory/header_checks:f:root:-:644:p1 -$config_directory/install.cf:f:root:-:644:o -$config_directory/main.cf:f:root:-:644:p -$config_directory/master.cf:f:root:-:644:p -$config_directory/pcre_table:f:root:-:644:o -$config_directory/regexp_table:f:root:-:644:o -$config_directory/relocated:f:root:-:644:p1 -$config_directory/tcp_table:f:root:-:644:o -$config_directory/transport:f:root:-:644:p1 -$config_directory/virtual:f:root:-:644:p1 -$config_directory/postfix-script:f:root:-:755:o -$config_directory/postfix-script-sgid:f:root:-:755:o -$config_directory/postfix-script-nosgid:f:root:-:755:o -$config_directory/post-install:f:root:-:755:o -$manpage_directory/man1/mailq.postfix.1.gz:f:root:-:644 -$manpage_directory/man1/newaliases.postfix.1.gz:f:root:-:644 -$manpage_directory/man1/postalias.1.gz:f:root:-:644 -$manpage_directory/man1/postcat.1.gz:f:root:-:644 -$manpage_directory/man1/postconf.1.gz:f:root:-:644 -$manpage_directory/man1/postdrop.1.gz:f:root:-:644 -$manpage_directory/man1/postfix-tls.1.gz:f:root:-:644 -$manpage_directory/man1/postfix.1.gz:f:root:-:644 -$manpage_directory/man1/postkick.1.gz:f:root:-:644 -$manpage_directory/man1/postlock.1.gz:f:root:-:644 -$manpage_directory/man1/postlog.1.gz:f:root:-:644 -$manpage_directory/man1/postmap.1.gz:f:root:-:644 -$manpage_directory/man1/postmulti.1.gz:f:root:-:644 -$manpage_directory/man1/postqueue.1.gz:f:root:-:644 -$manpage_directory/man1/postsuper.1.gz:f:root:-:644 -$manpage_directory/man1/sendmail.postfix.1.gz:f:root:-:644 -$manpage_directory/man5/access.5.gz:f:root:-:644 -$manpage_directory/man5/aliases.postfix.5.gz:f:root:-:644 -$manpage_directory/man5/body_checks.5.gz:f:root:-:644 -$manpage_directory/man5/bounce.5.gz:f:root:-:644 -$manpage_directory/man5/canonical.5.gz:f:root:-:644 -$manpage_directory/man5/cidr_table.5.gz:f:root:-:644 -$manpage_directory/man5/generics.5.gz:f:root:-:644:o -$manpage_directory/man5/generic.5.gz:f:root:-:644 -$manpage_directory/man5/header_checks.5.gz:f:root:-:644 -$manpage_directory/man5/master.5.gz:f:root:-:644 -$manpage_directory/man5/memcache_table.5.gz:f:root:-:644 -$manpage_directory/man5/socketmap_table.5.gz:f:root:-:644 -$manpage_directory/man5/nisplus_table.5.gz:f:root:-:644 -$manpage_directory/man5/postconf.5.gz:f:root:-:644 -$manpage_directory/man5/postfix-wrapper.5.gz:f:root:-:644 -$manpage_directory/man5/regexp_table.5.gz:f:root:-:644 -$manpage_directory/man5/relocated.5.gz:f:root:-:644 -$manpage_directory/man5/tcp_table.5.gz:f:root:-:644 -$manpage_directory/man5/transport.5.gz:f:root:-:644 -$manpage_directory/man5/virtual.5.gz:f:root:-:644 -$manpage_directory/man8/bounce.8.gz:f:root:-:644 -$manpage_directory/man8/cleanup.8.gz:f:root:-:644 -$manpage_directory/man8/anvil.8.gz:f:root:-:644 -$manpage_directory/man8/defer.8.gz:f:root:-:644 -$manpage_directory/man8/discard.8.gz:f:root:-:644 -$manpage_directory/man8/dnsblog.8.gz:f:root:-:644 -$manpage_directory/man8/error.8.gz:f:root:-:644 -$manpage_directory/man8/flush.8.gz:f:root:-:644 -$manpage_directory/man8/lmtp.8.gz:f:root:-:644 -$manpage_directory/man8/local.8.gz:f:root:-:644 -$manpage_directory/man8/master.8.gz:f:root:-:644 -$manpage_directory/man8/nqmgr.8.gz:f:root:-:644:o -$manpage_directory/man8/oqmgr.8.gz:f:root:-:644: -$manpage_directory/man8/pickup.8.gz:f:root:-:644 -$manpage_directory/man8/pipe.8.gz:f:root:-:644 -$manpage_directory/man8/postlogd.8.gz:f:root:-:644 -$manpage_directory/man8/postscreen.8.gz:f:root:-:644 -$manpage_directory/man8/proxymap.8.gz:f:root:-:644 -$manpage_directory/man8/qmgr.8.gz:f:root:-:644 -$manpage_directory/man8/qmqpd.8.gz:f:root:-:644 -$manpage_directory/man8/scache.8.gz:f:root:-:644 -$manpage_directory/man8/showq.8.gz:f:root:-:644 -$manpage_directory/man8/smtp.8.gz:f:root:-:644 -$manpage_directory/man8/smtpd.postfix.8.gz:f:root:-:644 -$manpage_directory/man8/spawn.8.gz:f:root:-:644 -$manpage_directory/man8/tlsproxy.8.gz:f:root:-:644 -$manpage_directory/man8/tlsmgr.8.gz:f:root:-:644 -$manpage_directory/man8/trace.8.gz:f:root:-:644 -$manpage_directory/man8/trivial-rewrite.8.gz:f:root:-:644 -$manpage_directory/man8/verify.8.gz:f:root:-:644 -$manpage_directory/man8/virtual.8.gz:f:root:-:644 -$sample_directory/sample-aliases.cf:f:root:-:644:o -$sample_directory/sample-auth.cf:f:root:-:644:o -$sample_directory/sample-canonical.cf:f:root:-:644:o -$sample_directory/sample-compatibility.cf:f:root:-:644:o -$sample_directory/sample-debug.cf:f:root:-:644:o -$sample_directory/sample-filter.cf:f:root:-:644:o -$sample_directory/sample-flush.cf:f:root:-:644:o -$sample_directory/sample-ipv6.cf:f:root:-:644:o -$sample_directory/sample-ldap.cf:f:root:-:644:o -$sample_directory/sample-lmtp.cf:f:root:-:644:o -$sample_directory/sample-local.cf:f:root:-:644:o -$sample_directory/sample-mime.cf:f:root:-:644:o -$sample_directory/sample-misc.cf:f:root:-:644:o -$sample_directory/sample-pcre-access.cf:f:root:-:644:o -$sample_directory/sample-pcre-body.cf:f:root:-:644:o -$sample_directory/sample-pcre-header.cf:f:root:-:644:o -$sample_directory/sample-pgsql-aliases.cf:f:root:-:644:o -$sample_directory/sample-qmqpd.cf:f:root:-:644:o -$sample_directory/sample-rate.cf:f:root:-:644:o -$sample_directory/sample-regexp-access.cf:f:root:-:644:o -$sample_directory/sample-regexp-body.cf:f:root:-:644:o -$sample_directory/sample-regexp-header.cf:f:root:-:644:o -$sample_directory/sample-relocated.cf:f:root:-:644:o -$sample_directory/sample-resource.cf:f:root:-:644:o -$sample_directory/sample-rewrite.cf:f:root:-:644:o -$sample_directory/sample-scheduler.cf:f:root:-:644:o -$sample_directory/sample-smtp.cf:f:root:-:644:o -$sample_directory/sample-smtpd.cf:f:root:-:644:o -$sample_directory/sample-tls.cf:f:root:-:644:o -$sample_directory/sample-transport.cf:f:root:-:644:o -$sample_directory/sample-verify.cf:f:root:-:644:o -$sample_directory/sample-virtual.cf:f:root:-:644:o -$readme_directory/AAAREADME:f:root:-:644 -$readme_directory/ADDRESS_CLASS_README:f:root:-:644 -$readme_directory/ADDRESS_REWRITING_README:f:root:-:644 -$readme_directory/ADDRESS_VERIFICATION_README:f:root:-:644 -$readme_directory/BACKSCATTER_README:f:root:-:644 -$readme_directory/BASIC_CONFIGURATION_README:f:root:-:644 -$readme_directory/BDAT_README:f:root:-:644 -$readme_directory/BUILTIN_FILTER_README:f:root:-:644 -$readme_directory/COMPATIBILITY_README:f:root:-:644 -$readme_directory/CONNECTION_CACHE_README:f:root:-:644 -$readme_directory/CONTENT_INSPECTION_README:f:root:-:644 -$readme_directory/DATABASE_README:f:root:-:644 -$readme_directory/DB_README:f:root:-:644 -$readme_directory/DEBUG_README:f:root:-:644 -$readme_directory/DSN_README:f:root:-:644 -$readme_directory/ETRN_README:f:root:-:644 -$readme_directory/FILTER_README:f:root:-:644 -$readme_directory/FORWARD_SECRECY_README:f:root:-:644 -$readme_directory/HOSTING_README:f:root:-:644:o -$readme_directory/INSTALL:f:root:-:644 -$readme_directory/IPV6_README:f:root:-:644 -$readme_directory/LINUX_README:f:root:-:644 -$readme_directory/LOCAL_RECIPIENT_README:f:root:-:644 -$readme_directory/MACOSX_README:f:root:-:644:o -$readme_directory/MAILDROP_README:f:root:-:644 -$readme_directory/MAILLOG_README:f:root:-:644 -$readme_directory/MEMCACHE_README:f:root:-:644 -$readme_directory/MILTER_README:f:root:-:644 -$readme_directory/MULTI_INSTANCE_README:f:root:-:644 -$readme_directory/SMTPUTF8_README:f:root:-:644 -$readme_directory/NFS_README:f:root:-:644 -$readme_directory/OVERVIEW:f:root:-:644 -$readme_directory/PACKAGE_README:f:root:-:644 -$readme_directory/POSTSCREEN_3_5_README:f:root:-:644 -$readme_directory/POSTSCREEN_README:f:root:-:644 -$readme_directory/QMQP_README:f:root:-:644:o -$readme_directory/QSHAPE_README:f:root:-:644 -$readme_directory/RELEASE_NOTES:f:root:-:644 -$readme_directory/RESTRICTION_CLASS_README:f:root:-:644 -$readme_directory/SASL_README:f:root:-:644 -$readme_directory/SCHEDULER_README:f:root:-:644 -$readme_directory/SMTPD_ACCESS_README:f:root:-:644 -$readme_directory/SMTPD_POLICY_README:f:root:-:644 -$readme_directory/SMTPD_PROXY_README:f:root:-:644 -$readme_directory/SOHO_README:f:root:-:644 -$readme_directory/STANDARD_CONFIGURATION_README:f:root:-:644 -$readme_directory/STRESS_README:f:root:-:644 -$readme_directory/TLS_LEGACY_README:f:root:-:644 -$readme_directory/TLS_README:f:root:-:644 -$readme_directory/TUNING_README:f:root:-:644 -$readme_directory/ULTRIX_README:f:root:-:644 -$readme_directory/UUCP_README:f:root:-:644 -$readme_directory/VERP_README:f:root:-:644 -$readme_directory/VIRTUAL_README:f:root:-:644 -$readme_directory/XCLIENT_README:f:root:-:644 -$readme_directory/XFORWARD_README:f:root:-:644 -$html_directory/ADDRESS_CLASS_README.html:f:root:-:644 -$html_directory/ADDRESS_REWRITING_README.html:f:root:-:644 -$html_directory/ADDRESS_VERIFICATION_README.html:f:root:-:644 -$html_directory/BACKSCATTER_README.html:f:root:-:644 -$html_directory/BASIC_CONFIGURATION_README.html:f:root:-:644 -$html_directory/BDAT_README.html:f:root:-:644 -$html_directory/BUILTIN_FILTER_README.html:f:root:-:644 -$html_directory/CDB_README.html:f:root:-:644 -$html_directory/COMPATIBILITY_README.html:f:root:-:644 -$html_directory/CONNECTION_CACHE_README.html:f:root:-:644 -$html_directory/CONTENT_INSPECTION_README.html:f:root:-:644 -$html_directory/CYRUS_README.html:f:root:-:644:o -$html_directory/DATABASE_README.html:f:root:-:644 -$html_directory/DB_README.html:f:root:-:644 -$html_directory/DEBUG_README.html:f:root:-:644 -$html_directory/DSN_README.html:f:root:-:644 -$html_directory/ETRN_README.html:f:root:-:644 -$html_directory/FILTER_README.html:f:root:-:644 -$html_directory/FORWARD_SECRECY_README.html:f:root:-:644 -$html_directory/INSTALL.html:f:root:-:644 -$html_directory/IPV6_README.html:f:root:-:644 -$html_directory/LDAP_README.html:f:root:-:644 -$html_directory/LINUX_README.html:f:root:-:644 -$html_directory/LMDB_README.html:f:root:-:644 -$html_directory/LOCAL_RECIPIENT_README.html:f:root:-:644 -$html_directory/MAILDROP_README.html:f:root:-:644 -$html_directory/MAILLOG_README.html:f:root:-:644 -$html_directory/MEMCACHE_README.html:f:root:-:644 -$html_directory/MILTER_README.html:f:root:-:644 -$html_directory/MULTI_INSTANCE_README.html:f:root:-:644 -$html_directory/MYSQL_README.html:f:root:-:644 -$html_directory/SMTPUTF8_README.html:f:root:-:644 -$html_directory/SQLITE_README.html:f:root:-:644 -$html_directory/NFS_README.html:f:root:-:644 -$html_directory/OVERVIEW.html:f:root:-:644 -$html_directory/PACKAGE_README.html:f:root:-:644 -$html_directory/PCRE_README.html:f:root:-:644 -$html_directory/PGSQL_README.html:f:root:-:644 -$html_directory/POSTSCREEN_3_5_README.html:f:root:-:644 -$html_directory/POSTSCREEN_README.html:f:root:-:644 -$html_directory/QMQP_README.html:f:root:-:644:o -$html_directory/QSHAPE_README.html:f:root:-:644 -$html_directory/RESTRICTION_CLASS_README.html:f:root:-:644 -$html_directory/SASL_README.html:f:root:-:644 -$html_directory/SCHEDULER_README.html:f:root:-:644 -$html_directory/SMTPD_ACCESS_README.html:f:root:-:644 -$html_directory/SMTPD_POLICY_README.html:f:root:-:644 -$html_directory/SMTPD_PROXY_README.html:f:root:-:644 -$html_directory/SOHO_README.html:f:root:-:644 -$html_directory/STANDARD_CONFIGURATION_README.html:f:root:-:644 -$html_directory/STRESS_README.html:f:root:-:644 -$html_directory/TLS_LEGACY_README.html:f:root:-:644 -$html_directory/TLS_README.html:f:root:-:644 -$html_directory/TUNING_README.html:f:root:-:644 -$html_directory/ULTRIX_README.html:f:root:-:644:o -$html_directory/UUCP_README.html:f:root:-:644 -$html_directory/VERP_README.html:f:root:-:644 -$html_directory/VIRTUAL_README.html:f:root:-:644 -$html_directory/XCLIENT_README.html:f:root:-:644 -$html_directory/XFORWARD_README.html:f:root:-:644 -$html_directory/access.5.html:f:root:-:644 -$html_directory/aliases.5.html:f:root:-:644 -$html_directory/anvil.8.html:f:root:-:644 -$html_directory/bounce.5.html:f:root:-:644 -$html_directory/bounce.8.html:f:root:-:644 -$html_directory/canonical.5.html:f:root:-:644 -$html_directory/cidr_table.5.html:f:root:-:644 -$html_directory/cleanup.8.html:f:root:-:644 -$html_directory/defer.8.html:h:$html_directory/bounce.8.html:-:644 -$html_directory/discard.8.html:f:root:-:644 -$html_directory/dnsblog.8.html:f:root:-:644 -$html_directory/error.8.html:f:root:-:644 -$html_directory/flush.8.html:f:root:-:644 -$html_directory/generics.5.html:f:root:-:644:o -$html_directory/generic.5.html:f:root:-:644 -$html_directory/header_checks.5.html:f:root:-:644 -$html_directory/index.html:f:root:-:644 -$html_directory/ldap_table.5.html:f:root:-:644 -$html_directory/lmdb_table.5.html:f:root:-:644 -$html_directory/lmtp.8.html:f:root:-:644 -$html_directory/local.8.html:f:root:-:644 -$html_directory/mailq.1.html:f:root:-:644 -$html_directory/master.5.html:f:root:-:644 -$html_directory/master.8.html:f:root:-:644 -$html_directory/memcache_table.5.html:f:root:-:644 -$html_directory/mysql_table.5.html:f:root:-:644 -$html_directory/sqlite_table.5.html:f:root:-:644 -$html_directory/nisplus_table.5.html:f:root:-:644 -$html_directory/newaliases.1.html:h:$html_directory/mailq.1.html:-:644 -$html_directory/oqmgr.8.html:f:root:-:644 -$html_directory/pcre_table.5.html:f:root:-:644 -$html_directory/pgsql_table.5.html:f:root:-:644 -$html_directory/pickup.8.html:f:root:-:644 -$html_directory/pipe.8.html:f:root:-:644 -$html_directory/postalias.1.html:f:root:-:644 -$html_directory/postcat.1.html:f:root:-:644 -$html_directory/postconf.1.html:f:root:-:644 -$html_directory/postconf.5.html:f:root:-:644 -$html_directory/postdrop.1.html:f:root:-:644 -$html_directory/postfix-logo.jpg:f:root:-:644 -$html_directory/postfix-manuals.html:f:root:-:644 -$html_directory/postfix-tls.1.html:f:root:-:644 -$html_directory/postfix-wrapper.5.html:f:root:-:644 -$html_directory/postfix.1.html:f:root:-:644 -$html_directory/postkick.1.html:f:root:-:644 -$html_directory/postlock.1.html:f:root:-:644 -$html_directory/postlog.1.html:f:root:-:644 -$html_directory/postmap.1.html:f:root:-:644 -$html_directory/postmulti.1.html:f:root:-:644 -$html_directory/postlogd.8.html:f:root:-:644 -$html_directory/postqueue.1.html:f:root:-:644 -$html_directory/postscreen.8.html:f:root:-:644 -$html_directory/postsuper.1.html:f:root:-:644 -$html_directory/qshape.1.html:f:root:-:644 -$html_directory/proxymap.8.html:f:root:-:644 -$html_directory/qmgr.8.html:f:root:-:644 -$html_directory/qmqp-sink.1.html:f:root:-:644 -$html_directory/qmqp-source.1.html:f:root:-:644 -$html_directory/qmqpd.8.html:f:root:-:644 -$html_directory/regexp_table.5.html:f:root:-:644 -$html_directory/relocated.5.html:f:root:-:644 -$html_directory/scache.8.html:f:root:-:644 -$html_directory/sendmail.1.html:h:$html_directory/mailq.1.html:-:644 -$html_directory/showq.8.html:f:root:-:644 -$html_directory/smtp-sink.1.html:f:root:-:644 -$html_directory/smtp-source.1.html:f:root:-:644 -$html_directory/smtp.8.html:h:$html_directory/lmtp.8.html:-:644 -$html_directory/smtpd.8.html:f:root:-:644 -$html_directory/socketmap_table.5.html:f:root:-:644 -$html_directory/spawn.8.html:f:root:-:644 -$html_directory/tlsmgr.8.html:f:root:-:644 -$html_directory/tlsproxy.8.html:f:root:-:644 -$html_directory/tcp_table.5.html:f:root:-:644 -$html_directory/trace.8.html:h:$html_directory/bounce.8.html:-:644 -$html_directory/transport.5.html:f:root:-:644 -$html_directory/trivial-rewrite.8.html:f:root:-:644 -$html_directory/verify.8.html:f:root:-:644 -$html_directory/virtual.5.html:f:root:-:644 -$html_directory/virtual.8.html:f:root:-:644 diff --git a/templates/Fedora/38/etc/postfix/postfix-files.d/ldap b/templates/Fedora/38/etc/postfix/postfix-files.d/ldap deleted file mode 100644 index 684b05d..0000000 --- a/templates/Fedora/38/etc/postfix/postfix-files.d/ldap +++ /dev/null @@ -1,3 +0,0 @@ -$shlib_directory/postfix-ldap.so:f:root:-:755 -$manpage_directory/man5/ldap_table.5.gz:f:root:-:644 -$readme_directory/LDAP_README:f:root:-:644 diff --git a/templates/Fedora/38/etc/postfix/postfix-files.d/mysql b/templates/Fedora/38/etc/postfix/postfix-files.d/mysql deleted file mode 100644 index 8e41d61..0000000 --- a/templates/Fedora/38/etc/postfix/postfix-files.d/mysql +++ /dev/null @@ -1,3 +0,0 @@ -$shlib_directory/postfix-mysql.so:f:root:-:755 -$manpage_directory/man5/mysql_table.5.gz:f:root:-:644 -$readme_directory/MYSQL_README:f:root:-:644 diff --git a/templates/Fedora/38/etc/postfix/postfix-files.d/pcre b/templates/Fedora/38/etc/postfix/postfix-files.d/pcre deleted file mode 100644 index a34fd73..0000000 --- a/templates/Fedora/38/etc/postfix/postfix-files.d/pcre +++ /dev/null @@ -1,3 +0,0 @@ -$shlib_directory/postfix-pcre.so:f:root:-:755 -$manpage_directory/man5/pcre_table.5.gz:f:root:-:644 -$readme_directory/PCRE_README:f:root:-:644 diff --git a/templates/Fedora/38/etc/postfix/relocated b/templates/Fedora/38/etc/postfix/relocated deleted file mode 100644 index 90f63ec..0000000 --- a/templates/Fedora/38/etc/postfix/relocated +++ /dev/null @@ -1,178 +0,0 @@ -# RELOCATED(5) RELOCATED(5) -# -# NAME -# relocated - Postfix relocated table format -# -# SYNOPSIS -# postmap /etc/postfix/relocated -# -# DESCRIPTION -# The optional relocated(5) table provides the information -# that is used in "user has moved to new_location" bounce -# messages. -# -# Normally, the relocated(5) table is specified as a text -# file that serves as input to the postmap(1) command. The -# result, an indexed file in dbm or db format, is used for -# fast searching by the mail system. Execute the command -# "postmap /etc/postfix/relocated" to rebuild an indexed -# file after changing the corresponding relocated table. -# -# When the table is provided via other means such as NIS, -# LDAP or SQL, the same lookups are done as for ordinary -# indexed files. -# -# Alternatively, the table can be provided as a regu- -# lar-expression map where patterns are given as regular -# expressions, or lookups can be directed to a TCP-based -# server. In those case, the lookups are done in a slightly -# different way as described below under "REGULAR EXPRESSION -# TABLES" or "TCP-BASED TABLES". -# -# Table lookups are case insensitive. -# -# CASE FOLDING -# The search string is folded to lowercase before database -# lookup. As of Postfix 2.3, the search string is not case -# folded with database types such as regexp: or pcre: whose -# lookup fields can match both upper and lower case. -# -# TABLE FORMAT -# The input format for the postmap(1) command is as follows: -# -# o An entry has one of the following form: -# -# pattern new_location -# -# Where new_location specifies contact information -# such as an email address, or perhaps a street -# address or telephone number. -# -# o Empty lines and whitespace-only lines are ignored, -# as are lines whose first non-whitespace character -# is a `#'. -# -# o A logical line starts with non-whitespace text. A -# line that starts with whitespace continues a logi- -# cal line. -# -# TABLE SEARCH ORDER -# With lookups from indexed files such as DB or DBM, or from -# networked tables such as NIS, LDAP or SQL, patterns are -# tried in the order as listed below: -# -# user@domain -# Matches user@domain. This form has precedence over -# all other forms. -# -# user Matches user@site when site is $myorigin, when site -# is listed in $mydestination, or when site is listed -# in $inet_interfaces or $proxy_interfaces. -# -# @domain -# Matches other addresses in domain. This form has -# the lowest precedence. -# -# ADDRESS EXTENSION -# When a mail address localpart contains the optional recip- -# ient delimiter (e.g., user+foo@domain), the lookup order -# becomes: user+foo@domain, user@domain, user+foo, user, and -# @domain. -# -# REGULAR EXPRESSION TABLES -# This section describes how the table lookups change when -# the table is given in the form of regular expressions or -# when lookups are directed to a TCP-based server. For a -# description of regular expression lookup table syntax, see -# regexp_table(5) or pcre_table(5). For a description of the -# TCP client/server table lookup protocol, see tcp_table(5). -# This feature is available in Postfix 2.5 and later. -# -# Each pattern is a regular expression that is applied to -# the entire address being looked up. Thus, user@domain mail -# addresses are not broken up into their user and @domain -# constituent parts, nor is user+foo broken up into user and -# foo. -# -# Patterns are applied in the order as specified in the ta- -# ble, until a pattern is found that matches the search -# string. -# -# Results are the same as with indexed file lookups, with -# the additional feature that parenthesized substrings from -# the pattern can be interpolated as $1, $2 and so on. -# -# TCP-BASED TABLES -# This section describes how the table lookups change when -# lookups are directed to a TCP-based server. For a descrip- -# tion of the TCP client/server lookup protocol, see tcp_ta- -# ble(5). This feature is available in Postfix 2.5 and -# later. -# -# Each lookup operation uses the entire address once. Thus, -# user@domain mail addresses are not broken up into their -# user and @domain constituent parts, nor is user+foo broken -# up into user and foo. -# -# Results are the same as with indexed file lookups. -# -# BUGS -# The table format does not understand quoting conventions. -# -# CONFIGURATION PARAMETERS -# The following main.cf parameters are especially relevant. -# The text below provides only a parameter summary. See -# postconf(5) for more details including examples. -# -# relocated_maps (empty) -# Optional lookup tables with new contact information -# for users or domains that no longer exist. -# -# Other parameters of interest: -# -# inet_interfaces (all) -# The network interface addresses that this mail sys- -# tem receives mail on. -# -# mydestination ($myhostname, localhost.$mydomain, local- -# host) -# The list of domains that are delivered via the -# $local_transport mail delivery transport. -# -# myorigin ($myhostname) -# The domain name that locally-posted mail appears to -# come from, and that locally posted mail is deliv- -# ered to. -# -# proxy_interfaces (empty) -# The network interface addresses that this mail sys- -# tem receives mail on by way of a proxy or network -# address translation unit. -# -# SEE ALSO -# trivial-rewrite(8), address resolver -# postmap(1), Postfix lookup table manager -# postconf(5), configuration parameters -# -# README FILES -# Use "postconf readme_directory" or "postconf html_direc- -# tory" to locate this information. -# DATABASE_README, Postfix lookup table overview -# ADDRESS_REWRITING_README, address rewriting guide -# -# LICENSE -# The Secure Mailer license must be distributed with this -# software. -# -# AUTHOR(S) -# Wietse Venema -# IBM T.J. Watson Research -# P.O. Box 704 -# Yorktown Heights, NY 10598, USA -# -# Wietse Venema -# Google, Inc. -# 111 8th Avenue -# New York, NY 10011, USA -# -# RELOCATED(5) diff --git a/templates/Fedora/38/etc/postfix/transport b/templates/Fedora/38/etc/postfix/transport deleted file mode 100644 index bad7739..0000000 --- a/templates/Fedora/38/etc/postfix/transport +++ /dev/null @@ -1,317 +0,0 @@ -# TRANSPORT(5) TRANSPORT(5) -# -# NAME -# transport - Postfix transport table format -# -# SYNOPSIS -# postmap /etc/postfix/transport -# -# postmap -q "string" /etc/postfix/transport -# -# postmap -q - /etc/postfix/transport = 3.5): -# -# example.com smtp:bar.example, foo.example -# -# This tries to deliver to bar.example before trying to -# deliver to foo.example. -# -# The error mailer can be used to bounce mail: -# -# .example.com error:mail for *.example.com is not deliverable -# -# This causes all mail for user@anything.example.com to be -# bounced. -# -# REGULAR EXPRESSION TABLES -# This section describes how the table lookups change when -# the table is given in the form of regular expressions. For -# a description of regular expression lookup table syntax, -# see regexp_table(5) or pcre_table(5). -# -# Each pattern is a regular expression that is applied to -# the entire address being looked up. Thus, -# some.domain.hierarchy is not looked up via its parent -# domains, nor is user+foo@domain looked up as user@domain. -# -# Patterns are applied in the order as specified in the ta- -# ble, until a pattern is found that matches the search -# string. -# -# The trivial-rewrite(8) server disallows regular expression -# substitution of $1 etc. in regular expression lookup -# tables, because that could open a security hole (Postfix -# version 2.3 and later). -# -# TCP-BASED TABLES -# This section describes how the table lookups change when -# lookups are directed to a TCP-based server. For a descrip- -# tion of the TCP client/server lookup protocol, see tcp_ta- -# ble(5). This feature is not available up to and including -# Postfix version 2.4. -# -# Each lookup operation uses the entire recipient address -# once. Thus, some.domain.hierarchy is not looked up via -# its parent domains, nor is user+foo@domain looked up as -# user@domain. -# -# Results are the same as with indexed file lookups. -# -# CONFIGURATION PARAMETERS -# The following main.cf parameters are especially relevant. -# The text below provides only a parameter summary. See -# postconf(5) for more details including examples. -# -# empty_address_recipient (MAILER-DAEMON) -# The recipient of mail addressed to the null -# address. -# -# parent_domain_matches_subdomains (see 'postconf -d' out- -# put) -# A list of Postfix features where the pattern "exam- -# ple.com" also matches subdomains of example.com, -# instead of requiring an explicit ".example.com" -# pattern. -# -# transport_maps (empty) -# Optional lookup tables with mappings from recipient -# address to (message delivery transport, next-hop -# destination). -# -# SEE ALSO -# trivial-rewrite(8), rewrite and resolve addresses -# master(5), master.cf file format -# postconf(5), configuration parameters -# postmap(1), Postfix lookup table manager -# -# README FILES -# Use "postconf readme_directory" or "postconf html_direc- -# tory" to locate this information. -# ADDRESS_REWRITING_README, address rewriting guide -# DATABASE_README, Postfix lookup table overview -# FILTER_README, external content filter -# -# LICENSE -# The Secure Mailer license must be distributed with this -# software. -# -# AUTHOR(S) -# Wietse Venema -# IBM T.J. Watson Research -# P.O. Box 704 -# Yorktown Heights, NY 10598, USA -# -# Wietse Venema -# Google, Inc. -# 111 8th Avenue -# New York, NY 10011, USA -# -# TRANSPORT(5) diff --git a/templates/Fedora/38/etc/postfix/virtual b/templates/Fedora/38/etc/postfix/virtual deleted file mode 100644 index 96390fe..0000000 --- a/templates/Fedora/38/etc/postfix/virtual +++ /dev/null @@ -1,324 +0,0 @@ -# VIRTUAL(5) VIRTUAL(5) -# -# NAME -# virtual - Postfix virtual alias table format -# -# SYNOPSIS -# postmap /etc/postfix/virtual -# -# postmap -q "string" /etc/postfix/virtual -# -# postmap -q - /etc/postfix/virtual -ReportAddress "Postmaster" <{{ postmaster_email }}> - -## Add a DKIM-Filter header field to messages passing through this filter -## to identify messages it has processed. -SoftwareHeader yes - -## SIGNING OPTIONS - -## Selects the canonicalization method(s) to be used when signing messages. -Canonicalization relaxed/relaxed - -## Domain(s) whose mail should be signed by this filter. Mail from other domains will -## be verified rather than being signed. Uncomment and use your domain name. -## This parameter is not required if a SigningTable is in use. -# Domain example.com - -## Defines the name of the selector to be used when signing messages. -Selector default - -## Specifies the minimum number of key bits for acceptable keys and signatures. -MinimumKeyBits 1024 - -## Gives the location of a private key to be used for signing ALL messages. This -## directive is ignored if KeyTable is enabled. -# KeyFile /etc/opendkim/keys/default.private - -## Gives the location of a file mapping key names to signing keys. In simple terms, -## this tells OpenDKIM where to find your keys. If present, overrides any KeyFile -## directive in the configuration file. Requires SigningTable be enabled. -# KeyTable /etc/opendkim/KeyTable - -## Defines a table used to select one or more signatures to apply to a message based -## on the address found in the From: header field. In simple terms, this tells -## OpenDKIM how to use your keys. Requires KeyTable be enabled. -# SigningTable refile:/etc/opendkim/SigningTable - -## Identifies a set of "external" hosts that may send mail through the server as one -## of the signing domains without credentials as such. -# ExternalIgnoreList refile:/etc/opendkim/TrustedHosts - -## Identifies a set "internal" hosts whose mail should be signed rather than verified. -# InternalHosts refile:/etc/opendkim/TrustedHosts - -## Contains a list of IP addresses, CIDR blocks, hostnames or domain names -## whose mail should be neither signed nor verified by this filter. See man -## page for file format. -# PeerList X.X.X.X - -## Always oversign From (sign using actual From and a null From to prevent -## malicious signatures header fields (From and/or others) between the signer -## and the verifier. From is oversigned by default in the Fedora package -## because it is often the identity key used by reputation systems and thus -## somewhat security sensitive. -OversignHeaders From - -## Instructs the DKIM library to maintain its own local cache of keys and -## policies retrieved from DNS, rather than relying on the nameserver for -## caching service. Useful if the nameserver being used by the filter is -## not local. -# QueryCache yes diff --git a/templates/Fedora/39/etc/opendkim/KeyTable b/templates/Fedora/39/etc/opendkim/KeyTable deleted file mode 100644 index e804d68..0000000 --- a/templates/Fedora/39/etc/opendkim/KeyTable +++ /dev/null @@ -1,6 +0,0 @@ -# OPENDKIM KEY TABLE -# To use this file, uncomment the #KeyTable option in /etc/opendkim.conf, -# then uncomment the following line and replace example.com with your domain -# name, then restart OpenDKIM. Additional keys may be added on separate lines. - -#default._domainkey.example.com example.com:default:/etc/opendkim/keys/default.private diff --git a/templates/Fedora/39/etc/opendkim/SigningTable b/templates/Fedora/39/etc/opendkim/SigningTable deleted file mode 100644 index e8161a1..0000000 --- a/templates/Fedora/39/etc/opendkim/SigningTable +++ /dev/null @@ -1,25 +0,0 @@ -# OPENDKIM SIGNING TABLE -# This table controls how to apply one or more signatures to outgoing messages based -# on the address found in the From: header field. In simple terms, this tells -# OpenDKIM "how" to apply your keys. - -# To use this file, uncomment the SigningTable option in /etc/opendkim.conf, -# then uncomment one of the usage examples below and replace example.com with your -# domain name, then restart OpenDKIM. - -# WILDCARD EXAMPLE -# Enables signing for any address on the listed domain(s), but will work only if -# "refile:/etc/opendkim/SigningTable" is included in /etc/opendkim.conf. -# Create additional lines for additional domains. - -#*@example.com default._domainkey.example.com - -# NON-WILDCARD EXAMPLE -# If "file:" (instead of "refile:") is specified in /etc/opendkim.conf, then -# wildcards will not work. Instead, full user@host is checked first, then simply host, -# then user@.domain (with all superdomains checked in sequence, so "foo.example.com" -# would first check "user@foo.example.com", then "user@.example.com", then "user@.com"), -# then .domain, then user@*, and finally *. See the opendkim.conf(5) man page under -# "SigningTable" for more details. - -#example.com default._domainkey.example.com diff --git a/templates/Fedora/39/etc/opendkim/TrustedHosts b/templates/Fedora/39/etc/opendkim/TrustedHosts deleted file mode 100644 index 7a086d4..0000000 --- a/templates/Fedora/39/etc/opendkim/TrustedHosts +++ /dev/null @@ -1,9 +0,0 @@ -# OPENDKIM TRUSTED HOSTS -# To use this file, uncomment the #ExternalIgnoreList and/or the #InternalHosts -# option in /etc/opendkim.conf then restart OpenDKIM. Additional hosts -# may be added on separate lines (IP addresses, hostnames, or CIDR ranges). -# The localhost IP (127.0.0.1) should always be the first entry in this file. -127.0.0.1 -::1 -#host.example.com -#192.168.1.0/24 diff --git a/templates/Fedora/39/etc/opendmarc.conf b/templates/Fedora/39/etc/opendmarc.conf deleted file mode 100644 index 19f6b7b..0000000 --- a/templates/Fedora/39/etc/opendmarc.conf +++ /dev/null @@ -1,443 +0,0 @@ -## opendmarc.conf -- configuration file for OpenDMARC filter -## -## Copyright (c) 2012-2015, 2018, 2021, The Trusted Domain Project. -## All rights reserved. - -## DEPRECATED CONFIGURATION OPTIONS -## -## The following configuration options are no longer valid. They should be -## removed from your existing configuration file to prevent potential issues. -## Failure to do so may result in opendmarc being unable to start. -## -## Renamed in 1.3.0: -## ForensicReports became FailureReports -## ForensicReportsBcc became FailureReportsBcc -## ForensicReportsOnNone became FailureReportsOnNone -## ForensicReportsSentBy became FailureReportsSentBy - -## CONFIGURATION OPTIONS - -## AuthservID (string) -## defaults to MTA name -## -## Sets the "authserv-id" to use when generating the Authentication-Results: -## header field after verifying a message. If the string "HOSTNAME" is -## provided, the name of the host running the filter (as returned by the -## gethostname(3) function) will be used. -# -# AuthservID name - -## AuthservIDWithJobID { true | false } -## default "false" -## -## If "true", requests that the authserv-id portion of the added -## Authentication-Results header fields contain the job ID of the message -## being evaluated. -# -# AuthservIDWithJobID false - -## AutoRestart { true | false } -## default "false" -## -## Automatically re-start on failures. Use with caution; if the filter fails -## instantly after it starts, this can cause a tight fork(2) loop. -# -# AutoRestart false - -## AutoRestartCount n -## default 0 -## -## Sets the maximum automatic restart count. After this number of automatic -## restarts, the filter will give up and terminate. A value of 0 implies no -## limit. -# -# AutoRestartCount 0 - -## AutoRestartRate n/t[u] -## default (no limit) -## -## Sets the maximum automatic restart rate. If the filter begins restarting -## faster than the rate defined here, it will give up and terminate. This -## is a string of the form n/t[u] where n is an integer limiting the count -## of restarts in the given interval and t[u] defines the time interval -## through which the rate is calculated; t is an integer and u defines the -## units thus represented ("s" or "S" for seconds, the default; "m" or "M" -## for minutes; "h" or "H" for hours; "d" or "D" for days). For example, a -## value of "10/1h" limits the restarts to 10 in one hour. There is no -## default, meaning restart rate is not limited. -# -# AutoRestartRate n/t[u] - -## Background { true | false } -## default "true" -## -## Causes opendmarc to fork and exits immediately, leaving the service -## running in the background. -# -# Background true - -## BaseDirectory (string) -## default (none) -## -## If set, instructs the filter to change to the specified directory using -## chdir(2) before doing anything else. This means any files referenced -## elsewhere in the configuration file can be specified relative to this -## directory. It's also useful for arranging that any crash dumps will be -## saved to a specific location. -# -# BaseDirectory /var/run/opendmarc - -## ChangeRootDirectory (string) -## default (none) -## -## Requests that the operating system change the effective root directory of -## the process to the one specified here prior to beginning execution. -## chroot(2) requires superuser access. A warning will be generated if -## UserID is not also set. -# -# ChangeRootDirectory /var/chroot/opendmarc - -## CopyFailuresTo (string) -## default (none) -## -## Requests addition of the specified email address to the envelope of -## any message that fails the DMARC evaluation. -# -# CopyFailuresTo postmaster@localhost - -## DomainWhitelist (string) -## default (none) -## -## A brief list of whitelisted domains for which ARC signature headers are -## trusted as determined by evaluating entries in the "arc.chain" field found -## in a locally generated Authentication-Results header. -## -## This list will be concatenated with DomainWhitelistFile (if provided). -## -# -# DomainWhitelist example.com - -## DomainWhitelistFile path -## default (none) -## -## A comprehensive list of whitelisted domains for which ARC signature headers -## are trusted as determined by evaluating entries in the "arc.chain" field -## found in a locally generated Authentication-Results header. -## -## This list will be concatenated with DomainWhitelist (if provided). -## -# -# DomainWhitelistFile /etc/opendmarc/whitelist.domains - -## DomainWhitelistSize -## default 3000 -## -## The maximum number of entries in the DomainWhitelist including both entries -## in the DomainWhitelist configuration parameter (above) and entries in the -## DomainWhitelistFile. This number will be increased by approximately 20% to -## increase the efficiency of the hashing algorithm. -## -# -# DomainWhitelistSize 3000 - -## DNSTimeout (integer) -## default 5 -## -## Sets the DNS timeout in seconds. A value of 0 causes an infinite wait. -## (NOT YET IMPLEMENTED) -# -# DNSTimeout 5 - -## EnableCoredumps { true | false } -## default "false" -## -## On systems that have such support, make an explicit request to the kernel -## to dump cores when the filter crashes for some reason. Some modern UNIX -## systems suppress core dumps during crashes for security reasons if the -## user ID has changed during the lifetime of the process. Currently only -## supported on Linux. -# -# EnableCoreDumps false - -## FailureReports { true | false } -## default "false" -## -## Enables generation of failure reports when the DMARC test fails and the -## purported sender of the message has requested such reports. Reports are -## formatted per RFC6591. -# -# FailureReports false - -## FailureReportsBcc (string) -## default (none) -## -## When failure reports are enabled and one is to be generated, always -## send one to the address(es) specified here. If a failure report is -## requested by the domain owner, the address(es) are added in a Bcc: field. -## If no request is made, they address(es) are used in a To: field. There -## is no default. -# -# FailureReportsBcc postmaster@example.coom -FailureReportsBcc {{ postmaster_email }} - -## FailureReportsOnNone { true | false } -## default "false" -## -## Supplements the "FailureReports" setting by generating reports for -## domains that advertise "none" policies. By default, reports are only -## generated (when enabled) for sending domains advertising a "quarantine" -## or "reject" policy. -# -# FailureReportsOnNone false - -## FailureReportsSentBy string -## default "USER@HOSTNAME" -## -## Specifies the email address to use in the From: field of failure -## reports generated by the filter. The default is to use the userid of -## the user running the filter and the local hostname to construct an -## email address. "postmaster" is used in place of the userid if a name -## could not be determined. -# -# FailureReportsSentBy USER@HOSTNAME -FailureReportsSentBy {{ postmaster_email }} - -## HistoryFile path -## default (none) -## -## If set, specifies the location of a text file to which records are written -## that can be used to generate DMARC aggregate reports. Records are groups -## of rows containing information about a single received message, and -## include all relevant information needed to generate a DMARC aggregate -## report. It is expected that this will not be used in its raw form, but -## rather periodically imported into a relational database from which the -## aggregate reports can be extracted by a tool such as opendmarc-import(8). -# -# HistoryFile /var/spool/opendmarc/opendmarc.dat - -## HoldQuarantinedMessages { true | false } -## default "false" -## -## If set, the milter will signal to the mta that messages with -## p=quarantine, which fail dmarc authentication, should be held in -## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. -## If false, messsages will be accepted and passed along with the -## regular mail flow, and the quarantine will be left up to downstream -## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, -## including the Authentication-Results header added by OpenDMARC -# -# HoldQuarantinedMessages false - -## IgnoreAuthenticatedClients { true | false } -## default "false" -## -## If set, causes mail from authenticated clients (i.e., those that used -## SMTP AUTH) to be ignored by the filter. -# -# IgnoreAuthenticatedClients false - -## HoldQuarantinedMessages { true | false } -## default "false" -## -## If set, the milter will signal to the mta that messages with -## p=quarantine, which fail dmarc authentication, should be held in -## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. -## If false, messsages will be accepted and passed along with the -## regular mail flow, and the quarantine will be left up to downstream -## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, -## including the Authentication-Results header added by OpenDMARC -# -# HoldQuarantinedMessages false - - -## IgnoreHosts path -## default (internal) -## -## Specifies the path to a file that contains a list of hostnames, IP -## addresses, and/or CIDR expressions identifying hosts whose SMTP -## connections are to be ignored by the filter. If not specified, defaults -## to "127.0.0.1" only. -# -# IgnoreHosts /etc/opendmarc/ignore.hosts - -## IgnoreMailFrom domain[,...] -## default (none) -## -## Gives a list of domain names whose mail (based on the From: domain) is to -## be ignored by the filter. The list should be comma-separated. Matching -## against this list is case-insensitive. The default is an empty list, -## meaning no mail is ignored. -# -# IgnoreMailFrom example.com - -## MilterDebug (integer) -## default 0 -## -## Sets the debug level to be requested from the milter library. -# -# MilterDebug 0 - -## PidFile path -## default (none) -## -## Specifies the path to a file that should be created at process start -## containing the process ID. -# -# PidFile /var/run/opendmarc.pid - -## PublicSuffixList path -## default (none) -## -## Specifies the path to a file that contains top-level domains (TLDs) that -## will be used to compute the Organizational Domain for a given domain name, -## as described in the DMARC specification. If not provided, the filter will -## not be able to determine the Organizational Domain and only the presented -## domain will be evaluated. This file should be periodically updated. -## One location to retrieve the file from is https://publicsuffix.org/list/ -# -# PublicSuffixList path - -## RecordAllMessages { true | false } -## default "false" -## -## If set and "HistoryFile" is in use, all received messages are recorded -## to the history file. If not set (the default), only messages for which -## the From: domain published a DMARC record will be recorded in the -## history file. -# -# RecordAllMessages false - -## RejectFailures { true | false } -## default "false" -## -## If set, messages will be rejected if they fail the DMARC evaluation, or -## temp-failed if evaluation could not be completed. By default, no message -## will be rejected or temp-failed regardless of the outcome of the DMARC -## evaluation of the message. Instead, an Authentication-Results header -## field will be added. -# -# RejectFailures false -RejectFailures true - -## RejectMultiValueFrom { true | false } -## default "false" -## -## If set, messages with multiple addresses in the From: field of the message -## will be rejected unless all domains in the field are the same. They will -## otherwise be ignored by the filter (the default). -# -# RejectMultiValueFrom false - -## ReportCommand string -## default "/usr/sbin/sendmail -t" -## -## Indicates the shell command to which failure reports should be passed for -## delivery when "FailureReports" is enabled. -# -# ReportCommand /usr/sbin/sendmail -t - -## RequiredHeaders { true | false } -## default "false" -## -## If set, the filter will ensure the header of the message conforms to the -## basic header field count restrictions laid out in RFC5322, Section 3.6. -## Messages failing this test are rejected without further processing. A -## From: field from which no domain name could be extracted will also be -## rejected. -# -# RequiredHeaders false - -## Socket socketspec -## default (none) -## -## Specifies the socket that should be established by the filter to receive -## connections from sendmail(8) in order to provide service. socketspec is -## in one of two forms: local:path, which creates a UNIX domain socket at -## the specified path, or inet:port[@host] or inet6:port[@host] which creates -## a TCP socket on the specified port for the appropriate protocol family. -## If the host is not given as either a hostname or an IP address, the -## socket will be listening on all interfaces. This option is mandatory -## either in the configuration file or on the command line. If an IP -## address is used, it must be enclosed in square brackets. -# -Socket inet:8893@localhost -#Socket local:/run/opendmarc/opendmarc.sock - -## SoftwareHeader { true | false } -## default "false" -## -## Causes the filter to add a "DMARC-Filter" header field indicating the -## presence of this filter in the path of the message from injection to -## delivery. The product's name, version, and the job ID are included in -## the header field's contents. -# -SoftwareHeader true - -## SPFIgnoreResults { true | false } -## default "false" -## -## Causes the filter to ignore any SPF results in the header of the -## message. This is useful if you want the filter to perform SPF checks -## itself, or because you don't trust the arriving header. -# -SPFIgnoreResults true - -## SPFSelfValidate { true | false } -## default false -## -## Enable internal spf checking with --with-spf -## To use libspf2 instead: --with-spf --with-spf2-include=path --with-spf2-lib=path -## -## Causes the filter to perform a fallback SPF check itself when -## it can find no SPF results in the message header. If SPFIgnoreResults -## is also set, it never looks for SPF results in headers and -## always performs the SPF check itself when this is set. -# -SPFSelfValidate true - -## Syslog { true | false } -## default "false" -## -## Log via calls to syslog(3) any interesting activity. -# -Syslog true - -## SyslogFacility facility-name -## default "mail" -## -## Log via calls to syslog(3) using the named facility. The facility names -## are the same as the ones allowed in syslog.conf(5). -# -# SyslogFacility mail - -## TrustedAuthservIDs string -## default HOSTNAME -## -## Specifies one or more "authserv-id" values to trust as relaying true -## upstream DKIM and SPF results. The default is to use the name of -## the MTA processing the message. To specify a list, separate each entry -## with a comma. The key word "HOSTNAME" will be replaced by the name of -## the host running the filter as reported by the gethostname(3) function. -# -# TrustedAuthservIDs HOSTNAME - -## UMask mask -## default (none) -## -## Requests a specific permissions mask to be used for file creation. This -## only really applies to creation of the socket when Socket specifies a -## UNIX domain socket, and to the HistoryFile and PidFile (if any); temporary -## files are normally created by the mkstemp(3) function that enforces a -## specific file mode on creation regardless of the process umask. See -## umask(2) for more information. -# -UMask 007 - -## UserID user[:group] -## default (none) -## -## Attempts to become the specified userid before starting operations. -## The process will be assigned all of the groups and primary group ID of -## the named userid unless an alternate group is specified. -# -UserID opendmarc:mail diff --git a/templates/Fedora/39/etc/postfix/access b/templates/Fedora/39/etc/postfix/access deleted file mode 100644 index 97892eb..0000000 --- a/templates/Fedora/39/etc/postfix/access +++ /dev/null @@ -1,484 +0,0 @@ -# ACCESS(5) ACCESS(5) -# -# NAME -# access - Postfix SMTP server access table -# -# SYNOPSIS -# postmap /etc/postfix/access -# -# postmap -q "string" /etc/postfix/access -# -# postmap -q - /etc/postfix/access as the lookup key for such addresses. The value is -# specified with the smtpd_null_access_lookup_key parameter -# in the Postfix main.cf file. -# -# EMAIL ADDRESS EXTENSION -# When a mail address localpart contains the optional recip- -# ient delimiter (e.g., user+foo@domain), the lookup order -# becomes: user+foo@domain, user@domain, domain, user+foo@, -# and user@. -# -# HOST NAME/ADDRESS PATTERNS -# With lookups from indexed files such as DB or DBM, or from -# networked tables such as NIS, LDAP or SQL, the following -# lookup patterns are examined in the order as listed: -# -# domain.tld -# Matches domain.tld. -# -# The pattern domain.tld also matches subdomains, but -# only when the string smtpd_access_maps is listed in -# the Postfix parent_domain_matches_subdomains con- -# figuration setting. -# -# .domain.tld -# Matches subdomains of domain.tld, but only when the -# string smtpd_access_maps is not listed in the Post- -# fix parent_domain_matches_subdomains configuration -# setting. -# -# net.work.addr.ess -# -# net.work.addr -# -# net.work -# -# net Matches a remote IPv4 host address or network -# address range. Specify one to four decimal octets -# separated by ".". Do not specify "[]" , "/", lead- -# ing zeros, or hexadecimal forms. -# -# Network ranges are matched by repeatedly truncating -# the last ".octet" from a remote IPv4 host address -# string, until a match is found in the access table, -# or until further truncation is not possible. -# -# NOTE: use the cidr lookup table type to specify -# network/netmask patterns. See cidr_table(5) for -# details. -# -# net:work:addr:ess -# -# net:work:addr -# -# net:work -# -# net Matches a remote IPv6 host address or network -# address range. Specify three to eight hexadecimal -# octet pairs separated by ":", using the compressed -# form "::" for a sequence of zero-valued octet -# pairs. Do not specify "[]", "/", leading zeros, or -# non-compressed forms. -# -# A network range is matched by repeatedly truncating -# the last ":octetpair" from the compressed-form -# remote IPv6 host address string, until a match is -# found in the access table, or until further trunca- -# tion is not possible. -# -# NOTE: use the cidr lookup table type to specify -# network/netmask patterns. See cidr_table(5) for -# details. -# -# IPv6 support is available in Postfix 2.2 and later. -# -# ACCEPT ACTIONS -# OK Accept the address etc. that matches the pattern. -# -# all-numerical -# An all-numerical result is treated as OK. This for- -# mat is generated by address-based relay authoriza- -# tion schemes such as pop-before-smtp. -# -# For other accept actions, see "OTHER ACTIONS" below. -# -# REJECT ACTIONS -# Postfix version 2.3 and later support enhanced status -# codes as defined in RFC 3463. When no code is specified -# at the beginning of the text below, Postfix inserts a -# default enhanced status code of "5.7.1" in the case of -# reject actions, and "4.7.1" in the case of defer actions. -# See "ENHANCED STATUS CODES" below. -# -# 4NN text -# -# 5NN text -# Reject the address etc. that matches the pattern, -# and respond with the numerical three-digit code and -# text. 4NN means "try again later", while 5NN means -# "do not try again". -# -# The following responses have special meaning for -# the Postfix SMTP server: -# -# 421 text (Postfix 2.3 and later) -# -# 521 text (Postfix 2.6 and later) -# After responding with the numerical -# three-digit code and text, disconnect imme- -# diately from the SMTP client. This frees up -# SMTP server resources so that they can be -# made available to another SMTP client. -# -# Note: The "521" response should be used only -# with botnets and other malware where inter- -# operability is of no concern. The "send 521 -# and disconnect" behavior is NOT defined in -# the SMTP standard. -# -# REJECT optional text... -# Reject the address etc. that matches the pattern. -# Reply with "$access_map_reject_code optional -# text..." when the optional text is specified, oth- -# erwise reply with a generic error response message. -# -# DEFER optional text... -# Reject the address etc. that matches the pattern. -# Reply with "$access_map_defer_code optional -# text..." when the optional text is specified, oth- -# erwise reply with a generic error response message. -# -# This feature is available in Postfix 2.6 and later. -# -# DEFER_IF_REJECT optional text... -# Defer the request if some later restriction would -# result in a REJECT action. Reply with -# "$access_map_defer_code 4.7.1 optional text..." -# when the optional text is specified, otherwise -# reply with a generic error response message. -# -# Prior to Postfix 2.6, the SMTP reply code is 450. -# -# This feature is available in Postfix 2.1 and later. -# -# DEFER_IF_PERMIT optional text... -# Defer the request if some later restriction would -# result in an explicit or implicit PERMIT action. -# Reply with "$access_map_defer_code 4.7.1 optional -# text..." when the optional text is specified, oth- -# erwise reply with a generic error response message. -# -# Prior to Postfix 2.6, the SMTP reply code is 450. -# -# This feature is available in Postfix 2.1 and later. -# -# For other reject actions, see "OTHER ACTIONS" below. -# -# OTHER ACTIONS -# restriction... -# Apply the named UCE restriction(s) (permit, reject, -# reject_unauth_destination, and so on). -# -# BCC user@domain -# Send one copy of the message to the specified -# recipient. -# -# If multiple BCC actions are specified within the -# same SMTP MAIL transaction, with Postfix 3.0 only -# the last action will be used. -# -# This feature is available in Postfix 3.0 and later. -# -# DISCARD optional text... -# Claim successful delivery and silently discard the -# message. Log the optional text if specified, oth- -# erwise log a generic message. -# -# Note: this action currently affects all recipients -# of the message. To discard only one recipient -# without discarding the entire message, use the -# transport(5) table to direct mail to the discard(8) -# service. -# -# This feature is available in Postfix 2.0 and later. -# -# DUNNO Pretend that the lookup key was not found. This -# prevents Postfix from trying substrings of the -# lookup key (such as a subdomain name, or a network -# address subnetwork). -# -# This feature is available in Postfix 2.0 and later. -# -# FILTER transport:destination -# After the message is queued, send the entire mes- -# sage through the specified external content filter. -# The transport name specifies the first field of a -# mail delivery agent definition in master.cf; the -# syntax of the next-hop destination is described in -# the manual page of the corresponding delivery -# agent. More information about external content -# filters is in the Postfix FILTER_README file. -# -# Note 1: do not use $number regular expression sub- -# stitutions for transport or destination unless you -# know that the information has a trusted origin. -# -# Note 2: this action overrides the main.cf con- -# tent_filter setting, and affects all recipients of -# the message. In the case that multiple FILTER -# actions fire, only the last one is executed. -# -# Note 3: the purpose of the FILTER command is to -# override message routing. To override the recipi- -# ent's transport but not the next-hop destination, -# specify an empty filter destination (Postfix 2.7 -# and later), or specify a transport:destination that -# delivers through a different Postfix instance -# (Postfix 2.6 and earlier). Other options are using -# the recipient-dependent transport_maps or the sen- -# der-dependent sender_dependent_default_transport- -# _maps features. -# -# This feature is available in Postfix 2.0 and later. -# -# HOLD optional text... -# Place the message on the hold queue, where it will -# sit until someone either deletes it or releases it -# for delivery. Log the optional text if specified, -# otherwise log a generic message. -# -# Mail that is placed on hold can be examined with -# the postcat(1) command, and can be destroyed or -# released with the postsuper(1) command. -# -# Note: use "postsuper -r" to release mail that was -# kept on hold for a significant fraction of $maxi- -# mal_queue_lifetime or $bounce_queue_lifetime, or -# longer. Use "postsuper -H" only for mail that will -# not expire within a few delivery attempts. -# -# Note: this action currently affects all recipients -# of the message. -# -# This feature is available in Postfix 2.0 and later. -# -# PREPEND headername: headervalue -# Prepend the specified message header to the mes- -# sage. When more than one PREPEND action executes, -# the first prepended header appears before the sec- -# ond etc. prepended header. -# -# Note: this action must execute before the message -# content is received; it cannot execute in the con- -# text of smtpd_end_of_data_restrictions. -# -# This feature is available in Postfix 2.1 and later. -# -# REDIRECT user@domain -# After the message is queued, send the message to -# the specified address instead of the intended -# recipient(s). When multiple REDIRECT actions fire, -# only the last one takes effect. -# -# Note: this action overrides the FILTER action, and -# currently overrides all recipients of the message. -# -# This feature is available in Postfix 2.1 and later. -# -# INFO optional text... -# Log an informational record with the optional text, -# together with client information and if available, -# with helo, sender, recipient and protocol informa- -# tion. -# -# This feature is available in Postfix 3.0 and later. -# -# WARN optional text... -# Log a warning with the optional text, together with -# client information and if available, with helo, -# sender, recipient and protocol information. -# -# This feature is available in Postfix 2.1 and later. -# -# ENHANCED STATUS CODES -# Postfix version 2.3 and later support enhanced status -# codes as defined in RFC 3463. When an enhanced status -# code is specified in an access table, it is subject to -# modification. The following transformations are needed -# when the same access table is used for client, helo, -# sender, or recipient access restrictions; they happen -# regardless of whether Postfix replies to a MAIL FROM, RCPT -# TO or other SMTP command. -# -# o When a sender address matches a REJECT action, the -# Postfix SMTP server will transform a recipient DSN -# status (e.g., 4.1.1-4.1.6) into the corresponding -# sender DSN status, and vice versa. -# -# o When non-address information matches a REJECT -# action (such as the HELO command argument or the -# client hostname/address), the Postfix SMTP server -# will transform a sender or recipient DSN status -# into a generic non-address DSN status (e.g., -# 4.0.0). -# -# REGULAR EXPRESSION TABLES -# This section describes how the table lookups change when -# the table is given in the form of regular expressions. For -# a description of regular expression lookup table syntax, -# see regexp_table(5) or pcre_table(5). -# -# Each pattern is a regular expression that is applied to -# the entire string being looked up. Depending on the appli- -# cation, that string is an entire client hostname, an -# entire client IP address, or an entire mail address. Thus, -# no parent domain or parent network search is done, -# user@domain mail addresses are not broken up into their -# user@ and domain constituent parts, nor is user+foo broken -# up into user and foo. -# -# Patterns are applied in the order as specified in the ta- -# ble, until a pattern is found that matches the search -# string. -# -# Actions are the same as with indexed file lookups, with -# the additional feature that parenthesized substrings from -# the pattern can be interpolated as $1, $2 and so on. -# -# TCP-BASED TABLES -# This section describes how the table lookups change when -# lookups are directed to a TCP-based server. For a descrip- -# tion of the TCP client/server lookup protocol, see tcp_ta- -# ble(5). This feature is not available up to and including -# Postfix version 2.4. -# -# Each lookup operation uses the entire query string once. -# Depending on the application, that string is an entire -# client hostname, an entire client IP address, or an entire -# mail address. Thus, no parent domain or parent network -# search is done, user@domain mail addresses are not broken -# up into their user@ and domain constituent parts, nor is -# user+foo broken up into user and foo. -# -# Actions are the same as with indexed file lookups. -# -# EXAMPLE -# The following example uses an indexed file, so that the -# order of table entries does not matter. The example per- -# mits access by the client at address 1.2.3.4 but rejects -# all other clients in 1.2.3.0/24. Instead of hash lookup -# tables, some systems use dbm. Use the command "postconf -# -m" to find out what lookup tables Postfix supports on -# your system. -# -# /etc/postfix/main.cf: -# smtpd_client_restrictions = -# check_client_access hash:/etc/postfix/access -# -# /etc/postfix/access: -# 1.2.3 REJECT -# 1.2.3.4 OK -# -# Execute the command "postmap /etc/postfix/access" after -# editing the file. -# -# BUGS -# The table format does not understand quoting conventions. -# -# SEE ALSO -# postmap(1), Postfix lookup table manager -# smtpd(8), SMTP server -# postconf(5), configuration parameters -# transport(5), transport:nexthop syntax -# -# README FILES -# Use "postconf readme_directory" or "postconf html_direc- -# tory" to locate this information. -# SMTPD_ACCESS_README, built-in SMTP server access control -# DATABASE_README, Postfix lookup table overview -# -# LICENSE -# The Secure Mailer license must be distributed with this -# software. -# -# AUTHOR(S) -# Wietse Venema -# IBM T.J. Watson Research -# P.O. Box 704 -# Yorktown Heights, NY 10598, USA -# -# Wietse Venema -# Google, Inc. -# 111 8th Avenue -# New York, NY 10011, USA -# -# ACCESS(5) diff --git a/templates/Fedora/39/etc/postfix/canonical b/templates/Fedora/39/etc/postfix/canonical deleted file mode 100644 index 4957fcc..0000000 --- a/templates/Fedora/39/etc/postfix/canonical +++ /dev/null @@ -1,307 +0,0 @@ -# CANONICAL(5) CANONICAL(5) -# -# NAME -# canonical - Postfix canonical table format -# -# SYNOPSIS -# postmap /etc/postfix/canonical -# -# postmap -q "string" /etc/postfix/canonical -# -# postmap -q - /etc/postfix/canonical $/ -# REJECT IFRAME vulnerability exploit -# -# SEE ALSO -# cleanup(8), canonicalize and enqueue Postfix message -# pcre_table(5), format of PCRE lookup tables -# regexp_table(5), format of POSIX regular expression tables -# postconf(1), Postfix configuration utility -# postmap(1), Postfix lookup table management -# postsuper(1), Postfix janitor -# postcat(1), show Postfix queue file contents -# RFC 2045, base64 and quoted-printable encoding rules -# RFC 2047, message header encoding for non-ASCII text -# -# README FILES -# Use "postconf readme_directory" or "postconf html_direc- -# tory" to locate this information. -# DATABASE_README, Postfix lookup table overview -# CONTENT_INSPECTION_README, Postfix content inspection overview -# BUILTIN_FILTER_README, Postfix built-in content inspection -# BACKSCATTER_README, blocking returned forged mail -# -# LICENSE -# The Secure Mailer license must be distributed with this -# software. -# -# AUTHOR(S) -# Wietse Venema -# IBM T.J. Watson Research -# P.O. Box 704 -# Yorktown Heights, NY 10598, USA -# -# Wietse Venema -# Google, Inc. -# 111 8th Avenue -# New York, NY 10011, USA -# -# HEADER_CHECKS(5) diff --git a/templates/Fedora/39/etc/postfix/main.cf b/templates/Fedora/39/etc/postfix/main.cf deleted file mode 100644 index e7c5ce2..0000000 --- a/templates/Fedora/39/etc/postfix/main.cf +++ /dev/null @@ -1,774 +0,0 @@ -# Global Postfix configuration file. This file lists only a subset -# of all parameters. For the syntax, and for a complete parameter -# list, see the postconf(5) manual page (command: "man 5 postconf"). -# -# TIP: use the command "postconf -n" to view main.cf parameter -# settings, "postconf parametername" to view a specific parameter, -# and "postconf 'parametername=value'" to set a specific parameter. -# -# For common configuration examples, see BASIC_CONFIGURATION_README -# and STANDARD_CONFIGURATION_README. To find these documents, use -# the command "postconf html_directory readme_directory", or go to -# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. -# -# For best results, change no more than 2-3 parameters at a time, -# and test if Postfix still works after every change. - -# COMPATIBILITY -# -# The compatibility_level determines what default settings Postfix -# will use for main.cf and master.cf settings. These defaults will -# change over time. -# -# To avoid breaking things, Postfix will use backwards-compatible -# default settings and log where it uses those old backwards-compatible -# default settings, until the system administrator has determined -# if any backwards-compatible default settings need to be made -# permanent in main.cf or master.cf. -# -# When this review is complete, update the compatibility_level setting -# below as recommended in the RELEASE_NOTES file. -# -# The level below is what should be used with new (not upgrade) installs. -# -compatibility_level = 3.7 - -# SOFT BOUNCE -# -# The soft_bounce parameter provides a limited safety net for -# testing. When soft_bounce is enabled, mail will remain queued that -# would otherwise bounce. This parameter disables locally-generated -# bounces, and prevents the SMTP server from rejecting mail permanently -# (by changing 5xx replies into 4xx replies). However, soft_bounce -# is no cure for address rewriting mistakes or mail routing mistakes. -# -#soft_bounce = no - -# LOCAL PATHNAME INFORMATION -# -# The queue_directory specifies the location of the Postfix queue. -# This is also the root directory of Postfix daemons that run chrooted. -# See the files in examples/chroot-setup for setting up Postfix chroot -# environments on different UNIX systems. -# -queue_directory = /var/spool/postfix - -# The command_directory parameter specifies the location of all -# postXXX commands. -# -command_directory = /usr/sbin - -# The daemon_directory parameter specifies the location of all Postfix -# daemon programs (i.e. programs listed in the master.cf file). This -# directory must be owned by root. -# -daemon_directory = /usr/libexec/postfix - -# The data_directory parameter specifies the location of Postfix-writable -# data files (caches, random numbers). This directory must be owned -# by the mail_owner account (see below). -# -data_directory = /var/lib/postfix - -# QUEUE AND PROCESS OWNERSHIP -# -# The mail_owner parameter specifies the owner of the Postfix queue -# and of most Postfix daemon processes. Specify the name of a user -# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS -# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In -# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED -# USER. -# -mail_owner = postfix - -# The default_privs parameter specifies the default rights used by -# the local delivery agent for delivery to external file or command. -# These rights are used in the absence of a recipient user context. -# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. -# -#default_privs = nobody - -# INTERNET HOST AND DOMAIN NAMES -# -# The myhostname parameter specifies the internet hostname of this -# mail system. The default is to use the fully-qualified domain name -# from gethostname(). $myhostname is used as a default value for many -# other configuration parameters. -# -#myhostname = host.domain.tld -#myhostname = virtual.domain.tld - -# The mydomain parameter specifies the local internet domain name. -# The default is to use $myhostname minus the first component. -# $mydomain is used as a default value for many other configuration -# parameters. -# -#mydomain = domain.tld - -# SENDING MAIL -# -# The myorigin parameter specifies the domain that locally-posted -# mail appears to come from. The default is to append $myhostname, -# which is fine for small sites. If you run a domain with multiple -# machines, you should (1) change this to $mydomain and (2) set up -# a domain-wide alias database that aliases each user to -# user@that.users.mailhost. -# -# For the sake of consistency between sender and recipient addresses, -# myorigin also specifies the default domain name that is appended -# to recipient addresses that have no @domain part. -# -#myorigin = $myhostname -#myorigin = $mydomain - -# RECEIVING MAIL - -# The inet_interfaces parameter specifies the network interface -# addresses that this mail system receives mail on. By default, -# the software claims all active interfaces on the machine. The -# parameter also controls delivery of mail to user@[ip.address]. -# -# See also the proxy_interfaces parameter, for network addresses that -# are forwarded to us via a proxy or network address translator. -# -# Note: you need to stop/start Postfix when this parameter changes. -# -inet_interfaces = all -#inet_interfaces = $myhostname -#inet_interfaces = $myhostname, localhost -#inet_interfaces = localhost - -# Enable IPv4, and IPv6 if supported -inet_protocols = all - -# The proxy_interfaces parameter specifies the network interface -# addresses that this mail system receives mail on by way of a -# proxy or network address translation unit. This setting extends -# the address list specified with the inet_interfaces parameter. -# -# You must specify your proxy/NAT addresses when your system is a -# backup MX host for other domains, otherwise mail delivery loops -# will happen when the primary MX host is down. -# -#proxy_interfaces = -#proxy_interfaces = 1.2.3.4 - -# The mydestination parameter specifies the list of domains that this -# machine considers itself the final destination for. -# -# These domains are routed to the delivery agent specified with the -# local_transport parameter setting. By default, that is the UNIX -# compatible delivery agent that lookups all recipients in /etc/passwd -# and /etc/aliases or their equivalent. -# -# The default is $myhostname + localhost.$mydomain + localhost. On -# a mail domain gateway, you should also include $mydomain. -# -# Do not specify the names of virtual domains - those domains are -# specified elsewhere (see VIRTUAL_README). -# -# Do not specify the names of domains that this machine is backup MX -# host for. Specify those names via the relay_domains settings for -# the SMTP server, or use permit_mx_backup if you are lazy (see -# STANDARD_CONFIGURATION_README). -# -# The local machine is always the final destination for mail addressed -# to user@[the.net.work.address] of an interface that the mail system -# receives mail on (see the inet_interfaces parameter). -# -# Specify a list of host or domain names, /file/name or type:table -# patterns, separated by commas and/or whitespace. A /file/name -# pattern is replaced by its contents; a type:table is matched when -# a name matches a lookup key (the right-hand side is ignored). -# Continue long lines by starting the next line with whitespace. -# -# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". -# -mydestination = $myhostname, localhost.$mydomain, localhost -#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain -#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, -# mail.$mydomain, www.$mydomain, ftp.$mydomain - -# REJECTING MAIL FOR UNKNOWN LOCAL USERS -# -# The local_recipient_maps parameter specifies optional lookup tables -# with all names or addresses of users that are local with respect -# to $mydestination, $inet_interfaces or $proxy_interfaces. -# -# If this parameter is defined, then the SMTP server will reject -# mail for unknown local users. This parameter is defined by default. -# -# To turn off local recipient checking in the SMTP server, specify -# local_recipient_maps = (i.e. empty). -# -# The default setting assumes that you use the default Postfix local -# delivery agent for local delivery. You need to update the -# local_recipient_maps setting if: -# -# - You define $mydestination domain recipients in files other than -# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. -# For example, you define $mydestination domain recipients in -# the $virtual_mailbox_maps files. -# -# - You redefine the local delivery agent in master.cf. -# -# - You redefine the "local_transport" setting in main.cf. -# -# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" -# feature of the Postfix local delivery agent (see local(8)). -# -# Details are described in the LOCAL_RECIPIENT_README file. -# -# Beware: if the Postfix SMTP server runs chrooted, you probably have -# to access the passwd file via the proxymap service, in order to -# overcome chroot restrictions. The alternative, having a copy of -# the system passwd file in the chroot jail is just not practical. -# -# The right-hand side of the lookup tables is conveniently ignored. -# In the left-hand side, specify a bare username, an @domain.tld -# wild-card, or specify a user@domain.tld address. -# -#local_recipient_maps = unix:passwd.byname $alias_maps -#local_recipient_maps = proxy:unix:passwd.byname $alias_maps -#local_recipient_maps = - -# The unknown_local_recipient_reject_code specifies the SMTP server -# response code when a recipient domain matches $mydestination or -# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty -# and the recipient address or address local-part is not found. -# -# The default setting is 550 (reject mail) but it is safer to start -# with 450 (try again later) until you are certain that your -# local_recipient_maps settings are OK. -# -unknown_local_recipient_reject_code = 550 - -# TRUST AND RELAY CONTROL - -# The mynetworks parameter specifies the list of "trusted" SMTP -# clients that have more privileges than "strangers". -# -# In particular, "trusted" SMTP clients are allowed to relay mail -# through Postfix. See the smtpd_recipient_restrictions parameter -# in postconf(5). -# -# You can specify the list of "trusted" network addresses by hand -# or you can let Postfix do it for you (which is the default). -# -# By default (mynetworks_style = host), Postfix "trusts" only -# the local machine. -# -# Specify "mynetworks_style = subnet" when Postfix should "trust" -# SMTP clients in the same IP subnetworks as the local machine. -# On Linux, this works correctly only with interfaces specified -# with the "ifconfig" or "ip" command. -# -# Specify "mynetworks_style = class" when Postfix should "trust" SMTP -# clients in the same IP class A/B/C networks as the local machine. -# Don't do this with a dialup site - it would cause Postfix to "trust" -# your entire provider's network. Instead, specify an explicit -# mynetworks list by hand, as described below. -# -# Specify "mynetworks_style = host" when Postfix should "trust" -# only the local machine. -# -#mynetworks_style = class -#mynetworks_style = subnet -#mynetworks_style = host - -# Alternatively, you can specify the mynetworks list by hand, in -# which case Postfix ignores the mynetworks_style setting. -# -# Specify an explicit list of network/netmask patterns, where the -# mask specifies the number of bits in the network part of a host -# address. -# -# You can also specify the absolute pathname of a pattern file instead -# of listing the patterns here. Specify type:table for table-based lookups -# (the value on the table right-hand side is not used). -# -#mynetworks = 168.100.3.0/28, 127.0.0.0/8 -#mynetworks = $config_directory/mynetworks -#mynetworks = hash:/etc/postfix/network_table - -# The relay_domains parameter restricts what destinations this system will -# relay mail to. See the smtpd_relay_restrictions and -# smtpd_recipient_restrictions descriptions in postconf(5) for detailed -# information. -# -# By default, Postfix relays mail -# - from "trusted" clients (IP address matches $mynetworks, or is -# SASL authenticated) to any destination, -# - from "untrusted" clients to destinations that match $relay_domains or -# subdomains thereof, except addresses with sender-specified routing. -# The default relay_domains value is empty. -# -# In addition to the above, the Postfix SMTP server by default accepts mail -# that Postfix is final destination for: -# - destinations that match $inet_interfaces or $proxy_interfaces, -# - destinations that match $mydestination -# - destinations that match $virtual_alias_domains, -# - destinations that match $virtual_mailbox_domains. -# These destinations do not need to be listed in $relay_domains. -# -# Specify a list of hosts or domains, /file/name patterns or type:name -# lookup tables, separated by commas and/or whitespace. Continue -# long lines by starting the next line with whitespace. A file name -# is replaced by its contents; a type:name table is matched when a -# (parent) domain appears as lookup key. -# -# NOTE: Postfix will not automatically forward mail for domains that -# list this system as their primary or backup MX host. See the -# permit_mx_backup restriction description in postconf(5). -# -#relay_domains = - -# INTERNET OR INTRANET - -# The relayhost parameter specifies the default host to send mail to -# when no entry is matched in the optional transport(5) table. When -# no relayhost is given, mail is routed directly to the destination. -# -# On an intranet, specify the organizational domain name. If your -# internal DNS uses no MX records, specify the name of the intranet -# gateway host instead. -# -# In the case of SMTP, specify a domain, host, host:port, [host]:port, -# [address] or [address]:port; the form [host] turns off MX lookups. -# -# If you're connected via UUCP, see also the default_transport parameter. -# -#relayhost = $mydomain -#relayhost = [gateway.my.domain] -#relayhost = [mailserver.isp.tld] -#relayhost = uucphost -#relayhost = [an.ip.add.ress] - -# REJECTING UNKNOWN RELAY USERS -# -# The relay_recipient_maps parameter specifies optional lookup tables -# with all addresses in the domains that match $relay_domains. -# -# If this parameter is defined, then the SMTP server will reject -# mail for unknown relay users. This feature is off by default. -# -# The right-hand side of the lookup tables is conveniently ignored. -# In the left-hand side, specify an @domain.tld wild-card, or specify -# a user@domain.tld address. -# -#relay_recipient_maps = hash:/etc/postfix/relay_recipients - -# INPUT RATE CONTROL -# -# The in_flow_delay configuration parameter implements mail input -# flow control. This feature is turned on by default, although it -# still needs further development (it's disabled on SCO UNIX due -# to an SCO bug). -# -# A Postfix process will pause for $in_flow_delay seconds before -# accepting a new message, when the message arrival rate exceeds the -# message delivery rate. With the default 100 SMTP server process -# limit, this limits the mail inflow to 100 messages a second more -# than the number of messages delivered per second. -# -# Specify 0 to disable the feature. Valid delays are 0..10. -# -#in_flow_delay = 1s - -# ADDRESS REWRITING -# -# The ADDRESS_REWRITING_README document gives information about -# address masquerading or other forms of address rewriting including -# username->Firstname.Lastname mapping. - -# ADDRESS REDIRECTION (VIRTUAL DOMAIN) -# -# The VIRTUAL_README document gives information about the many forms -# of domain hosting that Postfix supports. - -# "USER HAS MOVED" BOUNCE MESSAGES -# -# See the discussion in the ADDRESS_REWRITING_README document. - -# TRANSPORT MAP -# -# See the discussion in the ADDRESS_REWRITING_README document. - -# ALIAS DATABASE -# -# The alias_maps parameter specifies the list of alias databases used -# by the local delivery agent. The default list is system dependent. -# -# On systems with NIS, the default is to search the local alias -# database, then the NIS alias database. See aliases(5) for syntax -# details. -# -# If you change the alias database, run "postalias /etc/aliases" (or -# wherever your system stores the mail alias file), or simply run -# "newaliases" to build the necessary DBM or DB file. -# -# It will take a minute or so before changes become visible. Use -# "postfix reload" to eliminate the delay. -# -#alias_maps = dbm:/etc/aliases -alias_maps = hash:/etc/aliases -#alias_maps = hash:/etc/aliases, nis:mail.aliases -#alias_maps = netinfo:/aliases - -# The alias_database parameter specifies the alias database(s) that -# are built with "newaliases" or "sendmail -bi". This is a separate -# configuration parameter, because alias_maps (see above) may specify -# tables that are not necessarily all under control by Postfix. -# -#alias_database = dbm:/etc/aliases -#alias_database = dbm:/etc/mail/aliases -alias_database = hash:/etc/aliases -#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases - -# ADDRESS EXTENSIONS (e.g., user+foo) -# -# The recipient_delimiter parameter specifies the separator between -# user names and address extensions (user+foo). See canonical(5), -# local(8), relocated(5) and virtual(5) for the effects this has on -# aliases, canonical, virtual, relocated and .forward file lookups. -# Basically, the software tries user+foo and .forward+foo before -# trying user and .forward. -# -#recipient_delimiter = + - -# DELIVERY TO MAILBOX -# -# The home_mailbox parameter specifies the optional pathname of a -# mailbox file relative to a user's home directory. The default -# mailbox file is /var/spool/mail/user or /var/mail/user. Specify -# "Maildir/" for qmail-style delivery (the / is required). -# -#home_mailbox = Mailbox -#home_mailbox = Maildir/ - -# The mail_spool_directory parameter specifies the directory where -# UNIX-style mailboxes are kept. The default setting depends on the -# system type. -# -#mail_spool_directory = /var/mail -#mail_spool_directory = /var/spool/mail - -# The mailbox_command parameter specifies the optional external -# command to use instead of mailbox delivery. The command is run as -# the recipient with proper HOME, SHELL and LOGNAME environment settings. -# Exception: delivery for root is done as $default_user. -# -# Other environment variables of interest: USER (recipient username), -# EXTENSION (address extension), DOMAIN (domain part of address), -# and LOCAL (the address localpart). -# -# Unlike other Postfix configuration parameters, the mailbox_command -# parameter is not subjected to $parameter substitutions. This is to -# make it easier to specify shell syntax (see example below). -# -# Avoid shell meta characters because they will force Postfix to run -# an expensive shell process. Procmail alone is expensive enough. -# -# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN -# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. -# -#mailbox_command = /some/where/procmail -#mailbox_command = /some/where/procmail -a "$EXTENSION" - -# The mailbox_transport specifies the optional transport in master.cf -# to use after processing aliases and .forward files. This parameter -# has precedence over the mailbox_command, fallback_transport and -# luser_relay parameters. -# -# Specify a string of the form transport:nexthop, where transport is -# the name of a mail delivery transport defined in master.cf. The -# :nexthop part is optional. For more details see the sample transport -# configuration file. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must update the "local_recipient_maps" setting in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" -# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. -#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp -mailbox_transport = lmtp:inet:localhost:24 -virtual_transport = lmtp:inet:localhost:24 - -# If using the cyrus-imapd IMAP server deliver local mail to the IMAP -# server using LMTP (Local Mail Transport Protocol), this is prefered -# over the older cyrus deliver program by setting the -# mailbox_transport as below: -# -# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp -# -# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via -# these settings. -# -# local_destination_recipient_limit = 300 -# local_destination_concurrency_limit = 5 -# -# Of course you should adjust these settings as appropriate for the -# capacity of the hardware you are using. The recipient limit setting -# can be used to take advantage of the single instance message store -# capability of Cyrus. The concurrency limit can be used to control -# how many simultaneous LMTP sessions will be permitted to the Cyrus -# message store. -# -# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and -# subsequent line in master.cf. -#mailbox_transport = cyrus - -# The fallback_transport specifies the optional transport in master.cf -# to use for recipients that are not found in the UNIX passwd database. -# This parameter has precedence over the luser_relay parameter. -# -# Specify a string of the form transport:nexthop, where transport is -# the name of a mail delivery transport defined in master.cf. The -# :nexthop part is optional. For more details see the sample transport -# configuration file. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must update the "local_recipient_maps" setting in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp -#fallback_transport = - -# The luser_relay parameter specifies an optional destination address -# for unknown recipients. By default, mail for unknown@$mydestination, -# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned -# as undeliverable. -# -# The following expansions are done on luser_relay: $user (recipient -# username), $shell (recipient shell), $home (recipient home directory), -# $recipient (full recipient address), $extension (recipient address -# extension), $domain (recipient domain), $local (entire recipient -# localpart), $recipient_delimiter. Specify ${name?value} or -# ${name:value} to expand value only when $name does (does not) exist. -# -# luser_relay works only for the default Postfix local delivery agent. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must specify "local_recipient_maps =" (i.e. empty) in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -#luser_relay = $user@other.host -#luser_relay = $local@other.host -#luser_relay = admin+$local - -# JUNK MAIL CONTROLS -# -# The controls listed here are only a very small subset. The file -# SMTPD_ACCESS_README provides an overview. - -# The header_checks parameter specifies an optional table with patterns -# that each logical message header is matched against, including -# headers that span multiple physical lines. -# -# By default, these patterns also apply to MIME headers and to the -# headers of attached messages. With older Postfix versions, MIME and -# attached message headers were treated as body text. -# -# For details, see "man header_checks". -# -#header_checks = regexp:/etc/postfix/header_checks - -# FAST ETRN SERVICE -# -# Postfix maintains per-destination logfiles with information about -# deferred mail, so that mail can be flushed quickly with the SMTP -# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". -# See the ETRN_README document for a detailed description. -# -# The fast_flush_domains parameter controls what destinations are -# eligible for this service. By default, they are all domains that -# this server is willing to relay mail to. -# -#fast_flush_domains = $relay_domains - -# SHOW SOFTWARE VERSION OR NOT -# -# The smtpd_banner parameter specifies the text that follows the 220 -# code in the SMTP server's greeting banner. Some people like to see -# the mail version advertised. By default, Postfix shows no version. -# -# You MUST specify $myhostname at the start of the text. That is an -# RFC requirement. Postfix itself does not care. -# -#smtpd_banner = $myhostname ESMTP $mail_name -#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) - -# PARALLEL DELIVERY TO THE SAME DESTINATION -# -# How many parallel deliveries to the same user or domain? With local -# delivery, it does not make sense to do massively parallel delivery -# to the same user, because mailbox updates must happen sequentially, -# and expensive pipelines in .forward files can cause disasters when -# too many are run at the same time. With SMTP deliveries, 10 -# simultaneous connections to the same domain could be sufficient to -# raise eyebrows. -# -# Each message delivery transport has its XXX_destination_concurrency_limit -# parameter. The default is $default_destination_concurrency_limit for -# most delivery transports. For the local delivery agent the default is 2. - -#local_destination_concurrency_limit = 2 -#default_destination_concurrency_limit = 20 - -# DEBUGGING CONTROL -# -# The debug_peer_level parameter specifies the increment in verbose -# logging level when an SMTP client or server host name or address -# matches a pattern in the debug_peer_list parameter. -# -debug_peer_level = 2 - -# The debug_peer_list parameter specifies an optional list of domain -# or network patterns, /file/name patterns or type:name tables. When -# an SMTP client or server host name or address matches a pattern, -# increase the verbose logging level by the amount specified in the -# debug_peer_level parameter. -# -#debug_peer_list = 127.0.0.1 -#debug_peer_list = some.domain - -# The debugger_command specifies the external command that is executed -# when a Postfix daemon program is run with the -D option. -# -# Use "command .. & sleep 5" so that the debugger can attach before -# the process marches on. If you use an X-based debugger, be sure to -# set up your XAUTHORITY environment variable before starting Postfix. -# -debugger_command = - PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin - ddd $daemon_directory/$process_name $process_id & sleep 5 - -# If you can't use X, use this to capture the call stack when a -# daemon crashes. The result is in a file in the configuration -# directory, and is named after the process name and the process ID. -# -# debugger_command = -# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; -# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 -# >$config_directory/$process_name.$process_id.log & sleep 5 -# -# Another possibility is to run gdb under a detached screen session. -# To attach to the screen session, su root and run "screen -r -# " where uniquely matches one of the detached -# sessions (from "screen -list"). -# -# debugger_command = -# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen -# -dmS $process_name gdb $daemon_directory/$process_name -# $process_id & sleep 1 - -# INSTALL-TIME CONFIGURATION INFORMATION -# -# The following parameters are used when installing a new Postfix version. -# -# sendmail_path: The full pathname of the Postfix sendmail command. -# This is the Sendmail-compatible mail posting interface. -# -sendmail_path = /usr/sbin/sendmail.postfix - -# newaliases_path: The full pathname of the Postfix newaliases command. -# This is the Sendmail-compatible command to build alias databases. -# -newaliases_path = /usr/bin/newaliases.postfix - -# mailq_path: The full pathname of the Postfix mailq command. This -# is the Sendmail-compatible mail queue listing command. -# -mailq_path = /usr/bin/mailq.postfix - -# setgid_group: The group for mail submission and queue management -# commands. This must be a group name with a numerical group ID that -# is not shared with other accounts, not even with the Postfix account. -# -setgid_group = postdrop - -# html_directory: The location of the Postfix HTML documentation. -# -html_directory = no - -# manpage_directory: The location of the Postfix on-line manual pages. -# -manpage_directory = /usr/share/man - -# sample_directory: The location of the Postfix sample configuration files. -# This parameter is obsolete as of Postfix 2.1. -# -sample_directory = /usr/share/doc/postfix/samples - -# readme_directory: The location of the Postfix README files. -# -readme_directory = /usr/share/doc/postfix/README_FILES - -# TLS CONFIGURATION -# -# Basic Postfix TLS configuration by default with self-signed certificate -# for inbound SMTP and also opportunistic TLS for outbound SMTP. - -# The full pathname of a file with the Postfix SMTP server RSA certificate -# in PEM format. Intermediate certificates should be included in general, -# the server certificate first, then the issuing CA(s) (bottom-up order). -# -# smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem -smtpd_tls_cert_file = /etc/postfix/certificates/pubcert.pem - -# The full pathname of a file with the Postfix SMTP server RSA private key -# in PEM format. The private key must be accessible without a pass-phrase, -# i.e. it must not be encrypted. -# -# smtpd_tls_key_file = /etc/pki/tls/private/postfix.key -smtpd_tls_key_file = /etc/postfix/certificates/privkey.pem - -# Announce STARTTLS support to remote SMTP clients, but do not require that -# clients use TLS encryption (opportunistic TLS inbound). -# -smtpd_tls_security_level = may - -# Directory with PEM format Certification Authority certificates that the -# Postfix SMTP client uses to verify a remote SMTP server certificate. -# -smtp_tls_CApath = /etc/pki/tls/certs - -# The full pathname of a file containing CA certificates of root CAs -# trusted to sign either remote SMTP server certificates or intermediate CA -# certificates. -# -smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt - -# Use TLS if this is supported by the remote SMTP server, otherwise use -# plaintext (opportunistic TLS outbound). -# -smtp_tls_security_level = may -meta_directory = /etc/postfix -shlib_directory = /usr/lib64/postfix - -{% if ensure_postfix.milter_list is defined and ensure_postfix.milter_list is iterable %} -# The Milter List -{% for milter in ensure_postfix.milter_list %} -# -- {{ milter.description }} -- {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} -{% endfor %} -smtpd_milters = {% for milter in ensure_postfix.milter_list %} {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} {% endfor %} -{% endif %} - -{% if postfix_domains is defined and postfix_domains is iterable %} -virtual_mailbox_domains = {% for domain in postfix_domains %} {{ domain }} {% endfor %} -{% endif %} - -2bounce_notice_recipient = {{ postmaster_email }} -bounce_notice_recipient = {{ postmaster_email }} -delay_notice_recipient = {{ postmaster_email }} -error_notice_recipient = {{ postmaster_email }} -smtpd_helo_required = yes -disable_vrfy_command = yes -message_size_limit = {{ postfix_message_size_limit }} -smtpd_helo_restrictions = reject_unknown_helo_hostname -smtpd_client_restrictions = reject_unknown_reverse_client_hostname reject_unauth_pipelining -smtpd_discard_ehlo_keywords = silent-discard, dsn diff --git a/templates/Fedora/39/etc/postfix/main.cf.proto b/templates/Fedora/39/etc/postfix/main.cf.proto deleted file mode 100644 index 112c1f1..0000000 --- a/templates/Fedora/39/etc/postfix/main.cf.proto +++ /dev/null @@ -1,745 +0,0 @@ -# Global Postfix configuration file. This file lists only a subset -# of all parameters. For the syntax, and for a complete parameter -# list, see the postconf(5) manual page (command: "man 5 postconf"). -# -# TIP: use the command "postconf -n" to view main.cf parameter -# settings, "postconf parametername" to view a specific parameter, -# and "postconf 'parametername=value'" to set a specific parameter. -# -# For common configuration examples, see BASIC_CONFIGURATION_README -# and STANDARD_CONFIGURATION_README. To find these documents, use -# the command "postconf html_directory readme_directory", or go to -# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. -# -# For best results, change no more than 2-3 parameters at a time, -# and test if Postfix still works after every change. - -# COMPATIBILITY -# -# The compatibility_level determines what default settings Postfix -# will use for main.cf and master.cf settings. These defaults will -# change over time. -# -# To avoid breaking things, Postfix will use backwards-compatible -# default settings and log where it uses those old backwards-compatible -# default settings, until the system administrator has determined -# if any backwards-compatible default settings need to be made -# permanent in main.cf or master.cf. -# -# When this review is complete, update the compatibility_level setting -# below as recommended in the RELEASE_NOTES file. -# -# The level below is what should be used with new (not upgrade) installs. -# -compatibility_level = 3.7 - -# SOFT BOUNCE -# -# The soft_bounce parameter provides a limited safety net for -# testing. When soft_bounce is enabled, mail will remain queued that -# would otherwise bounce. This parameter disables locally-generated -# bounces, and prevents the SMTP server from rejecting mail permanently -# (by changing 5xx replies into 4xx replies). However, soft_bounce -# is no cure for address rewriting mistakes or mail routing mistakes. -# -#soft_bounce = no - -# LOCAL PATHNAME INFORMATION -# -# The queue_directory specifies the location of the Postfix queue. -# This is also the root directory of Postfix daemons that run chrooted. -# See the files in examples/chroot-setup for setting up Postfix chroot -# environments on different UNIX systems. -# -queue_directory = /var/spool/postfix - -# The command_directory parameter specifies the location of all -# postXXX commands. -# -command_directory = /usr/sbin - -# The daemon_directory parameter specifies the location of all Postfix -# daemon programs (i.e. programs listed in the master.cf file). This -# directory must be owned by root. -# -daemon_directory = /usr/libexec/postfix - -# The data_directory parameter specifies the location of Postfix-writable -# data files (caches, random numbers). This directory must be owned -# by the mail_owner account (see below). -# -data_directory = /var/lib/postfix - -# QUEUE AND PROCESS OWNERSHIP -# -# The mail_owner parameter specifies the owner of the Postfix queue -# and of most Postfix daemon processes. Specify the name of a user -# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS -# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In -# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED -# USER. -# -mail_owner = postfix - -# The default_privs parameter specifies the default rights used by -# the local delivery agent for delivery to external file or command. -# These rights are used in the absence of a recipient user context. -# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. -# -#default_privs = nobody - -# INTERNET HOST AND DOMAIN NAMES -# -# The myhostname parameter specifies the internet hostname of this -# mail system. The default is to use the fully-qualified domain name -# from gethostname(). $myhostname is used as a default value for many -# other configuration parameters. -# -#myhostname = host.domain.tld -#myhostname = virtual.domain.tld - -# The mydomain parameter specifies the local internet domain name. -# The default is to use $myhostname minus the first component. -# $mydomain is used as a default value for many other configuration -# parameters. -# -#mydomain = domain.tld - -# SENDING MAIL -# -# The myorigin parameter specifies the domain that locally-posted -# mail appears to come from. The default is to append $myhostname, -# which is fine for small sites. If you run a domain with multiple -# machines, you should (1) change this to $mydomain and (2) set up -# a domain-wide alias database that aliases each user to -# user@that.users.mailhost. -# -# For the sake of consistency between sender and recipient addresses, -# myorigin also specifies the default domain name that is appended -# to recipient addresses that have no @domain part. -# -#myorigin = $myhostname -#myorigin = $mydomain - -# RECEIVING MAIL - -# The inet_interfaces parameter specifies the network interface -# addresses that this mail system receives mail on. By default, -# the software claims all active interfaces on the machine. The -# parameter also controls delivery of mail to user@[ip.address]. -# -# See also the proxy_interfaces parameter, for network addresses that -# are forwarded to us via a proxy or network address translator. -# -# Note: you need to stop/start Postfix when this parameter changes. -# -#inet_interfaces = all -#inet_interfaces = $myhostname -#inet_interfaces = $myhostname, localhost -inet_interfaces = localhost - -# Enable IPv4, and IPv6 if supported -inet_protocols = all - -# The proxy_interfaces parameter specifies the network interface -# addresses that this mail system receives mail on by way of a -# proxy or network address translation unit. This setting extends -# the address list specified with the inet_interfaces parameter. -# -# You must specify your proxy/NAT addresses when your system is a -# backup MX host for other domains, otherwise mail delivery loops -# will happen when the primary MX host is down. -# -#proxy_interfaces = -#proxy_interfaces = 1.2.3.4 - -# The mydestination parameter specifies the list of domains that this -# machine considers itself the final destination for. -# -# These domains are routed to the delivery agent specified with the -# local_transport parameter setting. By default, that is the UNIX -# compatible delivery agent that lookups all recipients in /etc/passwd -# and /etc/aliases or their equivalent. -# -# The default is $myhostname + localhost.$mydomain + localhost. On -# a mail domain gateway, you should also include $mydomain. -# -# Do not specify the names of virtual domains - those domains are -# specified elsewhere (see VIRTUAL_README). -# -# Do not specify the names of domains that this machine is backup MX -# host for. Specify those names via the relay_domains settings for -# the SMTP server, or use permit_mx_backup if you are lazy (see -# STANDARD_CONFIGURATION_README). -# -# The local machine is always the final destination for mail addressed -# to user@[the.net.work.address] of an interface that the mail system -# receives mail on (see the inet_interfaces parameter). -# -# Specify a list of host or domain names, /file/name or type:table -# patterns, separated by commas and/or whitespace. A /file/name -# pattern is replaced by its contents; a type:table is matched when -# a name matches a lookup key (the right-hand side is ignored). -# Continue long lines by starting the next line with whitespace. -# -# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". -# -mydestination = $myhostname, localhost.$mydomain, localhost -#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain -#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, -# mail.$mydomain, www.$mydomain, ftp.$mydomain - -# REJECTING MAIL FOR UNKNOWN LOCAL USERS -# -# The local_recipient_maps parameter specifies optional lookup tables -# with all names or addresses of users that are local with respect -# to $mydestination, $inet_interfaces or $proxy_interfaces. -# -# If this parameter is defined, then the SMTP server will reject -# mail for unknown local users. This parameter is defined by default. -# -# To turn off local recipient checking in the SMTP server, specify -# local_recipient_maps = (i.e. empty). -# -# The default setting assumes that you use the default Postfix local -# delivery agent for local delivery. You need to update the -# local_recipient_maps setting if: -# -# - You define $mydestination domain recipients in files other than -# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. -# For example, you define $mydestination domain recipients in -# the $virtual_mailbox_maps files. -# -# - You redefine the local delivery agent in master.cf. -# -# - You redefine the "local_transport" setting in main.cf. -# -# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" -# feature of the Postfix local delivery agent (see local(8)). -# -# Details are described in the LOCAL_RECIPIENT_README file. -# -# Beware: if the Postfix SMTP server runs chrooted, you probably have -# to access the passwd file via the proxymap service, in order to -# overcome chroot restrictions. The alternative, having a copy of -# the system passwd file in the chroot jail is just not practical. -# -# The right-hand side of the lookup tables is conveniently ignored. -# In the left-hand side, specify a bare username, an @domain.tld -# wild-card, or specify a user@domain.tld address. -# -#local_recipient_maps = unix:passwd.byname $alias_maps -#local_recipient_maps = proxy:unix:passwd.byname $alias_maps -#local_recipient_maps = - -# The unknown_local_recipient_reject_code specifies the SMTP server -# response code when a recipient domain matches $mydestination or -# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty -# and the recipient address or address local-part is not found. -# -# The default setting is 550 (reject mail) but it is safer to start -# with 450 (try again later) until you are certain that your -# local_recipient_maps settings are OK. -# -unknown_local_recipient_reject_code = 550 - -# TRUST AND RELAY CONTROL - -# The mynetworks parameter specifies the list of "trusted" SMTP -# clients that have more privileges than "strangers". -# -# In particular, "trusted" SMTP clients are allowed to relay mail -# through Postfix. See the smtpd_recipient_restrictions parameter -# in postconf(5). -# -# You can specify the list of "trusted" network addresses by hand -# or you can let Postfix do it for you (which is the default). -# -# By default (mynetworks_style = host), Postfix "trusts" only -# the local machine. -# -# Specify "mynetworks_style = subnet" when Postfix should "trust" -# SMTP clients in the same IP subnetworks as the local machine. -# On Linux, this works correctly only with interfaces specified -# with the "ifconfig" or "ip" command. -# -# Specify "mynetworks_style = class" when Postfix should "trust" SMTP -# clients in the same IP class A/B/C networks as the local machine. -# Don't do this with a dialup site - it would cause Postfix to "trust" -# your entire provider's network. Instead, specify an explicit -# mynetworks list by hand, as described below. -# -# Specify "mynetworks_style = host" when Postfix should "trust" -# only the local machine. -# -#mynetworks_style = class -#mynetworks_style = subnet -#mynetworks_style = host - -# Alternatively, you can specify the mynetworks list by hand, in -# which case Postfix ignores the mynetworks_style setting. -# -# Specify an explicit list of network/netmask patterns, where the -# mask specifies the number of bits in the network part of a host -# address. -# -# You can also specify the absolute pathname of a pattern file instead -# of listing the patterns here. Specify type:table for table-based lookups -# (the value on the table right-hand side is not used). -# -#mynetworks = 168.100.3.0/28, 127.0.0.0/8 -#mynetworks = $config_directory/mynetworks -#mynetworks = hash:/etc/postfix/network_table - -# The relay_domains parameter restricts what destinations this system will -# relay mail to. See the smtpd_relay_restrictions and -# smtpd_recipient_restrictions descriptions in postconf(5) for detailed -# information. -# -# By default, Postfix relays mail -# - from "trusted" clients (IP address matches $mynetworks, or is -# SASL authenticated) to any destination, -# - from "untrusted" clients to destinations that match $relay_domains or -# subdomains thereof, except addresses with sender-specified routing. -# The default relay_domains value is empty. -# -# In addition to the above, the Postfix SMTP server by default accepts mail -# that Postfix is final destination for: -# - destinations that match $inet_interfaces or $proxy_interfaces, -# - destinations that match $mydestination -# - destinations that match $virtual_alias_domains, -# - destinations that match $virtual_mailbox_domains. -# These destinations do not need to be listed in $relay_domains. -# -# Specify a list of hosts or domains, /file/name patterns or type:name -# lookup tables, separated by commas and/or whitespace. Continue -# long lines by starting the next line with whitespace. A file name -# is replaced by its contents; a type:name table is matched when a -# (parent) domain appears as lookup key. -# -# NOTE: Postfix will not automatically forward mail for domains that -# list this system as their primary or backup MX host. See the -# permit_mx_backup restriction description in postconf(5). -# -#relay_domains = - -# INTERNET OR INTRANET - -# The relayhost parameter specifies the default host to send mail to -# when no entry is matched in the optional transport(5) table. When -# no relayhost is given, mail is routed directly to the destination. -# -# On an intranet, specify the organizational domain name. If your -# internal DNS uses no MX records, specify the name of the intranet -# gateway host instead. -# -# In the case of SMTP, specify a domain, host, host:port, [host]:port, -# [address] or [address]:port; the form [host] turns off MX lookups. -# -# If you're connected via UUCP, see also the default_transport parameter. -# -#relayhost = $mydomain -#relayhost = [gateway.my.domain] -#relayhost = [mailserver.isp.tld] -#relayhost = uucphost -#relayhost = [an.ip.add.ress] - -# REJECTING UNKNOWN RELAY USERS -# -# The relay_recipient_maps parameter specifies optional lookup tables -# with all addresses in the domains that match $relay_domains. -# -# If this parameter is defined, then the SMTP server will reject -# mail for unknown relay users. This feature is off by default. -# -# The right-hand side of the lookup tables is conveniently ignored. -# In the left-hand side, specify an @domain.tld wild-card, or specify -# a user@domain.tld address. -# -#relay_recipient_maps = hash:/etc/postfix/relay_recipients - -# INPUT RATE CONTROL -# -# The in_flow_delay configuration parameter implements mail input -# flow control. This feature is turned on by default, although it -# still needs further development (it's disabled on SCO UNIX due -# to an SCO bug). -# -# A Postfix process will pause for $in_flow_delay seconds before -# accepting a new message, when the message arrival rate exceeds the -# message delivery rate. With the default 100 SMTP server process -# limit, this limits the mail inflow to 100 messages a second more -# than the number of messages delivered per second. -# -# Specify 0 to disable the feature. Valid delays are 0..10. -# -#in_flow_delay = 1s - -# ADDRESS REWRITING -# -# The ADDRESS_REWRITING_README document gives information about -# address masquerading or other forms of address rewriting including -# username->Firstname.Lastname mapping. - -# ADDRESS REDIRECTION (VIRTUAL DOMAIN) -# -# The VIRTUAL_README document gives information about the many forms -# of domain hosting that Postfix supports. - -# "USER HAS MOVED" BOUNCE MESSAGES -# -# See the discussion in the ADDRESS_REWRITING_README document. - -# TRANSPORT MAP -# -# See the discussion in the ADDRESS_REWRITING_README document. - -# ALIAS DATABASE -# -# The alias_maps parameter specifies the list of alias databases used -# by the local delivery agent. The default list is system dependent. -# -# On systems with NIS, the default is to search the local alias -# database, then the NIS alias database. See aliases(5) for syntax -# details. -# -# If you change the alias database, run "postalias /etc/aliases" (or -# wherever your system stores the mail alias file), or simply run -# "newaliases" to build the necessary DBM or DB file. -# -# It will take a minute or so before changes become visible. Use -# "postfix reload" to eliminate the delay. -# -#alias_maps = dbm:/etc/aliases -alias_maps = hash:/etc/aliases -#alias_maps = hash:/etc/aliases, nis:mail.aliases -#alias_maps = netinfo:/aliases - -# The alias_database parameter specifies the alias database(s) that -# are built with "newaliases" or "sendmail -bi". This is a separate -# configuration parameter, because alias_maps (see above) may specify -# tables that are not necessarily all under control by Postfix. -# -#alias_database = dbm:/etc/aliases -#alias_database = dbm:/etc/mail/aliases -alias_database = hash:/etc/aliases -#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases - -# ADDRESS EXTENSIONS (e.g., user+foo) -# -# The recipient_delimiter parameter specifies the separator between -# user names and address extensions (user+foo). See canonical(5), -# local(8), relocated(5) and virtual(5) for the effects this has on -# aliases, canonical, virtual, relocated and .forward file lookups. -# Basically, the software tries user+foo and .forward+foo before -# trying user and .forward. -# -#recipient_delimiter = + - -# DELIVERY TO MAILBOX -# -# The home_mailbox parameter specifies the optional pathname of a -# mailbox file relative to a user's home directory. The default -# mailbox file is /var/spool/mail/user or /var/mail/user. Specify -# "Maildir/" for qmail-style delivery (the / is required). -# -#home_mailbox = Mailbox -#home_mailbox = Maildir/ - -# The mail_spool_directory parameter specifies the directory where -# UNIX-style mailboxes are kept. The default setting depends on the -# system type. -# -#mail_spool_directory = /var/mail -#mail_spool_directory = /var/spool/mail - -# The mailbox_command parameter specifies the optional external -# command to use instead of mailbox delivery. The command is run as -# the recipient with proper HOME, SHELL and LOGNAME environment settings. -# Exception: delivery for root is done as $default_user. -# -# Other environment variables of interest: USER (recipient username), -# EXTENSION (address extension), DOMAIN (domain part of address), -# and LOCAL (the address localpart). -# -# Unlike other Postfix configuration parameters, the mailbox_command -# parameter is not subjected to $parameter substitutions. This is to -# make it easier to specify shell syntax (see example below). -# -# Avoid shell meta characters because they will force Postfix to run -# an expensive shell process. Procmail alone is expensive enough. -# -# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN -# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. -# -#mailbox_command = /some/where/procmail -#mailbox_command = /some/where/procmail -a "$EXTENSION" - -# The mailbox_transport specifies the optional transport in master.cf -# to use after processing aliases and .forward files. This parameter -# has precedence over the mailbox_command, fallback_transport and -# luser_relay parameters. -# -# Specify a string of the form transport:nexthop, where transport is -# the name of a mail delivery transport defined in master.cf. The -# :nexthop part is optional. For more details see the sample transport -# configuration file. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must update the "local_recipient_maps" setting in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" -# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. -#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp - -# If using the cyrus-imapd IMAP server deliver local mail to the IMAP -# server using LMTP (Local Mail Transport Protocol), this is prefered -# over the older cyrus deliver program by setting the -# mailbox_transport as below: -# -# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp -# -# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via -# these settings. -# -# local_destination_recipient_limit = 300 -# local_destination_concurrency_limit = 5 -# -# Of course you should adjust these settings as appropriate for the -# capacity of the hardware you are using. The recipient limit setting -# can be used to take advantage of the single instance message store -# capability of Cyrus. The concurrency limit can be used to control -# how many simultaneous LMTP sessions will be permitted to the Cyrus -# message store. -# -# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and -# subsequent line in master.cf. -#mailbox_transport = cyrus - -# The fallback_transport specifies the optional transport in master.cf -# to use for recipients that are not found in the UNIX passwd database. -# This parameter has precedence over the luser_relay parameter. -# -# Specify a string of the form transport:nexthop, where transport is -# the name of a mail delivery transport defined in master.cf. The -# :nexthop part is optional. For more details see the sample transport -# configuration file. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must update the "local_recipient_maps" setting in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp -#fallback_transport = - -# The luser_relay parameter specifies an optional destination address -# for unknown recipients. By default, mail for unknown@$mydestination, -# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned -# as undeliverable. -# -# The following expansions are done on luser_relay: $user (recipient -# username), $shell (recipient shell), $home (recipient home directory), -# $recipient (full recipient address), $extension (recipient address -# extension), $domain (recipient domain), $local (entire recipient -# localpart), $recipient_delimiter. Specify ${name?value} or -# ${name:value} to expand value only when $name does (does not) exist. -# -# luser_relay works only for the default Postfix local delivery agent. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must specify "local_recipient_maps =" (i.e. empty) in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -#luser_relay = $user@other.host -#luser_relay = $local@other.host -#luser_relay = admin+$local - -# JUNK MAIL CONTROLS -# -# The controls listed here are only a very small subset. The file -# SMTPD_ACCESS_README provides an overview. - -# The header_checks parameter specifies an optional table with patterns -# that each logical message header is matched against, including -# headers that span multiple physical lines. -# -# By default, these patterns also apply to MIME headers and to the -# headers of attached messages. With older Postfix versions, MIME and -# attached message headers were treated as body text. -# -# For details, see "man header_checks". -# -#header_checks = regexp:/etc/postfix/header_checks - -# FAST ETRN SERVICE -# -# Postfix maintains per-destination logfiles with information about -# deferred mail, so that mail can be flushed quickly with the SMTP -# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". -# See the ETRN_README document for a detailed description. -# -# The fast_flush_domains parameter controls what destinations are -# eligible for this service. By default, they are all domains that -# this server is willing to relay mail to. -# -#fast_flush_domains = $relay_domains - -# SHOW SOFTWARE VERSION OR NOT -# -# The smtpd_banner parameter specifies the text that follows the 220 -# code in the SMTP server's greeting banner. Some people like to see -# the mail version advertised. By default, Postfix shows no version. -# -# You MUST specify $myhostname at the start of the text. That is an -# RFC requirement. Postfix itself does not care. -# -#smtpd_banner = $myhostname ESMTP $mail_name -#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) - -# PARALLEL DELIVERY TO THE SAME DESTINATION -# -# How many parallel deliveries to the same user or domain? With local -# delivery, it does not make sense to do massively parallel delivery -# to the same user, because mailbox updates must happen sequentially, -# and expensive pipelines in .forward files can cause disasters when -# too many are run at the same time. With SMTP deliveries, 10 -# simultaneous connections to the same domain could be sufficient to -# raise eyebrows. -# -# Each message delivery transport has its XXX_destination_concurrency_limit -# parameter. The default is $default_destination_concurrency_limit for -# most delivery transports. For the local delivery agent the default is 2. - -#local_destination_concurrency_limit = 2 -#default_destination_concurrency_limit = 20 - -# DEBUGGING CONTROL -# -# The debug_peer_level parameter specifies the increment in verbose -# logging level when an SMTP client or server host name or address -# matches a pattern in the debug_peer_list parameter. -# -debug_peer_level = 2 - -# The debug_peer_list parameter specifies an optional list of domain -# or network patterns, /file/name patterns or type:name tables. When -# an SMTP client or server host name or address matches a pattern, -# increase the verbose logging level by the amount specified in the -# debug_peer_level parameter. -# -#debug_peer_list = 127.0.0.1 -#debug_peer_list = some.domain - -# The debugger_command specifies the external command that is executed -# when a Postfix daemon program is run with the -D option. -# -# Use "command .. & sleep 5" so that the debugger can attach before -# the process marches on. If you use an X-based debugger, be sure to -# set up your XAUTHORITY environment variable before starting Postfix. -# -debugger_command = - PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin - ddd $daemon_directory/$process_name $process_id & sleep 5 - -# If you can't use X, use this to capture the call stack when a -# daemon crashes. The result is in a file in the configuration -# directory, and is named after the process name and the process ID. -# -# debugger_command = -# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; -# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 -# >$config_directory/$process_name.$process_id.log & sleep 5 -# -# Another possibility is to run gdb under a detached screen session. -# To attach to the screen session, su root and run "screen -r -# " where uniquely matches one of the detached -# sessions (from "screen -list"). -# -# debugger_command = -# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen -# -dmS $process_name gdb $daemon_directory/$process_name -# $process_id & sleep 1 - -# INSTALL-TIME CONFIGURATION INFORMATION -# -# The following parameters are used when installing a new Postfix version. -# -# sendmail_path: The full pathname of the Postfix sendmail command. -# This is the Sendmail-compatible mail posting interface. -# -sendmail_path = - -# newaliases_path: The full pathname of the Postfix newaliases command. -# This is the Sendmail-compatible command to build alias databases. -# -newaliases_path = - -# mailq_path: The full pathname of the Postfix mailq command. This -# is the Sendmail-compatible mail queue listing command. -# -mailq_path = - -# setgid_group: The group for mail submission and queue management -# commands. This must be a group name with a numerical group ID that -# is not shared with other accounts, not even with the Postfix account. -# -setgid_group = - -# html_directory: The location of the Postfix HTML documentation. -# -html_directory = - -# manpage_directory: The location of the Postfix on-line manual pages. -# -manpage_directory = - -# sample_directory: The location of the Postfix sample configuration files. -# This parameter is obsolete as of Postfix 2.1. -# -sample_directory = - -# readme_directory: The location of the Postfix README files. -# -readme_directory = - -# TLS CONFIGURATION -# -# Basic Postfix TLS configuration by default with self-signed certificate -# for inbound SMTP and also opportunistic TLS for outbound SMTP. - -# The full pathname of a file with the Postfix SMTP server RSA certificate -# in PEM format. Intermediate certificates should be included in general, -# the server certificate first, then the issuing CA(s) (bottom-up order). -# -smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem - -# The full pathname of a file with the Postfix SMTP server RSA private key -# in PEM format. The private key must be accessible without a pass-phrase, -# i.e. it must not be encrypted. -# -smtpd_tls_key_file = /etc/pki/tls/private/postfix.key - -# Announce STARTTLS support to remote SMTP clients, but do not require that -# clients use TLS encryption (opportunistic TLS inbound). -# -smtpd_tls_security_level = may - -# Directory with PEM format Certification Authority certificates that the -# Postfix SMTP client uses to verify a remote SMTP server certificate. -# -smtp_tls_CApath = /etc/pki/tls/certs - -# The full pathname of a file containing CA certificates of root CAs -# trusted to sign either remote SMTP server certificates or intermediate CA -# certificates. -# -smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt - -# Use TLS if this is supported by the remote SMTP server, otherwise use -# plaintext (opportunistic TLS outbound). -# -smtp_tls_security_level = may diff --git a/templates/Fedora/39/etc/postfix/master.cf b/templates/Fedora/39/etc/postfix/master.cf deleted file mode 100644 index bb0eae9..0000000 --- a/templates/Fedora/39/etc/postfix/master.cf +++ /dev/null @@ -1,145 +0,0 @@ -# -# Postfix master process configuration file. For details on the format -# of the file, see the master(5) manual page (command: "man 5 master" or -# on-line: http://www.postfix.org/master.5.html). -# -# Do not forget to execute "postfix reload" after editing this file. -# -# ========================================================================== -# service type private unpriv chroot wakeup maxproc command + args -# (yes) (yes) (no) (never) (100) -# ========================================================================== -smtp inet n - n - - smtpd -#smtp inet n - n - 1 postscreen -#smtpd pass - - n - - smtpd -#dnsblog unix - - n - 0 dnsblog -#tlsproxy unix - - n - 0 tlsproxy -# Choose one: enable submission for loopback clients only, or for any client. -#127.0.0.1:submission inet n - n - - smtpd -#submission inet n - n - - smtpd -# -o syslog_name=postfix/submission -# -o smtpd_tls_security_level=encrypt -# -o smtpd_sasl_auth_enable=yes -# -o smtpd_tls_auth_only=yes -# -o smtpd_reject_unlisted_recipient=no -# Instead of specifying complex smtpd__restrictions here, -# specify "smtpd__restrictions=$mua__restrictions" -# here, and specify mua__restrictions in main.cf (where -# "" is "client", "helo", "sender", "relay", or "recipient"). -# -o smtpd_client_restrictions= -# -o smtpd_helo_restrictions= -# -o smtpd_sender_restrictions= -# -o smtpd_relay_restrictions= -# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject -# -o milter_macro_daemon_name=ORIGINATING -# Choose one: enable submissions for loopback clients only, or for any client. -#127.0.0.1:submissions inet n - n - - smtpd -#submissions inet n - n - - smtpd -# -o syslog_name=postfix/submissions -# -o smtpd_tls_wrappermode=yes -# -o smtpd_sasl_auth_enable=yes -# -o smtpd_reject_unlisted_recipient=no -# Instead of specifying complex smtpd__restrictions here, -# specify "smtpd__restrictions=$mua__restrictions" -# here, and specify mua__restrictions in main.cf (where -# "" is "client", "helo", "sender", "relay", or "recipient"). -# -o smtpd_client_restrictions= -# -o smtpd_helo_restrictions= -# -o smtpd_sender_restrictions= -# -o smtpd_relay_restrictions= -# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject -# -o milter_macro_daemon_name=ORIGINATING -#628 inet n - n - - qmqpd -pickup unix n - n 60 1 pickup -cleanup unix n - n - 0 cleanup -qmgr unix n - n 300 1 qmgr -#qmgr unix n - n 300 1 oqmgr -tlsmgr unix - - n 1000? 1 tlsmgr -rewrite unix - - n - - trivial-rewrite -bounce unix - - n - 0 bounce -defer unix - - n - 0 bounce -trace unix - - n - 0 bounce -verify unix - - n - 1 verify -flush unix n - n 1000? 0 flush -proxymap unix - - n - - proxymap -proxywrite unix - - n - 1 proxymap -smtp unix - - n - - smtp -relay unix - - n - - smtp - -o syslog_name=postfix/$service_name -# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 -showq unix n - n - - showq -error unix - - n - - error -retry unix - - n - - error -discard unix - - n - - discard -local unix - n n - - local -virtual unix - n n - - virtual -lmtp unix - - n - - lmtp -anvil unix - - n - 1 anvil -scache unix - - n - 1 scache -postlog unix-dgram n - n - 1 postlogd -# -# ==================================================================== -# Interfaces to non-Postfix software. Be sure to examine the manual -# pages of the non-Postfix software to find out what options it wants. -# -# Many of the following services use the Postfix pipe(8) delivery -# agent. See the pipe(8) man page for information about ${recipient} -# and other message envelope options. -# ==================================================================== -# -# maildrop. See the Postfix MAILDROP_README file for details. -# Also specify in main.cf: maildrop_destination_recipient_limit=1 -# -#maildrop unix - n n - - pipe -# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} -# -# ==================================================================== -# -# Recent Cyrus versions can use the existing "lmtp" master.cf entry. -# -# Specify in cyrus.conf: -# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 -# -# Specify in main.cf one or more of the following: -# mailbox_transport = lmtp:inet:localhost -# virtual_transport = lmtp:inet:localhost -# -# ==================================================================== -# -# Cyrus 2.1.5 (Amos Gouaux) -# Also specify in main.cf: cyrus_destination_recipient_limit=1 -# -#cyrus unix - n n - - pipe -# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} -# -# ==================================================================== -# -# Old example of delivery via Cyrus. -# -#old-cyrus unix - n n - - pipe -# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} -# -# ==================================================================== -# -# See the Postfix UUCP_README file for configuration details. -# -#uucp unix - n n - - pipe -# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) -# -# ==================================================================== -# -# Other external delivery methods. -# -#ifmail unix - n n - - pipe -# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) -# -#bsmtp unix - n n - - pipe -# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient -# -#scalemail-backend unix - n n - 2 pipe -# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store -# ${nexthop} ${user} ${extension} -# -#mailman unix - n n - - pipe -# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py -# ${nexthop} ${user} diff --git a/templates/Fedora/39/etc/postfix/master.cf.proto b/templates/Fedora/39/etc/postfix/master.cf.proto deleted file mode 100644 index bb0eae9..0000000 --- a/templates/Fedora/39/etc/postfix/master.cf.proto +++ /dev/null @@ -1,145 +0,0 @@ -# -# Postfix master process configuration file. For details on the format -# of the file, see the master(5) manual page (command: "man 5 master" or -# on-line: http://www.postfix.org/master.5.html). -# -# Do not forget to execute "postfix reload" after editing this file. -# -# ========================================================================== -# service type private unpriv chroot wakeup maxproc command + args -# (yes) (yes) (no) (never) (100) -# ========================================================================== -smtp inet n - n - - smtpd -#smtp inet n - n - 1 postscreen -#smtpd pass - - n - - smtpd -#dnsblog unix - - n - 0 dnsblog -#tlsproxy unix - - n - 0 tlsproxy -# Choose one: enable submission for loopback clients only, or for any client. -#127.0.0.1:submission inet n - n - - smtpd -#submission inet n - n - - smtpd -# -o syslog_name=postfix/submission -# -o smtpd_tls_security_level=encrypt -# -o smtpd_sasl_auth_enable=yes -# -o smtpd_tls_auth_only=yes -# -o smtpd_reject_unlisted_recipient=no -# Instead of specifying complex smtpd__restrictions here, -# specify "smtpd__restrictions=$mua__restrictions" -# here, and specify mua__restrictions in main.cf (where -# "" is "client", "helo", "sender", "relay", or "recipient"). -# -o smtpd_client_restrictions= -# -o smtpd_helo_restrictions= -# -o smtpd_sender_restrictions= -# -o smtpd_relay_restrictions= -# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject -# -o milter_macro_daemon_name=ORIGINATING -# Choose one: enable submissions for loopback clients only, or for any client. -#127.0.0.1:submissions inet n - n - - smtpd -#submissions inet n - n - - smtpd -# -o syslog_name=postfix/submissions -# -o smtpd_tls_wrappermode=yes -# -o smtpd_sasl_auth_enable=yes -# -o smtpd_reject_unlisted_recipient=no -# Instead of specifying complex smtpd__restrictions here, -# specify "smtpd__restrictions=$mua__restrictions" -# here, and specify mua__restrictions in main.cf (where -# "" is "client", "helo", "sender", "relay", or "recipient"). -# -o smtpd_client_restrictions= -# -o smtpd_helo_restrictions= -# -o smtpd_sender_restrictions= -# -o smtpd_relay_restrictions= -# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject -# -o milter_macro_daemon_name=ORIGINATING -#628 inet n - n - - qmqpd -pickup unix n - n 60 1 pickup -cleanup unix n - n - 0 cleanup -qmgr unix n - n 300 1 qmgr -#qmgr unix n - n 300 1 oqmgr -tlsmgr unix - - n 1000? 1 tlsmgr -rewrite unix - - n - - trivial-rewrite -bounce unix - - n - 0 bounce -defer unix - - n - 0 bounce -trace unix - - n - 0 bounce -verify unix - - n - 1 verify -flush unix n - n 1000? 0 flush -proxymap unix - - n - - proxymap -proxywrite unix - - n - 1 proxymap -smtp unix - - n - - smtp -relay unix - - n - - smtp - -o syslog_name=postfix/$service_name -# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 -showq unix n - n - - showq -error unix - - n - - error -retry unix - - n - - error -discard unix - - n - - discard -local unix - n n - - local -virtual unix - n n - - virtual -lmtp unix - - n - - lmtp -anvil unix - - n - 1 anvil -scache unix - - n - 1 scache -postlog unix-dgram n - n - 1 postlogd -# -# ==================================================================== -# Interfaces to non-Postfix software. Be sure to examine the manual -# pages of the non-Postfix software to find out what options it wants. -# -# Many of the following services use the Postfix pipe(8) delivery -# agent. See the pipe(8) man page for information about ${recipient} -# and other message envelope options. -# ==================================================================== -# -# maildrop. See the Postfix MAILDROP_README file for details. -# Also specify in main.cf: maildrop_destination_recipient_limit=1 -# -#maildrop unix - n n - - pipe -# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} -# -# ==================================================================== -# -# Recent Cyrus versions can use the existing "lmtp" master.cf entry. -# -# Specify in cyrus.conf: -# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 -# -# Specify in main.cf one or more of the following: -# mailbox_transport = lmtp:inet:localhost -# virtual_transport = lmtp:inet:localhost -# -# ==================================================================== -# -# Cyrus 2.1.5 (Amos Gouaux) -# Also specify in main.cf: cyrus_destination_recipient_limit=1 -# -#cyrus unix - n n - - pipe -# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} -# -# ==================================================================== -# -# Old example of delivery via Cyrus. -# -#old-cyrus unix - n n - - pipe -# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} -# -# ==================================================================== -# -# See the Postfix UUCP_README file for configuration details. -# -#uucp unix - n n - - pipe -# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) -# -# ==================================================================== -# -# Other external delivery methods. -# -#ifmail unix - n n - - pipe -# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) -# -#bsmtp unix - n n - - pipe -# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient -# -#scalemail-backend unix - n n - 2 pipe -# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store -# ${nexthop} ${user} ${extension} -# -#mailman unix - n n - - pipe -# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py -# ${nexthop} ${user} diff --git a/templates/Fedora/39/etc/postfix/postfix-files b/templates/Fedora/39/etc/postfix/postfix-files deleted file mode 100644 index b3ed234..0000000 --- a/templates/Fedora/39/etc/postfix/postfix-files +++ /dev/null @@ -1,447 +0,0 @@ -# -# Do not edit this file. -# -# This file controls the postfix-install script for installation of -# Postfix programs, configuration files and documentation, as well -# as the post-install script for setting permissions and for updating -# Postfix configuration files. See the respective manual pages within -# the script files. -# -# Do not list $command_directory or $shlib_directory in this file, -# or it will be blown away by a future Postfix uninstallation -# procedure. You would not want to lose all files in /usr/sbin or -# /usr/local/lib. -# -# Each record in this file describes one file or directory. -# Fields are separated by ":". Specify a null field as "-". -# Missing fields or separators at the end are OK. -# -# File format: -# name:type:owner:group:permission:flags -# No group means don't change group ownership. -# -# File types: -# d=directory -# f=regular file -# h=hard link (*) -# l=symbolic link (*) -# -# (*) With hard links and symbolic links, the owner field becomes the -# source pathname, while the group and permissions are ignored. -# -# File flags: -# No flag means the flag is not active. -# p=preserve existing file, do not replace (postfix-install). -# u=update owner/group/mode (post-install upgrade-permissions). -# c=create missing directory (post-install create-missing). -# r=apply owner/group recursively (post-install set/upgrade-permissions). -# o=obsolete, no longer part of Postfix -# 1=optional for non-default instance (config_dir != built-in default). -# -# Note: the "u" flag is for upgrading the permissions of existing files -# or directories after changes in Postfix architecture. For robustness -# it is a good idea to "u" all the files that have special ownership or -# permissions, so that running "make install" fixes any glitches. -# -# Note: order matters. Update shared libraries and database plugins -# before daemon/command-line programs. -$config_directory:d:root:-:755:u -$data_directory:d:$mail_owner:-:700:uc -$daemon_directory:d:root:-:755:u -$queue_directory:d:root:-:755:uc -$sample_directory:d:root:-:755:o -$readme_directory:d:root:-:755 -$html_directory:d:root:-:755 -$queue_directory/active:d:$mail_owner:-:700:ucr -$queue_directory/bounce:d:$mail_owner:-:700:ucr -$queue_directory/corrupt:d:$mail_owner:-:700:ucr -$queue_directory/defer:d:$mail_owner:-:700:ucr -$queue_directory/deferred:d:$mail_owner:-:700:ucr -$queue_directory/flush:d:$mail_owner:-:700:ucr -$queue_directory/hold:d:$mail_owner:-:700:ucr -$queue_directory/incoming:d:$mail_owner:-:700:ucr -$queue_directory/private:d:$mail_owner:-:700:uc -$queue_directory/maildrop:d:$mail_owner:$setgid_group:730:uc -$queue_directory/public:d:$mail_owner:$setgid_group:710:uc -$queue_directory/pid:d:root:-:755:uc -$queue_directory/saved:d:$mail_owner:-:700:ucr -$queue_directory/trace:d:$mail_owner:-:700:ucr -# Update shared libraries and plugins before daemon or command-line programs. -$shlib_directory/libpostfix-util.so:f:root:-:755 -$shlib_directory/libpostfix-global.so:f:root:-:755 -$shlib_directory/libpostfix-dns.so:f:root:-:755 -$shlib_directory/libpostfix-tls.so:f:root:-:755 -$shlib_directory/libpostfix-master.so:f:root:-:755 -$meta_directory/dynamicmaps.cf.d:d:root:-:755 -$meta_directory/dynamicmaps.cf:f:root:-:644 -$meta_directory/main.cf.proto:f:root:-:644 -$meta_directory/master.cf.proto:f:root:-:644 -$meta_directory/postfix-files.d:d:root:-:755 -$meta_directory/postfix-files:f:root:-:644 -$daemon_directory/anvil:f:root:-:755 -$daemon_directory/bounce:f:root:-:755 -$daemon_directory/cleanup:f:root:-:755 -$daemon_directory/discard:f:root:-:755 -$daemon_directory/dnsblog:f:root:-:755 -$daemon_directory/error:f:root:-:755 -$daemon_directory/flush:f:root:-:755 -$daemon_directory/local:f:root:-:755 -$daemon_directory/main.cf:f:root:-:644:o -$daemon_directory/master.cf:f:root:-:644:o -$daemon_directory/master:f:root:-:755 -$daemon_directory/oqmgr:f:root:-:755 -$daemon_directory/pickup:f:root:-:755 -$daemon_directory/pipe:f:root:-:755 -$daemon_directory/post-install:f:root:-:755 -# In case meta_directory == daemon_directory. -#$daemon_directory/postfix-files:f:root:-:644:o -#$daemon_directory/postfix-files.d:d:root:-:755:o -$daemon_directory/postfix-script:f:root:-:755 -$daemon_directory/postfix-tls-script:f:root:-:755 -$daemon_directory/postfix-wrapper:f:root:-:755 -$daemon_directory/postmulti-script:f:root:-:755 -$daemon_directory/postlogd:f:root:-:755 -$daemon_directory/postscreen:f:root:-:755 -$daemon_directory/proxymap:f:root:-:755 -$daemon_directory/qmgr:f:root:-:755 -$daemon_directory/qmqpd:f:root:-:755 -$daemon_directory/scache:f:root:-:755 -$daemon_directory/showq:f:root:-:755 -$daemon_directory/smtp:f:root:-:755 -$daemon_directory/smtpd:f:root:-:755 -$daemon_directory/spawn:f:root:-:755 -$daemon_directory/tlsproxy:f:root:-:755 -$daemon_directory/tlsmgr:f:root:-:755 -$daemon_directory/trivial-rewrite:f:root:-:755 -$daemon_directory/verify:f:root:-:755 -$daemon_directory/virtual:f:root:-:755 -$daemon_directory/nqmgr:h:$daemon_directory/qmgr -$daemon_directory/lmtp:h:$daemon_directory/smtp -$command_directory/postalias:f:root:-:755 -$command_directory/postcat:f:root:-:755 -$command_directory/postconf:f:root:-:755 -$command_directory/postfix:f:root:-:755 -$command_directory/postkick:f:root:-:755 -$command_directory/postlock:f:root:-:755 -$command_directory/postlog:f:root:$setgid_group:2755:u -$command_directory/postmap:f:root:-:755 -$command_directory/postmulti:f:root:-:755 -$command_directory/postsuper:f:root:-:755 -$command_directory/postdrop:f:root:$setgid_group:2755:u -$command_directory/postqueue:f:root:$setgid_group:2755:u -$sendmail_path:f:root:-:755 -$newaliases_path:l:$sendmail_path -$mailq_path:l:$sendmail_path -$config_directory/access:f:root:-:644:p1 -$config_directory/canonical:f:root:-:644:p1 -$config_directory/cidr_table:f:root:-:644:o -$config_directory/generic:f:root:-:644:p1 -$config_directory/generics:f:root:-:644:o -$config_directory/header_checks:f:root:-:644:p1 -$config_directory/install.cf:f:root:-:644:o -$config_directory/main.cf:f:root:-:644:p -$config_directory/master.cf:f:root:-:644:p -$config_directory/pcre_table:f:root:-:644:o -$config_directory/regexp_table:f:root:-:644:o -$config_directory/relocated:f:root:-:644:p1 -$config_directory/tcp_table:f:root:-:644:o -$config_directory/transport:f:root:-:644:p1 -$config_directory/virtual:f:root:-:644:p1 -$config_directory/postfix-script:f:root:-:755:o -$config_directory/postfix-script-sgid:f:root:-:755:o -$config_directory/postfix-script-nosgid:f:root:-:755:o -$config_directory/post-install:f:root:-:755:o -$manpage_directory/man1/mailq.postfix.1.gz:f:root:-:644 -$manpage_directory/man1/newaliases.postfix.1.gz:f:root:-:644 -$manpage_directory/man1/postalias.1.gz:f:root:-:644 -$manpage_directory/man1/postcat.1.gz:f:root:-:644 -$manpage_directory/man1/postconf.1.gz:f:root:-:644 -$manpage_directory/man1/postdrop.1.gz:f:root:-:644 -$manpage_directory/man1/postfix-tls.1.gz:f:root:-:644 -$manpage_directory/man1/postfix.1.gz:f:root:-:644 -$manpage_directory/man1/postkick.1.gz:f:root:-:644 -$manpage_directory/man1/postlock.1.gz:f:root:-:644 -$manpage_directory/man1/postlog.1.gz:f:root:-:644 -$manpage_directory/man1/postmap.1.gz:f:root:-:644 -$manpage_directory/man1/postmulti.1.gz:f:root:-:644 -$manpage_directory/man1/postqueue.1.gz:f:root:-:644 -$manpage_directory/man1/postsuper.1.gz:f:root:-:644 -$manpage_directory/man1/sendmail.postfix.1.gz:f:root:-:644 -$manpage_directory/man5/access.5.gz:f:root:-:644 -$manpage_directory/man5/aliases.postfix.5.gz:f:root:-:644 -$manpage_directory/man5/body_checks.5.gz:f:root:-:644 -$manpage_directory/man5/bounce.5.gz:f:root:-:644 -$manpage_directory/man5/canonical.5.gz:f:root:-:644 -$manpage_directory/man5/cidr_table.5.gz:f:root:-:644 -$manpage_directory/man5/generics.5.gz:f:root:-:644:o -$manpage_directory/man5/generic.5.gz:f:root:-:644 -$manpage_directory/man5/header_checks.5.gz:f:root:-:644 -$manpage_directory/man5/master.5.gz:f:root:-:644 -$manpage_directory/man5/memcache_table.5.gz:f:root:-:644 -$manpage_directory/man5/socketmap_table.5.gz:f:root:-:644 -$manpage_directory/man5/nisplus_table.5.gz:f:root:-:644 -$manpage_directory/man5/postconf.5.gz:f:root:-:644 -$manpage_directory/man5/postfix-wrapper.5.gz:f:root:-:644 -$manpage_directory/man5/regexp_table.5.gz:f:root:-:644 -$manpage_directory/man5/relocated.5.gz:f:root:-:644 -$manpage_directory/man5/tcp_table.5.gz:f:root:-:644 -$manpage_directory/man5/transport.5.gz:f:root:-:644 -$manpage_directory/man5/virtual.5.gz:f:root:-:644 -$manpage_directory/man8/bounce.8.gz:f:root:-:644 -$manpage_directory/man8/cleanup.8.gz:f:root:-:644 -$manpage_directory/man8/anvil.8.gz:f:root:-:644 -$manpage_directory/man8/defer.8.gz:f:root:-:644 -$manpage_directory/man8/discard.8.gz:f:root:-:644 -$manpage_directory/man8/dnsblog.8.gz:f:root:-:644 -$manpage_directory/man8/error.8.gz:f:root:-:644 -$manpage_directory/man8/flush.8.gz:f:root:-:644 -$manpage_directory/man8/lmtp.8.gz:f:root:-:644 -$manpage_directory/man8/local.8.gz:f:root:-:644 -$manpage_directory/man8/master.8.gz:f:root:-:644 -$manpage_directory/man8/nqmgr.8.gz:f:root:-:644:o -$manpage_directory/man8/oqmgr.8.gz:f:root:-:644: -$manpage_directory/man8/pickup.8.gz:f:root:-:644 -$manpage_directory/man8/pipe.8.gz:f:root:-:644 -$manpage_directory/man8/postlogd.8.gz:f:root:-:644 -$manpage_directory/man8/postscreen.8.gz:f:root:-:644 -$manpage_directory/man8/proxymap.8.gz:f:root:-:644 -$manpage_directory/man8/qmgr.8.gz:f:root:-:644 -$manpage_directory/man8/qmqpd.8.gz:f:root:-:644 -$manpage_directory/man8/scache.8.gz:f:root:-:644 -$manpage_directory/man8/showq.8.gz:f:root:-:644 -$manpage_directory/man8/smtp.8.gz:f:root:-:644 -$manpage_directory/man8/smtpd.postfix.8.gz:f:root:-:644 -$manpage_directory/man8/spawn.8.gz:f:root:-:644 -$manpage_directory/man8/tlsproxy.8.gz:f:root:-:644 -$manpage_directory/man8/tlsmgr.8.gz:f:root:-:644 -$manpage_directory/man8/trace.8.gz:f:root:-:644 -$manpage_directory/man8/trivial-rewrite.8.gz:f:root:-:644 -$manpage_directory/man8/verify.8.gz:f:root:-:644 -$manpage_directory/man8/virtual.8.gz:f:root:-:644 -$sample_directory/sample-aliases.cf:f:root:-:644:o -$sample_directory/sample-auth.cf:f:root:-:644:o -$sample_directory/sample-canonical.cf:f:root:-:644:o -$sample_directory/sample-compatibility.cf:f:root:-:644:o -$sample_directory/sample-debug.cf:f:root:-:644:o -$sample_directory/sample-filter.cf:f:root:-:644:o -$sample_directory/sample-flush.cf:f:root:-:644:o -$sample_directory/sample-ipv6.cf:f:root:-:644:o -$sample_directory/sample-ldap.cf:f:root:-:644:o -$sample_directory/sample-lmtp.cf:f:root:-:644:o -$sample_directory/sample-local.cf:f:root:-:644:o -$sample_directory/sample-mime.cf:f:root:-:644:o -$sample_directory/sample-misc.cf:f:root:-:644:o -$sample_directory/sample-pcre-access.cf:f:root:-:644:o -$sample_directory/sample-pcre-body.cf:f:root:-:644:o -$sample_directory/sample-pcre-header.cf:f:root:-:644:o -$sample_directory/sample-pgsql-aliases.cf:f:root:-:644:o -$sample_directory/sample-qmqpd.cf:f:root:-:644:o -$sample_directory/sample-rate.cf:f:root:-:644:o -$sample_directory/sample-regexp-access.cf:f:root:-:644:o -$sample_directory/sample-regexp-body.cf:f:root:-:644:o -$sample_directory/sample-regexp-header.cf:f:root:-:644:o -$sample_directory/sample-relocated.cf:f:root:-:644:o -$sample_directory/sample-resource.cf:f:root:-:644:o -$sample_directory/sample-rewrite.cf:f:root:-:644:o -$sample_directory/sample-scheduler.cf:f:root:-:644:o -$sample_directory/sample-smtp.cf:f:root:-:644:o -$sample_directory/sample-smtpd.cf:f:root:-:644:o -$sample_directory/sample-tls.cf:f:root:-:644:o -$sample_directory/sample-transport.cf:f:root:-:644:o -$sample_directory/sample-verify.cf:f:root:-:644:o -$sample_directory/sample-virtual.cf:f:root:-:644:o -$readme_directory/AAAREADME:f:root:-:644 -$readme_directory/ADDRESS_CLASS_README:f:root:-:644 -$readme_directory/ADDRESS_REWRITING_README:f:root:-:644 -$readme_directory/ADDRESS_VERIFICATION_README:f:root:-:644 -$readme_directory/BACKSCATTER_README:f:root:-:644 -$readme_directory/BASIC_CONFIGURATION_README:f:root:-:644 -$readme_directory/BDAT_README:f:root:-:644 -$readme_directory/BUILTIN_FILTER_README:f:root:-:644 -$readme_directory/COMPATIBILITY_README:f:root:-:644 -$readme_directory/CONNECTION_CACHE_README:f:root:-:644 -$readme_directory/CONTENT_INSPECTION_README:f:root:-:644 -$readme_directory/DATABASE_README:f:root:-:644 -$readme_directory/DB_README:f:root:-:644 -$readme_directory/DEBUG_README:f:root:-:644 -$readme_directory/DSN_README:f:root:-:644 -$readme_directory/ETRN_README:f:root:-:644 -$readme_directory/FILTER_README:f:root:-:644 -$readme_directory/FORWARD_SECRECY_README:f:root:-:644 -$readme_directory/HOSTING_README:f:root:-:644:o -$readme_directory/INSTALL:f:root:-:644 -$readme_directory/IPV6_README:f:root:-:644 -$readme_directory/LINUX_README:f:root:-:644 -$readme_directory/LOCAL_RECIPIENT_README:f:root:-:644 -$readme_directory/MACOSX_README:f:root:-:644:o -$readme_directory/MAILDROP_README:f:root:-:644 -$readme_directory/MAILLOG_README:f:root:-:644 -$readme_directory/MEMCACHE_README:f:root:-:644 -$readme_directory/MILTER_README:f:root:-:644 -$readme_directory/MULTI_INSTANCE_README:f:root:-:644 -$readme_directory/SMTPUTF8_README:f:root:-:644 -$readme_directory/NFS_README:f:root:-:644 -$readme_directory/OVERVIEW:f:root:-:644 -$readme_directory/PACKAGE_README:f:root:-:644 -$readme_directory/POSTSCREEN_3_5_README:f:root:-:644 -$readme_directory/POSTSCREEN_README:f:root:-:644 -$readme_directory/QMQP_README:f:root:-:644:o -$readme_directory/QSHAPE_README:f:root:-:644 -$readme_directory/RELEASE_NOTES:f:root:-:644 -$readme_directory/RESTRICTION_CLASS_README:f:root:-:644 -$readme_directory/SASL_README:f:root:-:644 -$readme_directory/SCHEDULER_README:f:root:-:644 -$readme_directory/SMTPD_ACCESS_README:f:root:-:644 -$readme_directory/SMTPD_POLICY_README:f:root:-:644 -$readme_directory/SMTPD_PROXY_README:f:root:-:644 -$readme_directory/SOHO_README:f:root:-:644 -$readme_directory/STANDARD_CONFIGURATION_README:f:root:-:644 -$readme_directory/STRESS_README:f:root:-:644 -$readme_directory/TLS_LEGACY_README:f:root:-:644 -$readme_directory/TLS_README:f:root:-:644 -$readme_directory/TUNING_README:f:root:-:644 -$readme_directory/ULTRIX_README:f:root:-:644 -$readme_directory/UUCP_README:f:root:-:644 -$readme_directory/VERP_README:f:root:-:644 -$readme_directory/VIRTUAL_README:f:root:-:644 -$readme_directory/XCLIENT_README:f:root:-:644 -$readme_directory/XFORWARD_README:f:root:-:644 -$html_directory/ADDRESS_CLASS_README.html:f:root:-:644 -$html_directory/ADDRESS_REWRITING_README.html:f:root:-:644 -$html_directory/ADDRESS_VERIFICATION_README.html:f:root:-:644 -$html_directory/BACKSCATTER_README.html:f:root:-:644 -$html_directory/BASIC_CONFIGURATION_README.html:f:root:-:644 -$html_directory/BDAT_README.html:f:root:-:644 -$html_directory/BUILTIN_FILTER_README.html:f:root:-:644 -$html_directory/CDB_README.html:f:root:-:644 -$html_directory/COMPATIBILITY_README.html:f:root:-:644 -$html_directory/CONNECTION_CACHE_README.html:f:root:-:644 -$html_directory/CONTENT_INSPECTION_README.html:f:root:-:644 -$html_directory/CYRUS_README.html:f:root:-:644:o -$html_directory/DATABASE_README.html:f:root:-:644 -$html_directory/DB_README.html:f:root:-:644 -$html_directory/DEBUG_README.html:f:root:-:644 -$html_directory/DSN_README.html:f:root:-:644 -$html_directory/ETRN_README.html:f:root:-:644 -$html_directory/FILTER_README.html:f:root:-:644 -$html_directory/FORWARD_SECRECY_README.html:f:root:-:644 -$html_directory/INSTALL.html:f:root:-:644 -$html_directory/IPV6_README.html:f:root:-:644 -$html_directory/LDAP_README.html:f:root:-:644 -$html_directory/LINUX_README.html:f:root:-:644 -$html_directory/LMDB_README.html:f:root:-:644 -$html_directory/LOCAL_RECIPIENT_README.html:f:root:-:644 -$html_directory/MAILDROP_README.html:f:root:-:644 -$html_directory/MAILLOG_README.html:f:root:-:644 -$html_directory/MEMCACHE_README.html:f:root:-:644 -$html_directory/MILTER_README.html:f:root:-:644 -$html_directory/MULTI_INSTANCE_README.html:f:root:-:644 -$html_directory/MYSQL_README.html:f:root:-:644 -$html_directory/SMTPUTF8_README.html:f:root:-:644 -$html_directory/SQLITE_README.html:f:root:-:644 -$html_directory/NFS_README.html:f:root:-:644 -$html_directory/OVERVIEW.html:f:root:-:644 -$html_directory/PACKAGE_README.html:f:root:-:644 -$html_directory/PCRE_README.html:f:root:-:644 -$html_directory/PGSQL_README.html:f:root:-:644 -$html_directory/POSTSCREEN_3_5_README.html:f:root:-:644 -$html_directory/POSTSCREEN_README.html:f:root:-:644 -$html_directory/QMQP_README.html:f:root:-:644:o -$html_directory/QSHAPE_README.html:f:root:-:644 -$html_directory/RESTRICTION_CLASS_README.html:f:root:-:644 -$html_directory/SASL_README.html:f:root:-:644 -$html_directory/SCHEDULER_README.html:f:root:-:644 -$html_directory/SMTPD_ACCESS_README.html:f:root:-:644 -$html_directory/SMTPD_POLICY_README.html:f:root:-:644 -$html_directory/SMTPD_PROXY_README.html:f:root:-:644 -$html_directory/SOHO_README.html:f:root:-:644 -$html_directory/STANDARD_CONFIGURATION_README.html:f:root:-:644 -$html_directory/STRESS_README.html:f:root:-:644 -$html_directory/TLS_LEGACY_README.html:f:root:-:644 -$html_directory/TLS_README.html:f:root:-:644 -$html_directory/TUNING_README.html:f:root:-:644 -$html_directory/ULTRIX_README.html:f:root:-:644:o -$html_directory/UUCP_README.html:f:root:-:644 -$html_directory/VERP_README.html:f:root:-:644 -$html_directory/VIRTUAL_README.html:f:root:-:644 -$html_directory/XCLIENT_README.html:f:root:-:644 -$html_directory/XFORWARD_README.html:f:root:-:644 -$html_directory/access.5.html:f:root:-:644 -$html_directory/aliases.5.html:f:root:-:644 -$html_directory/anvil.8.html:f:root:-:644 -$html_directory/bounce.5.html:f:root:-:644 -$html_directory/bounce.8.html:f:root:-:644 -$html_directory/canonical.5.html:f:root:-:644 -$html_directory/cidr_table.5.html:f:root:-:644 -$html_directory/cleanup.8.html:f:root:-:644 -$html_directory/defer.8.html:h:$html_directory/bounce.8.html:-:644 -$html_directory/discard.8.html:f:root:-:644 -$html_directory/dnsblog.8.html:f:root:-:644 -$html_directory/error.8.html:f:root:-:644 -$html_directory/flush.8.html:f:root:-:644 -$html_directory/generics.5.html:f:root:-:644:o -$html_directory/generic.5.html:f:root:-:644 -$html_directory/header_checks.5.html:f:root:-:644 -$html_directory/index.html:f:root:-:644 -$html_directory/ldap_table.5.html:f:root:-:644 -$html_directory/lmdb_table.5.html:f:root:-:644 -$html_directory/lmtp.8.html:f:root:-:644 -$html_directory/local.8.html:f:root:-:644 -$html_directory/mailq.1.html:f:root:-:644 -$html_directory/master.5.html:f:root:-:644 -$html_directory/master.8.html:f:root:-:644 -$html_directory/memcache_table.5.html:f:root:-:644 -$html_directory/mysql_table.5.html:f:root:-:644 -$html_directory/sqlite_table.5.html:f:root:-:644 -$html_directory/nisplus_table.5.html:f:root:-:644 -$html_directory/newaliases.1.html:h:$html_directory/mailq.1.html:-:644 -$html_directory/oqmgr.8.html:f:root:-:644 -$html_directory/pcre_table.5.html:f:root:-:644 -$html_directory/pgsql_table.5.html:f:root:-:644 -$html_directory/pickup.8.html:f:root:-:644 -$html_directory/pipe.8.html:f:root:-:644 -$html_directory/postalias.1.html:f:root:-:644 -$html_directory/postcat.1.html:f:root:-:644 -$html_directory/postconf.1.html:f:root:-:644 -$html_directory/postconf.5.html:f:root:-:644 -$html_directory/postdrop.1.html:f:root:-:644 -$html_directory/postfix-logo.jpg:f:root:-:644 -$html_directory/postfix-manuals.html:f:root:-:644 -$html_directory/postfix-tls.1.html:f:root:-:644 -$html_directory/postfix-wrapper.5.html:f:root:-:644 -$html_directory/postfix.1.html:f:root:-:644 -$html_directory/postkick.1.html:f:root:-:644 -$html_directory/postlock.1.html:f:root:-:644 -$html_directory/postlog.1.html:f:root:-:644 -$html_directory/postmap.1.html:f:root:-:644 -$html_directory/postmulti.1.html:f:root:-:644 -$html_directory/postlogd.8.html:f:root:-:644 -$html_directory/postqueue.1.html:f:root:-:644 -$html_directory/postscreen.8.html:f:root:-:644 -$html_directory/postsuper.1.html:f:root:-:644 -$html_directory/qshape.1.html:f:root:-:644 -$html_directory/proxymap.8.html:f:root:-:644 -$html_directory/qmgr.8.html:f:root:-:644 -$html_directory/qmqp-sink.1.html:f:root:-:644 -$html_directory/qmqp-source.1.html:f:root:-:644 -$html_directory/qmqpd.8.html:f:root:-:644 -$html_directory/regexp_table.5.html:f:root:-:644 -$html_directory/relocated.5.html:f:root:-:644 -$html_directory/scache.8.html:f:root:-:644 -$html_directory/sendmail.1.html:h:$html_directory/mailq.1.html:-:644 -$html_directory/showq.8.html:f:root:-:644 -$html_directory/smtp-sink.1.html:f:root:-:644 -$html_directory/smtp-source.1.html:f:root:-:644 -$html_directory/smtp.8.html:h:$html_directory/lmtp.8.html:-:644 -$html_directory/smtpd.8.html:f:root:-:644 -$html_directory/socketmap_table.5.html:f:root:-:644 -$html_directory/spawn.8.html:f:root:-:644 -$html_directory/tlsmgr.8.html:f:root:-:644 -$html_directory/tlsproxy.8.html:f:root:-:644 -$html_directory/tcp_table.5.html:f:root:-:644 -$html_directory/trace.8.html:h:$html_directory/bounce.8.html:-:644 -$html_directory/transport.5.html:f:root:-:644 -$html_directory/trivial-rewrite.8.html:f:root:-:644 -$html_directory/verify.8.html:f:root:-:644 -$html_directory/virtual.5.html:f:root:-:644 -$html_directory/virtual.8.html:f:root:-:644 diff --git a/templates/Fedora/39/etc/postfix/postfix-files.d/ldap b/templates/Fedora/39/etc/postfix/postfix-files.d/ldap deleted file mode 100644 index 684b05d..0000000 --- a/templates/Fedora/39/etc/postfix/postfix-files.d/ldap +++ /dev/null @@ -1,3 +0,0 @@ -$shlib_directory/postfix-ldap.so:f:root:-:755 -$manpage_directory/man5/ldap_table.5.gz:f:root:-:644 -$readme_directory/LDAP_README:f:root:-:644 diff --git a/templates/Fedora/39/etc/postfix/postfix-files.d/mysql b/templates/Fedora/39/etc/postfix/postfix-files.d/mysql deleted file mode 100644 index 8e41d61..0000000 --- a/templates/Fedora/39/etc/postfix/postfix-files.d/mysql +++ /dev/null @@ -1,3 +0,0 @@ -$shlib_directory/postfix-mysql.so:f:root:-:755 -$manpage_directory/man5/mysql_table.5.gz:f:root:-:644 -$readme_directory/MYSQL_README:f:root:-:644 diff --git a/templates/Fedora/39/etc/postfix/postfix-files.d/pcre b/templates/Fedora/39/etc/postfix/postfix-files.d/pcre deleted file mode 100644 index a34fd73..0000000 --- a/templates/Fedora/39/etc/postfix/postfix-files.d/pcre +++ /dev/null @@ -1,3 +0,0 @@ -$shlib_directory/postfix-pcre.so:f:root:-:755 -$manpage_directory/man5/pcre_table.5.gz:f:root:-:644 -$readme_directory/PCRE_README:f:root:-:644 diff --git a/templates/Fedora/39/etc/postfix/relocated b/templates/Fedora/39/etc/postfix/relocated deleted file mode 100644 index 90f63ec..0000000 --- a/templates/Fedora/39/etc/postfix/relocated +++ /dev/null @@ -1,178 +0,0 @@ -# RELOCATED(5) RELOCATED(5) -# -# NAME -# relocated - Postfix relocated table format -# -# SYNOPSIS -# postmap /etc/postfix/relocated -# -# DESCRIPTION -# The optional relocated(5) table provides the information -# that is used in "user has moved to new_location" bounce -# messages. -# -# Normally, the relocated(5) table is specified as a text -# file that serves as input to the postmap(1) command. The -# result, an indexed file in dbm or db format, is used for -# fast searching by the mail system. Execute the command -# "postmap /etc/postfix/relocated" to rebuild an indexed -# file after changing the corresponding relocated table. -# -# When the table is provided via other means such as NIS, -# LDAP or SQL, the same lookups are done as for ordinary -# indexed files. -# -# Alternatively, the table can be provided as a regu- -# lar-expression map where patterns are given as regular -# expressions, or lookups can be directed to a TCP-based -# server. In those case, the lookups are done in a slightly -# different way as described below under "REGULAR EXPRESSION -# TABLES" or "TCP-BASED TABLES". -# -# Table lookups are case insensitive. -# -# CASE FOLDING -# The search string is folded to lowercase before database -# lookup. As of Postfix 2.3, the search string is not case -# folded with database types such as regexp: or pcre: whose -# lookup fields can match both upper and lower case. -# -# TABLE FORMAT -# The input format for the postmap(1) command is as follows: -# -# o An entry has one of the following form: -# -# pattern new_location -# -# Where new_location specifies contact information -# such as an email address, or perhaps a street -# address or telephone number. -# -# o Empty lines and whitespace-only lines are ignored, -# as are lines whose first non-whitespace character -# is a `#'. -# -# o A logical line starts with non-whitespace text. A -# line that starts with whitespace continues a logi- -# cal line. -# -# TABLE SEARCH ORDER -# With lookups from indexed files such as DB or DBM, or from -# networked tables such as NIS, LDAP or SQL, patterns are -# tried in the order as listed below: -# -# user@domain -# Matches user@domain. This form has precedence over -# all other forms. -# -# user Matches user@site when site is $myorigin, when site -# is listed in $mydestination, or when site is listed -# in $inet_interfaces or $proxy_interfaces. -# -# @domain -# Matches other addresses in domain. This form has -# the lowest precedence. -# -# ADDRESS EXTENSION -# When a mail address localpart contains the optional recip- -# ient delimiter (e.g., user+foo@domain), the lookup order -# becomes: user+foo@domain, user@domain, user+foo, user, and -# @domain. -# -# REGULAR EXPRESSION TABLES -# This section describes how the table lookups change when -# the table is given in the form of regular expressions or -# when lookups are directed to a TCP-based server. For a -# description of regular expression lookup table syntax, see -# regexp_table(5) or pcre_table(5). For a description of the -# TCP client/server table lookup protocol, see tcp_table(5). -# This feature is available in Postfix 2.5 and later. -# -# Each pattern is a regular expression that is applied to -# the entire address being looked up. Thus, user@domain mail -# addresses are not broken up into their user and @domain -# constituent parts, nor is user+foo broken up into user and -# foo. -# -# Patterns are applied in the order as specified in the ta- -# ble, until a pattern is found that matches the search -# string. -# -# Results are the same as with indexed file lookups, with -# the additional feature that parenthesized substrings from -# the pattern can be interpolated as $1, $2 and so on. -# -# TCP-BASED TABLES -# This section describes how the table lookups change when -# lookups are directed to a TCP-based server. For a descrip- -# tion of the TCP client/server lookup protocol, see tcp_ta- -# ble(5). This feature is available in Postfix 2.5 and -# later. -# -# Each lookup operation uses the entire address once. Thus, -# user@domain mail addresses are not broken up into their -# user and @domain constituent parts, nor is user+foo broken -# up into user and foo. -# -# Results are the same as with indexed file lookups. -# -# BUGS -# The table format does not understand quoting conventions. -# -# CONFIGURATION PARAMETERS -# The following main.cf parameters are especially relevant. -# The text below provides only a parameter summary. See -# postconf(5) for more details including examples. -# -# relocated_maps (empty) -# Optional lookup tables with new contact information -# for users or domains that no longer exist. -# -# Other parameters of interest: -# -# inet_interfaces (all) -# The network interface addresses that this mail sys- -# tem receives mail on. -# -# mydestination ($myhostname, localhost.$mydomain, local- -# host) -# The list of domains that are delivered via the -# $local_transport mail delivery transport. -# -# myorigin ($myhostname) -# The domain name that locally-posted mail appears to -# come from, and that locally posted mail is deliv- -# ered to. -# -# proxy_interfaces (empty) -# The network interface addresses that this mail sys- -# tem receives mail on by way of a proxy or network -# address translation unit. -# -# SEE ALSO -# trivial-rewrite(8), address resolver -# postmap(1), Postfix lookup table manager -# postconf(5), configuration parameters -# -# README FILES -# Use "postconf readme_directory" or "postconf html_direc- -# tory" to locate this information. -# DATABASE_README, Postfix lookup table overview -# ADDRESS_REWRITING_README, address rewriting guide -# -# LICENSE -# The Secure Mailer license must be distributed with this -# software. -# -# AUTHOR(S) -# Wietse Venema -# IBM T.J. Watson Research -# P.O. Box 704 -# Yorktown Heights, NY 10598, USA -# -# Wietse Venema -# Google, Inc. -# 111 8th Avenue -# New York, NY 10011, USA -# -# RELOCATED(5) diff --git a/templates/Fedora/39/etc/postfix/transport b/templates/Fedora/39/etc/postfix/transport deleted file mode 100644 index bad7739..0000000 --- a/templates/Fedora/39/etc/postfix/transport +++ /dev/null @@ -1,317 +0,0 @@ -# TRANSPORT(5) TRANSPORT(5) -# -# NAME -# transport - Postfix transport table format -# -# SYNOPSIS -# postmap /etc/postfix/transport -# -# postmap -q "string" /etc/postfix/transport -# -# postmap -q - /etc/postfix/transport = 3.5): -# -# example.com smtp:bar.example, foo.example -# -# This tries to deliver to bar.example before trying to -# deliver to foo.example. -# -# The error mailer can be used to bounce mail: -# -# .example.com error:mail for *.example.com is not deliverable -# -# This causes all mail for user@anything.example.com to be -# bounced. -# -# REGULAR EXPRESSION TABLES -# This section describes how the table lookups change when -# the table is given in the form of regular expressions. For -# a description of regular expression lookup table syntax, -# see regexp_table(5) or pcre_table(5). -# -# Each pattern is a regular expression that is applied to -# the entire address being looked up. Thus, -# some.domain.hierarchy is not looked up via its parent -# domains, nor is user+foo@domain looked up as user@domain. -# -# Patterns are applied in the order as specified in the ta- -# ble, until a pattern is found that matches the search -# string. -# -# The trivial-rewrite(8) server disallows regular expression -# substitution of $1 etc. in regular expression lookup -# tables, because that could open a security hole (Postfix -# version 2.3 and later). -# -# TCP-BASED TABLES -# This section describes how the table lookups change when -# lookups are directed to a TCP-based server. For a descrip- -# tion of the TCP client/server lookup protocol, see tcp_ta- -# ble(5). This feature is not available up to and including -# Postfix version 2.4. -# -# Each lookup operation uses the entire recipient address -# once. Thus, some.domain.hierarchy is not looked up via -# its parent domains, nor is user+foo@domain looked up as -# user@domain. -# -# Results are the same as with indexed file lookups. -# -# CONFIGURATION PARAMETERS -# The following main.cf parameters are especially relevant. -# The text below provides only a parameter summary. See -# postconf(5) for more details including examples. -# -# empty_address_recipient (MAILER-DAEMON) -# The recipient of mail addressed to the null -# address. -# -# parent_domain_matches_subdomains (see 'postconf -d' out- -# put) -# A list of Postfix features where the pattern "exam- -# ple.com" also matches subdomains of example.com, -# instead of requiring an explicit ".example.com" -# pattern. -# -# transport_maps (empty) -# Optional lookup tables with mappings from recipient -# address to (message delivery transport, next-hop -# destination). -# -# SEE ALSO -# trivial-rewrite(8), rewrite and resolve addresses -# master(5), master.cf file format -# postconf(5), configuration parameters -# postmap(1), Postfix lookup table manager -# -# README FILES -# Use "postconf readme_directory" or "postconf html_direc- -# tory" to locate this information. -# ADDRESS_REWRITING_README, address rewriting guide -# DATABASE_README, Postfix lookup table overview -# FILTER_README, external content filter -# -# LICENSE -# The Secure Mailer license must be distributed with this -# software. -# -# AUTHOR(S) -# Wietse Venema -# IBM T.J. Watson Research -# P.O. Box 704 -# Yorktown Heights, NY 10598, USA -# -# Wietse Venema -# Google, Inc. -# 111 8th Avenue -# New York, NY 10011, USA -# -# TRANSPORT(5) diff --git a/templates/Fedora/39/etc/postfix/virtual b/templates/Fedora/39/etc/postfix/virtual deleted file mode 100644 index 96390fe..0000000 --- a/templates/Fedora/39/etc/postfix/virtual +++ /dev/null @@ -1,324 +0,0 @@ -# VIRTUAL(5) VIRTUAL(5) -# -# NAME -# virtual - Postfix virtual alias table format -# -# SYNOPSIS -# postmap /etc/postfix/virtual -# -# postmap -q "string" /etc/postfix/virtual -# -# postmap -q - /etc/postfix/virtual -ReportAddress "Postmaster" <{{ postmaster_email }}> - -## Add a DKIM-Filter header field to messages passing through this filter -## to identify messages it has processed. -SoftwareHeader yes - -## SIGNING OPTIONS - -## Selects the canonicalization method(s) to be used when signing messages. -Canonicalization relaxed/relaxed - -## Domain(s) whose mail should be signed by this filter. Mail from other domains will -## be verified rather than being signed. Uncomment and use your domain name. -## This parameter is not required if a SigningTable is in use. -# Domain example.com - -## Defines the name of the selector to be used when signing messages. -Selector default - -## Specifies the minimum number of key bits for acceptable keys and signatures. -MinimumKeyBits 1024 - -## Gives the location of a private key to be used for signing ALL messages. This -## directive is ignored if KeyTable is enabled. -# KeyFile /etc/opendkim/keys/default.private - -## Gives the location of a file mapping key names to signing keys. In simple terms, -## this tells OpenDKIM where to find your keys. If present, overrides any KeyFile -## directive in the configuration file. Requires SigningTable be enabled. -# KeyTable /etc/opendkim/KeyTable - -## Defines a table used to select one or more signatures to apply to a message based -## on the address found in the From: header field. In simple terms, this tells -## OpenDKIM how to use your keys. Requires KeyTable be enabled. -# SigningTable refile:/etc/opendkim/SigningTable - -## Identifies a set of "external" hosts that may send mail through the server as one -## of the signing domains without credentials as such. -# ExternalIgnoreList refile:/etc/opendkim/TrustedHosts - -## Identifies a set "internal" hosts whose mail should be signed rather than verified. -# InternalHosts refile:/etc/opendkim/TrustedHosts - -## Contains a list of IP addresses, CIDR blocks, hostnames or domain names -## whose mail should be neither signed nor verified by this filter. See man -## page for file format. -# PeerList X.X.X.X - -## Always oversign From (sign using actual From and a null From to prevent -## malicious signatures header fields (From and/or others) between the signer -## and the verifier. From is oversigned by default in the Fedora package -## because it is often the identity key used by reputation systems and thus -## somewhat security sensitive. -OversignHeaders From - -## Instructs the DKIM library to maintain its own local cache of keys and -## policies retrieved from DNS, rather than relying on the nameserver for -## caching service. Useful if the nameserver being used by the filter is -## not local. -# QueryCache yes diff --git a/templates/Fedora/40/etc/opendkim/KeyTable b/templates/Fedora/40/etc/opendkim/KeyTable deleted file mode 100644 index e804d68..0000000 --- a/templates/Fedora/40/etc/opendkim/KeyTable +++ /dev/null @@ -1,6 +0,0 @@ -# OPENDKIM KEY TABLE -# To use this file, uncomment the #KeyTable option in /etc/opendkim.conf, -# then uncomment the following line and replace example.com with your domain -# name, then restart OpenDKIM. Additional keys may be added on separate lines. - -#default._domainkey.example.com example.com:default:/etc/opendkim/keys/default.private diff --git a/templates/Fedora/40/etc/opendkim/SigningTable b/templates/Fedora/40/etc/opendkim/SigningTable deleted file mode 100644 index e8161a1..0000000 --- a/templates/Fedora/40/etc/opendkim/SigningTable +++ /dev/null @@ -1,25 +0,0 @@ -# OPENDKIM SIGNING TABLE -# This table controls how to apply one or more signatures to outgoing messages based -# on the address found in the From: header field. In simple terms, this tells -# OpenDKIM "how" to apply your keys. - -# To use this file, uncomment the SigningTable option in /etc/opendkim.conf, -# then uncomment one of the usage examples below and replace example.com with your -# domain name, then restart OpenDKIM. - -# WILDCARD EXAMPLE -# Enables signing for any address on the listed domain(s), but will work only if -# "refile:/etc/opendkim/SigningTable" is included in /etc/opendkim.conf. -# Create additional lines for additional domains. - -#*@example.com default._domainkey.example.com - -# NON-WILDCARD EXAMPLE -# If "file:" (instead of "refile:") is specified in /etc/opendkim.conf, then -# wildcards will not work. Instead, full user@host is checked first, then simply host, -# then user@.domain (with all superdomains checked in sequence, so "foo.example.com" -# would first check "user@foo.example.com", then "user@.example.com", then "user@.com"), -# then .domain, then user@*, and finally *. See the opendkim.conf(5) man page under -# "SigningTable" for more details. - -#example.com default._domainkey.example.com diff --git a/templates/Fedora/40/etc/opendkim/TrustedHosts b/templates/Fedora/40/etc/opendkim/TrustedHosts deleted file mode 100644 index 7a086d4..0000000 --- a/templates/Fedora/40/etc/opendkim/TrustedHosts +++ /dev/null @@ -1,9 +0,0 @@ -# OPENDKIM TRUSTED HOSTS -# To use this file, uncomment the #ExternalIgnoreList and/or the #InternalHosts -# option in /etc/opendkim.conf then restart OpenDKIM. Additional hosts -# may be added on separate lines (IP addresses, hostnames, or CIDR ranges). -# The localhost IP (127.0.0.1) should always be the first entry in this file. -127.0.0.1 -::1 -#host.example.com -#192.168.1.0/24 diff --git a/templates/Fedora/40/etc/opendmarc.conf b/templates/Fedora/40/etc/opendmarc.conf deleted file mode 100644 index 19f6b7b..0000000 --- a/templates/Fedora/40/etc/opendmarc.conf +++ /dev/null @@ -1,443 +0,0 @@ -## opendmarc.conf -- configuration file for OpenDMARC filter -## -## Copyright (c) 2012-2015, 2018, 2021, The Trusted Domain Project. -## All rights reserved. - -## DEPRECATED CONFIGURATION OPTIONS -## -## The following configuration options are no longer valid. They should be -## removed from your existing configuration file to prevent potential issues. -## Failure to do so may result in opendmarc being unable to start. -## -## Renamed in 1.3.0: -## ForensicReports became FailureReports -## ForensicReportsBcc became FailureReportsBcc -## ForensicReportsOnNone became FailureReportsOnNone -## ForensicReportsSentBy became FailureReportsSentBy - -## CONFIGURATION OPTIONS - -## AuthservID (string) -## defaults to MTA name -## -## Sets the "authserv-id" to use when generating the Authentication-Results: -## header field after verifying a message. If the string "HOSTNAME" is -## provided, the name of the host running the filter (as returned by the -## gethostname(3) function) will be used. -# -# AuthservID name - -## AuthservIDWithJobID { true | false } -## default "false" -## -## If "true", requests that the authserv-id portion of the added -## Authentication-Results header fields contain the job ID of the message -## being evaluated. -# -# AuthservIDWithJobID false - -## AutoRestart { true | false } -## default "false" -## -## Automatically re-start on failures. Use with caution; if the filter fails -## instantly after it starts, this can cause a tight fork(2) loop. -# -# AutoRestart false - -## AutoRestartCount n -## default 0 -## -## Sets the maximum automatic restart count. After this number of automatic -## restarts, the filter will give up and terminate. A value of 0 implies no -## limit. -# -# AutoRestartCount 0 - -## AutoRestartRate n/t[u] -## default (no limit) -## -## Sets the maximum automatic restart rate. If the filter begins restarting -## faster than the rate defined here, it will give up and terminate. This -## is a string of the form n/t[u] where n is an integer limiting the count -## of restarts in the given interval and t[u] defines the time interval -## through which the rate is calculated; t is an integer and u defines the -## units thus represented ("s" or "S" for seconds, the default; "m" or "M" -## for minutes; "h" or "H" for hours; "d" or "D" for days). For example, a -## value of "10/1h" limits the restarts to 10 in one hour. There is no -## default, meaning restart rate is not limited. -# -# AutoRestartRate n/t[u] - -## Background { true | false } -## default "true" -## -## Causes opendmarc to fork and exits immediately, leaving the service -## running in the background. -# -# Background true - -## BaseDirectory (string) -## default (none) -## -## If set, instructs the filter to change to the specified directory using -## chdir(2) before doing anything else. This means any files referenced -## elsewhere in the configuration file can be specified relative to this -## directory. It's also useful for arranging that any crash dumps will be -## saved to a specific location. -# -# BaseDirectory /var/run/opendmarc - -## ChangeRootDirectory (string) -## default (none) -## -## Requests that the operating system change the effective root directory of -## the process to the one specified here prior to beginning execution. -## chroot(2) requires superuser access. A warning will be generated if -## UserID is not also set. -# -# ChangeRootDirectory /var/chroot/opendmarc - -## CopyFailuresTo (string) -## default (none) -## -## Requests addition of the specified email address to the envelope of -## any message that fails the DMARC evaluation. -# -# CopyFailuresTo postmaster@localhost - -## DomainWhitelist (string) -## default (none) -## -## A brief list of whitelisted domains for which ARC signature headers are -## trusted as determined by evaluating entries in the "arc.chain" field found -## in a locally generated Authentication-Results header. -## -## This list will be concatenated with DomainWhitelistFile (if provided). -## -# -# DomainWhitelist example.com - -## DomainWhitelistFile path -## default (none) -## -## A comprehensive list of whitelisted domains for which ARC signature headers -## are trusted as determined by evaluating entries in the "arc.chain" field -## found in a locally generated Authentication-Results header. -## -## This list will be concatenated with DomainWhitelist (if provided). -## -# -# DomainWhitelistFile /etc/opendmarc/whitelist.domains - -## DomainWhitelistSize -## default 3000 -## -## The maximum number of entries in the DomainWhitelist including both entries -## in the DomainWhitelist configuration parameter (above) and entries in the -## DomainWhitelistFile. This number will be increased by approximately 20% to -## increase the efficiency of the hashing algorithm. -## -# -# DomainWhitelistSize 3000 - -## DNSTimeout (integer) -## default 5 -## -## Sets the DNS timeout in seconds. A value of 0 causes an infinite wait. -## (NOT YET IMPLEMENTED) -# -# DNSTimeout 5 - -## EnableCoredumps { true | false } -## default "false" -## -## On systems that have such support, make an explicit request to the kernel -## to dump cores when the filter crashes for some reason. Some modern UNIX -## systems suppress core dumps during crashes for security reasons if the -## user ID has changed during the lifetime of the process. Currently only -## supported on Linux. -# -# EnableCoreDumps false - -## FailureReports { true | false } -## default "false" -## -## Enables generation of failure reports when the DMARC test fails and the -## purported sender of the message has requested such reports. Reports are -## formatted per RFC6591. -# -# FailureReports false - -## FailureReportsBcc (string) -## default (none) -## -## When failure reports are enabled and one is to be generated, always -## send one to the address(es) specified here. If a failure report is -## requested by the domain owner, the address(es) are added in a Bcc: field. -## If no request is made, they address(es) are used in a To: field. There -## is no default. -# -# FailureReportsBcc postmaster@example.coom -FailureReportsBcc {{ postmaster_email }} - -## FailureReportsOnNone { true | false } -## default "false" -## -## Supplements the "FailureReports" setting by generating reports for -## domains that advertise "none" policies. By default, reports are only -## generated (when enabled) for sending domains advertising a "quarantine" -## or "reject" policy. -# -# FailureReportsOnNone false - -## FailureReportsSentBy string -## default "USER@HOSTNAME" -## -## Specifies the email address to use in the From: field of failure -## reports generated by the filter. The default is to use the userid of -## the user running the filter and the local hostname to construct an -## email address. "postmaster" is used in place of the userid if a name -## could not be determined. -# -# FailureReportsSentBy USER@HOSTNAME -FailureReportsSentBy {{ postmaster_email }} - -## HistoryFile path -## default (none) -## -## If set, specifies the location of a text file to which records are written -## that can be used to generate DMARC aggregate reports. Records are groups -## of rows containing information about a single received message, and -## include all relevant information needed to generate a DMARC aggregate -## report. It is expected that this will not be used in its raw form, but -## rather periodically imported into a relational database from which the -## aggregate reports can be extracted by a tool such as opendmarc-import(8). -# -# HistoryFile /var/spool/opendmarc/opendmarc.dat - -## HoldQuarantinedMessages { true | false } -## default "false" -## -## If set, the milter will signal to the mta that messages with -## p=quarantine, which fail dmarc authentication, should be held in -## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. -## If false, messsages will be accepted and passed along with the -## regular mail flow, and the quarantine will be left up to downstream -## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, -## including the Authentication-Results header added by OpenDMARC -# -# HoldQuarantinedMessages false - -## IgnoreAuthenticatedClients { true | false } -## default "false" -## -## If set, causes mail from authenticated clients (i.e., those that used -## SMTP AUTH) to be ignored by the filter. -# -# IgnoreAuthenticatedClients false - -## HoldQuarantinedMessages { true | false } -## default "false" -## -## If set, the milter will signal to the mta that messages with -## p=quarantine, which fail dmarc authentication, should be held in -## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. -## If false, messsages will be accepted and passed along with the -## regular mail flow, and the quarantine will be left up to downstream -## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, -## including the Authentication-Results header added by OpenDMARC -# -# HoldQuarantinedMessages false - - -## IgnoreHosts path -## default (internal) -## -## Specifies the path to a file that contains a list of hostnames, IP -## addresses, and/or CIDR expressions identifying hosts whose SMTP -## connections are to be ignored by the filter. If not specified, defaults -## to "127.0.0.1" only. -# -# IgnoreHosts /etc/opendmarc/ignore.hosts - -## IgnoreMailFrom domain[,...] -## default (none) -## -## Gives a list of domain names whose mail (based on the From: domain) is to -## be ignored by the filter. The list should be comma-separated. Matching -## against this list is case-insensitive. The default is an empty list, -## meaning no mail is ignored. -# -# IgnoreMailFrom example.com - -## MilterDebug (integer) -## default 0 -## -## Sets the debug level to be requested from the milter library. -# -# MilterDebug 0 - -## PidFile path -## default (none) -## -## Specifies the path to a file that should be created at process start -## containing the process ID. -# -# PidFile /var/run/opendmarc.pid - -## PublicSuffixList path -## default (none) -## -## Specifies the path to a file that contains top-level domains (TLDs) that -## will be used to compute the Organizational Domain for a given domain name, -## as described in the DMARC specification. If not provided, the filter will -## not be able to determine the Organizational Domain and only the presented -## domain will be evaluated. This file should be periodically updated. -## One location to retrieve the file from is https://publicsuffix.org/list/ -# -# PublicSuffixList path - -## RecordAllMessages { true | false } -## default "false" -## -## If set and "HistoryFile" is in use, all received messages are recorded -## to the history file. If not set (the default), only messages for which -## the From: domain published a DMARC record will be recorded in the -## history file. -# -# RecordAllMessages false - -## RejectFailures { true | false } -## default "false" -## -## If set, messages will be rejected if they fail the DMARC evaluation, or -## temp-failed if evaluation could not be completed. By default, no message -## will be rejected or temp-failed regardless of the outcome of the DMARC -## evaluation of the message. Instead, an Authentication-Results header -## field will be added. -# -# RejectFailures false -RejectFailures true - -## RejectMultiValueFrom { true | false } -## default "false" -## -## If set, messages with multiple addresses in the From: field of the message -## will be rejected unless all domains in the field are the same. They will -## otherwise be ignored by the filter (the default). -# -# RejectMultiValueFrom false - -## ReportCommand string -## default "/usr/sbin/sendmail -t" -## -## Indicates the shell command to which failure reports should be passed for -## delivery when "FailureReports" is enabled. -# -# ReportCommand /usr/sbin/sendmail -t - -## RequiredHeaders { true | false } -## default "false" -## -## If set, the filter will ensure the header of the message conforms to the -## basic header field count restrictions laid out in RFC5322, Section 3.6. -## Messages failing this test are rejected without further processing. A -## From: field from which no domain name could be extracted will also be -## rejected. -# -# RequiredHeaders false - -## Socket socketspec -## default (none) -## -## Specifies the socket that should be established by the filter to receive -## connections from sendmail(8) in order to provide service. socketspec is -## in one of two forms: local:path, which creates a UNIX domain socket at -## the specified path, or inet:port[@host] or inet6:port[@host] which creates -## a TCP socket on the specified port for the appropriate protocol family. -## If the host is not given as either a hostname or an IP address, the -## socket will be listening on all interfaces. This option is mandatory -## either in the configuration file or on the command line. If an IP -## address is used, it must be enclosed in square brackets. -# -Socket inet:8893@localhost -#Socket local:/run/opendmarc/opendmarc.sock - -## SoftwareHeader { true | false } -## default "false" -## -## Causes the filter to add a "DMARC-Filter" header field indicating the -## presence of this filter in the path of the message from injection to -## delivery. The product's name, version, and the job ID are included in -## the header field's contents. -# -SoftwareHeader true - -## SPFIgnoreResults { true | false } -## default "false" -## -## Causes the filter to ignore any SPF results in the header of the -## message. This is useful if you want the filter to perform SPF checks -## itself, or because you don't trust the arriving header. -# -SPFIgnoreResults true - -## SPFSelfValidate { true | false } -## default false -## -## Enable internal spf checking with --with-spf -## To use libspf2 instead: --with-spf --with-spf2-include=path --with-spf2-lib=path -## -## Causes the filter to perform a fallback SPF check itself when -## it can find no SPF results in the message header. If SPFIgnoreResults -## is also set, it never looks for SPF results in headers and -## always performs the SPF check itself when this is set. -# -SPFSelfValidate true - -## Syslog { true | false } -## default "false" -## -## Log via calls to syslog(3) any interesting activity. -# -Syslog true - -## SyslogFacility facility-name -## default "mail" -## -## Log via calls to syslog(3) using the named facility. The facility names -## are the same as the ones allowed in syslog.conf(5). -# -# SyslogFacility mail - -## TrustedAuthservIDs string -## default HOSTNAME -## -## Specifies one or more "authserv-id" values to trust as relaying true -## upstream DKIM and SPF results. The default is to use the name of -## the MTA processing the message. To specify a list, separate each entry -## with a comma. The key word "HOSTNAME" will be replaced by the name of -## the host running the filter as reported by the gethostname(3) function. -# -# TrustedAuthservIDs HOSTNAME - -## UMask mask -## default (none) -## -## Requests a specific permissions mask to be used for file creation. This -## only really applies to creation of the socket when Socket specifies a -## UNIX domain socket, and to the HistoryFile and PidFile (if any); temporary -## files are normally created by the mkstemp(3) function that enforces a -## specific file mode on creation regardless of the process umask. See -## umask(2) for more information. -# -UMask 007 - -## UserID user[:group] -## default (none) -## -## Attempts to become the specified userid before starting operations. -## The process will be assigned all of the groups and primary group ID of -## the named userid unless an alternate group is specified. -# -UserID opendmarc:mail diff --git a/templates/Fedora/40/etc/postfix/access b/templates/Fedora/40/etc/postfix/access deleted file mode 100644 index 97892eb..0000000 --- a/templates/Fedora/40/etc/postfix/access +++ /dev/null @@ -1,484 +0,0 @@ -# ACCESS(5) ACCESS(5) -# -# NAME -# access - Postfix SMTP server access table -# -# SYNOPSIS -# postmap /etc/postfix/access -# -# postmap -q "string" /etc/postfix/access -# -# postmap -q - /etc/postfix/access as the lookup key for such addresses. The value is -# specified with the smtpd_null_access_lookup_key parameter -# in the Postfix main.cf file. -# -# EMAIL ADDRESS EXTENSION -# When a mail address localpart contains the optional recip- -# ient delimiter (e.g., user+foo@domain), the lookup order -# becomes: user+foo@domain, user@domain, domain, user+foo@, -# and user@. -# -# HOST NAME/ADDRESS PATTERNS -# With lookups from indexed files such as DB or DBM, or from -# networked tables such as NIS, LDAP or SQL, the following -# lookup patterns are examined in the order as listed: -# -# domain.tld -# Matches domain.tld. -# -# The pattern domain.tld also matches subdomains, but -# only when the string smtpd_access_maps is listed in -# the Postfix parent_domain_matches_subdomains con- -# figuration setting. -# -# .domain.tld -# Matches subdomains of domain.tld, but only when the -# string smtpd_access_maps is not listed in the Post- -# fix parent_domain_matches_subdomains configuration -# setting. -# -# net.work.addr.ess -# -# net.work.addr -# -# net.work -# -# net Matches a remote IPv4 host address or network -# address range. Specify one to four decimal octets -# separated by ".". Do not specify "[]" , "/", lead- -# ing zeros, or hexadecimal forms. -# -# Network ranges are matched by repeatedly truncating -# the last ".octet" from a remote IPv4 host address -# string, until a match is found in the access table, -# or until further truncation is not possible. -# -# NOTE: use the cidr lookup table type to specify -# network/netmask patterns. See cidr_table(5) for -# details. -# -# net:work:addr:ess -# -# net:work:addr -# -# net:work -# -# net Matches a remote IPv6 host address or network -# address range. Specify three to eight hexadecimal -# octet pairs separated by ":", using the compressed -# form "::" for a sequence of zero-valued octet -# pairs. Do not specify "[]", "/", leading zeros, or -# non-compressed forms. -# -# A network range is matched by repeatedly truncating -# the last ":octetpair" from the compressed-form -# remote IPv6 host address string, until a match is -# found in the access table, or until further trunca- -# tion is not possible. -# -# NOTE: use the cidr lookup table type to specify -# network/netmask patterns. See cidr_table(5) for -# details. -# -# IPv6 support is available in Postfix 2.2 and later. -# -# ACCEPT ACTIONS -# OK Accept the address etc. that matches the pattern. -# -# all-numerical -# An all-numerical result is treated as OK. This for- -# mat is generated by address-based relay authoriza- -# tion schemes such as pop-before-smtp. -# -# For other accept actions, see "OTHER ACTIONS" below. -# -# REJECT ACTIONS -# Postfix version 2.3 and later support enhanced status -# codes as defined in RFC 3463. When no code is specified -# at the beginning of the text below, Postfix inserts a -# default enhanced status code of "5.7.1" in the case of -# reject actions, and "4.7.1" in the case of defer actions. -# See "ENHANCED STATUS CODES" below. -# -# 4NN text -# -# 5NN text -# Reject the address etc. that matches the pattern, -# and respond with the numerical three-digit code and -# text. 4NN means "try again later", while 5NN means -# "do not try again". -# -# The following responses have special meaning for -# the Postfix SMTP server: -# -# 421 text (Postfix 2.3 and later) -# -# 521 text (Postfix 2.6 and later) -# After responding with the numerical -# three-digit code and text, disconnect imme- -# diately from the SMTP client. This frees up -# SMTP server resources so that they can be -# made available to another SMTP client. -# -# Note: The "521" response should be used only -# with botnets and other malware where inter- -# operability is of no concern. The "send 521 -# and disconnect" behavior is NOT defined in -# the SMTP standard. -# -# REJECT optional text... -# Reject the address etc. that matches the pattern. -# Reply with "$access_map_reject_code optional -# text..." when the optional text is specified, oth- -# erwise reply with a generic error response message. -# -# DEFER optional text... -# Reject the address etc. that matches the pattern. -# Reply with "$access_map_defer_code optional -# text..." when the optional text is specified, oth- -# erwise reply with a generic error response message. -# -# This feature is available in Postfix 2.6 and later. -# -# DEFER_IF_REJECT optional text... -# Defer the request if some later restriction would -# result in a REJECT action. Reply with -# "$access_map_defer_code 4.7.1 optional text..." -# when the optional text is specified, otherwise -# reply with a generic error response message. -# -# Prior to Postfix 2.6, the SMTP reply code is 450. -# -# This feature is available in Postfix 2.1 and later. -# -# DEFER_IF_PERMIT optional text... -# Defer the request if some later restriction would -# result in an explicit or implicit PERMIT action. -# Reply with "$access_map_defer_code 4.7.1 optional -# text..." when the optional text is specified, oth- -# erwise reply with a generic error response message. -# -# Prior to Postfix 2.6, the SMTP reply code is 450. -# -# This feature is available in Postfix 2.1 and later. -# -# For other reject actions, see "OTHER ACTIONS" below. -# -# OTHER ACTIONS -# restriction... -# Apply the named UCE restriction(s) (permit, reject, -# reject_unauth_destination, and so on). -# -# BCC user@domain -# Send one copy of the message to the specified -# recipient. -# -# If multiple BCC actions are specified within the -# same SMTP MAIL transaction, with Postfix 3.0 only -# the last action will be used. -# -# This feature is available in Postfix 3.0 and later. -# -# DISCARD optional text... -# Claim successful delivery and silently discard the -# message. Log the optional text if specified, oth- -# erwise log a generic message. -# -# Note: this action currently affects all recipients -# of the message. To discard only one recipient -# without discarding the entire message, use the -# transport(5) table to direct mail to the discard(8) -# service. -# -# This feature is available in Postfix 2.0 and later. -# -# DUNNO Pretend that the lookup key was not found. This -# prevents Postfix from trying substrings of the -# lookup key (such as a subdomain name, or a network -# address subnetwork). -# -# This feature is available in Postfix 2.0 and later. -# -# FILTER transport:destination -# After the message is queued, send the entire mes- -# sage through the specified external content filter. -# The transport name specifies the first field of a -# mail delivery agent definition in master.cf; the -# syntax of the next-hop destination is described in -# the manual page of the corresponding delivery -# agent. More information about external content -# filters is in the Postfix FILTER_README file. -# -# Note 1: do not use $number regular expression sub- -# stitutions for transport or destination unless you -# know that the information has a trusted origin. -# -# Note 2: this action overrides the main.cf con- -# tent_filter setting, and affects all recipients of -# the message. In the case that multiple FILTER -# actions fire, only the last one is executed. -# -# Note 3: the purpose of the FILTER command is to -# override message routing. To override the recipi- -# ent's transport but not the next-hop destination, -# specify an empty filter destination (Postfix 2.7 -# and later), or specify a transport:destination that -# delivers through a different Postfix instance -# (Postfix 2.6 and earlier). Other options are using -# the recipient-dependent transport_maps or the sen- -# der-dependent sender_dependent_default_transport- -# _maps features. -# -# This feature is available in Postfix 2.0 and later. -# -# HOLD optional text... -# Place the message on the hold queue, where it will -# sit until someone either deletes it or releases it -# for delivery. Log the optional text if specified, -# otherwise log a generic message. -# -# Mail that is placed on hold can be examined with -# the postcat(1) command, and can be destroyed or -# released with the postsuper(1) command. -# -# Note: use "postsuper -r" to release mail that was -# kept on hold for a significant fraction of $maxi- -# mal_queue_lifetime or $bounce_queue_lifetime, or -# longer. Use "postsuper -H" only for mail that will -# not expire within a few delivery attempts. -# -# Note: this action currently affects all recipients -# of the message. -# -# This feature is available in Postfix 2.0 and later. -# -# PREPEND headername: headervalue -# Prepend the specified message header to the mes- -# sage. When more than one PREPEND action executes, -# the first prepended header appears before the sec- -# ond etc. prepended header. -# -# Note: this action must execute before the message -# content is received; it cannot execute in the con- -# text of smtpd_end_of_data_restrictions. -# -# This feature is available in Postfix 2.1 and later. -# -# REDIRECT user@domain -# After the message is queued, send the message to -# the specified address instead of the intended -# recipient(s). When multiple REDIRECT actions fire, -# only the last one takes effect. -# -# Note: this action overrides the FILTER action, and -# currently overrides all recipients of the message. -# -# This feature is available in Postfix 2.1 and later. -# -# INFO optional text... -# Log an informational record with the optional text, -# together with client information and if available, -# with helo, sender, recipient and protocol informa- -# tion. -# -# This feature is available in Postfix 3.0 and later. -# -# WARN optional text... -# Log a warning with the optional text, together with -# client information and if available, with helo, -# sender, recipient and protocol information. -# -# This feature is available in Postfix 2.1 and later. -# -# ENHANCED STATUS CODES -# Postfix version 2.3 and later support enhanced status -# codes as defined in RFC 3463. When an enhanced status -# code is specified in an access table, it is subject to -# modification. The following transformations are needed -# when the same access table is used for client, helo, -# sender, or recipient access restrictions; they happen -# regardless of whether Postfix replies to a MAIL FROM, RCPT -# TO or other SMTP command. -# -# o When a sender address matches a REJECT action, the -# Postfix SMTP server will transform a recipient DSN -# status (e.g., 4.1.1-4.1.6) into the corresponding -# sender DSN status, and vice versa. -# -# o When non-address information matches a REJECT -# action (such as the HELO command argument or the -# client hostname/address), the Postfix SMTP server -# will transform a sender or recipient DSN status -# into a generic non-address DSN status (e.g., -# 4.0.0). -# -# REGULAR EXPRESSION TABLES -# This section describes how the table lookups change when -# the table is given in the form of regular expressions. For -# a description of regular expression lookup table syntax, -# see regexp_table(5) or pcre_table(5). -# -# Each pattern is a regular expression that is applied to -# the entire string being looked up. Depending on the appli- -# cation, that string is an entire client hostname, an -# entire client IP address, or an entire mail address. Thus, -# no parent domain or parent network search is done, -# user@domain mail addresses are not broken up into their -# user@ and domain constituent parts, nor is user+foo broken -# up into user and foo. -# -# Patterns are applied in the order as specified in the ta- -# ble, until a pattern is found that matches the search -# string. -# -# Actions are the same as with indexed file lookups, with -# the additional feature that parenthesized substrings from -# the pattern can be interpolated as $1, $2 and so on. -# -# TCP-BASED TABLES -# This section describes how the table lookups change when -# lookups are directed to a TCP-based server. For a descrip- -# tion of the TCP client/server lookup protocol, see tcp_ta- -# ble(5). This feature is not available up to and including -# Postfix version 2.4. -# -# Each lookup operation uses the entire query string once. -# Depending on the application, that string is an entire -# client hostname, an entire client IP address, or an entire -# mail address. Thus, no parent domain or parent network -# search is done, user@domain mail addresses are not broken -# up into their user@ and domain constituent parts, nor is -# user+foo broken up into user and foo. -# -# Actions are the same as with indexed file lookups. -# -# EXAMPLE -# The following example uses an indexed file, so that the -# order of table entries does not matter. The example per- -# mits access by the client at address 1.2.3.4 but rejects -# all other clients in 1.2.3.0/24. Instead of hash lookup -# tables, some systems use dbm. Use the command "postconf -# -m" to find out what lookup tables Postfix supports on -# your system. -# -# /etc/postfix/main.cf: -# smtpd_client_restrictions = -# check_client_access hash:/etc/postfix/access -# -# /etc/postfix/access: -# 1.2.3 REJECT -# 1.2.3.4 OK -# -# Execute the command "postmap /etc/postfix/access" after -# editing the file. -# -# BUGS -# The table format does not understand quoting conventions. -# -# SEE ALSO -# postmap(1), Postfix lookup table manager -# smtpd(8), SMTP server -# postconf(5), configuration parameters -# transport(5), transport:nexthop syntax -# -# README FILES -# Use "postconf readme_directory" or "postconf html_direc- -# tory" to locate this information. -# SMTPD_ACCESS_README, built-in SMTP server access control -# DATABASE_README, Postfix lookup table overview -# -# LICENSE -# The Secure Mailer license must be distributed with this -# software. -# -# AUTHOR(S) -# Wietse Venema -# IBM T.J. Watson Research -# P.O. Box 704 -# Yorktown Heights, NY 10598, USA -# -# Wietse Venema -# Google, Inc. -# 111 8th Avenue -# New York, NY 10011, USA -# -# ACCESS(5) diff --git a/templates/Fedora/40/etc/postfix/canonical b/templates/Fedora/40/etc/postfix/canonical deleted file mode 100644 index 4957fcc..0000000 --- a/templates/Fedora/40/etc/postfix/canonical +++ /dev/null @@ -1,307 +0,0 @@ -# CANONICAL(5) CANONICAL(5) -# -# NAME -# canonical - Postfix canonical table format -# -# SYNOPSIS -# postmap /etc/postfix/canonical -# -# postmap -q "string" /etc/postfix/canonical -# -# postmap -q - /etc/postfix/canonical $/ -# REJECT IFRAME vulnerability exploit -# -# SEE ALSO -# cleanup(8), canonicalize and enqueue Postfix message -# pcre_table(5), format of PCRE lookup tables -# regexp_table(5), format of POSIX regular expression tables -# postconf(1), Postfix configuration utility -# postmap(1), Postfix lookup table management -# postsuper(1), Postfix janitor -# postcat(1), show Postfix queue file contents -# RFC 2045, base64 and quoted-printable encoding rules -# RFC 2047, message header encoding for non-ASCII text -# -# README FILES -# Use "postconf readme_directory" or "postconf html_direc- -# tory" to locate this information. -# DATABASE_README, Postfix lookup table overview -# CONTENT_INSPECTION_README, Postfix content inspection overview -# BUILTIN_FILTER_README, Postfix built-in content inspection -# BACKSCATTER_README, blocking returned forged mail -# -# LICENSE -# The Secure Mailer license must be distributed with this -# software. -# -# AUTHOR(S) -# Wietse Venema -# IBM T.J. Watson Research -# P.O. Box 704 -# Yorktown Heights, NY 10598, USA -# -# Wietse Venema -# Google, Inc. -# 111 8th Avenue -# New York, NY 10011, USA -# -# HEADER_CHECKS(5) diff --git a/templates/Fedora/40/etc/postfix/main.cf b/templates/Fedora/40/etc/postfix/main.cf deleted file mode 100644 index e7c5ce2..0000000 --- a/templates/Fedora/40/etc/postfix/main.cf +++ /dev/null @@ -1,774 +0,0 @@ -# Global Postfix configuration file. This file lists only a subset -# of all parameters. For the syntax, and for a complete parameter -# list, see the postconf(5) manual page (command: "man 5 postconf"). -# -# TIP: use the command "postconf -n" to view main.cf parameter -# settings, "postconf parametername" to view a specific parameter, -# and "postconf 'parametername=value'" to set a specific parameter. -# -# For common configuration examples, see BASIC_CONFIGURATION_README -# and STANDARD_CONFIGURATION_README. To find these documents, use -# the command "postconf html_directory readme_directory", or go to -# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. -# -# For best results, change no more than 2-3 parameters at a time, -# and test if Postfix still works after every change. - -# COMPATIBILITY -# -# The compatibility_level determines what default settings Postfix -# will use for main.cf and master.cf settings. These defaults will -# change over time. -# -# To avoid breaking things, Postfix will use backwards-compatible -# default settings and log where it uses those old backwards-compatible -# default settings, until the system administrator has determined -# if any backwards-compatible default settings need to be made -# permanent in main.cf or master.cf. -# -# When this review is complete, update the compatibility_level setting -# below as recommended in the RELEASE_NOTES file. -# -# The level below is what should be used with new (not upgrade) installs. -# -compatibility_level = 3.7 - -# SOFT BOUNCE -# -# The soft_bounce parameter provides a limited safety net for -# testing. When soft_bounce is enabled, mail will remain queued that -# would otherwise bounce. This parameter disables locally-generated -# bounces, and prevents the SMTP server from rejecting mail permanently -# (by changing 5xx replies into 4xx replies). However, soft_bounce -# is no cure for address rewriting mistakes or mail routing mistakes. -# -#soft_bounce = no - -# LOCAL PATHNAME INFORMATION -# -# The queue_directory specifies the location of the Postfix queue. -# This is also the root directory of Postfix daemons that run chrooted. -# See the files in examples/chroot-setup for setting up Postfix chroot -# environments on different UNIX systems. -# -queue_directory = /var/spool/postfix - -# The command_directory parameter specifies the location of all -# postXXX commands. -# -command_directory = /usr/sbin - -# The daemon_directory parameter specifies the location of all Postfix -# daemon programs (i.e. programs listed in the master.cf file). This -# directory must be owned by root. -# -daemon_directory = /usr/libexec/postfix - -# The data_directory parameter specifies the location of Postfix-writable -# data files (caches, random numbers). This directory must be owned -# by the mail_owner account (see below). -# -data_directory = /var/lib/postfix - -# QUEUE AND PROCESS OWNERSHIP -# -# The mail_owner parameter specifies the owner of the Postfix queue -# and of most Postfix daemon processes. Specify the name of a user -# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS -# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In -# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED -# USER. -# -mail_owner = postfix - -# The default_privs parameter specifies the default rights used by -# the local delivery agent for delivery to external file or command. -# These rights are used in the absence of a recipient user context. -# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. -# -#default_privs = nobody - -# INTERNET HOST AND DOMAIN NAMES -# -# The myhostname parameter specifies the internet hostname of this -# mail system. The default is to use the fully-qualified domain name -# from gethostname(). $myhostname is used as a default value for many -# other configuration parameters. -# -#myhostname = host.domain.tld -#myhostname = virtual.domain.tld - -# The mydomain parameter specifies the local internet domain name. -# The default is to use $myhostname minus the first component. -# $mydomain is used as a default value for many other configuration -# parameters. -# -#mydomain = domain.tld - -# SENDING MAIL -# -# The myorigin parameter specifies the domain that locally-posted -# mail appears to come from. The default is to append $myhostname, -# which is fine for small sites. If you run a domain with multiple -# machines, you should (1) change this to $mydomain and (2) set up -# a domain-wide alias database that aliases each user to -# user@that.users.mailhost. -# -# For the sake of consistency between sender and recipient addresses, -# myorigin also specifies the default domain name that is appended -# to recipient addresses that have no @domain part. -# -#myorigin = $myhostname -#myorigin = $mydomain - -# RECEIVING MAIL - -# The inet_interfaces parameter specifies the network interface -# addresses that this mail system receives mail on. By default, -# the software claims all active interfaces on the machine. The -# parameter also controls delivery of mail to user@[ip.address]. -# -# See also the proxy_interfaces parameter, for network addresses that -# are forwarded to us via a proxy or network address translator. -# -# Note: you need to stop/start Postfix when this parameter changes. -# -inet_interfaces = all -#inet_interfaces = $myhostname -#inet_interfaces = $myhostname, localhost -#inet_interfaces = localhost - -# Enable IPv4, and IPv6 if supported -inet_protocols = all - -# The proxy_interfaces parameter specifies the network interface -# addresses that this mail system receives mail on by way of a -# proxy or network address translation unit. This setting extends -# the address list specified with the inet_interfaces parameter. -# -# You must specify your proxy/NAT addresses when your system is a -# backup MX host for other domains, otherwise mail delivery loops -# will happen when the primary MX host is down. -# -#proxy_interfaces = -#proxy_interfaces = 1.2.3.4 - -# The mydestination parameter specifies the list of domains that this -# machine considers itself the final destination for. -# -# These domains are routed to the delivery agent specified with the -# local_transport parameter setting. By default, that is the UNIX -# compatible delivery agent that lookups all recipients in /etc/passwd -# and /etc/aliases or their equivalent. -# -# The default is $myhostname + localhost.$mydomain + localhost. On -# a mail domain gateway, you should also include $mydomain. -# -# Do not specify the names of virtual domains - those domains are -# specified elsewhere (see VIRTUAL_README). -# -# Do not specify the names of domains that this machine is backup MX -# host for. Specify those names via the relay_domains settings for -# the SMTP server, or use permit_mx_backup if you are lazy (see -# STANDARD_CONFIGURATION_README). -# -# The local machine is always the final destination for mail addressed -# to user@[the.net.work.address] of an interface that the mail system -# receives mail on (see the inet_interfaces parameter). -# -# Specify a list of host or domain names, /file/name or type:table -# patterns, separated by commas and/or whitespace. A /file/name -# pattern is replaced by its contents; a type:table is matched when -# a name matches a lookup key (the right-hand side is ignored). -# Continue long lines by starting the next line with whitespace. -# -# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". -# -mydestination = $myhostname, localhost.$mydomain, localhost -#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain -#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, -# mail.$mydomain, www.$mydomain, ftp.$mydomain - -# REJECTING MAIL FOR UNKNOWN LOCAL USERS -# -# The local_recipient_maps parameter specifies optional lookup tables -# with all names or addresses of users that are local with respect -# to $mydestination, $inet_interfaces or $proxy_interfaces. -# -# If this parameter is defined, then the SMTP server will reject -# mail for unknown local users. This parameter is defined by default. -# -# To turn off local recipient checking in the SMTP server, specify -# local_recipient_maps = (i.e. empty). -# -# The default setting assumes that you use the default Postfix local -# delivery agent for local delivery. You need to update the -# local_recipient_maps setting if: -# -# - You define $mydestination domain recipients in files other than -# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. -# For example, you define $mydestination domain recipients in -# the $virtual_mailbox_maps files. -# -# - You redefine the local delivery agent in master.cf. -# -# - You redefine the "local_transport" setting in main.cf. -# -# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" -# feature of the Postfix local delivery agent (see local(8)). -# -# Details are described in the LOCAL_RECIPIENT_README file. -# -# Beware: if the Postfix SMTP server runs chrooted, you probably have -# to access the passwd file via the proxymap service, in order to -# overcome chroot restrictions. The alternative, having a copy of -# the system passwd file in the chroot jail is just not practical. -# -# The right-hand side of the lookup tables is conveniently ignored. -# In the left-hand side, specify a bare username, an @domain.tld -# wild-card, or specify a user@domain.tld address. -# -#local_recipient_maps = unix:passwd.byname $alias_maps -#local_recipient_maps = proxy:unix:passwd.byname $alias_maps -#local_recipient_maps = - -# The unknown_local_recipient_reject_code specifies the SMTP server -# response code when a recipient domain matches $mydestination or -# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty -# and the recipient address or address local-part is not found. -# -# The default setting is 550 (reject mail) but it is safer to start -# with 450 (try again later) until you are certain that your -# local_recipient_maps settings are OK. -# -unknown_local_recipient_reject_code = 550 - -# TRUST AND RELAY CONTROL - -# The mynetworks parameter specifies the list of "trusted" SMTP -# clients that have more privileges than "strangers". -# -# In particular, "trusted" SMTP clients are allowed to relay mail -# through Postfix. See the smtpd_recipient_restrictions parameter -# in postconf(5). -# -# You can specify the list of "trusted" network addresses by hand -# or you can let Postfix do it for you (which is the default). -# -# By default (mynetworks_style = host), Postfix "trusts" only -# the local machine. -# -# Specify "mynetworks_style = subnet" when Postfix should "trust" -# SMTP clients in the same IP subnetworks as the local machine. -# On Linux, this works correctly only with interfaces specified -# with the "ifconfig" or "ip" command. -# -# Specify "mynetworks_style = class" when Postfix should "trust" SMTP -# clients in the same IP class A/B/C networks as the local machine. -# Don't do this with a dialup site - it would cause Postfix to "trust" -# your entire provider's network. Instead, specify an explicit -# mynetworks list by hand, as described below. -# -# Specify "mynetworks_style = host" when Postfix should "trust" -# only the local machine. -# -#mynetworks_style = class -#mynetworks_style = subnet -#mynetworks_style = host - -# Alternatively, you can specify the mynetworks list by hand, in -# which case Postfix ignores the mynetworks_style setting. -# -# Specify an explicit list of network/netmask patterns, where the -# mask specifies the number of bits in the network part of a host -# address. -# -# You can also specify the absolute pathname of a pattern file instead -# of listing the patterns here. Specify type:table for table-based lookups -# (the value on the table right-hand side is not used). -# -#mynetworks = 168.100.3.0/28, 127.0.0.0/8 -#mynetworks = $config_directory/mynetworks -#mynetworks = hash:/etc/postfix/network_table - -# The relay_domains parameter restricts what destinations this system will -# relay mail to. See the smtpd_relay_restrictions and -# smtpd_recipient_restrictions descriptions in postconf(5) for detailed -# information. -# -# By default, Postfix relays mail -# - from "trusted" clients (IP address matches $mynetworks, or is -# SASL authenticated) to any destination, -# - from "untrusted" clients to destinations that match $relay_domains or -# subdomains thereof, except addresses with sender-specified routing. -# The default relay_domains value is empty. -# -# In addition to the above, the Postfix SMTP server by default accepts mail -# that Postfix is final destination for: -# - destinations that match $inet_interfaces or $proxy_interfaces, -# - destinations that match $mydestination -# - destinations that match $virtual_alias_domains, -# - destinations that match $virtual_mailbox_domains. -# These destinations do not need to be listed in $relay_domains. -# -# Specify a list of hosts or domains, /file/name patterns or type:name -# lookup tables, separated by commas and/or whitespace. Continue -# long lines by starting the next line with whitespace. A file name -# is replaced by its contents; a type:name table is matched when a -# (parent) domain appears as lookup key. -# -# NOTE: Postfix will not automatically forward mail for domains that -# list this system as their primary or backup MX host. See the -# permit_mx_backup restriction description in postconf(5). -# -#relay_domains = - -# INTERNET OR INTRANET - -# The relayhost parameter specifies the default host to send mail to -# when no entry is matched in the optional transport(5) table. When -# no relayhost is given, mail is routed directly to the destination. -# -# On an intranet, specify the organizational domain name. If your -# internal DNS uses no MX records, specify the name of the intranet -# gateway host instead. -# -# In the case of SMTP, specify a domain, host, host:port, [host]:port, -# [address] or [address]:port; the form [host] turns off MX lookups. -# -# If you're connected via UUCP, see also the default_transport parameter. -# -#relayhost = $mydomain -#relayhost = [gateway.my.domain] -#relayhost = [mailserver.isp.tld] -#relayhost = uucphost -#relayhost = [an.ip.add.ress] - -# REJECTING UNKNOWN RELAY USERS -# -# The relay_recipient_maps parameter specifies optional lookup tables -# with all addresses in the domains that match $relay_domains. -# -# If this parameter is defined, then the SMTP server will reject -# mail for unknown relay users. This feature is off by default. -# -# The right-hand side of the lookup tables is conveniently ignored. -# In the left-hand side, specify an @domain.tld wild-card, or specify -# a user@domain.tld address. -# -#relay_recipient_maps = hash:/etc/postfix/relay_recipients - -# INPUT RATE CONTROL -# -# The in_flow_delay configuration parameter implements mail input -# flow control. This feature is turned on by default, although it -# still needs further development (it's disabled on SCO UNIX due -# to an SCO bug). -# -# A Postfix process will pause for $in_flow_delay seconds before -# accepting a new message, when the message arrival rate exceeds the -# message delivery rate. With the default 100 SMTP server process -# limit, this limits the mail inflow to 100 messages a second more -# than the number of messages delivered per second. -# -# Specify 0 to disable the feature. Valid delays are 0..10. -# -#in_flow_delay = 1s - -# ADDRESS REWRITING -# -# The ADDRESS_REWRITING_README document gives information about -# address masquerading or other forms of address rewriting including -# username->Firstname.Lastname mapping. - -# ADDRESS REDIRECTION (VIRTUAL DOMAIN) -# -# The VIRTUAL_README document gives information about the many forms -# of domain hosting that Postfix supports. - -# "USER HAS MOVED" BOUNCE MESSAGES -# -# See the discussion in the ADDRESS_REWRITING_README document. - -# TRANSPORT MAP -# -# See the discussion in the ADDRESS_REWRITING_README document. - -# ALIAS DATABASE -# -# The alias_maps parameter specifies the list of alias databases used -# by the local delivery agent. The default list is system dependent. -# -# On systems with NIS, the default is to search the local alias -# database, then the NIS alias database. See aliases(5) for syntax -# details. -# -# If you change the alias database, run "postalias /etc/aliases" (or -# wherever your system stores the mail alias file), or simply run -# "newaliases" to build the necessary DBM or DB file. -# -# It will take a minute or so before changes become visible. Use -# "postfix reload" to eliminate the delay. -# -#alias_maps = dbm:/etc/aliases -alias_maps = hash:/etc/aliases -#alias_maps = hash:/etc/aliases, nis:mail.aliases -#alias_maps = netinfo:/aliases - -# The alias_database parameter specifies the alias database(s) that -# are built with "newaliases" or "sendmail -bi". This is a separate -# configuration parameter, because alias_maps (see above) may specify -# tables that are not necessarily all under control by Postfix. -# -#alias_database = dbm:/etc/aliases -#alias_database = dbm:/etc/mail/aliases -alias_database = hash:/etc/aliases -#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases - -# ADDRESS EXTENSIONS (e.g., user+foo) -# -# The recipient_delimiter parameter specifies the separator between -# user names and address extensions (user+foo). See canonical(5), -# local(8), relocated(5) and virtual(5) for the effects this has on -# aliases, canonical, virtual, relocated and .forward file lookups. -# Basically, the software tries user+foo and .forward+foo before -# trying user and .forward. -# -#recipient_delimiter = + - -# DELIVERY TO MAILBOX -# -# The home_mailbox parameter specifies the optional pathname of a -# mailbox file relative to a user's home directory. The default -# mailbox file is /var/spool/mail/user or /var/mail/user. Specify -# "Maildir/" for qmail-style delivery (the / is required). -# -#home_mailbox = Mailbox -#home_mailbox = Maildir/ - -# The mail_spool_directory parameter specifies the directory where -# UNIX-style mailboxes are kept. The default setting depends on the -# system type. -# -#mail_spool_directory = /var/mail -#mail_spool_directory = /var/spool/mail - -# The mailbox_command parameter specifies the optional external -# command to use instead of mailbox delivery. The command is run as -# the recipient with proper HOME, SHELL and LOGNAME environment settings. -# Exception: delivery for root is done as $default_user. -# -# Other environment variables of interest: USER (recipient username), -# EXTENSION (address extension), DOMAIN (domain part of address), -# and LOCAL (the address localpart). -# -# Unlike other Postfix configuration parameters, the mailbox_command -# parameter is not subjected to $parameter substitutions. This is to -# make it easier to specify shell syntax (see example below). -# -# Avoid shell meta characters because they will force Postfix to run -# an expensive shell process. Procmail alone is expensive enough. -# -# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN -# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. -# -#mailbox_command = /some/where/procmail -#mailbox_command = /some/where/procmail -a "$EXTENSION" - -# The mailbox_transport specifies the optional transport in master.cf -# to use after processing aliases and .forward files. This parameter -# has precedence over the mailbox_command, fallback_transport and -# luser_relay parameters. -# -# Specify a string of the form transport:nexthop, where transport is -# the name of a mail delivery transport defined in master.cf. The -# :nexthop part is optional. For more details see the sample transport -# configuration file. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must update the "local_recipient_maps" setting in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" -# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. -#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp -mailbox_transport = lmtp:inet:localhost:24 -virtual_transport = lmtp:inet:localhost:24 - -# If using the cyrus-imapd IMAP server deliver local mail to the IMAP -# server using LMTP (Local Mail Transport Protocol), this is prefered -# over the older cyrus deliver program by setting the -# mailbox_transport as below: -# -# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp -# -# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via -# these settings. -# -# local_destination_recipient_limit = 300 -# local_destination_concurrency_limit = 5 -# -# Of course you should adjust these settings as appropriate for the -# capacity of the hardware you are using. The recipient limit setting -# can be used to take advantage of the single instance message store -# capability of Cyrus. The concurrency limit can be used to control -# how many simultaneous LMTP sessions will be permitted to the Cyrus -# message store. -# -# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and -# subsequent line in master.cf. -#mailbox_transport = cyrus - -# The fallback_transport specifies the optional transport in master.cf -# to use for recipients that are not found in the UNIX passwd database. -# This parameter has precedence over the luser_relay parameter. -# -# Specify a string of the form transport:nexthop, where transport is -# the name of a mail delivery transport defined in master.cf. The -# :nexthop part is optional. For more details see the sample transport -# configuration file. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must update the "local_recipient_maps" setting in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp -#fallback_transport = - -# The luser_relay parameter specifies an optional destination address -# for unknown recipients. By default, mail for unknown@$mydestination, -# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned -# as undeliverable. -# -# The following expansions are done on luser_relay: $user (recipient -# username), $shell (recipient shell), $home (recipient home directory), -# $recipient (full recipient address), $extension (recipient address -# extension), $domain (recipient domain), $local (entire recipient -# localpart), $recipient_delimiter. Specify ${name?value} or -# ${name:value} to expand value only when $name does (does not) exist. -# -# luser_relay works only for the default Postfix local delivery agent. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must specify "local_recipient_maps =" (i.e. empty) in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -#luser_relay = $user@other.host -#luser_relay = $local@other.host -#luser_relay = admin+$local - -# JUNK MAIL CONTROLS -# -# The controls listed here are only a very small subset. The file -# SMTPD_ACCESS_README provides an overview. - -# The header_checks parameter specifies an optional table with patterns -# that each logical message header is matched against, including -# headers that span multiple physical lines. -# -# By default, these patterns also apply to MIME headers and to the -# headers of attached messages. With older Postfix versions, MIME and -# attached message headers were treated as body text. -# -# For details, see "man header_checks". -# -#header_checks = regexp:/etc/postfix/header_checks - -# FAST ETRN SERVICE -# -# Postfix maintains per-destination logfiles with information about -# deferred mail, so that mail can be flushed quickly with the SMTP -# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". -# See the ETRN_README document for a detailed description. -# -# The fast_flush_domains parameter controls what destinations are -# eligible for this service. By default, they are all domains that -# this server is willing to relay mail to. -# -#fast_flush_domains = $relay_domains - -# SHOW SOFTWARE VERSION OR NOT -# -# The smtpd_banner parameter specifies the text that follows the 220 -# code in the SMTP server's greeting banner. Some people like to see -# the mail version advertised. By default, Postfix shows no version. -# -# You MUST specify $myhostname at the start of the text. That is an -# RFC requirement. Postfix itself does not care. -# -#smtpd_banner = $myhostname ESMTP $mail_name -#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) - -# PARALLEL DELIVERY TO THE SAME DESTINATION -# -# How many parallel deliveries to the same user or domain? With local -# delivery, it does not make sense to do massively parallel delivery -# to the same user, because mailbox updates must happen sequentially, -# and expensive pipelines in .forward files can cause disasters when -# too many are run at the same time. With SMTP deliveries, 10 -# simultaneous connections to the same domain could be sufficient to -# raise eyebrows. -# -# Each message delivery transport has its XXX_destination_concurrency_limit -# parameter. The default is $default_destination_concurrency_limit for -# most delivery transports. For the local delivery agent the default is 2. - -#local_destination_concurrency_limit = 2 -#default_destination_concurrency_limit = 20 - -# DEBUGGING CONTROL -# -# The debug_peer_level parameter specifies the increment in verbose -# logging level when an SMTP client or server host name or address -# matches a pattern in the debug_peer_list parameter. -# -debug_peer_level = 2 - -# The debug_peer_list parameter specifies an optional list of domain -# or network patterns, /file/name patterns or type:name tables. When -# an SMTP client or server host name or address matches a pattern, -# increase the verbose logging level by the amount specified in the -# debug_peer_level parameter. -# -#debug_peer_list = 127.0.0.1 -#debug_peer_list = some.domain - -# The debugger_command specifies the external command that is executed -# when a Postfix daemon program is run with the -D option. -# -# Use "command .. & sleep 5" so that the debugger can attach before -# the process marches on. If you use an X-based debugger, be sure to -# set up your XAUTHORITY environment variable before starting Postfix. -# -debugger_command = - PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin - ddd $daemon_directory/$process_name $process_id & sleep 5 - -# If you can't use X, use this to capture the call stack when a -# daemon crashes. The result is in a file in the configuration -# directory, and is named after the process name and the process ID. -# -# debugger_command = -# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; -# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 -# >$config_directory/$process_name.$process_id.log & sleep 5 -# -# Another possibility is to run gdb under a detached screen session. -# To attach to the screen session, su root and run "screen -r -# " where uniquely matches one of the detached -# sessions (from "screen -list"). -# -# debugger_command = -# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen -# -dmS $process_name gdb $daemon_directory/$process_name -# $process_id & sleep 1 - -# INSTALL-TIME CONFIGURATION INFORMATION -# -# The following parameters are used when installing a new Postfix version. -# -# sendmail_path: The full pathname of the Postfix sendmail command. -# This is the Sendmail-compatible mail posting interface. -# -sendmail_path = /usr/sbin/sendmail.postfix - -# newaliases_path: The full pathname of the Postfix newaliases command. -# This is the Sendmail-compatible command to build alias databases. -# -newaliases_path = /usr/bin/newaliases.postfix - -# mailq_path: The full pathname of the Postfix mailq command. This -# is the Sendmail-compatible mail queue listing command. -# -mailq_path = /usr/bin/mailq.postfix - -# setgid_group: The group for mail submission and queue management -# commands. This must be a group name with a numerical group ID that -# is not shared with other accounts, not even with the Postfix account. -# -setgid_group = postdrop - -# html_directory: The location of the Postfix HTML documentation. -# -html_directory = no - -# manpage_directory: The location of the Postfix on-line manual pages. -# -manpage_directory = /usr/share/man - -# sample_directory: The location of the Postfix sample configuration files. -# This parameter is obsolete as of Postfix 2.1. -# -sample_directory = /usr/share/doc/postfix/samples - -# readme_directory: The location of the Postfix README files. -# -readme_directory = /usr/share/doc/postfix/README_FILES - -# TLS CONFIGURATION -# -# Basic Postfix TLS configuration by default with self-signed certificate -# for inbound SMTP and also opportunistic TLS for outbound SMTP. - -# The full pathname of a file with the Postfix SMTP server RSA certificate -# in PEM format. Intermediate certificates should be included in general, -# the server certificate first, then the issuing CA(s) (bottom-up order). -# -# smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem -smtpd_tls_cert_file = /etc/postfix/certificates/pubcert.pem - -# The full pathname of a file with the Postfix SMTP server RSA private key -# in PEM format. The private key must be accessible without a pass-phrase, -# i.e. it must not be encrypted. -# -# smtpd_tls_key_file = /etc/pki/tls/private/postfix.key -smtpd_tls_key_file = /etc/postfix/certificates/privkey.pem - -# Announce STARTTLS support to remote SMTP clients, but do not require that -# clients use TLS encryption (opportunistic TLS inbound). -# -smtpd_tls_security_level = may - -# Directory with PEM format Certification Authority certificates that the -# Postfix SMTP client uses to verify a remote SMTP server certificate. -# -smtp_tls_CApath = /etc/pki/tls/certs - -# The full pathname of a file containing CA certificates of root CAs -# trusted to sign either remote SMTP server certificates or intermediate CA -# certificates. -# -smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt - -# Use TLS if this is supported by the remote SMTP server, otherwise use -# plaintext (opportunistic TLS outbound). -# -smtp_tls_security_level = may -meta_directory = /etc/postfix -shlib_directory = /usr/lib64/postfix - -{% if ensure_postfix.milter_list is defined and ensure_postfix.milter_list is iterable %} -# The Milter List -{% for milter in ensure_postfix.milter_list %} -# -- {{ milter.description }} -- {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} -{% endfor %} -smtpd_milters = {% for milter in ensure_postfix.milter_list %} {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} {% endfor %} -{% endif %} - -{% if postfix_domains is defined and postfix_domains is iterable %} -virtual_mailbox_domains = {% for domain in postfix_domains %} {{ domain }} {% endfor %} -{% endif %} - -2bounce_notice_recipient = {{ postmaster_email }} -bounce_notice_recipient = {{ postmaster_email }} -delay_notice_recipient = {{ postmaster_email }} -error_notice_recipient = {{ postmaster_email }} -smtpd_helo_required = yes -disable_vrfy_command = yes -message_size_limit = {{ postfix_message_size_limit }} -smtpd_helo_restrictions = reject_unknown_helo_hostname -smtpd_client_restrictions = reject_unknown_reverse_client_hostname reject_unauth_pipelining -smtpd_discard_ehlo_keywords = silent-discard, dsn diff --git a/templates/Fedora/40/etc/postfix/main.cf.proto b/templates/Fedora/40/etc/postfix/main.cf.proto deleted file mode 100644 index 112c1f1..0000000 --- a/templates/Fedora/40/etc/postfix/main.cf.proto +++ /dev/null @@ -1,745 +0,0 @@ -# Global Postfix configuration file. This file lists only a subset -# of all parameters. For the syntax, and for a complete parameter -# list, see the postconf(5) manual page (command: "man 5 postconf"). -# -# TIP: use the command "postconf -n" to view main.cf parameter -# settings, "postconf parametername" to view a specific parameter, -# and "postconf 'parametername=value'" to set a specific parameter. -# -# For common configuration examples, see BASIC_CONFIGURATION_README -# and STANDARD_CONFIGURATION_README. To find these documents, use -# the command "postconf html_directory readme_directory", or go to -# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. -# -# For best results, change no more than 2-3 parameters at a time, -# and test if Postfix still works after every change. - -# COMPATIBILITY -# -# The compatibility_level determines what default settings Postfix -# will use for main.cf and master.cf settings. These defaults will -# change over time. -# -# To avoid breaking things, Postfix will use backwards-compatible -# default settings and log where it uses those old backwards-compatible -# default settings, until the system administrator has determined -# if any backwards-compatible default settings need to be made -# permanent in main.cf or master.cf. -# -# When this review is complete, update the compatibility_level setting -# below as recommended in the RELEASE_NOTES file. -# -# The level below is what should be used with new (not upgrade) installs. -# -compatibility_level = 3.7 - -# SOFT BOUNCE -# -# The soft_bounce parameter provides a limited safety net for -# testing. When soft_bounce is enabled, mail will remain queued that -# would otherwise bounce. This parameter disables locally-generated -# bounces, and prevents the SMTP server from rejecting mail permanently -# (by changing 5xx replies into 4xx replies). However, soft_bounce -# is no cure for address rewriting mistakes or mail routing mistakes. -# -#soft_bounce = no - -# LOCAL PATHNAME INFORMATION -# -# The queue_directory specifies the location of the Postfix queue. -# This is also the root directory of Postfix daemons that run chrooted. -# See the files in examples/chroot-setup for setting up Postfix chroot -# environments on different UNIX systems. -# -queue_directory = /var/spool/postfix - -# The command_directory parameter specifies the location of all -# postXXX commands. -# -command_directory = /usr/sbin - -# The daemon_directory parameter specifies the location of all Postfix -# daemon programs (i.e. programs listed in the master.cf file). This -# directory must be owned by root. -# -daemon_directory = /usr/libexec/postfix - -# The data_directory parameter specifies the location of Postfix-writable -# data files (caches, random numbers). This directory must be owned -# by the mail_owner account (see below). -# -data_directory = /var/lib/postfix - -# QUEUE AND PROCESS OWNERSHIP -# -# The mail_owner parameter specifies the owner of the Postfix queue -# and of most Postfix daemon processes. Specify the name of a user -# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS -# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In -# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED -# USER. -# -mail_owner = postfix - -# The default_privs parameter specifies the default rights used by -# the local delivery agent for delivery to external file or command. -# These rights are used in the absence of a recipient user context. -# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. -# -#default_privs = nobody - -# INTERNET HOST AND DOMAIN NAMES -# -# The myhostname parameter specifies the internet hostname of this -# mail system. The default is to use the fully-qualified domain name -# from gethostname(). $myhostname is used as a default value for many -# other configuration parameters. -# -#myhostname = host.domain.tld -#myhostname = virtual.domain.tld - -# The mydomain parameter specifies the local internet domain name. -# The default is to use $myhostname minus the first component. -# $mydomain is used as a default value for many other configuration -# parameters. -# -#mydomain = domain.tld - -# SENDING MAIL -# -# The myorigin parameter specifies the domain that locally-posted -# mail appears to come from. The default is to append $myhostname, -# which is fine for small sites. If you run a domain with multiple -# machines, you should (1) change this to $mydomain and (2) set up -# a domain-wide alias database that aliases each user to -# user@that.users.mailhost. -# -# For the sake of consistency between sender and recipient addresses, -# myorigin also specifies the default domain name that is appended -# to recipient addresses that have no @domain part. -# -#myorigin = $myhostname -#myorigin = $mydomain - -# RECEIVING MAIL - -# The inet_interfaces parameter specifies the network interface -# addresses that this mail system receives mail on. By default, -# the software claims all active interfaces on the machine. The -# parameter also controls delivery of mail to user@[ip.address]. -# -# See also the proxy_interfaces parameter, for network addresses that -# are forwarded to us via a proxy or network address translator. -# -# Note: you need to stop/start Postfix when this parameter changes. -# -#inet_interfaces = all -#inet_interfaces = $myhostname -#inet_interfaces = $myhostname, localhost -inet_interfaces = localhost - -# Enable IPv4, and IPv6 if supported -inet_protocols = all - -# The proxy_interfaces parameter specifies the network interface -# addresses that this mail system receives mail on by way of a -# proxy or network address translation unit. This setting extends -# the address list specified with the inet_interfaces parameter. -# -# You must specify your proxy/NAT addresses when your system is a -# backup MX host for other domains, otherwise mail delivery loops -# will happen when the primary MX host is down. -# -#proxy_interfaces = -#proxy_interfaces = 1.2.3.4 - -# The mydestination parameter specifies the list of domains that this -# machine considers itself the final destination for. -# -# These domains are routed to the delivery agent specified with the -# local_transport parameter setting. By default, that is the UNIX -# compatible delivery agent that lookups all recipients in /etc/passwd -# and /etc/aliases or their equivalent. -# -# The default is $myhostname + localhost.$mydomain + localhost. On -# a mail domain gateway, you should also include $mydomain. -# -# Do not specify the names of virtual domains - those domains are -# specified elsewhere (see VIRTUAL_README). -# -# Do not specify the names of domains that this machine is backup MX -# host for. Specify those names via the relay_domains settings for -# the SMTP server, or use permit_mx_backup if you are lazy (see -# STANDARD_CONFIGURATION_README). -# -# The local machine is always the final destination for mail addressed -# to user@[the.net.work.address] of an interface that the mail system -# receives mail on (see the inet_interfaces parameter). -# -# Specify a list of host or domain names, /file/name or type:table -# patterns, separated by commas and/or whitespace. A /file/name -# pattern is replaced by its contents; a type:table is matched when -# a name matches a lookup key (the right-hand side is ignored). -# Continue long lines by starting the next line with whitespace. -# -# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". -# -mydestination = $myhostname, localhost.$mydomain, localhost -#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain -#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, -# mail.$mydomain, www.$mydomain, ftp.$mydomain - -# REJECTING MAIL FOR UNKNOWN LOCAL USERS -# -# The local_recipient_maps parameter specifies optional lookup tables -# with all names or addresses of users that are local with respect -# to $mydestination, $inet_interfaces or $proxy_interfaces. -# -# If this parameter is defined, then the SMTP server will reject -# mail for unknown local users. This parameter is defined by default. -# -# To turn off local recipient checking in the SMTP server, specify -# local_recipient_maps = (i.e. empty). -# -# The default setting assumes that you use the default Postfix local -# delivery agent for local delivery. You need to update the -# local_recipient_maps setting if: -# -# - You define $mydestination domain recipients in files other than -# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. -# For example, you define $mydestination domain recipients in -# the $virtual_mailbox_maps files. -# -# - You redefine the local delivery agent in master.cf. -# -# - You redefine the "local_transport" setting in main.cf. -# -# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" -# feature of the Postfix local delivery agent (see local(8)). -# -# Details are described in the LOCAL_RECIPIENT_README file. -# -# Beware: if the Postfix SMTP server runs chrooted, you probably have -# to access the passwd file via the proxymap service, in order to -# overcome chroot restrictions. The alternative, having a copy of -# the system passwd file in the chroot jail is just not practical. -# -# The right-hand side of the lookup tables is conveniently ignored. -# In the left-hand side, specify a bare username, an @domain.tld -# wild-card, or specify a user@domain.tld address. -# -#local_recipient_maps = unix:passwd.byname $alias_maps -#local_recipient_maps = proxy:unix:passwd.byname $alias_maps -#local_recipient_maps = - -# The unknown_local_recipient_reject_code specifies the SMTP server -# response code when a recipient domain matches $mydestination or -# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty -# and the recipient address or address local-part is not found. -# -# The default setting is 550 (reject mail) but it is safer to start -# with 450 (try again later) until you are certain that your -# local_recipient_maps settings are OK. -# -unknown_local_recipient_reject_code = 550 - -# TRUST AND RELAY CONTROL - -# The mynetworks parameter specifies the list of "trusted" SMTP -# clients that have more privileges than "strangers". -# -# In particular, "trusted" SMTP clients are allowed to relay mail -# through Postfix. See the smtpd_recipient_restrictions parameter -# in postconf(5). -# -# You can specify the list of "trusted" network addresses by hand -# or you can let Postfix do it for you (which is the default). -# -# By default (mynetworks_style = host), Postfix "trusts" only -# the local machine. -# -# Specify "mynetworks_style = subnet" when Postfix should "trust" -# SMTP clients in the same IP subnetworks as the local machine. -# On Linux, this works correctly only with interfaces specified -# with the "ifconfig" or "ip" command. -# -# Specify "mynetworks_style = class" when Postfix should "trust" SMTP -# clients in the same IP class A/B/C networks as the local machine. -# Don't do this with a dialup site - it would cause Postfix to "trust" -# your entire provider's network. Instead, specify an explicit -# mynetworks list by hand, as described below. -# -# Specify "mynetworks_style = host" when Postfix should "trust" -# only the local machine. -# -#mynetworks_style = class -#mynetworks_style = subnet -#mynetworks_style = host - -# Alternatively, you can specify the mynetworks list by hand, in -# which case Postfix ignores the mynetworks_style setting. -# -# Specify an explicit list of network/netmask patterns, where the -# mask specifies the number of bits in the network part of a host -# address. -# -# You can also specify the absolute pathname of a pattern file instead -# of listing the patterns here. Specify type:table for table-based lookups -# (the value on the table right-hand side is not used). -# -#mynetworks = 168.100.3.0/28, 127.0.0.0/8 -#mynetworks = $config_directory/mynetworks -#mynetworks = hash:/etc/postfix/network_table - -# The relay_domains parameter restricts what destinations this system will -# relay mail to. See the smtpd_relay_restrictions and -# smtpd_recipient_restrictions descriptions in postconf(5) for detailed -# information. -# -# By default, Postfix relays mail -# - from "trusted" clients (IP address matches $mynetworks, or is -# SASL authenticated) to any destination, -# - from "untrusted" clients to destinations that match $relay_domains or -# subdomains thereof, except addresses with sender-specified routing. -# The default relay_domains value is empty. -# -# In addition to the above, the Postfix SMTP server by default accepts mail -# that Postfix is final destination for: -# - destinations that match $inet_interfaces or $proxy_interfaces, -# - destinations that match $mydestination -# - destinations that match $virtual_alias_domains, -# - destinations that match $virtual_mailbox_domains. -# These destinations do not need to be listed in $relay_domains. -# -# Specify a list of hosts or domains, /file/name patterns or type:name -# lookup tables, separated by commas and/or whitespace. Continue -# long lines by starting the next line with whitespace. A file name -# is replaced by its contents; a type:name table is matched when a -# (parent) domain appears as lookup key. -# -# NOTE: Postfix will not automatically forward mail for domains that -# list this system as their primary or backup MX host. See the -# permit_mx_backup restriction description in postconf(5). -# -#relay_domains = - -# INTERNET OR INTRANET - -# The relayhost parameter specifies the default host to send mail to -# when no entry is matched in the optional transport(5) table. When -# no relayhost is given, mail is routed directly to the destination. -# -# On an intranet, specify the organizational domain name. If your -# internal DNS uses no MX records, specify the name of the intranet -# gateway host instead. -# -# In the case of SMTP, specify a domain, host, host:port, [host]:port, -# [address] or [address]:port; the form [host] turns off MX lookups. -# -# If you're connected via UUCP, see also the default_transport parameter. -# -#relayhost = $mydomain -#relayhost = [gateway.my.domain] -#relayhost = [mailserver.isp.tld] -#relayhost = uucphost -#relayhost = [an.ip.add.ress] - -# REJECTING UNKNOWN RELAY USERS -# -# The relay_recipient_maps parameter specifies optional lookup tables -# with all addresses in the domains that match $relay_domains. -# -# If this parameter is defined, then the SMTP server will reject -# mail for unknown relay users. This feature is off by default. -# -# The right-hand side of the lookup tables is conveniently ignored. -# In the left-hand side, specify an @domain.tld wild-card, or specify -# a user@domain.tld address. -# -#relay_recipient_maps = hash:/etc/postfix/relay_recipients - -# INPUT RATE CONTROL -# -# The in_flow_delay configuration parameter implements mail input -# flow control. This feature is turned on by default, although it -# still needs further development (it's disabled on SCO UNIX due -# to an SCO bug). -# -# A Postfix process will pause for $in_flow_delay seconds before -# accepting a new message, when the message arrival rate exceeds the -# message delivery rate. With the default 100 SMTP server process -# limit, this limits the mail inflow to 100 messages a second more -# than the number of messages delivered per second. -# -# Specify 0 to disable the feature. Valid delays are 0..10. -# -#in_flow_delay = 1s - -# ADDRESS REWRITING -# -# The ADDRESS_REWRITING_README document gives information about -# address masquerading or other forms of address rewriting including -# username->Firstname.Lastname mapping. - -# ADDRESS REDIRECTION (VIRTUAL DOMAIN) -# -# The VIRTUAL_README document gives information about the many forms -# of domain hosting that Postfix supports. - -# "USER HAS MOVED" BOUNCE MESSAGES -# -# See the discussion in the ADDRESS_REWRITING_README document. - -# TRANSPORT MAP -# -# See the discussion in the ADDRESS_REWRITING_README document. - -# ALIAS DATABASE -# -# The alias_maps parameter specifies the list of alias databases used -# by the local delivery agent. The default list is system dependent. -# -# On systems with NIS, the default is to search the local alias -# database, then the NIS alias database. See aliases(5) for syntax -# details. -# -# If you change the alias database, run "postalias /etc/aliases" (or -# wherever your system stores the mail alias file), or simply run -# "newaliases" to build the necessary DBM or DB file. -# -# It will take a minute or so before changes become visible. Use -# "postfix reload" to eliminate the delay. -# -#alias_maps = dbm:/etc/aliases -alias_maps = hash:/etc/aliases -#alias_maps = hash:/etc/aliases, nis:mail.aliases -#alias_maps = netinfo:/aliases - -# The alias_database parameter specifies the alias database(s) that -# are built with "newaliases" or "sendmail -bi". This is a separate -# configuration parameter, because alias_maps (see above) may specify -# tables that are not necessarily all under control by Postfix. -# -#alias_database = dbm:/etc/aliases -#alias_database = dbm:/etc/mail/aliases -alias_database = hash:/etc/aliases -#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases - -# ADDRESS EXTENSIONS (e.g., user+foo) -# -# The recipient_delimiter parameter specifies the separator between -# user names and address extensions (user+foo). See canonical(5), -# local(8), relocated(5) and virtual(5) for the effects this has on -# aliases, canonical, virtual, relocated and .forward file lookups. -# Basically, the software tries user+foo and .forward+foo before -# trying user and .forward. -# -#recipient_delimiter = + - -# DELIVERY TO MAILBOX -# -# The home_mailbox parameter specifies the optional pathname of a -# mailbox file relative to a user's home directory. The default -# mailbox file is /var/spool/mail/user or /var/mail/user. Specify -# "Maildir/" for qmail-style delivery (the / is required). -# -#home_mailbox = Mailbox -#home_mailbox = Maildir/ - -# The mail_spool_directory parameter specifies the directory where -# UNIX-style mailboxes are kept. The default setting depends on the -# system type. -# -#mail_spool_directory = /var/mail -#mail_spool_directory = /var/spool/mail - -# The mailbox_command parameter specifies the optional external -# command to use instead of mailbox delivery. The command is run as -# the recipient with proper HOME, SHELL and LOGNAME environment settings. -# Exception: delivery for root is done as $default_user. -# -# Other environment variables of interest: USER (recipient username), -# EXTENSION (address extension), DOMAIN (domain part of address), -# and LOCAL (the address localpart). -# -# Unlike other Postfix configuration parameters, the mailbox_command -# parameter is not subjected to $parameter substitutions. This is to -# make it easier to specify shell syntax (see example below). -# -# Avoid shell meta characters because they will force Postfix to run -# an expensive shell process. Procmail alone is expensive enough. -# -# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN -# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. -# -#mailbox_command = /some/where/procmail -#mailbox_command = /some/where/procmail -a "$EXTENSION" - -# The mailbox_transport specifies the optional transport in master.cf -# to use after processing aliases and .forward files. This parameter -# has precedence over the mailbox_command, fallback_transport and -# luser_relay parameters. -# -# Specify a string of the form transport:nexthop, where transport is -# the name of a mail delivery transport defined in master.cf. The -# :nexthop part is optional. For more details see the sample transport -# configuration file. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must update the "local_recipient_maps" setting in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" -# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. -#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp - -# If using the cyrus-imapd IMAP server deliver local mail to the IMAP -# server using LMTP (Local Mail Transport Protocol), this is prefered -# over the older cyrus deliver program by setting the -# mailbox_transport as below: -# -# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp -# -# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via -# these settings. -# -# local_destination_recipient_limit = 300 -# local_destination_concurrency_limit = 5 -# -# Of course you should adjust these settings as appropriate for the -# capacity of the hardware you are using. The recipient limit setting -# can be used to take advantage of the single instance message store -# capability of Cyrus. The concurrency limit can be used to control -# how many simultaneous LMTP sessions will be permitted to the Cyrus -# message store. -# -# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and -# subsequent line in master.cf. -#mailbox_transport = cyrus - -# The fallback_transport specifies the optional transport in master.cf -# to use for recipients that are not found in the UNIX passwd database. -# This parameter has precedence over the luser_relay parameter. -# -# Specify a string of the form transport:nexthop, where transport is -# the name of a mail delivery transport defined in master.cf. The -# :nexthop part is optional. For more details see the sample transport -# configuration file. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must update the "local_recipient_maps" setting in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp -#fallback_transport = - -# The luser_relay parameter specifies an optional destination address -# for unknown recipients. By default, mail for unknown@$mydestination, -# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned -# as undeliverable. -# -# The following expansions are done on luser_relay: $user (recipient -# username), $shell (recipient shell), $home (recipient home directory), -# $recipient (full recipient address), $extension (recipient address -# extension), $domain (recipient domain), $local (entire recipient -# localpart), $recipient_delimiter. Specify ${name?value} or -# ${name:value} to expand value only when $name does (does not) exist. -# -# luser_relay works only for the default Postfix local delivery agent. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must specify "local_recipient_maps =" (i.e. empty) in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -#luser_relay = $user@other.host -#luser_relay = $local@other.host -#luser_relay = admin+$local - -# JUNK MAIL CONTROLS -# -# The controls listed here are only a very small subset. The file -# SMTPD_ACCESS_README provides an overview. - -# The header_checks parameter specifies an optional table with patterns -# that each logical message header is matched against, including -# headers that span multiple physical lines. -# -# By default, these patterns also apply to MIME headers and to the -# headers of attached messages. With older Postfix versions, MIME and -# attached message headers were treated as body text. -# -# For details, see "man header_checks". -# -#header_checks = regexp:/etc/postfix/header_checks - -# FAST ETRN SERVICE -# -# Postfix maintains per-destination logfiles with information about -# deferred mail, so that mail can be flushed quickly with the SMTP -# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". -# See the ETRN_README document for a detailed description. -# -# The fast_flush_domains parameter controls what destinations are -# eligible for this service. By default, they are all domains that -# this server is willing to relay mail to. -# -#fast_flush_domains = $relay_domains - -# SHOW SOFTWARE VERSION OR NOT -# -# The smtpd_banner parameter specifies the text that follows the 220 -# code in the SMTP server's greeting banner. Some people like to see -# the mail version advertised. By default, Postfix shows no version. -# -# You MUST specify $myhostname at the start of the text. That is an -# RFC requirement. Postfix itself does not care. -# -#smtpd_banner = $myhostname ESMTP $mail_name -#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) - -# PARALLEL DELIVERY TO THE SAME DESTINATION -# -# How many parallel deliveries to the same user or domain? With local -# delivery, it does not make sense to do massively parallel delivery -# to the same user, because mailbox updates must happen sequentially, -# and expensive pipelines in .forward files can cause disasters when -# too many are run at the same time. With SMTP deliveries, 10 -# simultaneous connections to the same domain could be sufficient to -# raise eyebrows. -# -# Each message delivery transport has its XXX_destination_concurrency_limit -# parameter. The default is $default_destination_concurrency_limit for -# most delivery transports. For the local delivery agent the default is 2. - -#local_destination_concurrency_limit = 2 -#default_destination_concurrency_limit = 20 - -# DEBUGGING CONTROL -# -# The debug_peer_level parameter specifies the increment in verbose -# logging level when an SMTP client or server host name or address -# matches a pattern in the debug_peer_list parameter. -# -debug_peer_level = 2 - -# The debug_peer_list parameter specifies an optional list of domain -# or network patterns, /file/name patterns or type:name tables. When -# an SMTP client or server host name or address matches a pattern, -# increase the verbose logging level by the amount specified in the -# debug_peer_level parameter. -# -#debug_peer_list = 127.0.0.1 -#debug_peer_list = some.domain - -# The debugger_command specifies the external command that is executed -# when a Postfix daemon program is run with the -D option. -# -# Use "command .. & sleep 5" so that the debugger can attach before -# the process marches on. If you use an X-based debugger, be sure to -# set up your XAUTHORITY environment variable before starting Postfix. -# -debugger_command = - PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin - ddd $daemon_directory/$process_name $process_id & sleep 5 - -# If you can't use X, use this to capture the call stack when a -# daemon crashes. The result is in a file in the configuration -# directory, and is named after the process name and the process ID. -# -# debugger_command = -# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; -# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 -# >$config_directory/$process_name.$process_id.log & sleep 5 -# -# Another possibility is to run gdb under a detached screen session. -# To attach to the screen session, su root and run "screen -r -# " where uniquely matches one of the detached -# sessions (from "screen -list"). -# -# debugger_command = -# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen -# -dmS $process_name gdb $daemon_directory/$process_name -# $process_id & sleep 1 - -# INSTALL-TIME CONFIGURATION INFORMATION -# -# The following parameters are used when installing a new Postfix version. -# -# sendmail_path: The full pathname of the Postfix sendmail command. -# This is the Sendmail-compatible mail posting interface. -# -sendmail_path = - -# newaliases_path: The full pathname of the Postfix newaliases command. -# This is the Sendmail-compatible command to build alias databases. -# -newaliases_path = - -# mailq_path: The full pathname of the Postfix mailq command. This -# is the Sendmail-compatible mail queue listing command. -# -mailq_path = - -# setgid_group: The group for mail submission and queue management -# commands. This must be a group name with a numerical group ID that -# is not shared with other accounts, not even with the Postfix account. -# -setgid_group = - -# html_directory: The location of the Postfix HTML documentation. -# -html_directory = - -# manpage_directory: The location of the Postfix on-line manual pages. -# -manpage_directory = - -# sample_directory: The location of the Postfix sample configuration files. -# This parameter is obsolete as of Postfix 2.1. -# -sample_directory = - -# readme_directory: The location of the Postfix README files. -# -readme_directory = - -# TLS CONFIGURATION -# -# Basic Postfix TLS configuration by default with self-signed certificate -# for inbound SMTP and also opportunistic TLS for outbound SMTP. - -# The full pathname of a file with the Postfix SMTP server RSA certificate -# in PEM format. Intermediate certificates should be included in general, -# the server certificate first, then the issuing CA(s) (bottom-up order). -# -smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem - -# The full pathname of a file with the Postfix SMTP server RSA private key -# in PEM format. The private key must be accessible without a pass-phrase, -# i.e. it must not be encrypted. -# -smtpd_tls_key_file = /etc/pki/tls/private/postfix.key - -# Announce STARTTLS support to remote SMTP clients, but do not require that -# clients use TLS encryption (opportunistic TLS inbound). -# -smtpd_tls_security_level = may - -# Directory with PEM format Certification Authority certificates that the -# Postfix SMTP client uses to verify a remote SMTP server certificate. -# -smtp_tls_CApath = /etc/pki/tls/certs - -# The full pathname of a file containing CA certificates of root CAs -# trusted to sign either remote SMTP server certificates or intermediate CA -# certificates. -# -smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt - -# Use TLS if this is supported by the remote SMTP server, otherwise use -# plaintext (opportunistic TLS outbound). -# -smtp_tls_security_level = may diff --git a/templates/Fedora/40/etc/postfix/master.cf b/templates/Fedora/40/etc/postfix/master.cf deleted file mode 100644 index bb0eae9..0000000 --- a/templates/Fedora/40/etc/postfix/master.cf +++ /dev/null @@ -1,145 +0,0 @@ -# -# Postfix master process configuration file. For details on the format -# of the file, see the master(5) manual page (command: "man 5 master" or -# on-line: http://www.postfix.org/master.5.html). -# -# Do not forget to execute "postfix reload" after editing this file. -# -# ========================================================================== -# service type private unpriv chroot wakeup maxproc command + args -# (yes) (yes) (no) (never) (100) -# ========================================================================== -smtp inet n - n - - smtpd -#smtp inet n - n - 1 postscreen -#smtpd pass - - n - - smtpd -#dnsblog unix - - n - 0 dnsblog -#tlsproxy unix - - n - 0 tlsproxy -# Choose one: enable submission for loopback clients only, or for any client. -#127.0.0.1:submission inet n - n - - smtpd -#submission inet n - n - - smtpd -# -o syslog_name=postfix/submission -# -o smtpd_tls_security_level=encrypt -# -o smtpd_sasl_auth_enable=yes -# -o smtpd_tls_auth_only=yes -# -o smtpd_reject_unlisted_recipient=no -# Instead of specifying complex smtpd__restrictions here, -# specify "smtpd__restrictions=$mua__restrictions" -# here, and specify mua__restrictions in main.cf (where -# "" is "client", "helo", "sender", "relay", or "recipient"). -# -o smtpd_client_restrictions= -# -o smtpd_helo_restrictions= -# -o smtpd_sender_restrictions= -# -o smtpd_relay_restrictions= -# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject -# -o milter_macro_daemon_name=ORIGINATING -# Choose one: enable submissions for loopback clients only, or for any client. -#127.0.0.1:submissions inet n - n - - smtpd -#submissions inet n - n - - smtpd -# -o syslog_name=postfix/submissions -# -o smtpd_tls_wrappermode=yes -# -o smtpd_sasl_auth_enable=yes -# -o smtpd_reject_unlisted_recipient=no -# Instead of specifying complex smtpd__restrictions here, -# specify "smtpd__restrictions=$mua__restrictions" -# here, and specify mua__restrictions in main.cf (where -# "" is "client", "helo", "sender", "relay", or "recipient"). -# -o smtpd_client_restrictions= -# -o smtpd_helo_restrictions= -# -o smtpd_sender_restrictions= -# -o smtpd_relay_restrictions= -# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject -# -o milter_macro_daemon_name=ORIGINATING -#628 inet n - n - - qmqpd -pickup unix n - n 60 1 pickup -cleanup unix n - n - 0 cleanup -qmgr unix n - n 300 1 qmgr -#qmgr unix n - n 300 1 oqmgr -tlsmgr unix - - n 1000? 1 tlsmgr -rewrite unix - - n - - trivial-rewrite -bounce unix - - n - 0 bounce -defer unix - - n - 0 bounce -trace unix - - n - 0 bounce -verify unix - - n - 1 verify -flush unix n - n 1000? 0 flush -proxymap unix - - n - - proxymap -proxywrite unix - - n - 1 proxymap -smtp unix - - n - - smtp -relay unix - - n - - smtp - -o syslog_name=postfix/$service_name -# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 -showq unix n - n - - showq -error unix - - n - - error -retry unix - - n - - error -discard unix - - n - - discard -local unix - n n - - local -virtual unix - n n - - virtual -lmtp unix - - n - - lmtp -anvil unix - - n - 1 anvil -scache unix - - n - 1 scache -postlog unix-dgram n - n - 1 postlogd -# -# ==================================================================== -# Interfaces to non-Postfix software. Be sure to examine the manual -# pages of the non-Postfix software to find out what options it wants. -# -# Many of the following services use the Postfix pipe(8) delivery -# agent. See the pipe(8) man page for information about ${recipient} -# and other message envelope options. -# ==================================================================== -# -# maildrop. See the Postfix MAILDROP_README file for details. -# Also specify in main.cf: maildrop_destination_recipient_limit=1 -# -#maildrop unix - n n - - pipe -# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} -# -# ==================================================================== -# -# Recent Cyrus versions can use the existing "lmtp" master.cf entry. -# -# Specify in cyrus.conf: -# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 -# -# Specify in main.cf one or more of the following: -# mailbox_transport = lmtp:inet:localhost -# virtual_transport = lmtp:inet:localhost -# -# ==================================================================== -# -# Cyrus 2.1.5 (Amos Gouaux) -# Also specify in main.cf: cyrus_destination_recipient_limit=1 -# -#cyrus unix - n n - - pipe -# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} -# -# ==================================================================== -# -# Old example of delivery via Cyrus. -# -#old-cyrus unix - n n - - pipe -# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} -# -# ==================================================================== -# -# See the Postfix UUCP_README file for configuration details. -# -#uucp unix - n n - - pipe -# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) -# -# ==================================================================== -# -# Other external delivery methods. -# -#ifmail unix - n n - - pipe -# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) -# -#bsmtp unix - n n - - pipe -# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient -# -#scalemail-backend unix - n n - 2 pipe -# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store -# ${nexthop} ${user} ${extension} -# -#mailman unix - n n - - pipe -# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py -# ${nexthop} ${user} diff --git a/templates/Fedora/40/etc/postfix/master.cf.proto b/templates/Fedora/40/etc/postfix/master.cf.proto deleted file mode 100644 index bb0eae9..0000000 --- a/templates/Fedora/40/etc/postfix/master.cf.proto +++ /dev/null @@ -1,145 +0,0 @@ -# -# Postfix master process configuration file. For details on the format -# of the file, see the master(5) manual page (command: "man 5 master" or -# on-line: http://www.postfix.org/master.5.html). -# -# Do not forget to execute "postfix reload" after editing this file. -# -# ========================================================================== -# service type private unpriv chroot wakeup maxproc command + args -# (yes) (yes) (no) (never) (100) -# ========================================================================== -smtp inet n - n - - smtpd -#smtp inet n - n - 1 postscreen -#smtpd pass - - n - - smtpd -#dnsblog unix - - n - 0 dnsblog -#tlsproxy unix - - n - 0 tlsproxy -# Choose one: enable submission for loopback clients only, or for any client. -#127.0.0.1:submission inet n - n - - smtpd -#submission inet n - n - - smtpd -# -o syslog_name=postfix/submission -# -o smtpd_tls_security_level=encrypt -# -o smtpd_sasl_auth_enable=yes -# -o smtpd_tls_auth_only=yes -# -o smtpd_reject_unlisted_recipient=no -# Instead of specifying complex smtpd__restrictions here, -# specify "smtpd__restrictions=$mua__restrictions" -# here, and specify mua__restrictions in main.cf (where -# "" is "client", "helo", "sender", "relay", or "recipient"). -# -o smtpd_client_restrictions= -# -o smtpd_helo_restrictions= -# -o smtpd_sender_restrictions= -# -o smtpd_relay_restrictions= -# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject -# -o milter_macro_daemon_name=ORIGINATING -# Choose one: enable submissions for loopback clients only, or for any client. -#127.0.0.1:submissions inet n - n - - smtpd -#submissions inet n - n - - smtpd -# -o syslog_name=postfix/submissions -# -o smtpd_tls_wrappermode=yes -# -o smtpd_sasl_auth_enable=yes -# -o smtpd_reject_unlisted_recipient=no -# Instead of specifying complex smtpd__restrictions here, -# specify "smtpd__restrictions=$mua__restrictions" -# here, and specify mua__restrictions in main.cf (where -# "" is "client", "helo", "sender", "relay", or "recipient"). -# -o smtpd_client_restrictions= -# -o smtpd_helo_restrictions= -# -o smtpd_sender_restrictions= -# -o smtpd_relay_restrictions= -# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject -# -o milter_macro_daemon_name=ORIGINATING -#628 inet n - n - - qmqpd -pickup unix n - n 60 1 pickup -cleanup unix n - n - 0 cleanup -qmgr unix n - n 300 1 qmgr -#qmgr unix n - n 300 1 oqmgr -tlsmgr unix - - n 1000? 1 tlsmgr -rewrite unix - - n - - trivial-rewrite -bounce unix - - n - 0 bounce -defer unix - - n - 0 bounce -trace unix - - n - 0 bounce -verify unix - - n - 1 verify -flush unix n - n 1000? 0 flush -proxymap unix - - n - - proxymap -proxywrite unix - - n - 1 proxymap -smtp unix - - n - - smtp -relay unix - - n - - smtp - -o syslog_name=postfix/$service_name -# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 -showq unix n - n - - showq -error unix - - n - - error -retry unix - - n - - error -discard unix - - n - - discard -local unix - n n - - local -virtual unix - n n - - virtual -lmtp unix - - n - - lmtp -anvil unix - - n - 1 anvil -scache unix - - n - 1 scache -postlog unix-dgram n - n - 1 postlogd -# -# ==================================================================== -# Interfaces to non-Postfix software. Be sure to examine the manual -# pages of the non-Postfix software to find out what options it wants. -# -# Many of the following services use the Postfix pipe(8) delivery -# agent. See the pipe(8) man page for information about ${recipient} -# and other message envelope options. -# ==================================================================== -# -# maildrop. See the Postfix MAILDROP_README file for details. -# Also specify in main.cf: maildrop_destination_recipient_limit=1 -# -#maildrop unix - n n - - pipe -# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} -# -# ==================================================================== -# -# Recent Cyrus versions can use the existing "lmtp" master.cf entry. -# -# Specify in cyrus.conf: -# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 -# -# Specify in main.cf one or more of the following: -# mailbox_transport = lmtp:inet:localhost -# virtual_transport = lmtp:inet:localhost -# -# ==================================================================== -# -# Cyrus 2.1.5 (Amos Gouaux) -# Also specify in main.cf: cyrus_destination_recipient_limit=1 -# -#cyrus unix - n n - - pipe -# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} -# -# ==================================================================== -# -# Old example of delivery via Cyrus. -# -#old-cyrus unix - n n - - pipe -# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} -# -# ==================================================================== -# -# See the Postfix UUCP_README file for configuration details. -# -#uucp unix - n n - - pipe -# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) -# -# ==================================================================== -# -# Other external delivery methods. -# -#ifmail unix - n n - - pipe -# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) -# -#bsmtp unix - n n - - pipe -# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient -# -#scalemail-backend unix - n n - 2 pipe -# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store -# ${nexthop} ${user} ${extension} -# -#mailman unix - n n - - pipe -# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py -# ${nexthop} ${user} diff --git a/templates/Fedora/40/etc/postfix/postfix-files b/templates/Fedora/40/etc/postfix/postfix-files deleted file mode 100644 index b3ed234..0000000 --- a/templates/Fedora/40/etc/postfix/postfix-files +++ /dev/null @@ -1,447 +0,0 @@ -# -# Do not edit this file. -# -# This file controls the postfix-install script for installation of -# Postfix programs, configuration files and documentation, as well -# as the post-install script for setting permissions and for updating -# Postfix configuration files. See the respective manual pages within -# the script files. -# -# Do not list $command_directory or $shlib_directory in this file, -# or it will be blown away by a future Postfix uninstallation -# procedure. You would not want to lose all files in /usr/sbin or -# /usr/local/lib. -# -# Each record in this file describes one file or directory. -# Fields are separated by ":". Specify a null field as "-". -# Missing fields or separators at the end are OK. -# -# File format: -# name:type:owner:group:permission:flags -# No group means don't change group ownership. -# -# File types: -# d=directory -# f=regular file -# h=hard link (*) -# l=symbolic link (*) -# -# (*) With hard links and symbolic links, the owner field becomes the -# source pathname, while the group and permissions are ignored. -# -# File flags: -# No flag means the flag is not active. -# p=preserve existing file, do not replace (postfix-install). -# u=update owner/group/mode (post-install upgrade-permissions). -# c=create missing directory (post-install create-missing). -# r=apply owner/group recursively (post-install set/upgrade-permissions). -# o=obsolete, no longer part of Postfix -# 1=optional for non-default instance (config_dir != built-in default). -# -# Note: the "u" flag is for upgrading the permissions of existing files -# or directories after changes in Postfix architecture. For robustness -# it is a good idea to "u" all the files that have special ownership or -# permissions, so that running "make install" fixes any glitches. -# -# Note: order matters. Update shared libraries and database plugins -# before daemon/command-line programs. -$config_directory:d:root:-:755:u -$data_directory:d:$mail_owner:-:700:uc -$daemon_directory:d:root:-:755:u -$queue_directory:d:root:-:755:uc -$sample_directory:d:root:-:755:o -$readme_directory:d:root:-:755 -$html_directory:d:root:-:755 -$queue_directory/active:d:$mail_owner:-:700:ucr -$queue_directory/bounce:d:$mail_owner:-:700:ucr -$queue_directory/corrupt:d:$mail_owner:-:700:ucr -$queue_directory/defer:d:$mail_owner:-:700:ucr -$queue_directory/deferred:d:$mail_owner:-:700:ucr -$queue_directory/flush:d:$mail_owner:-:700:ucr -$queue_directory/hold:d:$mail_owner:-:700:ucr -$queue_directory/incoming:d:$mail_owner:-:700:ucr -$queue_directory/private:d:$mail_owner:-:700:uc -$queue_directory/maildrop:d:$mail_owner:$setgid_group:730:uc -$queue_directory/public:d:$mail_owner:$setgid_group:710:uc -$queue_directory/pid:d:root:-:755:uc -$queue_directory/saved:d:$mail_owner:-:700:ucr -$queue_directory/trace:d:$mail_owner:-:700:ucr -# Update shared libraries and plugins before daemon or command-line programs. -$shlib_directory/libpostfix-util.so:f:root:-:755 -$shlib_directory/libpostfix-global.so:f:root:-:755 -$shlib_directory/libpostfix-dns.so:f:root:-:755 -$shlib_directory/libpostfix-tls.so:f:root:-:755 -$shlib_directory/libpostfix-master.so:f:root:-:755 -$meta_directory/dynamicmaps.cf.d:d:root:-:755 -$meta_directory/dynamicmaps.cf:f:root:-:644 -$meta_directory/main.cf.proto:f:root:-:644 -$meta_directory/master.cf.proto:f:root:-:644 -$meta_directory/postfix-files.d:d:root:-:755 -$meta_directory/postfix-files:f:root:-:644 -$daemon_directory/anvil:f:root:-:755 -$daemon_directory/bounce:f:root:-:755 -$daemon_directory/cleanup:f:root:-:755 -$daemon_directory/discard:f:root:-:755 -$daemon_directory/dnsblog:f:root:-:755 -$daemon_directory/error:f:root:-:755 -$daemon_directory/flush:f:root:-:755 -$daemon_directory/local:f:root:-:755 -$daemon_directory/main.cf:f:root:-:644:o -$daemon_directory/master.cf:f:root:-:644:o -$daemon_directory/master:f:root:-:755 -$daemon_directory/oqmgr:f:root:-:755 -$daemon_directory/pickup:f:root:-:755 -$daemon_directory/pipe:f:root:-:755 -$daemon_directory/post-install:f:root:-:755 -# In case meta_directory == daemon_directory. -#$daemon_directory/postfix-files:f:root:-:644:o -#$daemon_directory/postfix-files.d:d:root:-:755:o -$daemon_directory/postfix-script:f:root:-:755 -$daemon_directory/postfix-tls-script:f:root:-:755 -$daemon_directory/postfix-wrapper:f:root:-:755 -$daemon_directory/postmulti-script:f:root:-:755 -$daemon_directory/postlogd:f:root:-:755 -$daemon_directory/postscreen:f:root:-:755 -$daemon_directory/proxymap:f:root:-:755 -$daemon_directory/qmgr:f:root:-:755 -$daemon_directory/qmqpd:f:root:-:755 -$daemon_directory/scache:f:root:-:755 -$daemon_directory/showq:f:root:-:755 -$daemon_directory/smtp:f:root:-:755 -$daemon_directory/smtpd:f:root:-:755 -$daemon_directory/spawn:f:root:-:755 -$daemon_directory/tlsproxy:f:root:-:755 -$daemon_directory/tlsmgr:f:root:-:755 -$daemon_directory/trivial-rewrite:f:root:-:755 -$daemon_directory/verify:f:root:-:755 -$daemon_directory/virtual:f:root:-:755 -$daemon_directory/nqmgr:h:$daemon_directory/qmgr -$daemon_directory/lmtp:h:$daemon_directory/smtp -$command_directory/postalias:f:root:-:755 -$command_directory/postcat:f:root:-:755 -$command_directory/postconf:f:root:-:755 -$command_directory/postfix:f:root:-:755 -$command_directory/postkick:f:root:-:755 -$command_directory/postlock:f:root:-:755 -$command_directory/postlog:f:root:$setgid_group:2755:u -$command_directory/postmap:f:root:-:755 -$command_directory/postmulti:f:root:-:755 -$command_directory/postsuper:f:root:-:755 -$command_directory/postdrop:f:root:$setgid_group:2755:u -$command_directory/postqueue:f:root:$setgid_group:2755:u -$sendmail_path:f:root:-:755 -$newaliases_path:l:$sendmail_path -$mailq_path:l:$sendmail_path -$config_directory/access:f:root:-:644:p1 -$config_directory/canonical:f:root:-:644:p1 -$config_directory/cidr_table:f:root:-:644:o -$config_directory/generic:f:root:-:644:p1 -$config_directory/generics:f:root:-:644:o -$config_directory/header_checks:f:root:-:644:p1 -$config_directory/install.cf:f:root:-:644:o -$config_directory/main.cf:f:root:-:644:p -$config_directory/master.cf:f:root:-:644:p -$config_directory/pcre_table:f:root:-:644:o -$config_directory/regexp_table:f:root:-:644:o -$config_directory/relocated:f:root:-:644:p1 -$config_directory/tcp_table:f:root:-:644:o -$config_directory/transport:f:root:-:644:p1 -$config_directory/virtual:f:root:-:644:p1 -$config_directory/postfix-script:f:root:-:755:o -$config_directory/postfix-script-sgid:f:root:-:755:o -$config_directory/postfix-script-nosgid:f:root:-:755:o -$config_directory/post-install:f:root:-:755:o -$manpage_directory/man1/mailq.postfix.1.gz:f:root:-:644 -$manpage_directory/man1/newaliases.postfix.1.gz:f:root:-:644 -$manpage_directory/man1/postalias.1.gz:f:root:-:644 -$manpage_directory/man1/postcat.1.gz:f:root:-:644 -$manpage_directory/man1/postconf.1.gz:f:root:-:644 -$manpage_directory/man1/postdrop.1.gz:f:root:-:644 -$manpage_directory/man1/postfix-tls.1.gz:f:root:-:644 -$manpage_directory/man1/postfix.1.gz:f:root:-:644 -$manpage_directory/man1/postkick.1.gz:f:root:-:644 -$manpage_directory/man1/postlock.1.gz:f:root:-:644 -$manpage_directory/man1/postlog.1.gz:f:root:-:644 -$manpage_directory/man1/postmap.1.gz:f:root:-:644 -$manpage_directory/man1/postmulti.1.gz:f:root:-:644 -$manpage_directory/man1/postqueue.1.gz:f:root:-:644 -$manpage_directory/man1/postsuper.1.gz:f:root:-:644 -$manpage_directory/man1/sendmail.postfix.1.gz:f:root:-:644 -$manpage_directory/man5/access.5.gz:f:root:-:644 -$manpage_directory/man5/aliases.postfix.5.gz:f:root:-:644 -$manpage_directory/man5/body_checks.5.gz:f:root:-:644 -$manpage_directory/man5/bounce.5.gz:f:root:-:644 -$manpage_directory/man5/canonical.5.gz:f:root:-:644 -$manpage_directory/man5/cidr_table.5.gz:f:root:-:644 -$manpage_directory/man5/generics.5.gz:f:root:-:644:o -$manpage_directory/man5/generic.5.gz:f:root:-:644 -$manpage_directory/man5/header_checks.5.gz:f:root:-:644 -$manpage_directory/man5/master.5.gz:f:root:-:644 -$manpage_directory/man5/memcache_table.5.gz:f:root:-:644 -$manpage_directory/man5/socketmap_table.5.gz:f:root:-:644 -$manpage_directory/man5/nisplus_table.5.gz:f:root:-:644 -$manpage_directory/man5/postconf.5.gz:f:root:-:644 -$manpage_directory/man5/postfix-wrapper.5.gz:f:root:-:644 -$manpage_directory/man5/regexp_table.5.gz:f:root:-:644 -$manpage_directory/man5/relocated.5.gz:f:root:-:644 -$manpage_directory/man5/tcp_table.5.gz:f:root:-:644 -$manpage_directory/man5/transport.5.gz:f:root:-:644 -$manpage_directory/man5/virtual.5.gz:f:root:-:644 -$manpage_directory/man8/bounce.8.gz:f:root:-:644 -$manpage_directory/man8/cleanup.8.gz:f:root:-:644 -$manpage_directory/man8/anvil.8.gz:f:root:-:644 -$manpage_directory/man8/defer.8.gz:f:root:-:644 -$manpage_directory/man8/discard.8.gz:f:root:-:644 -$manpage_directory/man8/dnsblog.8.gz:f:root:-:644 -$manpage_directory/man8/error.8.gz:f:root:-:644 -$manpage_directory/man8/flush.8.gz:f:root:-:644 -$manpage_directory/man8/lmtp.8.gz:f:root:-:644 -$manpage_directory/man8/local.8.gz:f:root:-:644 -$manpage_directory/man8/master.8.gz:f:root:-:644 -$manpage_directory/man8/nqmgr.8.gz:f:root:-:644:o -$manpage_directory/man8/oqmgr.8.gz:f:root:-:644: -$manpage_directory/man8/pickup.8.gz:f:root:-:644 -$manpage_directory/man8/pipe.8.gz:f:root:-:644 -$manpage_directory/man8/postlogd.8.gz:f:root:-:644 -$manpage_directory/man8/postscreen.8.gz:f:root:-:644 -$manpage_directory/man8/proxymap.8.gz:f:root:-:644 -$manpage_directory/man8/qmgr.8.gz:f:root:-:644 -$manpage_directory/man8/qmqpd.8.gz:f:root:-:644 -$manpage_directory/man8/scache.8.gz:f:root:-:644 -$manpage_directory/man8/showq.8.gz:f:root:-:644 -$manpage_directory/man8/smtp.8.gz:f:root:-:644 -$manpage_directory/man8/smtpd.postfix.8.gz:f:root:-:644 -$manpage_directory/man8/spawn.8.gz:f:root:-:644 -$manpage_directory/man8/tlsproxy.8.gz:f:root:-:644 -$manpage_directory/man8/tlsmgr.8.gz:f:root:-:644 -$manpage_directory/man8/trace.8.gz:f:root:-:644 -$manpage_directory/man8/trivial-rewrite.8.gz:f:root:-:644 -$manpage_directory/man8/verify.8.gz:f:root:-:644 -$manpage_directory/man8/virtual.8.gz:f:root:-:644 -$sample_directory/sample-aliases.cf:f:root:-:644:o -$sample_directory/sample-auth.cf:f:root:-:644:o -$sample_directory/sample-canonical.cf:f:root:-:644:o -$sample_directory/sample-compatibility.cf:f:root:-:644:o -$sample_directory/sample-debug.cf:f:root:-:644:o -$sample_directory/sample-filter.cf:f:root:-:644:o -$sample_directory/sample-flush.cf:f:root:-:644:o -$sample_directory/sample-ipv6.cf:f:root:-:644:o -$sample_directory/sample-ldap.cf:f:root:-:644:o -$sample_directory/sample-lmtp.cf:f:root:-:644:o -$sample_directory/sample-local.cf:f:root:-:644:o -$sample_directory/sample-mime.cf:f:root:-:644:o -$sample_directory/sample-misc.cf:f:root:-:644:o -$sample_directory/sample-pcre-access.cf:f:root:-:644:o -$sample_directory/sample-pcre-body.cf:f:root:-:644:o -$sample_directory/sample-pcre-header.cf:f:root:-:644:o -$sample_directory/sample-pgsql-aliases.cf:f:root:-:644:o -$sample_directory/sample-qmqpd.cf:f:root:-:644:o -$sample_directory/sample-rate.cf:f:root:-:644:o -$sample_directory/sample-regexp-access.cf:f:root:-:644:o -$sample_directory/sample-regexp-body.cf:f:root:-:644:o -$sample_directory/sample-regexp-header.cf:f:root:-:644:o -$sample_directory/sample-relocated.cf:f:root:-:644:o -$sample_directory/sample-resource.cf:f:root:-:644:o -$sample_directory/sample-rewrite.cf:f:root:-:644:o -$sample_directory/sample-scheduler.cf:f:root:-:644:o -$sample_directory/sample-smtp.cf:f:root:-:644:o -$sample_directory/sample-smtpd.cf:f:root:-:644:o -$sample_directory/sample-tls.cf:f:root:-:644:o -$sample_directory/sample-transport.cf:f:root:-:644:o -$sample_directory/sample-verify.cf:f:root:-:644:o -$sample_directory/sample-virtual.cf:f:root:-:644:o -$readme_directory/AAAREADME:f:root:-:644 -$readme_directory/ADDRESS_CLASS_README:f:root:-:644 -$readme_directory/ADDRESS_REWRITING_README:f:root:-:644 -$readme_directory/ADDRESS_VERIFICATION_README:f:root:-:644 -$readme_directory/BACKSCATTER_README:f:root:-:644 -$readme_directory/BASIC_CONFIGURATION_README:f:root:-:644 -$readme_directory/BDAT_README:f:root:-:644 -$readme_directory/BUILTIN_FILTER_README:f:root:-:644 -$readme_directory/COMPATIBILITY_README:f:root:-:644 -$readme_directory/CONNECTION_CACHE_README:f:root:-:644 -$readme_directory/CONTENT_INSPECTION_README:f:root:-:644 -$readme_directory/DATABASE_README:f:root:-:644 -$readme_directory/DB_README:f:root:-:644 -$readme_directory/DEBUG_README:f:root:-:644 -$readme_directory/DSN_README:f:root:-:644 -$readme_directory/ETRN_README:f:root:-:644 -$readme_directory/FILTER_README:f:root:-:644 -$readme_directory/FORWARD_SECRECY_README:f:root:-:644 -$readme_directory/HOSTING_README:f:root:-:644:o -$readme_directory/INSTALL:f:root:-:644 -$readme_directory/IPV6_README:f:root:-:644 -$readme_directory/LINUX_README:f:root:-:644 -$readme_directory/LOCAL_RECIPIENT_README:f:root:-:644 -$readme_directory/MACOSX_README:f:root:-:644:o -$readme_directory/MAILDROP_README:f:root:-:644 -$readme_directory/MAILLOG_README:f:root:-:644 -$readme_directory/MEMCACHE_README:f:root:-:644 -$readme_directory/MILTER_README:f:root:-:644 -$readme_directory/MULTI_INSTANCE_README:f:root:-:644 -$readme_directory/SMTPUTF8_README:f:root:-:644 -$readme_directory/NFS_README:f:root:-:644 -$readme_directory/OVERVIEW:f:root:-:644 -$readme_directory/PACKAGE_README:f:root:-:644 -$readme_directory/POSTSCREEN_3_5_README:f:root:-:644 -$readme_directory/POSTSCREEN_README:f:root:-:644 -$readme_directory/QMQP_README:f:root:-:644:o -$readme_directory/QSHAPE_README:f:root:-:644 -$readme_directory/RELEASE_NOTES:f:root:-:644 -$readme_directory/RESTRICTION_CLASS_README:f:root:-:644 -$readme_directory/SASL_README:f:root:-:644 -$readme_directory/SCHEDULER_README:f:root:-:644 -$readme_directory/SMTPD_ACCESS_README:f:root:-:644 -$readme_directory/SMTPD_POLICY_README:f:root:-:644 -$readme_directory/SMTPD_PROXY_README:f:root:-:644 -$readme_directory/SOHO_README:f:root:-:644 -$readme_directory/STANDARD_CONFIGURATION_README:f:root:-:644 -$readme_directory/STRESS_README:f:root:-:644 -$readme_directory/TLS_LEGACY_README:f:root:-:644 -$readme_directory/TLS_README:f:root:-:644 -$readme_directory/TUNING_README:f:root:-:644 -$readme_directory/ULTRIX_README:f:root:-:644 -$readme_directory/UUCP_README:f:root:-:644 -$readme_directory/VERP_README:f:root:-:644 -$readme_directory/VIRTUAL_README:f:root:-:644 -$readme_directory/XCLIENT_README:f:root:-:644 -$readme_directory/XFORWARD_README:f:root:-:644 -$html_directory/ADDRESS_CLASS_README.html:f:root:-:644 -$html_directory/ADDRESS_REWRITING_README.html:f:root:-:644 -$html_directory/ADDRESS_VERIFICATION_README.html:f:root:-:644 -$html_directory/BACKSCATTER_README.html:f:root:-:644 -$html_directory/BASIC_CONFIGURATION_README.html:f:root:-:644 -$html_directory/BDAT_README.html:f:root:-:644 -$html_directory/BUILTIN_FILTER_README.html:f:root:-:644 -$html_directory/CDB_README.html:f:root:-:644 -$html_directory/COMPATIBILITY_README.html:f:root:-:644 -$html_directory/CONNECTION_CACHE_README.html:f:root:-:644 -$html_directory/CONTENT_INSPECTION_README.html:f:root:-:644 -$html_directory/CYRUS_README.html:f:root:-:644:o -$html_directory/DATABASE_README.html:f:root:-:644 -$html_directory/DB_README.html:f:root:-:644 -$html_directory/DEBUG_README.html:f:root:-:644 -$html_directory/DSN_README.html:f:root:-:644 -$html_directory/ETRN_README.html:f:root:-:644 -$html_directory/FILTER_README.html:f:root:-:644 -$html_directory/FORWARD_SECRECY_README.html:f:root:-:644 -$html_directory/INSTALL.html:f:root:-:644 -$html_directory/IPV6_README.html:f:root:-:644 -$html_directory/LDAP_README.html:f:root:-:644 -$html_directory/LINUX_README.html:f:root:-:644 -$html_directory/LMDB_README.html:f:root:-:644 -$html_directory/LOCAL_RECIPIENT_README.html:f:root:-:644 -$html_directory/MAILDROP_README.html:f:root:-:644 -$html_directory/MAILLOG_README.html:f:root:-:644 -$html_directory/MEMCACHE_README.html:f:root:-:644 -$html_directory/MILTER_README.html:f:root:-:644 -$html_directory/MULTI_INSTANCE_README.html:f:root:-:644 -$html_directory/MYSQL_README.html:f:root:-:644 -$html_directory/SMTPUTF8_README.html:f:root:-:644 -$html_directory/SQLITE_README.html:f:root:-:644 -$html_directory/NFS_README.html:f:root:-:644 -$html_directory/OVERVIEW.html:f:root:-:644 -$html_directory/PACKAGE_README.html:f:root:-:644 -$html_directory/PCRE_README.html:f:root:-:644 -$html_directory/PGSQL_README.html:f:root:-:644 -$html_directory/POSTSCREEN_3_5_README.html:f:root:-:644 -$html_directory/POSTSCREEN_README.html:f:root:-:644 -$html_directory/QMQP_README.html:f:root:-:644:o -$html_directory/QSHAPE_README.html:f:root:-:644 -$html_directory/RESTRICTION_CLASS_README.html:f:root:-:644 -$html_directory/SASL_README.html:f:root:-:644 -$html_directory/SCHEDULER_README.html:f:root:-:644 -$html_directory/SMTPD_ACCESS_README.html:f:root:-:644 -$html_directory/SMTPD_POLICY_README.html:f:root:-:644 -$html_directory/SMTPD_PROXY_README.html:f:root:-:644 -$html_directory/SOHO_README.html:f:root:-:644 -$html_directory/STANDARD_CONFIGURATION_README.html:f:root:-:644 -$html_directory/STRESS_README.html:f:root:-:644 -$html_directory/TLS_LEGACY_README.html:f:root:-:644 -$html_directory/TLS_README.html:f:root:-:644 -$html_directory/TUNING_README.html:f:root:-:644 -$html_directory/ULTRIX_README.html:f:root:-:644:o -$html_directory/UUCP_README.html:f:root:-:644 -$html_directory/VERP_README.html:f:root:-:644 -$html_directory/VIRTUAL_README.html:f:root:-:644 -$html_directory/XCLIENT_README.html:f:root:-:644 -$html_directory/XFORWARD_README.html:f:root:-:644 -$html_directory/access.5.html:f:root:-:644 -$html_directory/aliases.5.html:f:root:-:644 -$html_directory/anvil.8.html:f:root:-:644 -$html_directory/bounce.5.html:f:root:-:644 -$html_directory/bounce.8.html:f:root:-:644 -$html_directory/canonical.5.html:f:root:-:644 -$html_directory/cidr_table.5.html:f:root:-:644 -$html_directory/cleanup.8.html:f:root:-:644 -$html_directory/defer.8.html:h:$html_directory/bounce.8.html:-:644 -$html_directory/discard.8.html:f:root:-:644 -$html_directory/dnsblog.8.html:f:root:-:644 -$html_directory/error.8.html:f:root:-:644 -$html_directory/flush.8.html:f:root:-:644 -$html_directory/generics.5.html:f:root:-:644:o -$html_directory/generic.5.html:f:root:-:644 -$html_directory/header_checks.5.html:f:root:-:644 -$html_directory/index.html:f:root:-:644 -$html_directory/ldap_table.5.html:f:root:-:644 -$html_directory/lmdb_table.5.html:f:root:-:644 -$html_directory/lmtp.8.html:f:root:-:644 -$html_directory/local.8.html:f:root:-:644 -$html_directory/mailq.1.html:f:root:-:644 -$html_directory/master.5.html:f:root:-:644 -$html_directory/master.8.html:f:root:-:644 -$html_directory/memcache_table.5.html:f:root:-:644 -$html_directory/mysql_table.5.html:f:root:-:644 -$html_directory/sqlite_table.5.html:f:root:-:644 -$html_directory/nisplus_table.5.html:f:root:-:644 -$html_directory/newaliases.1.html:h:$html_directory/mailq.1.html:-:644 -$html_directory/oqmgr.8.html:f:root:-:644 -$html_directory/pcre_table.5.html:f:root:-:644 -$html_directory/pgsql_table.5.html:f:root:-:644 -$html_directory/pickup.8.html:f:root:-:644 -$html_directory/pipe.8.html:f:root:-:644 -$html_directory/postalias.1.html:f:root:-:644 -$html_directory/postcat.1.html:f:root:-:644 -$html_directory/postconf.1.html:f:root:-:644 -$html_directory/postconf.5.html:f:root:-:644 -$html_directory/postdrop.1.html:f:root:-:644 -$html_directory/postfix-logo.jpg:f:root:-:644 -$html_directory/postfix-manuals.html:f:root:-:644 -$html_directory/postfix-tls.1.html:f:root:-:644 -$html_directory/postfix-wrapper.5.html:f:root:-:644 -$html_directory/postfix.1.html:f:root:-:644 -$html_directory/postkick.1.html:f:root:-:644 -$html_directory/postlock.1.html:f:root:-:644 -$html_directory/postlog.1.html:f:root:-:644 -$html_directory/postmap.1.html:f:root:-:644 -$html_directory/postmulti.1.html:f:root:-:644 -$html_directory/postlogd.8.html:f:root:-:644 -$html_directory/postqueue.1.html:f:root:-:644 -$html_directory/postscreen.8.html:f:root:-:644 -$html_directory/postsuper.1.html:f:root:-:644 -$html_directory/qshape.1.html:f:root:-:644 -$html_directory/proxymap.8.html:f:root:-:644 -$html_directory/qmgr.8.html:f:root:-:644 -$html_directory/qmqp-sink.1.html:f:root:-:644 -$html_directory/qmqp-source.1.html:f:root:-:644 -$html_directory/qmqpd.8.html:f:root:-:644 -$html_directory/regexp_table.5.html:f:root:-:644 -$html_directory/relocated.5.html:f:root:-:644 -$html_directory/scache.8.html:f:root:-:644 -$html_directory/sendmail.1.html:h:$html_directory/mailq.1.html:-:644 -$html_directory/showq.8.html:f:root:-:644 -$html_directory/smtp-sink.1.html:f:root:-:644 -$html_directory/smtp-source.1.html:f:root:-:644 -$html_directory/smtp.8.html:h:$html_directory/lmtp.8.html:-:644 -$html_directory/smtpd.8.html:f:root:-:644 -$html_directory/socketmap_table.5.html:f:root:-:644 -$html_directory/spawn.8.html:f:root:-:644 -$html_directory/tlsmgr.8.html:f:root:-:644 -$html_directory/tlsproxy.8.html:f:root:-:644 -$html_directory/tcp_table.5.html:f:root:-:644 -$html_directory/trace.8.html:h:$html_directory/bounce.8.html:-:644 -$html_directory/transport.5.html:f:root:-:644 -$html_directory/trivial-rewrite.8.html:f:root:-:644 -$html_directory/verify.8.html:f:root:-:644 -$html_directory/virtual.5.html:f:root:-:644 -$html_directory/virtual.8.html:f:root:-:644 diff --git a/templates/Fedora/40/etc/postfix/postfix-files.d/ldap b/templates/Fedora/40/etc/postfix/postfix-files.d/ldap deleted file mode 100644 index 684b05d..0000000 --- a/templates/Fedora/40/etc/postfix/postfix-files.d/ldap +++ /dev/null @@ -1,3 +0,0 @@ -$shlib_directory/postfix-ldap.so:f:root:-:755 -$manpage_directory/man5/ldap_table.5.gz:f:root:-:644 -$readme_directory/LDAP_README:f:root:-:644 diff --git a/templates/Fedora/40/etc/postfix/postfix-files.d/mysql b/templates/Fedora/40/etc/postfix/postfix-files.d/mysql deleted file mode 100644 index 8e41d61..0000000 --- a/templates/Fedora/40/etc/postfix/postfix-files.d/mysql +++ /dev/null @@ -1,3 +0,0 @@ -$shlib_directory/postfix-mysql.so:f:root:-:755 -$manpage_directory/man5/mysql_table.5.gz:f:root:-:644 -$readme_directory/MYSQL_README:f:root:-:644 diff --git a/templates/Fedora/40/etc/postfix/postfix-files.d/pcre b/templates/Fedora/40/etc/postfix/postfix-files.d/pcre deleted file mode 100644 index a34fd73..0000000 --- a/templates/Fedora/40/etc/postfix/postfix-files.d/pcre +++ /dev/null @@ -1,3 +0,0 @@ -$shlib_directory/postfix-pcre.so:f:root:-:755 -$manpage_directory/man5/pcre_table.5.gz:f:root:-:644 -$readme_directory/PCRE_README:f:root:-:644 diff --git a/templates/Fedora/40/etc/postfix/relocated b/templates/Fedora/40/etc/postfix/relocated deleted file mode 100644 index 90f63ec..0000000 --- a/templates/Fedora/40/etc/postfix/relocated +++ /dev/null @@ -1,178 +0,0 @@ -# RELOCATED(5) RELOCATED(5) -# -# NAME -# relocated - Postfix relocated table format -# -# SYNOPSIS -# postmap /etc/postfix/relocated -# -# DESCRIPTION -# The optional relocated(5) table provides the information -# that is used in "user has moved to new_location" bounce -# messages. -# -# Normally, the relocated(5) table is specified as a text -# file that serves as input to the postmap(1) command. The -# result, an indexed file in dbm or db format, is used for -# fast searching by the mail system. Execute the command -# "postmap /etc/postfix/relocated" to rebuild an indexed -# file after changing the corresponding relocated table. -# -# When the table is provided via other means such as NIS, -# LDAP or SQL, the same lookups are done as for ordinary -# indexed files. -# -# Alternatively, the table can be provided as a regu- -# lar-expression map where patterns are given as regular -# expressions, or lookups can be directed to a TCP-based -# server. In those case, the lookups are done in a slightly -# different way as described below under "REGULAR EXPRESSION -# TABLES" or "TCP-BASED TABLES". -# -# Table lookups are case insensitive. -# -# CASE FOLDING -# The search string is folded to lowercase before database -# lookup. As of Postfix 2.3, the search string is not case -# folded with database types such as regexp: or pcre: whose -# lookup fields can match both upper and lower case. -# -# TABLE FORMAT -# The input format for the postmap(1) command is as follows: -# -# o An entry has one of the following form: -# -# pattern new_location -# -# Where new_location specifies contact information -# such as an email address, or perhaps a street -# address or telephone number. -# -# o Empty lines and whitespace-only lines are ignored, -# as are lines whose first non-whitespace character -# is a `#'. -# -# o A logical line starts with non-whitespace text. A -# line that starts with whitespace continues a logi- -# cal line. -# -# TABLE SEARCH ORDER -# With lookups from indexed files such as DB or DBM, or from -# networked tables such as NIS, LDAP or SQL, patterns are -# tried in the order as listed below: -# -# user@domain -# Matches user@domain. This form has precedence over -# all other forms. -# -# user Matches user@site when site is $myorigin, when site -# is listed in $mydestination, or when site is listed -# in $inet_interfaces or $proxy_interfaces. -# -# @domain -# Matches other addresses in domain. This form has -# the lowest precedence. -# -# ADDRESS EXTENSION -# When a mail address localpart contains the optional recip- -# ient delimiter (e.g., user+foo@domain), the lookup order -# becomes: user+foo@domain, user@domain, user+foo, user, and -# @domain. -# -# REGULAR EXPRESSION TABLES -# This section describes how the table lookups change when -# the table is given in the form of regular expressions or -# when lookups are directed to a TCP-based server. For a -# description of regular expression lookup table syntax, see -# regexp_table(5) or pcre_table(5). For a description of the -# TCP client/server table lookup protocol, see tcp_table(5). -# This feature is available in Postfix 2.5 and later. -# -# Each pattern is a regular expression that is applied to -# the entire address being looked up. Thus, user@domain mail -# addresses are not broken up into their user and @domain -# constituent parts, nor is user+foo broken up into user and -# foo. -# -# Patterns are applied in the order as specified in the ta- -# ble, until a pattern is found that matches the search -# string. -# -# Results are the same as with indexed file lookups, with -# the additional feature that parenthesized substrings from -# the pattern can be interpolated as $1, $2 and so on. -# -# TCP-BASED TABLES -# This section describes how the table lookups change when -# lookups are directed to a TCP-based server. For a descrip- -# tion of the TCP client/server lookup protocol, see tcp_ta- -# ble(5). This feature is available in Postfix 2.5 and -# later. -# -# Each lookup operation uses the entire address once. Thus, -# user@domain mail addresses are not broken up into their -# user and @domain constituent parts, nor is user+foo broken -# up into user and foo. -# -# Results are the same as with indexed file lookups. -# -# BUGS -# The table format does not understand quoting conventions. -# -# CONFIGURATION PARAMETERS -# The following main.cf parameters are especially relevant. -# The text below provides only a parameter summary. See -# postconf(5) for more details including examples. -# -# relocated_maps (empty) -# Optional lookup tables with new contact information -# for users or domains that no longer exist. -# -# Other parameters of interest: -# -# inet_interfaces (all) -# The network interface addresses that this mail sys- -# tem receives mail on. -# -# mydestination ($myhostname, localhost.$mydomain, local- -# host) -# The list of domains that are delivered via the -# $local_transport mail delivery transport. -# -# myorigin ($myhostname) -# The domain name that locally-posted mail appears to -# come from, and that locally posted mail is deliv- -# ered to. -# -# proxy_interfaces (empty) -# The network interface addresses that this mail sys- -# tem receives mail on by way of a proxy or network -# address translation unit. -# -# SEE ALSO -# trivial-rewrite(8), address resolver -# postmap(1), Postfix lookup table manager -# postconf(5), configuration parameters -# -# README FILES -# Use "postconf readme_directory" or "postconf html_direc- -# tory" to locate this information. -# DATABASE_README, Postfix lookup table overview -# ADDRESS_REWRITING_README, address rewriting guide -# -# LICENSE -# The Secure Mailer license must be distributed with this -# software. -# -# AUTHOR(S) -# Wietse Venema -# IBM T.J. Watson Research -# P.O. Box 704 -# Yorktown Heights, NY 10598, USA -# -# Wietse Venema -# Google, Inc. -# 111 8th Avenue -# New York, NY 10011, USA -# -# RELOCATED(5) diff --git a/templates/Fedora/40/etc/postfix/transport b/templates/Fedora/40/etc/postfix/transport deleted file mode 100644 index bad7739..0000000 --- a/templates/Fedora/40/etc/postfix/transport +++ /dev/null @@ -1,317 +0,0 @@ -# TRANSPORT(5) TRANSPORT(5) -# -# NAME -# transport - Postfix transport table format -# -# SYNOPSIS -# postmap /etc/postfix/transport -# -# postmap -q "string" /etc/postfix/transport -# -# postmap -q - /etc/postfix/transport = 3.5): -# -# example.com smtp:bar.example, foo.example -# -# This tries to deliver to bar.example before trying to -# deliver to foo.example. -# -# The error mailer can be used to bounce mail: -# -# .example.com error:mail for *.example.com is not deliverable -# -# This causes all mail for user@anything.example.com to be -# bounced. -# -# REGULAR EXPRESSION TABLES -# This section describes how the table lookups change when -# the table is given in the form of regular expressions. For -# a description of regular expression lookup table syntax, -# see regexp_table(5) or pcre_table(5). -# -# Each pattern is a regular expression that is applied to -# the entire address being looked up. Thus, -# some.domain.hierarchy is not looked up via its parent -# domains, nor is user+foo@domain looked up as user@domain. -# -# Patterns are applied in the order as specified in the ta- -# ble, until a pattern is found that matches the search -# string. -# -# The trivial-rewrite(8) server disallows regular expression -# substitution of $1 etc. in regular expression lookup -# tables, because that could open a security hole (Postfix -# version 2.3 and later). -# -# TCP-BASED TABLES -# This section describes how the table lookups change when -# lookups are directed to a TCP-based server. For a descrip- -# tion of the TCP client/server lookup protocol, see tcp_ta- -# ble(5). This feature is not available up to and including -# Postfix version 2.4. -# -# Each lookup operation uses the entire recipient address -# once. Thus, some.domain.hierarchy is not looked up via -# its parent domains, nor is user+foo@domain looked up as -# user@domain. -# -# Results are the same as with indexed file lookups. -# -# CONFIGURATION PARAMETERS -# The following main.cf parameters are especially relevant. -# The text below provides only a parameter summary. See -# postconf(5) for more details including examples. -# -# empty_address_recipient (MAILER-DAEMON) -# The recipient of mail addressed to the null -# address. -# -# parent_domain_matches_subdomains (see 'postconf -d' out- -# put) -# A list of Postfix features where the pattern "exam- -# ple.com" also matches subdomains of example.com, -# instead of requiring an explicit ".example.com" -# pattern. -# -# transport_maps (empty) -# Optional lookup tables with mappings from recipient -# address to (message delivery transport, next-hop -# destination). -# -# SEE ALSO -# trivial-rewrite(8), rewrite and resolve addresses -# master(5), master.cf file format -# postconf(5), configuration parameters -# postmap(1), Postfix lookup table manager -# -# README FILES -# Use "postconf readme_directory" or "postconf html_direc- -# tory" to locate this information. -# ADDRESS_REWRITING_README, address rewriting guide -# DATABASE_README, Postfix lookup table overview -# FILTER_README, external content filter -# -# LICENSE -# The Secure Mailer license must be distributed with this -# software. -# -# AUTHOR(S) -# Wietse Venema -# IBM T.J. Watson Research -# P.O. Box 704 -# Yorktown Heights, NY 10598, USA -# -# Wietse Venema -# Google, Inc. -# 111 8th Avenue -# New York, NY 10011, USA -# -# TRANSPORT(5) diff --git a/templates/Fedora/40/etc/postfix/virtual b/templates/Fedora/40/etc/postfix/virtual deleted file mode 100644 index 96390fe..0000000 --- a/templates/Fedora/40/etc/postfix/virtual +++ /dev/null @@ -1,324 +0,0 @@ -# VIRTUAL(5) VIRTUAL(5) -# -# NAME -# virtual - Postfix virtual alias table format -# -# SYNOPSIS -# postmap /etc/postfix/virtual -# -# postmap -q "string" /etc/postfix/virtual -# -# postmap -q - /etc/postfix/virtual -ReportAddress "Postmaster" <{{ postmaster_email }}> - -## Add a DKIM-Filter header field to messages passing through this filter -## to identify messages it has processed. -SoftwareHeader yes - -## SIGNING OPTIONS - -## Selects the canonicalization method(s) to be used when signing messages. -Canonicalization relaxed/relaxed - -## Domain(s) whose mail should be signed by this filter. Mail from other domains will -## be verified rather than being signed. Uncomment and use your domain name. -## This parameter is not required if a SigningTable is in use. -# Domain example.com - -## Defines the name of the selector to be used when signing messages. -Selector default - -## Specifies the minimum number of key bits for acceptable keys and signatures. -MinimumKeyBits 1024 - -## Gives the location of a private key to be used for signing ALL messages. This -## directive is ignored if KeyTable is enabled. -# KeyFile /etc/opendkim/keys/default.private - -## Gives the location of a file mapping key names to signing keys. In simple terms, -## this tells OpenDKIM where to find your keys. If present, overrides any KeyFile -## directive in the configuration file. Requires SigningTable be enabled. -# KeyTable /etc/opendkim/KeyTable - -## Defines a table used to select one or more signatures to apply to a message based -## on the address found in the From: header field. In simple terms, this tells -## OpenDKIM how to use your keys. Requires KeyTable be enabled. -# SigningTable refile:/etc/opendkim/SigningTable - -## Identifies a set of "external" hosts that may send mail through the server as one -## of the signing domains without credentials as such. -# ExternalIgnoreList refile:/etc/opendkim/TrustedHosts - -## Identifies a set "internal" hosts whose mail should be signed rather than verified. -# InternalHosts refile:/etc/opendkim/TrustedHosts - -## Contains a list of IP addresses, CIDR blocks, hostnames or domain names -## whose mail should be neither signed nor verified by this filter. See man -## page for file format. -# PeerList X.X.X.X - -## Always oversign From (sign using actual From and a null From to prevent -## malicious signatures header fields (From and/or others) between the signer -## and the verifier. From is oversigned by default in the Fedora package -## because it is often the identity key used by reputation systems and thus -## somewhat security sensitive. -OversignHeaders From - -## Instructs the DKIM library to maintain its own local cache of keys and -## policies retrieved from DNS, rather than relying on the nameserver for -## caching service. Useful if the nameserver being used by the filter is -## not local. -# QueryCache yes diff --git a/templates/Fedora/41/etc/opendkim/KeyTable b/templates/Fedora/41/etc/opendkim/KeyTable deleted file mode 100644 index e804d68..0000000 --- a/templates/Fedora/41/etc/opendkim/KeyTable +++ /dev/null @@ -1,6 +0,0 @@ -# OPENDKIM KEY TABLE -# To use this file, uncomment the #KeyTable option in /etc/opendkim.conf, -# then uncomment the following line and replace example.com with your domain -# name, then restart OpenDKIM. Additional keys may be added on separate lines. - -#default._domainkey.example.com example.com:default:/etc/opendkim/keys/default.private diff --git a/templates/Fedora/41/etc/opendkim/SigningTable b/templates/Fedora/41/etc/opendkim/SigningTable deleted file mode 100644 index e8161a1..0000000 --- a/templates/Fedora/41/etc/opendkim/SigningTable +++ /dev/null @@ -1,25 +0,0 @@ -# OPENDKIM SIGNING TABLE -# This table controls how to apply one or more signatures to outgoing messages based -# on the address found in the From: header field. In simple terms, this tells -# OpenDKIM "how" to apply your keys. - -# To use this file, uncomment the SigningTable option in /etc/opendkim.conf, -# then uncomment one of the usage examples below and replace example.com with your -# domain name, then restart OpenDKIM. - -# WILDCARD EXAMPLE -# Enables signing for any address on the listed domain(s), but will work only if -# "refile:/etc/opendkim/SigningTable" is included in /etc/opendkim.conf. -# Create additional lines for additional domains. - -#*@example.com default._domainkey.example.com - -# NON-WILDCARD EXAMPLE -# If "file:" (instead of "refile:") is specified in /etc/opendkim.conf, then -# wildcards will not work. Instead, full user@host is checked first, then simply host, -# then user@.domain (with all superdomains checked in sequence, so "foo.example.com" -# would first check "user@foo.example.com", then "user@.example.com", then "user@.com"), -# then .domain, then user@*, and finally *. See the opendkim.conf(5) man page under -# "SigningTable" for more details. - -#example.com default._domainkey.example.com diff --git a/templates/Fedora/41/etc/opendkim/TrustedHosts b/templates/Fedora/41/etc/opendkim/TrustedHosts deleted file mode 100644 index 7a086d4..0000000 --- a/templates/Fedora/41/etc/opendkim/TrustedHosts +++ /dev/null @@ -1,9 +0,0 @@ -# OPENDKIM TRUSTED HOSTS -# To use this file, uncomment the #ExternalIgnoreList and/or the #InternalHosts -# option in /etc/opendkim.conf then restart OpenDKIM. Additional hosts -# may be added on separate lines (IP addresses, hostnames, or CIDR ranges). -# The localhost IP (127.0.0.1) should always be the first entry in this file. -127.0.0.1 -::1 -#host.example.com -#192.168.1.0/24 diff --git a/templates/Fedora/41/etc/opendmarc.conf b/templates/Fedora/41/etc/opendmarc.conf deleted file mode 100644 index 19f6b7b..0000000 --- a/templates/Fedora/41/etc/opendmarc.conf +++ /dev/null @@ -1,443 +0,0 @@ -## opendmarc.conf -- configuration file for OpenDMARC filter -## -## Copyright (c) 2012-2015, 2018, 2021, The Trusted Domain Project. -## All rights reserved. - -## DEPRECATED CONFIGURATION OPTIONS -## -## The following configuration options are no longer valid. They should be -## removed from your existing configuration file to prevent potential issues. -## Failure to do so may result in opendmarc being unable to start. -## -## Renamed in 1.3.0: -## ForensicReports became FailureReports -## ForensicReportsBcc became FailureReportsBcc -## ForensicReportsOnNone became FailureReportsOnNone -## ForensicReportsSentBy became FailureReportsSentBy - -## CONFIGURATION OPTIONS - -## AuthservID (string) -## defaults to MTA name -## -## Sets the "authserv-id" to use when generating the Authentication-Results: -## header field after verifying a message. If the string "HOSTNAME" is -## provided, the name of the host running the filter (as returned by the -## gethostname(3) function) will be used. -# -# AuthservID name - -## AuthservIDWithJobID { true | false } -## default "false" -## -## If "true", requests that the authserv-id portion of the added -## Authentication-Results header fields contain the job ID of the message -## being evaluated. -# -# AuthservIDWithJobID false - -## AutoRestart { true | false } -## default "false" -## -## Automatically re-start on failures. Use with caution; if the filter fails -## instantly after it starts, this can cause a tight fork(2) loop. -# -# AutoRestart false - -## AutoRestartCount n -## default 0 -## -## Sets the maximum automatic restart count. After this number of automatic -## restarts, the filter will give up and terminate. A value of 0 implies no -## limit. -# -# AutoRestartCount 0 - -## AutoRestartRate n/t[u] -## default (no limit) -## -## Sets the maximum automatic restart rate. If the filter begins restarting -## faster than the rate defined here, it will give up and terminate. This -## is a string of the form n/t[u] where n is an integer limiting the count -## of restarts in the given interval and t[u] defines the time interval -## through which the rate is calculated; t is an integer and u defines the -## units thus represented ("s" or "S" for seconds, the default; "m" or "M" -## for minutes; "h" or "H" for hours; "d" or "D" for days). For example, a -## value of "10/1h" limits the restarts to 10 in one hour. There is no -## default, meaning restart rate is not limited. -# -# AutoRestartRate n/t[u] - -## Background { true | false } -## default "true" -## -## Causes opendmarc to fork and exits immediately, leaving the service -## running in the background. -# -# Background true - -## BaseDirectory (string) -## default (none) -## -## If set, instructs the filter to change to the specified directory using -## chdir(2) before doing anything else. This means any files referenced -## elsewhere in the configuration file can be specified relative to this -## directory. It's also useful for arranging that any crash dumps will be -## saved to a specific location. -# -# BaseDirectory /var/run/opendmarc - -## ChangeRootDirectory (string) -## default (none) -## -## Requests that the operating system change the effective root directory of -## the process to the one specified here prior to beginning execution. -## chroot(2) requires superuser access. A warning will be generated if -## UserID is not also set. -# -# ChangeRootDirectory /var/chroot/opendmarc - -## CopyFailuresTo (string) -## default (none) -## -## Requests addition of the specified email address to the envelope of -## any message that fails the DMARC evaluation. -# -# CopyFailuresTo postmaster@localhost - -## DomainWhitelist (string) -## default (none) -## -## A brief list of whitelisted domains for which ARC signature headers are -## trusted as determined by evaluating entries in the "arc.chain" field found -## in a locally generated Authentication-Results header. -## -## This list will be concatenated with DomainWhitelistFile (if provided). -## -# -# DomainWhitelist example.com - -## DomainWhitelistFile path -## default (none) -## -## A comprehensive list of whitelisted domains for which ARC signature headers -## are trusted as determined by evaluating entries in the "arc.chain" field -## found in a locally generated Authentication-Results header. -## -## This list will be concatenated with DomainWhitelist (if provided). -## -# -# DomainWhitelistFile /etc/opendmarc/whitelist.domains - -## DomainWhitelistSize -## default 3000 -## -## The maximum number of entries in the DomainWhitelist including both entries -## in the DomainWhitelist configuration parameter (above) and entries in the -## DomainWhitelistFile. This number will be increased by approximately 20% to -## increase the efficiency of the hashing algorithm. -## -# -# DomainWhitelistSize 3000 - -## DNSTimeout (integer) -## default 5 -## -## Sets the DNS timeout in seconds. A value of 0 causes an infinite wait. -## (NOT YET IMPLEMENTED) -# -# DNSTimeout 5 - -## EnableCoredumps { true | false } -## default "false" -## -## On systems that have such support, make an explicit request to the kernel -## to dump cores when the filter crashes for some reason. Some modern UNIX -## systems suppress core dumps during crashes for security reasons if the -## user ID has changed during the lifetime of the process. Currently only -## supported on Linux. -# -# EnableCoreDumps false - -## FailureReports { true | false } -## default "false" -## -## Enables generation of failure reports when the DMARC test fails and the -## purported sender of the message has requested such reports. Reports are -## formatted per RFC6591. -# -# FailureReports false - -## FailureReportsBcc (string) -## default (none) -## -## When failure reports are enabled and one is to be generated, always -## send one to the address(es) specified here. If a failure report is -## requested by the domain owner, the address(es) are added in a Bcc: field. -## If no request is made, they address(es) are used in a To: field. There -## is no default. -# -# FailureReportsBcc postmaster@example.coom -FailureReportsBcc {{ postmaster_email }} - -## FailureReportsOnNone { true | false } -## default "false" -## -## Supplements the "FailureReports" setting by generating reports for -## domains that advertise "none" policies. By default, reports are only -## generated (when enabled) for sending domains advertising a "quarantine" -## or "reject" policy. -# -# FailureReportsOnNone false - -## FailureReportsSentBy string -## default "USER@HOSTNAME" -## -## Specifies the email address to use in the From: field of failure -## reports generated by the filter. The default is to use the userid of -## the user running the filter and the local hostname to construct an -## email address. "postmaster" is used in place of the userid if a name -## could not be determined. -# -# FailureReportsSentBy USER@HOSTNAME -FailureReportsSentBy {{ postmaster_email }} - -## HistoryFile path -## default (none) -## -## If set, specifies the location of a text file to which records are written -## that can be used to generate DMARC aggregate reports. Records are groups -## of rows containing information about a single received message, and -## include all relevant information needed to generate a DMARC aggregate -## report. It is expected that this will not be used in its raw form, but -## rather periodically imported into a relational database from which the -## aggregate reports can be extracted by a tool such as opendmarc-import(8). -# -# HistoryFile /var/spool/opendmarc/opendmarc.dat - -## HoldQuarantinedMessages { true | false } -## default "false" -## -## If set, the milter will signal to the mta that messages with -## p=quarantine, which fail dmarc authentication, should be held in -## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. -## If false, messsages will be accepted and passed along with the -## regular mail flow, and the quarantine will be left up to downstream -## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, -## including the Authentication-Results header added by OpenDMARC -# -# HoldQuarantinedMessages false - -## IgnoreAuthenticatedClients { true | false } -## default "false" -## -## If set, causes mail from authenticated clients (i.e., those that used -## SMTP AUTH) to be ignored by the filter. -# -# IgnoreAuthenticatedClients false - -## HoldQuarantinedMessages { true | false } -## default "false" -## -## If set, the milter will signal to the mta that messages with -## p=quarantine, which fail dmarc authentication, should be held in -## the MTA's "Hold" or "Quarantine" queue. The name varies by MTA. -## If false, messsages will be accepted and passed along with the -## regular mail flow, and the quarantine will be left up to downstream -## MTA/MDA/MUA filters, if any, to handle by re-evaluating the headers, -## including the Authentication-Results header added by OpenDMARC -# -# HoldQuarantinedMessages false - - -## IgnoreHosts path -## default (internal) -## -## Specifies the path to a file that contains a list of hostnames, IP -## addresses, and/or CIDR expressions identifying hosts whose SMTP -## connections are to be ignored by the filter. If not specified, defaults -## to "127.0.0.1" only. -# -# IgnoreHosts /etc/opendmarc/ignore.hosts - -## IgnoreMailFrom domain[,...] -## default (none) -## -## Gives a list of domain names whose mail (based on the From: domain) is to -## be ignored by the filter. The list should be comma-separated. Matching -## against this list is case-insensitive. The default is an empty list, -## meaning no mail is ignored. -# -# IgnoreMailFrom example.com - -## MilterDebug (integer) -## default 0 -## -## Sets the debug level to be requested from the milter library. -# -# MilterDebug 0 - -## PidFile path -## default (none) -## -## Specifies the path to a file that should be created at process start -## containing the process ID. -# -# PidFile /var/run/opendmarc.pid - -## PublicSuffixList path -## default (none) -## -## Specifies the path to a file that contains top-level domains (TLDs) that -## will be used to compute the Organizational Domain for a given domain name, -## as described in the DMARC specification. If not provided, the filter will -## not be able to determine the Organizational Domain and only the presented -## domain will be evaluated. This file should be periodically updated. -## One location to retrieve the file from is https://publicsuffix.org/list/ -# -# PublicSuffixList path - -## RecordAllMessages { true | false } -## default "false" -## -## If set and "HistoryFile" is in use, all received messages are recorded -## to the history file. If not set (the default), only messages for which -## the From: domain published a DMARC record will be recorded in the -## history file. -# -# RecordAllMessages false - -## RejectFailures { true | false } -## default "false" -## -## If set, messages will be rejected if they fail the DMARC evaluation, or -## temp-failed if evaluation could not be completed. By default, no message -## will be rejected or temp-failed regardless of the outcome of the DMARC -## evaluation of the message. Instead, an Authentication-Results header -## field will be added. -# -# RejectFailures false -RejectFailures true - -## RejectMultiValueFrom { true | false } -## default "false" -## -## If set, messages with multiple addresses in the From: field of the message -## will be rejected unless all domains in the field are the same. They will -## otherwise be ignored by the filter (the default). -# -# RejectMultiValueFrom false - -## ReportCommand string -## default "/usr/sbin/sendmail -t" -## -## Indicates the shell command to which failure reports should be passed for -## delivery when "FailureReports" is enabled. -# -# ReportCommand /usr/sbin/sendmail -t - -## RequiredHeaders { true | false } -## default "false" -## -## If set, the filter will ensure the header of the message conforms to the -## basic header field count restrictions laid out in RFC5322, Section 3.6. -## Messages failing this test are rejected without further processing. A -## From: field from which no domain name could be extracted will also be -## rejected. -# -# RequiredHeaders false - -## Socket socketspec -## default (none) -## -## Specifies the socket that should be established by the filter to receive -## connections from sendmail(8) in order to provide service. socketspec is -## in one of two forms: local:path, which creates a UNIX domain socket at -## the specified path, or inet:port[@host] or inet6:port[@host] which creates -## a TCP socket on the specified port for the appropriate protocol family. -## If the host is not given as either a hostname or an IP address, the -## socket will be listening on all interfaces. This option is mandatory -## either in the configuration file or on the command line. If an IP -## address is used, it must be enclosed in square brackets. -# -Socket inet:8893@localhost -#Socket local:/run/opendmarc/opendmarc.sock - -## SoftwareHeader { true | false } -## default "false" -## -## Causes the filter to add a "DMARC-Filter" header field indicating the -## presence of this filter in the path of the message from injection to -## delivery. The product's name, version, and the job ID are included in -## the header field's contents. -# -SoftwareHeader true - -## SPFIgnoreResults { true | false } -## default "false" -## -## Causes the filter to ignore any SPF results in the header of the -## message. This is useful if you want the filter to perform SPF checks -## itself, or because you don't trust the arriving header. -# -SPFIgnoreResults true - -## SPFSelfValidate { true | false } -## default false -## -## Enable internal spf checking with --with-spf -## To use libspf2 instead: --with-spf --with-spf2-include=path --with-spf2-lib=path -## -## Causes the filter to perform a fallback SPF check itself when -## it can find no SPF results in the message header. If SPFIgnoreResults -## is also set, it never looks for SPF results in headers and -## always performs the SPF check itself when this is set. -# -SPFSelfValidate true - -## Syslog { true | false } -## default "false" -## -## Log via calls to syslog(3) any interesting activity. -# -Syslog true - -## SyslogFacility facility-name -## default "mail" -## -## Log via calls to syslog(3) using the named facility. The facility names -## are the same as the ones allowed in syslog.conf(5). -# -# SyslogFacility mail - -## TrustedAuthservIDs string -## default HOSTNAME -## -## Specifies one or more "authserv-id" values to trust as relaying true -## upstream DKIM and SPF results. The default is to use the name of -## the MTA processing the message. To specify a list, separate each entry -## with a comma. The key word "HOSTNAME" will be replaced by the name of -## the host running the filter as reported by the gethostname(3) function. -# -# TrustedAuthservIDs HOSTNAME - -## UMask mask -## default (none) -## -## Requests a specific permissions mask to be used for file creation. This -## only really applies to creation of the socket when Socket specifies a -## UNIX domain socket, and to the HistoryFile and PidFile (if any); temporary -## files are normally created by the mkstemp(3) function that enforces a -## specific file mode on creation regardless of the process umask. See -## umask(2) for more information. -# -UMask 007 - -## UserID user[:group] -## default (none) -## -## Attempts to become the specified userid before starting operations. -## The process will be assigned all of the groups and primary group ID of -## the named userid unless an alternate group is specified. -# -UserID opendmarc:mail diff --git a/templates/Fedora/41/etc/postfix/access b/templates/Fedora/41/etc/postfix/access deleted file mode 100644 index 6da2db2..0000000 --- a/templates/Fedora/41/etc/postfix/access +++ /dev/null @@ -1,484 +0,0 @@ -# ACCESS(5) ACCESS(5) -# -# NAME -# access - Postfix SMTP server access table -# -# SYNOPSIS -# postmap /etc/postfix/access -# -# postmap -q "string" /etc/postfix/access -# -# postmap -q - /etc/postfix/access as the lookup key for such addresses. The value is -# specified with the smtpd_null_access_lookup_key parameter -# in the Postfix main.cf file. -# -# EMAIL ADDRESS EXTENSION -# When a mail address localpart contains the optional recip- -# ient delimiter (e.g., user+foo@domain), the lookup order -# becomes: user+foo@domain, user@domain, domain, user+foo@, -# and user@. -# -# HOST NAME/ADDRESS PATTERNS IN INDEXED TABLES -# With lookups from indexed files such as DB or DBM, or from -# networked tables such as NIS, LDAP or SQL, the following -# lookup patterns are examined in the order as listed: -# -# domain.tld -# Matches domain.tld. -# -# The pattern domain.tld also matches subdomains, but -# only when the string smtpd_access_maps is listed in -# the Postfix parent_domain_matches_subdomains con- -# figuration setting. -# -# .domain.tld -# Matches subdomains of domain.tld, but only when the -# string smtpd_access_maps is not listed in the Post- -# fix parent_domain_matches_subdomains configuration -# setting. -# -# net.work.addr.ess -# -# net.work.addr -# -# net.work -# -# net Matches a remote IPv4 host address or network -# address range. Specify one to four decimal octets -# separated by ".". Do not specify "[]" , "/", lead- -# ing zeros, or hexadecimal forms. -# -# Network ranges are matched by repeatedly truncating -# the last ".octet" from a remote IPv4 host address -# string, until a match is found in the access table, -# or until further truncation is not possible. -# -# NOTE: use the cidr lookup table type to specify -# network/netmask patterns. See cidr_table(5) for -# details. -# -# net:work:addr:ess -# -# net:work:addr -# -# net:work -# -# net Matches a remote IPv6 host address or network -# address range. Specify three to eight hexadecimal -# octet pairs separated by ":", using the compressed -# form "::" for a sequence of zero-valued octet -# pairs. Do not specify "[]", "/", leading zeros, or -# non-compressed forms. -# -# A network range is matched by repeatedly truncating -# the last ":octetpair" from the compressed-form -# remote IPv6 host address string, until a match is -# found in the access table, or until further trunca- -# tion is not possible. -# -# NOTE: use the cidr lookup table type to specify -# network/netmask patterns. See cidr_table(5) for -# details. -# -# IPv6 support is available in Postfix 2.2 and later. -# -# ACCEPT ACTIONS -# OK Accept the address etc. that matches the pattern. -# -# all-numerical -# An all-numerical result is treated as OK. This for- -# mat is generated by address-based relay authoriza- -# tion schemes such as pop-before-smtp. -# -# For other accept actions, see "OTHER ACTIONS" below. -# -# REJECT ACTIONS -# Postfix version 2.3 and later support enhanced status -# codes as defined in RFC 3463. When no code is specified -# at the beginning of the text below, Postfix inserts a -# default enhanced status code of "5.7.1" in the case of -# reject actions, and "4.7.1" in the case of defer actions. -# See "ENHANCED STATUS CODES" below. -# -# 4NN text -# -# 5NN text -# Reject the address etc. that matches the pattern, -# and respond with the numerical three-digit code and -# text. 4NN means "try again later", while 5NN means -# "do not try again". -# -# The following responses have special meaning for -# the Postfix SMTP server: -# -# 421 text (Postfix 2.3 and later) -# -# 521 text (Postfix 2.6 and later) -# After responding with the numerical -# three-digit code and text, disconnect imme- -# diately from the SMTP client. This frees up -# SMTP server resources so that they can be -# made available to another SMTP client. -# -# Note: The "521" response should be used only -# with botnets and other malware where inter- -# operability is of no concern. The "send 521 -# and disconnect" behavior is NOT defined in -# the SMTP standard. -# -# REJECT optional text... -# Reject the address etc. that matches the pattern. -# Reply with "$access_map_reject_code optional -# text..." when the optional text is specified, oth- -# erwise reply with a generic error response message. -# -# DEFER optional text... -# Reject the address etc. that matches the pattern. -# Reply with "$access_map_defer_code optional -# text..." when the optional text is specified, oth- -# erwise reply with a generic error response message. -# -# This feature is available in Postfix 2.6 and later. -# -# DEFER_IF_REJECT optional text... -# Defer the request if some later restriction would -# result in a REJECT action. Reply with -# "$access_map_defer_code 4.7.1 optional text..." -# when the optional text is specified, otherwise -# reply with a generic error response message. -# -# Prior to Postfix 2.6, the SMTP reply code is 450. -# -# This feature is available in Postfix 2.1 and later. -# -# DEFER_IF_PERMIT optional text... -# Defer the request if some later restriction would -# result in an explicit or implicit PERMIT action. -# Reply with "$access_map_defer_code 4.7.1 optional -# text..." when the optional text is specified, oth- -# erwise reply with a generic error response message. -# -# Prior to Postfix 2.6, the SMTP reply code is 450. -# -# This feature is available in Postfix 2.1 and later. -# -# For other reject actions, see "OTHER ACTIONS" below. -# -# OTHER ACTIONS -# restriction... -# Apply the named UCE restriction(s) (permit, reject, -# reject_unauth_destination, and so on). -# -# BCC user@domain -# Send one copy of the message to the specified -# recipient. -# -# If multiple BCC actions are specified within the -# same SMTP MAIL transaction, with Postfix 3.0 only -# the last action will be used. -# -# This feature is available in Postfix 3.0 and later. -# -# DISCARD optional text... -# Claim successful delivery and silently discard the -# message. Log the optional text if specified, oth- -# erwise log a generic message. -# -# Note: this action currently affects all recipients -# of the message. To discard only one recipient -# without discarding the entire message, use the -# transport(5) table to direct mail to the discard(8) -# service. -# -# This feature is available in Postfix 2.0 and later. -# -# DUNNO Pretend that the lookup key was not found. This -# prevents Postfix from trying substrings of the -# lookup key (such as a subdomain name, or a network -# address subnetwork). -# -# This feature is available in Postfix 2.0 and later. -# -# FILTER transport:destination -# After the message is queued, send the entire mes- -# sage through the specified external content filter. -# The transport name specifies the first field of a -# mail delivery agent definition in master.cf; the -# syntax of the next-hop destination is described in -# the manual page of the corresponding delivery -# agent. More information about external content -# filters is in the Postfix FILTER_README file. -# -# Note 1: do not use $number regular expression sub- -# stitutions for transport or destination unless you -# know that the information has a trusted origin. -# -# Note 2: this action overrides the main.cf con- -# tent_filter setting, and affects all recipients of -# the message. In the case that multiple FILTER -# actions fire, only the last one is executed. -# -# Note 3: the purpose of the FILTER command is to -# override message routing. To override the recipi- -# ent's transport but not the next-hop destination, -# specify an empty filter destination (Postfix 2.7 -# and later), or specify a transport:destination that -# delivers through a different Postfix instance -# (Postfix 2.6 and earlier). Other options are using -# the recipient-dependent transport_maps or the sen- -# der-dependent sender_dependent_default_transport- -# _maps features. -# -# This feature is available in Postfix 2.0 and later. -# -# HOLD optional text... -# Place the message on the hold queue, where it will -# sit until someone either deletes it or releases it -# for delivery. Log the optional text if specified, -# otherwise log a generic message. -# -# Mail that is placed on hold can be examined with -# the postcat(1) command, and can be destroyed or -# released with the postsuper(1) command. -# -# Note: use "postsuper -r" to release mail that was -# kept on hold for a significant fraction of $maxi- -# mal_queue_lifetime or $bounce_queue_lifetime, or -# longer. Use "postsuper -H" only for mail that will -# not expire within a few delivery attempts. -# -# Note: this action currently affects all recipients -# of the message. -# -# This feature is available in Postfix 2.0 and later. -# -# PREPEND headername: headervalue -# Prepend the specified message header to the mes- -# sage. When more than one PREPEND action executes, -# the first prepended header appears before the sec- -# ond etc. prepended header. -# -# Note: this action must execute before the message -# content is received; it cannot execute in the con- -# text of smtpd_end_of_data_restrictions. -# -# This feature is available in Postfix 2.1 and later. -# -# REDIRECT user@domain -# After the message is queued, send the message to -# the specified address instead of the intended -# recipient(s). When multiple REDIRECT actions fire, -# only the last one takes effect. -# -# Note: this action overrides the FILTER action, and -# currently overrides all recipients of the message. -# -# This feature is available in Postfix 2.1 and later. -# -# INFO optional text... -# Log an informational record with the optional text, -# together with client information and if available, -# with helo, sender, recipient and protocol informa- -# tion. -# -# This feature is available in Postfix 3.0 and later. -# -# WARN optional text... -# Log a warning with the optional text, together with -# client information and if available, with helo, -# sender, recipient and protocol information. -# -# This feature is available in Postfix 2.1 and later. -# -# ENHANCED STATUS CODES -# Postfix version 2.3 and later support enhanced status -# codes as defined in RFC 3463. When an enhanced status -# code is specified in an access table, it is subject to -# modification. The following transformations are needed -# when the same access table is used for client, helo, -# sender, or recipient access restrictions; they happen -# regardless of whether Postfix replies to a MAIL FROM, RCPT -# TO or other SMTP command. -# -# o When a sender address matches a REJECT action, the -# Postfix SMTP server will transform a recipient DSN -# status (e.g., 4.1.1-4.1.6) into the corresponding -# sender DSN status, and vice versa. -# -# o When non-address information matches a REJECT -# action (such as the HELO command argument or the -# client hostname/address), the Postfix SMTP server -# will transform a sender or recipient DSN status -# into a generic non-address DSN status (e.g., -# 4.0.0). -# -# REGULAR EXPRESSION TABLES -# This section describes how the table lookups change when -# the table is given in the form of regular expressions. For -# a description of regular expression lookup table syntax, -# see regexp_table(5) or pcre_table(5). -# -# Each pattern is a regular expression that is applied to -# the entire string being looked up. Depending on the appli- -# cation, that string is an entire client hostname, an -# entire client IP address, or an entire mail address. Thus, -# no parent domain or parent network search is done, -# user@domain mail addresses are not broken up into their -# user@ and domain constituent parts, nor is user+foo broken -# up into user and foo. -# -# Patterns are applied in the order as specified in the ta- -# ble, until a pattern is found that matches the search -# string. -# -# Actions are the same as with indexed file lookups, with -# the additional feature that parenthesized substrings from -# the pattern can be interpolated as $1, $2 and so on. -# -# TCP-BASED TABLES -# This section describes how the table lookups change when -# lookups are directed to a TCP-based server. For a descrip- -# tion of the TCP client/server lookup protocol, see tcp_ta- -# ble(5). This feature is not available up to and including -# Postfix version 2.4. -# -# Each lookup operation uses the entire query string once. -# Depending on the application, that string is an entire -# client hostname, an entire client IP address, or an entire -# mail address. Thus, no parent domain or parent network -# search is done, user@domain mail addresses are not broken -# up into their user@ and domain constituent parts, nor is -# user+foo broken up into user and foo. -# -# Actions are the same as with indexed file lookups. -# -# EXAMPLE -# The following example uses an indexed file, so that the -# order of table entries does not matter. The example per- -# mits access by the client at address 1.2.3.4 but rejects -# all other clients in 1.2.3.0/24. Instead of hash lookup -# tables, some systems use dbm. Use the command "postconf -# -m" to find out what lookup tables Postfix supports on -# your system. -# -# /etc/postfix/main.cf: -# smtpd_client_restrictions = -# check_client_access hash:/etc/postfix/access -# -# /etc/postfix/access: -# 1.2.3 REJECT -# 1.2.3.4 OK -# -# Execute the command "postmap /etc/postfix/access" after -# editing the file. -# -# BUGS -# The table format does not understand quoting conventions. -# -# SEE ALSO -# postmap(1), Postfix lookup table manager -# smtpd(8), SMTP server -# postconf(5), configuration parameters -# transport(5), transport:nexthop syntax -# -# README FILES -# Use "postconf readme_directory" or "postconf html_direc- -# tory" to locate this information. -# SMTPD_ACCESS_README, built-in SMTP server access control -# DATABASE_README, Postfix lookup table overview -# -# LICENSE -# The Secure Mailer license must be distributed with this -# software. -# -# AUTHOR(S) -# Wietse Venema -# IBM T.J. Watson Research -# P.O. Box 704 -# Yorktown Heights, NY 10598, USA -# -# Wietse Venema -# Google, Inc. -# 111 8th Avenue -# New York, NY 10011, USA -# -# ACCESS(5) diff --git a/templates/Fedora/41/etc/postfix/canonical b/templates/Fedora/41/etc/postfix/canonical deleted file mode 100644 index 894fd5b..0000000 --- a/templates/Fedora/41/etc/postfix/canonical +++ /dev/null @@ -1,306 +0,0 @@ -# CANONICAL(5) CANONICAL(5) -# -# NAME -# canonical - Postfix canonical table format -# -# SYNOPSIS -# postmap /etc/postfix/canonical -# -# postmap -q "string" /etc/postfix/canonical -# -# postmap -q - /etc/postfix/canonical $/ -# REJECT IFRAME vulnerability exploit -# -# SEE ALSO -# cleanup(8), canonicalize and enqueue Postfix message -# pcre_table(5), format of PCRE lookup tables -# regexp_table(5), format of POSIX regular expression tables -# postconf(1), Postfix configuration utility -# postmap(1), Postfix lookup table management -# postsuper(1), Postfix janitor -# postcat(1), show Postfix queue file contents -# RFC 2045, base64 and quoted-printable encoding rules -# RFC 2047, message header encoding for non-ASCII text -# -# README FILES -# Use "postconf readme_directory" or "postconf html_direc- -# tory" to locate this information. -# DATABASE_README, Postfix lookup table overview -# CONTENT_INSPECTION_README, Postfix content inspection overview -# BUILTIN_FILTER_README, Postfix built-in content inspection -# BACKSCATTER_README, blocking returned forged mail -# -# LICENSE -# The Secure Mailer license must be distributed with this -# software. -# -# AUTHOR(S) -# Wietse Venema -# IBM T.J. Watson Research -# P.O. Box 704 -# Yorktown Heights, NY 10598, USA -# -# Wietse Venema -# Google, Inc. -# 111 8th Avenue -# New York, NY 10011, USA -# -# HEADER_CHECKS(5) diff --git a/templates/Fedora/41/etc/postfix/main.cf b/templates/Fedora/41/etc/postfix/main.cf deleted file mode 100644 index e7c5ce2..0000000 --- a/templates/Fedora/41/etc/postfix/main.cf +++ /dev/null @@ -1,774 +0,0 @@ -# Global Postfix configuration file. This file lists only a subset -# of all parameters. For the syntax, and for a complete parameter -# list, see the postconf(5) manual page (command: "man 5 postconf"). -# -# TIP: use the command "postconf -n" to view main.cf parameter -# settings, "postconf parametername" to view a specific parameter, -# and "postconf 'parametername=value'" to set a specific parameter. -# -# For common configuration examples, see BASIC_CONFIGURATION_README -# and STANDARD_CONFIGURATION_README. To find these documents, use -# the command "postconf html_directory readme_directory", or go to -# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. -# -# For best results, change no more than 2-3 parameters at a time, -# and test if Postfix still works after every change. - -# COMPATIBILITY -# -# The compatibility_level determines what default settings Postfix -# will use for main.cf and master.cf settings. These defaults will -# change over time. -# -# To avoid breaking things, Postfix will use backwards-compatible -# default settings and log where it uses those old backwards-compatible -# default settings, until the system administrator has determined -# if any backwards-compatible default settings need to be made -# permanent in main.cf or master.cf. -# -# When this review is complete, update the compatibility_level setting -# below as recommended in the RELEASE_NOTES file. -# -# The level below is what should be used with new (not upgrade) installs. -# -compatibility_level = 3.7 - -# SOFT BOUNCE -# -# The soft_bounce parameter provides a limited safety net for -# testing. When soft_bounce is enabled, mail will remain queued that -# would otherwise bounce. This parameter disables locally-generated -# bounces, and prevents the SMTP server from rejecting mail permanently -# (by changing 5xx replies into 4xx replies). However, soft_bounce -# is no cure for address rewriting mistakes or mail routing mistakes. -# -#soft_bounce = no - -# LOCAL PATHNAME INFORMATION -# -# The queue_directory specifies the location of the Postfix queue. -# This is also the root directory of Postfix daemons that run chrooted. -# See the files in examples/chroot-setup for setting up Postfix chroot -# environments on different UNIX systems. -# -queue_directory = /var/spool/postfix - -# The command_directory parameter specifies the location of all -# postXXX commands. -# -command_directory = /usr/sbin - -# The daemon_directory parameter specifies the location of all Postfix -# daemon programs (i.e. programs listed in the master.cf file). This -# directory must be owned by root. -# -daemon_directory = /usr/libexec/postfix - -# The data_directory parameter specifies the location of Postfix-writable -# data files (caches, random numbers). This directory must be owned -# by the mail_owner account (see below). -# -data_directory = /var/lib/postfix - -# QUEUE AND PROCESS OWNERSHIP -# -# The mail_owner parameter specifies the owner of the Postfix queue -# and of most Postfix daemon processes. Specify the name of a user -# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS -# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In -# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED -# USER. -# -mail_owner = postfix - -# The default_privs parameter specifies the default rights used by -# the local delivery agent for delivery to external file or command. -# These rights are used in the absence of a recipient user context. -# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. -# -#default_privs = nobody - -# INTERNET HOST AND DOMAIN NAMES -# -# The myhostname parameter specifies the internet hostname of this -# mail system. The default is to use the fully-qualified domain name -# from gethostname(). $myhostname is used as a default value for many -# other configuration parameters. -# -#myhostname = host.domain.tld -#myhostname = virtual.domain.tld - -# The mydomain parameter specifies the local internet domain name. -# The default is to use $myhostname minus the first component. -# $mydomain is used as a default value for many other configuration -# parameters. -# -#mydomain = domain.tld - -# SENDING MAIL -# -# The myorigin parameter specifies the domain that locally-posted -# mail appears to come from. The default is to append $myhostname, -# which is fine for small sites. If you run a domain with multiple -# machines, you should (1) change this to $mydomain and (2) set up -# a domain-wide alias database that aliases each user to -# user@that.users.mailhost. -# -# For the sake of consistency between sender and recipient addresses, -# myorigin also specifies the default domain name that is appended -# to recipient addresses that have no @domain part. -# -#myorigin = $myhostname -#myorigin = $mydomain - -# RECEIVING MAIL - -# The inet_interfaces parameter specifies the network interface -# addresses that this mail system receives mail on. By default, -# the software claims all active interfaces on the machine. The -# parameter also controls delivery of mail to user@[ip.address]. -# -# See also the proxy_interfaces parameter, for network addresses that -# are forwarded to us via a proxy or network address translator. -# -# Note: you need to stop/start Postfix when this parameter changes. -# -inet_interfaces = all -#inet_interfaces = $myhostname -#inet_interfaces = $myhostname, localhost -#inet_interfaces = localhost - -# Enable IPv4, and IPv6 if supported -inet_protocols = all - -# The proxy_interfaces parameter specifies the network interface -# addresses that this mail system receives mail on by way of a -# proxy or network address translation unit. This setting extends -# the address list specified with the inet_interfaces parameter. -# -# You must specify your proxy/NAT addresses when your system is a -# backup MX host for other domains, otherwise mail delivery loops -# will happen when the primary MX host is down. -# -#proxy_interfaces = -#proxy_interfaces = 1.2.3.4 - -# The mydestination parameter specifies the list of domains that this -# machine considers itself the final destination for. -# -# These domains are routed to the delivery agent specified with the -# local_transport parameter setting. By default, that is the UNIX -# compatible delivery agent that lookups all recipients in /etc/passwd -# and /etc/aliases or their equivalent. -# -# The default is $myhostname + localhost.$mydomain + localhost. On -# a mail domain gateway, you should also include $mydomain. -# -# Do not specify the names of virtual domains - those domains are -# specified elsewhere (see VIRTUAL_README). -# -# Do not specify the names of domains that this machine is backup MX -# host for. Specify those names via the relay_domains settings for -# the SMTP server, or use permit_mx_backup if you are lazy (see -# STANDARD_CONFIGURATION_README). -# -# The local machine is always the final destination for mail addressed -# to user@[the.net.work.address] of an interface that the mail system -# receives mail on (see the inet_interfaces parameter). -# -# Specify a list of host or domain names, /file/name or type:table -# patterns, separated by commas and/or whitespace. A /file/name -# pattern is replaced by its contents; a type:table is matched when -# a name matches a lookup key (the right-hand side is ignored). -# Continue long lines by starting the next line with whitespace. -# -# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". -# -mydestination = $myhostname, localhost.$mydomain, localhost -#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain -#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, -# mail.$mydomain, www.$mydomain, ftp.$mydomain - -# REJECTING MAIL FOR UNKNOWN LOCAL USERS -# -# The local_recipient_maps parameter specifies optional lookup tables -# with all names or addresses of users that are local with respect -# to $mydestination, $inet_interfaces or $proxy_interfaces. -# -# If this parameter is defined, then the SMTP server will reject -# mail for unknown local users. This parameter is defined by default. -# -# To turn off local recipient checking in the SMTP server, specify -# local_recipient_maps = (i.e. empty). -# -# The default setting assumes that you use the default Postfix local -# delivery agent for local delivery. You need to update the -# local_recipient_maps setting if: -# -# - You define $mydestination domain recipients in files other than -# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. -# For example, you define $mydestination domain recipients in -# the $virtual_mailbox_maps files. -# -# - You redefine the local delivery agent in master.cf. -# -# - You redefine the "local_transport" setting in main.cf. -# -# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" -# feature of the Postfix local delivery agent (see local(8)). -# -# Details are described in the LOCAL_RECIPIENT_README file. -# -# Beware: if the Postfix SMTP server runs chrooted, you probably have -# to access the passwd file via the proxymap service, in order to -# overcome chroot restrictions. The alternative, having a copy of -# the system passwd file in the chroot jail is just not practical. -# -# The right-hand side of the lookup tables is conveniently ignored. -# In the left-hand side, specify a bare username, an @domain.tld -# wild-card, or specify a user@domain.tld address. -# -#local_recipient_maps = unix:passwd.byname $alias_maps -#local_recipient_maps = proxy:unix:passwd.byname $alias_maps -#local_recipient_maps = - -# The unknown_local_recipient_reject_code specifies the SMTP server -# response code when a recipient domain matches $mydestination or -# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty -# and the recipient address or address local-part is not found. -# -# The default setting is 550 (reject mail) but it is safer to start -# with 450 (try again later) until you are certain that your -# local_recipient_maps settings are OK. -# -unknown_local_recipient_reject_code = 550 - -# TRUST AND RELAY CONTROL - -# The mynetworks parameter specifies the list of "trusted" SMTP -# clients that have more privileges than "strangers". -# -# In particular, "trusted" SMTP clients are allowed to relay mail -# through Postfix. See the smtpd_recipient_restrictions parameter -# in postconf(5). -# -# You can specify the list of "trusted" network addresses by hand -# or you can let Postfix do it for you (which is the default). -# -# By default (mynetworks_style = host), Postfix "trusts" only -# the local machine. -# -# Specify "mynetworks_style = subnet" when Postfix should "trust" -# SMTP clients in the same IP subnetworks as the local machine. -# On Linux, this works correctly only with interfaces specified -# with the "ifconfig" or "ip" command. -# -# Specify "mynetworks_style = class" when Postfix should "trust" SMTP -# clients in the same IP class A/B/C networks as the local machine. -# Don't do this with a dialup site - it would cause Postfix to "trust" -# your entire provider's network. Instead, specify an explicit -# mynetworks list by hand, as described below. -# -# Specify "mynetworks_style = host" when Postfix should "trust" -# only the local machine. -# -#mynetworks_style = class -#mynetworks_style = subnet -#mynetworks_style = host - -# Alternatively, you can specify the mynetworks list by hand, in -# which case Postfix ignores the mynetworks_style setting. -# -# Specify an explicit list of network/netmask patterns, where the -# mask specifies the number of bits in the network part of a host -# address. -# -# You can also specify the absolute pathname of a pattern file instead -# of listing the patterns here. Specify type:table for table-based lookups -# (the value on the table right-hand side is not used). -# -#mynetworks = 168.100.3.0/28, 127.0.0.0/8 -#mynetworks = $config_directory/mynetworks -#mynetworks = hash:/etc/postfix/network_table - -# The relay_domains parameter restricts what destinations this system will -# relay mail to. See the smtpd_relay_restrictions and -# smtpd_recipient_restrictions descriptions in postconf(5) for detailed -# information. -# -# By default, Postfix relays mail -# - from "trusted" clients (IP address matches $mynetworks, or is -# SASL authenticated) to any destination, -# - from "untrusted" clients to destinations that match $relay_domains or -# subdomains thereof, except addresses with sender-specified routing. -# The default relay_domains value is empty. -# -# In addition to the above, the Postfix SMTP server by default accepts mail -# that Postfix is final destination for: -# - destinations that match $inet_interfaces or $proxy_interfaces, -# - destinations that match $mydestination -# - destinations that match $virtual_alias_domains, -# - destinations that match $virtual_mailbox_domains. -# These destinations do not need to be listed in $relay_domains. -# -# Specify a list of hosts or domains, /file/name patterns or type:name -# lookup tables, separated by commas and/or whitespace. Continue -# long lines by starting the next line with whitespace. A file name -# is replaced by its contents; a type:name table is matched when a -# (parent) domain appears as lookup key. -# -# NOTE: Postfix will not automatically forward mail for domains that -# list this system as their primary or backup MX host. See the -# permit_mx_backup restriction description in postconf(5). -# -#relay_domains = - -# INTERNET OR INTRANET - -# The relayhost parameter specifies the default host to send mail to -# when no entry is matched in the optional transport(5) table. When -# no relayhost is given, mail is routed directly to the destination. -# -# On an intranet, specify the organizational domain name. If your -# internal DNS uses no MX records, specify the name of the intranet -# gateway host instead. -# -# In the case of SMTP, specify a domain, host, host:port, [host]:port, -# [address] or [address]:port; the form [host] turns off MX lookups. -# -# If you're connected via UUCP, see also the default_transport parameter. -# -#relayhost = $mydomain -#relayhost = [gateway.my.domain] -#relayhost = [mailserver.isp.tld] -#relayhost = uucphost -#relayhost = [an.ip.add.ress] - -# REJECTING UNKNOWN RELAY USERS -# -# The relay_recipient_maps parameter specifies optional lookup tables -# with all addresses in the domains that match $relay_domains. -# -# If this parameter is defined, then the SMTP server will reject -# mail for unknown relay users. This feature is off by default. -# -# The right-hand side of the lookup tables is conveniently ignored. -# In the left-hand side, specify an @domain.tld wild-card, or specify -# a user@domain.tld address. -# -#relay_recipient_maps = hash:/etc/postfix/relay_recipients - -# INPUT RATE CONTROL -# -# The in_flow_delay configuration parameter implements mail input -# flow control. This feature is turned on by default, although it -# still needs further development (it's disabled on SCO UNIX due -# to an SCO bug). -# -# A Postfix process will pause for $in_flow_delay seconds before -# accepting a new message, when the message arrival rate exceeds the -# message delivery rate. With the default 100 SMTP server process -# limit, this limits the mail inflow to 100 messages a second more -# than the number of messages delivered per second. -# -# Specify 0 to disable the feature. Valid delays are 0..10. -# -#in_flow_delay = 1s - -# ADDRESS REWRITING -# -# The ADDRESS_REWRITING_README document gives information about -# address masquerading or other forms of address rewriting including -# username->Firstname.Lastname mapping. - -# ADDRESS REDIRECTION (VIRTUAL DOMAIN) -# -# The VIRTUAL_README document gives information about the many forms -# of domain hosting that Postfix supports. - -# "USER HAS MOVED" BOUNCE MESSAGES -# -# See the discussion in the ADDRESS_REWRITING_README document. - -# TRANSPORT MAP -# -# See the discussion in the ADDRESS_REWRITING_README document. - -# ALIAS DATABASE -# -# The alias_maps parameter specifies the list of alias databases used -# by the local delivery agent. The default list is system dependent. -# -# On systems with NIS, the default is to search the local alias -# database, then the NIS alias database. See aliases(5) for syntax -# details. -# -# If you change the alias database, run "postalias /etc/aliases" (or -# wherever your system stores the mail alias file), or simply run -# "newaliases" to build the necessary DBM or DB file. -# -# It will take a minute or so before changes become visible. Use -# "postfix reload" to eliminate the delay. -# -#alias_maps = dbm:/etc/aliases -alias_maps = hash:/etc/aliases -#alias_maps = hash:/etc/aliases, nis:mail.aliases -#alias_maps = netinfo:/aliases - -# The alias_database parameter specifies the alias database(s) that -# are built with "newaliases" or "sendmail -bi". This is a separate -# configuration parameter, because alias_maps (see above) may specify -# tables that are not necessarily all under control by Postfix. -# -#alias_database = dbm:/etc/aliases -#alias_database = dbm:/etc/mail/aliases -alias_database = hash:/etc/aliases -#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases - -# ADDRESS EXTENSIONS (e.g., user+foo) -# -# The recipient_delimiter parameter specifies the separator between -# user names and address extensions (user+foo). See canonical(5), -# local(8), relocated(5) and virtual(5) for the effects this has on -# aliases, canonical, virtual, relocated and .forward file lookups. -# Basically, the software tries user+foo and .forward+foo before -# trying user and .forward. -# -#recipient_delimiter = + - -# DELIVERY TO MAILBOX -# -# The home_mailbox parameter specifies the optional pathname of a -# mailbox file relative to a user's home directory. The default -# mailbox file is /var/spool/mail/user or /var/mail/user. Specify -# "Maildir/" for qmail-style delivery (the / is required). -# -#home_mailbox = Mailbox -#home_mailbox = Maildir/ - -# The mail_spool_directory parameter specifies the directory where -# UNIX-style mailboxes are kept. The default setting depends on the -# system type. -# -#mail_spool_directory = /var/mail -#mail_spool_directory = /var/spool/mail - -# The mailbox_command parameter specifies the optional external -# command to use instead of mailbox delivery. The command is run as -# the recipient with proper HOME, SHELL and LOGNAME environment settings. -# Exception: delivery for root is done as $default_user. -# -# Other environment variables of interest: USER (recipient username), -# EXTENSION (address extension), DOMAIN (domain part of address), -# and LOCAL (the address localpart). -# -# Unlike other Postfix configuration parameters, the mailbox_command -# parameter is not subjected to $parameter substitutions. This is to -# make it easier to specify shell syntax (see example below). -# -# Avoid shell meta characters because they will force Postfix to run -# an expensive shell process. Procmail alone is expensive enough. -# -# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN -# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. -# -#mailbox_command = /some/where/procmail -#mailbox_command = /some/where/procmail -a "$EXTENSION" - -# The mailbox_transport specifies the optional transport in master.cf -# to use after processing aliases and .forward files. This parameter -# has precedence over the mailbox_command, fallback_transport and -# luser_relay parameters. -# -# Specify a string of the form transport:nexthop, where transport is -# the name of a mail delivery transport defined in master.cf. The -# :nexthop part is optional. For more details see the sample transport -# configuration file. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must update the "local_recipient_maps" setting in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" -# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. -#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp -mailbox_transport = lmtp:inet:localhost:24 -virtual_transport = lmtp:inet:localhost:24 - -# If using the cyrus-imapd IMAP server deliver local mail to the IMAP -# server using LMTP (Local Mail Transport Protocol), this is prefered -# over the older cyrus deliver program by setting the -# mailbox_transport as below: -# -# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp -# -# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via -# these settings. -# -# local_destination_recipient_limit = 300 -# local_destination_concurrency_limit = 5 -# -# Of course you should adjust these settings as appropriate for the -# capacity of the hardware you are using. The recipient limit setting -# can be used to take advantage of the single instance message store -# capability of Cyrus. The concurrency limit can be used to control -# how many simultaneous LMTP sessions will be permitted to the Cyrus -# message store. -# -# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and -# subsequent line in master.cf. -#mailbox_transport = cyrus - -# The fallback_transport specifies the optional transport in master.cf -# to use for recipients that are not found in the UNIX passwd database. -# This parameter has precedence over the luser_relay parameter. -# -# Specify a string of the form transport:nexthop, where transport is -# the name of a mail delivery transport defined in master.cf. The -# :nexthop part is optional. For more details see the sample transport -# configuration file. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must update the "local_recipient_maps" setting in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp -#fallback_transport = - -# The luser_relay parameter specifies an optional destination address -# for unknown recipients. By default, mail for unknown@$mydestination, -# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned -# as undeliverable. -# -# The following expansions are done on luser_relay: $user (recipient -# username), $shell (recipient shell), $home (recipient home directory), -# $recipient (full recipient address), $extension (recipient address -# extension), $domain (recipient domain), $local (entire recipient -# localpart), $recipient_delimiter. Specify ${name?value} or -# ${name:value} to expand value only when $name does (does not) exist. -# -# luser_relay works only for the default Postfix local delivery agent. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must specify "local_recipient_maps =" (i.e. empty) in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -#luser_relay = $user@other.host -#luser_relay = $local@other.host -#luser_relay = admin+$local - -# JUNK MAIL CONTROLS -# -# The controls listed here are only a very small subset. The file -# SMTPD_ACCESS_README provides an overview. - -# The header_checks parameter specifies an optional table with patterns -# that each logical message header is matched against, including -# headers that span multiple physical lines. -# -# By default, these patterns also apply to MIME headers and to the -# headers of attached messages. With older Postfix versions, MIME and -# attached message headers were treated as body text. -# -# For details, see "man header_checks". -# -#header_checks = regexp:/etc/postfix/header_checks - -# FAST ETRN SERVICE -# -# Postfix maintains per-destination logfiles with information about -# deferred mail, so that mail can be flushed quickly with the SMTP -# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". -# See the ETRN_README document for a detailed description. -# -# The fast_flush_domains parameter controls what destinations are -# eligible for this service. By default, they are all domains that -# this server is willing to relay mail to. -# -#fast_flush_domains = $relay_domains - -# SHOW SOFTWARE VERSION OR NOT -# -# The smtpd_banner parameter specifies the text that follows the 220 -# code in the SMTP server's greeting banner. Some people like to see -# the mail version advertised. By default, Postfix shows no version. -# -# You MUST specify $myhostname at the start of the text. That is an -# RFC requirement. Postfix itself does not care. -# -#smtpd_banner = $myhostname ESMTP $mail_name -#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) - -# PARALLEL DELIVERY TO THE SAME DESTINATION -# -# How many parallel deliveries to the same user or domain? With local -# delivery, it does not make sense to do massively parallel delivery -# to the same user, because mailbox updates must happen sequentially, -# and expensive pipelines in .forward files can cause disasters when -# too many are run at the same time. With SMTP deliveries, 10 -# simultaneous connections to the same domain could be sufficient to -# raise eyebrows. -# -# Each message delivery transport has its XXX_destination_concurrency_limit -# parameter. The default is $default_destination_concurrency_limit for -# most delivery transports. For the local delivery agent the default is 2. - -#local_destination_concurrency_limit = 2 -#default_destination_concurrency_limit = 20 - -# DEBUGGING CONTROL -# -# The debug_peer_level parameter specifies the increment in verbose -# logging level when an SMTP client or server host name or address -# matches a pattern in the debug_peer_list parameter. -# -debug_peer_level = 2 - -# The debug_peer_list parameter specifies an optional list of domain -# or network patterns, /file/name patterns or type:name tables. When -# an SMTP client or server host name or address matches a pattern, -# increase the verbose logging level by the amount specified in the -# debug_peer_level parameter. -# -#debug_peer_list = 127.0.0.1 -#debug_peer_list = some.domain - -# The debugger_command specifies the external command that is executed -# when a Postfix daemon program is run with the -D option. -# -# Use "command .. & sleep 5" so that the debugger can attach before -# the process marches on. If you use an X-based debugger, be sure to -# set up your XAUTHORITY environment variable before starting Postfix. -# -debugger_command = - PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin - ddd $daemon_directory/$process_name $process_id & sleep 5 - -# If you can't use X, use this to capture the call stack when a -# daemon crashes. The result is in a file in the configuration -# directory, and is named after the process name and the process ID. -# -# debugger_command = -# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; -# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 -# >$config_directory/$process_name.$process_id.log & sleep 5 -# -# Another possibility is to run gdb under a detached screen session. -# To attach to the screen session, su root and run "screen -r -# " where uniquely matches one of the detached -# sessions (from "screen -list"). -# -# debugger_command = -# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen -# -dmS $process_name gdb $daemon_directory/$process_name -# $process_id & sleep 1 - -# INSTALL-TIME CONFIGURATION INFORMATION -# -# The following parameters are used when installing a new Postfix version. -# -# sendmail_path: The full pathname of the Postfix sendmail command. -# This is the Sendmail-compatible mail posting interface. -# -sendmail_path = /usr/sbin/sendmail.postfix - -# newaliases_path: The full pathname of the Postfix newaliases command. -# This is the Sendmail-compatible command to build alias databases. -# -newaliases_path = /usr/bin/newaliases.postfix - -# mailq_path: The full pathname of the Postfix mailq command. This -# is the Sendmail-compatible mail queue listing command. -# -mailq_path = /usr/bin/mailq.postfix - -# setgid_group: The group for mail submission and queue management -# commands. This must be a group name with a numerical group ID that -# is not shared with other accounts, not even with the Postfix account. -# -setgid_group = postdrop - -# html_directory: The location of the Postfix HTML documentation. -# -html_directory = no - -# manpage_directory: The location of the Postfix on-line manual pages. -# -manpage_directory = /usr/share/man - -# sample_directory: The location of the Postfix sample configuration files. -# This parameter is obsolete as of Postfix 2.1. -# -sample_directory = /usr/share/doc/postfix/samples - -# readme_directory: The location of the Postfix README files. -# -readme_directory = /usr/share/doc/postfix/README_FILES - -# TLS CONFIGURATION -# -# Basic Postfix TLS configuration by default with self-signed certificate -# for inbound SMTP and also opportunistic TLS for outbound SMTP. - -# The full pathname of a file with the Postfix SMTP server RSA certificate -# in PEM format. Intermediate certificates should be included in general, -# the server certificate first, then the issuing CA(s) (bottom-up order). -# -# smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem -smtpd_tls_cert_file = /etc/postfix/certificates/pubcert.pem - -# The full pathname of a file with the Postfix SMTP server RSA private key -# in PEM format. The private key must be accessible without a pass-phrase, -# i.e. it must not be encrypted. -# -# smtpd_tls_key_file = /etc/pki/tls/private/postfix.key -smtpd_tls_key_file = /etc/postfix/certificates/privkey.pem - -# Announce STARTTLS support to remote SMTP clients, but do not require that -# clients use TLS encryption (opportunistic TLS inbound). -# -smtpd_tls_security_level = may - -# Directory with PEM format Certification Authority certificates that the -# Postfix SMTP client uses to verify a remote SMTP server certificate. -# -smtp_tls_CApath = /etc/pki/tls/certs - -# The full pathname of a file containing CA certificates of root CAs -# trusted to sign either remote SMTP server certificates or intermediate CA -# certificates. -# -smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt - -# Use TLS if this is supported by the remote SMTP server, otherwise use -# plaintext (opportunistic TLS outbound). -# -smtp_tls_security_level = may -meta_directory = /etc/postfix -shlib_directory = /usr/lib64/postfix - -{% if ensure_postfix.milter_list is defined and ensure_postfix.milter_list is iterable %} -# The Milter List -{% for milter in ensure_postfix.milter_list %} -# -- {{ milter.description }} -- {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} -{% endfor %} -smtpd_milters = {% for milter in ensure_postfix.milter_list %} {{ milter.protocol }}:{{ milter.hostname }}:{{ milter.port }} {% endfor %} -{% endif %} - -{% if postfix_domains is defined and postfix_domains is iterable %} -virtual_mailbox_domains = {% for domain in postfix_domains %} {{ domain }} {% endfor %} -{% endif %} - -2bounce_notice_recipient = {{ postmaster_email }} -bounce_notice_recipient = {{ postmaster_email }} -delay_notice_recipient = {{ postmaster_email }} -error_notice_recipient = {{ postmaster_email }} -smtpd_helo_required = yes -disable_vrfy_command = yes -message_size_limit = {{ postfix_message_size_limit }} -smtpd_helo_restrictions = reject_unknown_helo_hostname -smtpd_client_restrictions = reject_unknown_reverse_client_hostname reject_unauth_pipelining -smtpd_discard_ehlo_keywords = silent-discard, dsn diff --git a/templates/Fedora/41/etc/postfix/main.cf.proto b/templates/Fedora/41/etc/postfix/main.cf.proto deleted file mode 100644 index 112c1f1..0000000 --- a/templates/Fedora/41/etc/postfix/main.cf.proto +++ /dev/null @@ -1,745 +0,0 @@ -# Global Postfix configuration file. This file lists only a subset -# of all parameters. For the syntax, and for a complete parameter -# list, see the postconf(5) manual page (command: "man 5 postconf"). -# -# TIP: use the command "postconf -n" to view main.cf parameter -# settings, "postconf parametername" to view a specific parameter, -# and "postconf 'parametername=value'" to set a specific parameter. -# -# For common configuration examples, see BASIC_CONFIGURATION_README -# and STANDARD_CONFIGURATION_README. To find these documents, use -# the command "postconf html_directory readme_directory", or go to -# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc. -# -# For best results, change no more than 2-3 parameters at a time, -# and test if Postfix still works after every change. - -# COMPATIBILITY -# -# The compatibility_level determines what default settings Postfix -# will use for main.cf and master.cf settings. These defaults will -# change over time. -# -# To avoid breaking things, Postfix will use backwards-compatible -# default settings and log where it uses those old backwards-compatible -# default settings, until the system administrator has determined -# if any backwards-compatible default settings need to be made -# permanent in main.cf or master.cf. -# -# When this review is complete, update the compatibility_level setting -# below as recommended in the RELEASE_NOTES file. -# -# The level below is what should be used with new (not upgrade) installs. -# -compatibility_level = 3.7 - -# SOFT BOUNCE -# -# The soft_bounce parameter provides a limited safety net for -# testing. When soft_bounce is enabled, mail will remain queued that -# would otherwise bounce. This parameter disables locally-generated -# bounces, and prevents the SMTP server from rejecting mail permanently -# (by changing 5xx replies into 4xx replies). However, soft_bounce -# is no cure for address rewriting mistakes or mail routing mistakes. -# -#soft_bounce = no - -# LOCAL PATHNAME INFORMATION -# -# The queue_directory specifies the location of the Postfix queue. -# This is also the root directory of Postfix daemons that run chrooted. -# See the files in examples/chroot-setup for setting up Postfix chroot -# environments on different UNIX systems. -# -queue_directory = /var/spool/postfix - -# The command_directory parameter specifies the location of all -# postXXX commands. -# -command_directory = /usr/sbin - -# The daemon_directory parameter specifies the location of all Postfix -# daemon programs (i.e. programs listed in the master.cf file). This -# directory must be owned by root. -# -daemon_directory = /usr/libexec/postfix - -# The data_directory parameter specifies the location of Postfix-writable -# data files (caches, random numbers). This directory must be owned -# by the mail_owner account (see below). -# -data_directory = /var/lib/postfix - -# QUEUE AND PROCESS OWNERSHIP -# -# The mail_owner parameter specifies the owner of the Postfix queue -# and of most Postfix daemon processes. Specify the name of a user -# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS -# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM. In -# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED -# USER. -# -mail_owner = postfix - -# The default_privs parameter specifies the default rights used by -# the local delivery agent for delivery to external file or command. -# These rights are used in the absence of a recipient user context. -# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER. -# -#default_privs = nobody - -# INTERNET HOST AND DOMAIN NAMES -# -# The myhostname parameter specifies the internet hostname of this -# mail system. The default is to use the fully-qualified domain name -# from gethostname(). $myhostname is used as a default value for many -# other configuration parameters. -# -#myhostname = host.domain.tld -#myhostname = virtual.domain.tld - -# The mydomain parameter specifies the local internet domain name. -# The default is to use $myhostname minus the first component. -# $mydomain is used as a default value for many other configuration -# parameters. -# -#mydomain = domain.tld - -# SENDING MAIL -# -# The myorigin parameter specifies the domain that locally-posted -# mail appears to come from. The default is to append $myhostname, -# which is fine for small sites. If you run a domain with multiple -# machines, you should (1) change this to $mydomain and (2) set up -# a domain-wide alias database that aliases each user to -# user@that.users.mailhost. -# -# For the sake of consistency between sender and recipient addresses, -# myorigin also specifies the default domain name that is appended -# to recipient addresses that have no @domain part. -# -#myorigin = $myhostname -#myorigin = $mydomain - -# RECEIVING MAIL - -# The inet_interfaces parameter specifies the network interface -# addresses that this mail system receives mail on. By default, -# the software claims all active interfaces on the machine. The -# parameter also controls delivery of mail to user@[ip.address]. -# -# See also the proxy_interfaces parameter, for network addresses that -# are forwarded to us via a proxy or network address translator. -# -# Note: you need to stop/start Postfix when this parameter changes. -# -#inet_interfaces = all -#inet_interfaces = $myhostname -#inet_interfaces = $myhostname, localhost -inet_interfaces = localhost - -# Enable IPv4, and IPv6 if supported -inet_protocols = all - -# The proxy_interfaces parameter specifies the network interface -# addresses that this mail system receives mail on by way of a -# proxy or network address translation unit. This setting extends -# the address list specified with the inet_interfaces parameter. -# -# You must specify your proxy/NAT addresses when your system is a -# backup MX host for other domains, otherwise mail delivery loops -# will happen when the primary MX host is down. -# -#proxy_interfaces = -#proxy_interfaces = 1.2.3.4 - -# The mydestination parameter specifies the list of domains that this -# machine considers itself the final destination for. -# -# These domains are routed to the delivery agent specified with the -# local_transport parameter setting. By default, that is the UNIX -# compatible delivery agent that lookups all recipients in /etc/passwd -# and /etc/aliases or their equivalent. -# -# The default is $myhostname + localhost.$mydomain + localhost. On -# a mail domain gateway, you should also include $mydomain. -# -# Do not specify the names of virtual domains - those domains are -# specified elsewhere (see VIRTUAL_README). -# -# Do not specify the names of domains that this machine is backup MX -# host for. Specify those names via the relay_domains settings for -# the SMTP server, or use permit_mx_backup if you are lazy (see -# STANDARD_CONFIGURATION_README). -# -# The local machine is always the final destination for mail addressed -# to user@[the.net.work.address] of an interface that the mail system -# receives mail on (see the inet_interfaces parameter). -# -# Specify a list of host or domain names, /file/name or type:table -# patterns, separated by commas and/or whitespace. A /file/name -# pattern is replaced by its contents; a type:table is matched when -# a name matches a lookup key (the right-hand side is ignored). -# Continue long lines by starting the next line with whitespace. -# -# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS". -# -mydestination = $myhostname, localhost.$mydomain, localhost -#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain -#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, -# mail.$mydomain, www.$mydomain, ftp.$mydomain - -# REJECTING MAIL FOR UNKNOWN LOCAL USERS -# -# The local_recipient_maps parameter specifies optional lookup tables -# with all names or addresses of users that are local with respect -# to $mydestination, $inet_interfaces or $proxy_interfaces. -# -# If this parameter is defined, then the SMTP server will reject -# mail for unknown local users. This parameter is defined by default. -# -# To turn off local recipient checking in the SMTP server, specify -# local_recipient_maps = (i.e. empty). -# -# The default setting assumes that you use the default Postfix local -# delivery agent for local delivery. You need to update the -# local_recipient_maps setting if: -# -# - You define $mydestination domain recipients in files other than -# /etc/passwd, /etc/aliases, or the $virtual_alias_maps files. -# For example, you define $mydestination domain recipients in -# the $virtual_mailbox_maps files. -# -# - You redefine the local delivery agent in master.cf. -# -# - You redefine the "local_transport" setting in main.cf. -# -# - You use the "luser_relay", "mailbox_transport", or "fallback_transport" -# feature of the Postfix local delivery agent (see local(8)). -# -# Details are described in the LOCAL_RECIPIENT_README file. -# -# Beware: if the Postfix SMTP server runs chrooted, you probably have -# to access the passwd file via the proxymap service, in order to -# overcome chroot restrictions. The alternative, having a copy of -# the system passwd file in the chroot jail is just not practical. -# -# The right-hand side of the lookup tables is conveniently ignored. -# In the left-hand side, specify a bare username, an @domain.tld -# wild-card, or specify a user@domain.tld address. -# -#local_recipient_maps = unix:passwd.byname $alias_maps -#local_recipient_maps = proxy:unix:passwd.byname $alias_maps -#local_recipient_maps = - -# The unknown_local_recipient_reject_code specifies the SMTP server -# response code when a recipient domain matches $mydestination or -# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty -# and the recipient address or address local-part is not found. -# -# The default setting is 550 (reject mail) but it is safer to start -# with 450 (try again later) until you are certain that your -# local_recipient_maps settings are OK. -# -unknown_local_recipient_reject_code = 550 - -# TRUST AND RELAY CONTROL - -# The mynetworks parameter specifies the list of "trusted" SMTP -# clients that have more privileges than "strangers". -# -# In particular, "trusted" SMTP clients are allowed to relay mail -# through Postfix. See the smtpd_recipient_restrictions parameter -# in postconf(5). -# -# You can specify the list of "trusted" network addresses by hand -# or you can let Postfix do it for you (which is the default). -# -# By default (mynetworks_style = host), Postfix "trusts" only -# the local machine. -# -# Specify "mynetworks_style = subnet" when Postfix should "trust" -# SMTP clients in the same IP subnetworks as the local machine. -# On Linux, this works correctly only with interfaces specified -# with the "ifconfig" or "ip" command. -# -# Specify "mynetworks_style = class" when Postfix should "trust" SMTP -# clients in the same IP class A/B/C networks as the local machine. -# Don't do this with a dialup site - it would cause Postfix to "trust" -# your entire provider's network. Instead, specify an explicit -# mynetworks list by hand, as described below. -# -# Specify "mynetworks_style = host" when Postfix should "trust" -# only the local machine. -# -#mynetworks_style = class -#mynetworks_style = subnet -#mynetworks_style = host - -# Alternatively, you can specify the mynetworks list by hand, in -# which case Postfix ignores the mynetworks_style setting. -# -# Specify an explicit list of network/netmask patterns, where the -# mask specifies the number of bits in the network part of a host -# address. -# -# You can also specify the absolute pathname of a pattern file instead -# of listing the patterns here. Specify type:table for table-based lookups -# (the value on the table right-hand side is not used). -# -#mynetworks = 168.100.3.0/28, 127.0.0.0/8 -#mynetworks = $config_directory/mynetworks -#mynetworks = hash:/etc/postfix/network_table - -# The relay_domains parameter restricts what destinations this system will -# relay mail to. See the smtpd_relay_restrictions and -# smtpd_recipient_restrictions descriptions in postconf(5) for detailed -# information. -# -# By default, Postfix relays mail -# - from "trusted" clients (IP address matches $mynetworks, or is -# SASL authenticated) to any destination, -# - from "untrusted" clients to destinations that match $relay_domains or -# subdomains thereof, except addresses with sender-specified routing. -# The default relay_domains value is empty. -# -# In addition to the above, the Postfix SMTP server by default accepts mail -# that Postfix is final destination for: -# - destinations that match $inet_interfaces or $proxy_interfaces, -# - destinations that match $mydestination -# - destinations that match $virtual_alias_domains, -# - destinations that match $virtual_mailbox_domains. -# These destinations do not need to be listed in $relay_domains. -# -# Specify a list of hosts or domains, /file/name patterns or type:name -# lookup tables, separated by commas and/or whitespace. Continue -# long lines by starting the next line with whitespace. A file name -# is replaced by its contents; a type:name table is matched when a -# (parent) domain appears as lookup key. -# -# NOTE: Postfix will not automatically forward mail for domains that -# list this system as their primary or backup MX host. See the -# permit_mx_backup restriction description in postconf(5). -# -#relay_domains = - -# INTERNET OR INTRANET - -# The relayhost parameter specifies the default host to send mail to -# when no entry is matched in the optional transport(5) table. When -# no relayhost is given, mail is routed directly to the destination. -# -# On an intranet, specify the organizational domain name. If your -# internal DNS uses no MX records, specify the name of the intranet -# gateway host instead. -# -# In the case of SMTP, specify a domain, host, host:port, [host]:port, -# [address] or [address]:port; the form [host] turns off MX lookups. -# -# If you're connected via UUCP, see also the default_transport parameter. -# -#relayhost = $mydomain -#relayhost = [gateway.my.domain] -#relayhost = [mailserver.isp.tld] -#relayhost = uucphost -#relayhost = [an.ip.add.ress] - -# REJECTING UNKNOWN RELAY USERS -# -# The relay_recipient_maps parameter specifies optional lookup tables -# with all addresses in the domains that match $relay_domains. -# -# If this parameter is defined, then the SMTP server will reject -# mail for unknown relay users. This feature is off by default. -# -# The right-hand side of the lookup tables is conveniently ignored. -# In the left-hand side, specify an @domain.tld wild-card, or specify -# a user@domain.tld address. -# -#relay_recipient_maps = hash:/etc/postfix/relay_recipients - -# INPUT RATE CONTROL -# -# The in_flow_delay configuration parameter implements mail input -# flow control. This feature is turned on by default, although it -# still needs further development (it's disabled on SCO UNIX due -# to an SCO bug). -# -# A Postfix process will pause for $in_flow_delay seconds before -# accepting a new message, when the message arrival rate exceeds the -# message delivery rate. With the default 100 SMTP server process -# limit, this limits the mail inflow to 100 messages a second more -# than the number of messages delivered per second. -# -# Specify 0 to disable the feature. Valid delays are 0..10. -# -#in_flow_delay = 1s - -# ADDRESS REWRITING -# -# The ADDRESS_REWRITING_README document gives information about -# address masquerading or other forms of address rewriting including -# username->Firstname.Lastname mapping. - -# ADDRESS REDIRECTION (VIRTUAL DOMAIN) -# -# The VIRTUAL_README document gives information about the many forms -# of domain hosting that Postfix supports. - -# "USER HAS MOVED" BOUNCE MESSAGES -# -# See the discussion in the ADDRESS_REWRITING_README document. - -# TRANSPORT MAP -# -# See the discussion in the ADDRESS_REWRITING_README document. - -# ALIAS DATABASE -# -# The alias_maps parameter specifies the list of alias databases used -# by the local delivery agent. The default list is system dependent. -# -# On systems with NIS, the default is to search the local alias -# database, then the NIS alias database. See aliases(5) for syntax -# details. -# -# If you change the alias database, run "postalias /etc/aliases" (or -# wherever your system stores the mail alias file), or simply run -# "newaliases" to build the necessary DBM or DB file. -# -# It will take a minute or so before changes become visible. Use -# "postfix reload" to eliminate the delay. -# -#alias_maps = dbm:/etc/aliases -alias_maps = hash:/etc/aliases -#alias_maps = hash:/etc/aliases, nis:mail.aliases -#alias_maps = netinfo:/aliases - -# The alias_database parameter specifies the alias database(s) that -# are built with "newaliases" or "sendmail -bi". This is a separate -# configuration parameter, because alias_maps (see above) may specify -# tables that are not necessarily all under control by Postfix. -# -#alias_database = dbm:/etc/aliases -#alias_database = dbm:/etc/mail/aliases -alias_database = hash:/etc/aliases -#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases - -# ADDRESS EXTENSIONS (e.g., user+foo) -# -# The recipient_delimiter parameter specifies the separator between -# user names and address extensions (user+foo). See canonical(5), -# local(8), relocated(5) and virtual(5) for the effects this has on -# aliases, canonical, virtual, relocated and .forward file lookups. -# Basically, the software tries user+foo and .forward+foo before -# trying user and .forward. -# -#recipient_delimiter = + - -# DELIVERY TO MAILBOX -# -# The home_mailbox parameter specifies the optional pathname of a -# mailbox file relative to a user's home directory. The default -# mailbox file is /var/spool/mail/user or /var/mail/user. Specify -# "Maildir/" for qmail-style delivery (the / is required). -# -#home_mailbox = Mailbox -#home_mailbox = Maildir/ - -# The mail_spool_directory parameter specifies the directory where -# UNIX-style mailboxes are kept. The default setting depends on the -# system type. -# -#mail_spool_directory = /var/mail -#mail_spool_directory = /var/spool/mail - -# The mailbox_command parameter specifies the optional external -# command to use instead of mailbox delivery. The command is run as -# the recipient with proper HOME, SHELL and LOGNAME environment settings. -# Exception: delivery for root is done as $default_user. -# -# Other environment variables of interest: USER (recipient username), -# EXTENSION (address extension), DOMAIN (domain part of address), -# and LOCAL (the address localpart). -# -# Unlike other Postfix configuration parameters, the mailbox_command -# parameter is not subjected to $parameter substitutions. This is to -# make it easier to specify shell syntax (see example below). -# -# Avoid shell meta characters because they will force Postfix to run -# an expensive shell process. Procmail alone is expensive enough. -# -# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN -# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER. -# -#mailbox_command = /some/where/procmail -#mailbox_command = /some/where/procmail -a "$EXTENSION" - -# The mailbox_transport specifies the optional transport in master.cf -# to use after processing aliases and .forward files. This parameter -# has precedence over the mailbox_command, fallback_transport and -# luser_relay parameters. -# -# Specify a string of the form transport:nexthop, where transport is -# the name of a mail delivery transport defined in master.cf. The -# :nexthop part is optional. For more details see the sample transport -# configuration file. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must update the "local_recipient_maps" setting in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -# Cyrus IMAP over LMTP. Specify ``lmtpunix cmd="lmtpd" -# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf. -#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp - -# If using the cyrus-imapd IMAP server deliver local mail to the IMAP -# server using LMTP (Local Mail Transport Protocol), this is prefered -# over the older cyrus deliver program by setting the -# mailbox_transport as below: -# -# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp -# -# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via -# these settings. -# -# local_destination_recipient_limit = 300 -# local_destination_concurrency_limit = 5 -# -# Of course you should adjust these settings as appropriate for the -# capacity of the hardware you are using. The recipient limit setting -# can be used to take advantage of the single instance message store -# capability of Cyrus. The concurrency limit can be used to control -# how many simultaneous LMTP sessions will be permitted to the Cyrus -# message store. -# -# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and -# subsequent line in master.cf. -#mailbox_transport = cyrus - -# The fallback_transport specifies the optional transport in master.cf -# to use for recipients that are not found in the UNIX passwd database. -# This parameter has precedence over the luser_relay parameter. -# -# Specify a string of the form transport:nexthop, where transport is -# the name of a mail delivery transport defined in master.cf. The -# :nexthop part is optional. For more details see the sample transport -# configuration file. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must update the "local_recipient_maps" setting in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp -#fallback_transport = - -# The luser_relay parameter specifies an optional destination address -# for unknown recipients. By default, mail for unknown@$mydestination, -# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned -# as undeliverable. -# -# The following expansions are done on luser_relay: $user (recipient -# username), $shell (recipient shell), $home (recipient home directory), -# $recipient (full recipient address), $extension (recipient address -# extension), $domain (recipient domain), $local (entire recipient -# localpart), $recipient_delimiter. Specify ${name?value} or -# ${name:value} to expand value only when $name does (does not) exist. -# -# luser_relay works only for the default Postfix local delivery agent. -# -# NOTE: if you use this feature for accounts not in the UNIX password -# file, then you must specify "local_recipient_maps =" (i.e. empty) in -# the main.cf file, otherwise the SMTP server will reject mail for -# non-UNIX accounts with "User unknown in local recipient table". -# -#luser_relay = $user@other.host -#luser_relay = $local@other.host -#luser_relay = admin+$local - -# JUNK MAIL CONTROLS -# -# The controls listed here are only a very small subset. The file -# SMTPD_ACCESS_README provides an overview. - -# The header_checks parameter specifies an optional table with patterns -# that each logical message header is matched against, including -# headers that span multiple physical lines. -# -# By default, these patterns also apply to MIME headers and to the -# headers of attached messages. With older Postfix versions, MIME and -# attached message headers were treated as body text. -# -# For details, see "man header_checks". -# -#header_checks = regexp:/etc/postfix/header_checks - -# FAST ETRN SERVICE -# -# Postfix maintains per-destination logfiles with information about -# deferred mail, so that mail can be flushed quickly with the SMTP -# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". -# See the ETRN_README document for a detailed description. -# -# The fast_flush_domains parameter controls what destinations are -# eligible for this service. By default, they are all domains that -# this server is willing to relay mail to. -# -#fast_flush_domains = $relay_domains - -# SHOW SOFTWARE VERSION OR NOT -# -# The smtpd_banner parameter specifies the text that follows the 220 -# code in the SMTP server's greeting banner. Some people like to see -# the mail version advertised. By default, Postfix shows no version. -# -# You MUST specify $myhostname at the start of the text. That is an -# RFC requirement. Postfix itself does not care. -# -#smtpd_banner = $myhostname ESMTP $mail_name -#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) - -# PARALLEL DELIVERY TO THE SAME DESTINATION -# -# How many parallel deliveries to the same user or domain? With local -# delivery, it does not make sense to do massively parallel delivery -# to the same user, because mailbox updates must happen sequentially, -# and expensive pipelines in .forward files can cause disasters when -# too many are run at the same time. With SMTP deliveries, 10 -# simultaneous connections to the same domain could be sufficient to -# raise eyebrows. -# -# Each message delivery transport has its XXX_destination_concurrency_limit -# parameter. The default is $default_destination_concurrency_limit for -# most delivery transports. For the local delivery agent the default is 2. - -#local_destination_concurrency_limit = 2 -#default_destination_concurrency_limit = 20 - -# DEBUGGING CONTROL -# -# The debug_peer_level parameter specifies the increment in verbose -# logging level when an SMTP client or server host name or address -# matches a pattern in the debug_peer_list parameter. -# -debug_peer_level = 2 - -# The debug_peer_list parameter specifies an optional list of domain -# or network patterns, /file/name patterns or type:name tables. When -# an SMTP client or server host name or address matches a pattern, -# increase the verbose logging level by the amount specified in the -# debug_peer_level parameter. -# -#debug_peer_list = 127.0.0.1 -#debug_peer_list = some.domain - -# The debugger_command specifies the external command that is executed -# when a Postfix daemon program is run with the -D option. -# -# Use "command .. & sleep 5" so that the debugger can attach before -# the process marches on. If you use an X-based debugger, be sure to -# set up your XAUTHORITY environment variable before starting Postfix. -# -debugger_command = - PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin - ddd $daemon_directory/$process_name $process_id & sleep 5 - -# If you can't use X, use this to capture the call stack when a -# daemon crashes. The result is in a file in the configuration -# directory, and is named after the process name and the process ID. -# -# debugger_command = -# PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; -# echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 -# >$config_directory/$process_name.$process_id.log & sleep 5 -# -# Another possibility is to run gdb under a detached screen session. -# To attach to the screen session, su root and run "screen -r -# " where uniquely matches one of the detached -# sessions (from "screen -list"). -# -# debugger_command = -# PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen -# -dmS $process_name gdb $daemon_directory/$process_name -# $process_id & sleep 1 - -# INSTALL-TIME CONFIGURATION INFORMATION -# -# The following parameters are used when installing a new Postfix version. -# -# sendmail_path: The full pathname of the Postfix sendmail command. -# This is the Sendmail-compatible mail posting interface. -# -sendmail_path = - -# newaliases_path: The full pathname of the Postfix newaliases command. -# This is the Sendmail-compatible command to build alias databases. -# -newaliases_path = - -# mailq_path: The full pathname of the Postfix mailq command. This -# is the Sendmail-compatible mail queue listing command. -# -mailq_path = - -# setgid_group: The group for mail submission and queue management -# commands. This must be a group name with a numerical group ID that -# is not shared with other accounts, not even with the Postfix account. -# -setgid_group = - -# html_directory: The location of the Postfix HTML documentation. -# -html_directory = - -# manpage_directory: The location of the Postfix on-line manual pages. -# -manpage_directory = - -# sample_directory: The location of the Postfix sample configuration files. -# This parameter is obsolete as of Postfix 2.1. -# -sample_directory = - -# readme_directory: The location of the Postfix README files. -# -readme_directory = - -# TLS CONFIGURATION -# -# Basic Postfix TLS configuration by default with self-signed certificate -# for inbound SMTP and also opportunistic TLS for outbound SMTP. - -# The full pathname of a file with the Postfix SMTP server RSA certificate -# in PEM format. Intermediate certificates should be included in general, -# the server certificate first, then the issuing CA(s) (bottom-up order). -# -smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem - -# The full pathname of a file with the Postfix SMTP server RSA private key -# in PEM format. The private key must be accessible without a pass-phrase, -# i.e. it must not be encrypted. -# -smtpd_tls_key_file = /etc/pki/tls/private/postfix.key - -# Announce STARTTLS support to remote SMTP clients, but do not require that -# clients use TLS encryption (opportunistic TLS inbound). -# -smtpd_tls_security_level = may - -# Directory with PEM format Certification Authority certificates that the -# Postfix SMTP client uses to verify a remote SMTP server certificate. -# -smtp_tls_CApath = /etc/pki/tls/certs - -# The full pathname of a file containing CA certificates of root CAs -# trusted to sign either remote SMTP server certificates or intermediate CA -# certificates. -# -smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt - -# Use TLS if this is supported by the remote SMTP server, otherwise use -# plaintext (opportunistic TLS outbound). -# -smtp_tls_security_level = may diff --git a/templates/Fedora/41/etc/postfix/master.cf b/templates/Fedora/41/etc/postfix/master.cf deleted file mode 100644 index bb0eae9..0000000 --- a/templates/Fedora/41/etc/postfix/master.cf +++ /dev/null @@ -1,145 +0,0 @@ -# -# Postfix master process configuration file. For details on the format -# of the file, see the master(5) manual page (command: "man 5 master" or -# on-line: http://www.postfix.org/master.5.html). -# -# Do not forget to execute "postfix reload" after editing this file. -# -# ========================================================================== -# service type private unpriv chroot wakeup maxproc command + args -# (yes) (yes) (no) (never) (100) -# ========================================================================== -smtp inet n - n - - smtpd -#smtp inet n - n - 1 postscreen -#smtpd pass - - n - - smtpd -#dnsblog unix - - n - 0 dnsblog -#tlsproxy unix - - n - 0 tlsproxy -# Choose one: enable submission for loopback clients only, or for any client. -#127.0.0.1:submission inet n - n - - smtpd -#submission inet n - n - - smtpd -# -o syslog_name=postfix/submission -# -o smtpd_tls_security_level=encrypt -# -o smtpd_sasl_auth_enable=yes -# -o smtpd_tls_auth_only=yes -# -o smtpd_reject_unlisted_recipient=no -# Instead of specifying complex smtpd__restrictions here, -# specify "smtpd__restrictions=$mua__restrictions" -# here, and specify mua__restrictions in main.cf (where -# "" is "client", "helo", "sender", "relay", or "recipient"). -# -o smtpd_client_restrictions= -# -o smtpd_helo_restrictions= -# -o smtpd_sender_restrictions= -# -o smtpd_relay_restrictions= -# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject -# -o milter_macro_daemon_name=ORIGINATING -# Choose one: enable submissions for loopback clients only, or for any client. -#127.0.0.1:submissions inet n - n - - smtpd -#submissions inet n - n - - smtpd -# -o syslog_name=postfix/submissions -# -o smtpd_tls_wrappermode=yes -# -o smtpd_sasl_auth_enable=yes -# -o smtpd_reject_unlisted_recipient=no -# Instead of specifying complex smtpd__restrictions here, -# specify "smtpd__restrictions=$mua__restrictions" -# here, and specify mua__restrictions in main.cf (where -# "" is "client", "helo", "sender", "relay", or "recipient"). -# -o smtpd_client_restrictions= -# -o smtpd_helo_restrictions= -# -o smtpd_sender_restrictions= -# -o smtpd_relay_restrictions= -# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject -# -o milter_macro_daemon_name=ORIGINATING -#628 inet n - n - - qmqpd -pickup unix n - n 60 1 pickup -cleanup unix n - n - 0 cleanup -qmgr unix n - n 300 1 qmgr -#qmgr unix n - n 300 1 oqmgr -tlsmgr unix - - n 1000? 1 tlsmgr -rewrite unix - - n - - trivial-rewrite -bounce unix - - n - 0 bounce -defer unix - - n - 0 bounce -trace unix - - n - 0 bounce -verify unix - - n - 1 verify -flush unix n - n 1000? 0 flush -proxymap unix - - n - - proxymap -proxywrite unix - - n - 1 proxymap -smtp unix - - n - - smtp -relay unix - - n - - smtp - -o syslog_name=postfix/$service_name -# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 -showq unix n - n - - showq -error unix - - n - - error -retry unix - - n - - error -discard unix - - n - - discard -local unix - n n - - local -virtual unix - n n - - virtual -lmtp unix - - n - - lmtp -anvil unix - - n - 1 anvil -scache unix - - n - 1 scache -postlog unix-dgram n - n - 1 postlogd -# -# ==================================================================== -# Interfaces to non-Postfix software. Be sure to examine the manual -# pages of the non-Postfix software to find out what options it wants. -# -# Many of the following services use the Postfix pipe(8) delivery -# agent. See the pipe(8) man page for information about ${recipient} -# and other message envelope options. -# ==================================================================== -# -# maildrop. See the Postfix MAILDROP_README file for details. -# Also specify in main.cf: maildrop_destination_recipient_limit=1 -# -#maildrop unix - n n - - pipe -# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} -# -# ==================================================================== -# -# Recent Cyrus versions can use the existing "lmtp" master.cf entry. -# -# Specify in cyrus.conf: -# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 -# -# Specify in main.cf one or more of the following: -# mailbox_transport = lmtp:inet:localhost -# virtual_transport = lmtp:inet:localhost -# -# ==================================================================== -# -# Cyrus 2.1.5 (Amos Gouaux) -# Also specify in main.cf: cyrus_destination_recipient_limit=1 -# -#cyrus unix - n n - - pipe -# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} -# -# ==================================================================== -# -# Old example of delivery via Cyrus. -# -#old-cyrus unix - n n - - pipe -# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} -# -# ==================================================================== -# -# See the Postfix UUCP_README file for configuration details. -# -#uucp unix - n n - - pipe -# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) -# -# ==================================================================== -# -# Other external delivery methods. -# -#ifmail unix - n n - - pipe -# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) -# -#bsmtp unix - n n - - pipe -# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient -# -#scalemail-backend unix - n n - 2 pipe -# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store -# ${nexthop} ${user} ${extension} -# -#mailman unix - n n - - pipe -# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py -# ${nexthop} ${user} diff --git a/templates/Fedora/41/etc/postfix/master.cf.proto b/templates/Fedora/41/etc/postfix/master.cf.proto deleted file mode 100644 index bb0eae9..0000000 --- a/templates/Fedora/41/etc/postfix/master.cf.proto +++ /dev/null @@ -1,145 +0,0 @@ -# -# Postfix master process configuration file. For details on the format -# of the file, see the master(5) manual page (command: "man 5 master" or -# on-line: http://www.postfix.org/master.5.html). -# -# Do not forget to execute "postfix reload" after editing this file. -# -# ========================================================================== -# service type private unpriv chroot wakeup maxproc command + args -# (yes) (yes) (no) (never) (100) -# ========================================================================== -smtp inet n - n - - smtpd -#smtp inet n - n - 1 postscreen -#smtpd pass - - n - - smtpd -#dnsblog unix - - n - 0 dnsblog -#tlsproxy unix - - n - 0 tlsproxy -# Choose one: enable submission for loopback clients only, or for any client. -#127.0.0.1:submission inet n - n - - smtpd -#submission inet n - n - - smtpd -# -o syslog_name=postfix/submission -# -o smtpd_tls_security_level=encrypt -# -o smtpd_sasl_auth_enable=yes -# -o smtpd_tls_auth_only=yes -# -o smtpd_reject_unlisted_recipient=no -# Instead of specifying complex smtpd__restrictions here, -# specify "smtpd__restrictions=$mua__restrictions" -# here, and specify mua__restrictions in main.cf (where -# "" is "client", "helo", "sender", "relay", or "recipient"). -# -o smtpd_client_restrictions= -# -o smtpd_helo_restrictions= -# -o smtpd_sender_restrictions= -# -o smtpd_relay_restrictions= -# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject -# -o milter_macro_daemon_name=ORIGINATING -# Choose one: enable submissions for loopback clients only, or for any client. -#127.0.0.1:submissions inet n - n - - smtpd -#submissions inet n - n - - smtpd -# -o syslog_name=postfix/submissions -# -o smtpd_tls_wrappermode=yes -# -o smtpd_sasl_auth_enable=yes -# -o smtpd_reject_unlisted_recipient=no -# Instead of specifying complex smtpd__restrictions here, -# specify "smtpd__restrictions=$mua__restrictions" -# here, and specify mua__restrictions in main.cf (where -# "" is "client", "helo", "sender", "relay", or "recipient"). -# -o smtpd_client_restrictions= -# -o smtpd_helo_restrictions= -# -o smtpd_sender_restrictions= -# -o smtpd_relay_restrictions= -# -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject -# -o milter_macro_daemon_name=ORIGINATING -#628 inet n - n - - qmqpd -pickup unix n - n 60 1 pickup -cleanup unix n - n - 0 cleanup -qmgr unix n - n 300 1 qmgr -#qmgr unix n - n 300 1 oqmgr -tlsmgr unix - - n 1000? 1 tlsmgr -rewrite unix - - n - - trivial-rewrite -bounce unix - - n - 0 bounce -defer unix - - n - 0 bounce -trace unix - - n - 0 bounce -verify unix - - n - 1 verify -flush unix n - n 1000? 0 flush -proxymap unix - - n - - proxymap -proxywrite unix - - n - 1 proxymap -smtp unix - - n - - smtp -relay unix - - n - - smtp - -o syslog_name=postfix/$service_name -# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 -showq unix n - n - - showq -error unix - - n - - error -retry unix - - n - - error -discard unix - - n - - discard -local unix - n n - - local -virtual unix - n n - - virtual -lmtp unix - - n - - lmtp -anvil unix - - n - 1 anvil -scache unix - - n - 1 scache -postlog unix-dgram n - n - 1 postlogd -# -# ==================================================================== -# Interfaces to non-Postfix software. Be sure to examine the manual -# pages of the non-Postfix software to find out what options it wants. -# -# Many of the following services use the Postfix pipe(8) delivery -# agent. See the pipe(8) man page for information about ${recipient} -# and other message envelope options. -# ==================================================================== -# -# maildrop. See the Postfix MAILDROP_README file for details. -# Also specify in main.cf: maildrop_destination_recipient_limit=1 -# -#maildrop unix - n n - - pipe -# flags=DRXhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} -# -# ==================================================================== -# -# Recent Cyrus versions can use the existing "lmtp" master.cf entry. -# -# Specify in cyrus.conf: -# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 -# -# Specify in main.cf one or more of the following: -# mailbox_transport = lmtp:inet:localhost -# virtual_transport = lmtp:inet:localhost -# -# ==================================================================== -# -# Cyrus 2.1.5 (Amos Gouaux) -# Also specify in main.cf: cyrus_destination_recipient_limit=1 -# -#cyrus unix - n n - - pipe -# flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} -# -# ==================================================================== -# -# Old example of delivery via Cyrus. -# -#old-cyrus unix - n n - - pipe -# flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} -# -# ==================================================================== -# -# See the Postfix UUCP_README file for configuration details. -# -#uucp unix - n n - - pipe -# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) -# -# ==================================================================== -# -# Other external delivery methods. -# -#ifmail unix - n n - - pipe -# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) -# -#bsmtp unix - n n - - pipe -# flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient -# -#scalemail-backend unix - n n - 2 pipe -# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store -# ${nexthop} ${user} ${extension} -# -#mailman unix - n n - - pipe -# flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py -# ${nexthop} ${user} diff --git a/templates/Fedora/41/etc/postfix/postfix-files b/templates/Fedora/41/etc/postfix/postfix-files deleted file mode 100644 index 0e176a6..0000000 --- a/templates/Fedora/41/etc/postfix/postfix-files +++ /dev/null @@ -1,454 +0,0 @@ -# -# Do not edit this file. -# -# This file controls the postfix-install script for installation of -# Postfix programs, configuration files and documentation, as well -# as the post-install script for setting permissions and for updating -# Postfix configuration files. See the respective manual pages within -# the script files. -# -# Do not list $command_directory or $shlib_directory in this file, -# or it will be blown away by a future Postfix uninstallation -# procedure. You would not want to lose all files in /usr/sbin or -# /usr/local/lib. -# -# Each record in this file describes one file or directory. -# Fields are separated by ":". Specify a null field as "-". -# Missing fields or separators at the end are OK. -# -# File format: -# name:type:owner:group:permission:flags -# No group means don't change group ownership. -# -# File types: -# d=directory -# f=regular file -# h=hard link (*) -# l=symbolic link (*) -# -# (*) With hard links and symbolic links, the owner field becomes the -# source pathname, while the group and permissions are ignored. -# -# File flags: -# No flag means the flag is not active. -# p=preserve existing file, do not replace (postfix-install). -# u=update owner/group/mode (post-install upgrade-permissions). -# c=create missing directory (post-install create-missing). -# r=apply owner/group recursively (post-install set/upgrade-permissions). -# o=obsolete, no longer part of Postfix -# 1=optional for non-default instance (config_dir != built-in default). -# -# Note: the "u" flag is for upgrading the permissions of existing files -# or directories after changes in Postfix architecture. For robustness -# it is a good idea to "u" all the files that have special ownership or -# permissions, so that running "make install" fixes any glitches. -# -# Note: order matters. Update shared libraries and database plugins -# before daemon/command-line programs. -$config_directory:d:root:-:755:u -$data_directory:d:$mail_owner:-:700:uc -$daemon_directory:d:root:-:755:u -$queue_directory:d:root:-:755:uc -$sample_directory:d:root:-:755:o -$readme_directory:d:root:-:755 -$html_directory:d:root:-:755 -$queue_directory/active:d:$mail_owner:-:700:ucr -$queue_directory/bounce:d:$mail_owner:-:700:ucr -$queue_directory/corrupt:d:$mail_owner:-:700:ucr -$queue_directory/defer:d:$mail_owner:-:700:ucr -$queue_directory/deferred:d:$mail_owner:-:700:ucr -$queue_directory/flush:d:$mail_owner:-:700:ucr -$queue_directory/hold:d:$mail_owner:-:700:ucr -$queue_directory/incoming:d:$mail_owner:-:700:ucr -$queue_directory/private:d:$mail_owner:-:700:uc -$queue_directory/maildrop:d:$mail_owner:$setgid_group:730:uc -$queue_directory/public:d:$mail_owner:$setgid_group:710:uc -$queue_directory/pid:d:root:-:755:uc -$queue_directory/saved:d:$mail_owner:-:700:ucr -$queue_directory/trace:d:$mail_owner:-:700:ucr -# Update shared libraries and plugins before daemon or command-line programs. -$shlib_directory/libpostfix-util.so:f:root:-:755 -$shlib_directory/libpostfix-global.so:f:root:-:755 -$shlib_directory/libpostfix-dns.so:f:root:-:755 -$shlib_directory/libpostfix-tls.so:f:root:-:755 -$shlib_directory/libpostfix-master.so:f:root:-:755 -$meta_directory/dynamicmaps.cf.d:d:root:-:755 -$meta_directory/dynamicmaps.cf:f:root:-:644 -$meta_directory/main.cf.proto:f:root:-:644 -$meta_directory/master.cf.proto:f:root:-:644 -$meta_directory/postfix-files.d:d:root:-:755 -$meta_directory/postfix-files:f:root:-:644 -$daemon_directory/anvil:f:root:-:755 -$daemon_directory/bounce:f:root:-:755 -$daemon_directory/cleanup:f:root:-:755 -$daemon_directory/discard:f:root:-:755 -$daemon_directory/dnsblog:f:root:-:755 -$daemon_directory/error:f:root:-:755 -$daemon_directory/flush:f:root:-:755 -$daemon_directory/local:f:root:-:755 -$daemon_directory/main.cf:f:root:-:644:o -$daemon_directory/master.cf:f:root:-:644:o -$daemon_directory/master:f:root:-:755 -$daemon_directory/oqmgr:f:root:-:755 -$daemon_directory/pickup:f:root:-:755 -$daemon_directory/pipe:f:root:-:755 -$daemon_directory/post-install:f:root:-:755 -# In case meta_directory == daemon_directory. -#$daemon_directory/postfix-files:f:root:-:644:o -#$daemon_directory/postfix-files.d:d:root:-:755:o -$daemon_directory/postfix-script:f:root:-:755 -$daemon_directory/postfix-tls-script:f:root:-:755 -$daemon_directory/postfix-wrapper:f:root:-:755 -$daemon_directory/postmulti-script:f:root:-:755 -$daemon_directory/postlogd:f:root:-:755 -$daemon_directory/postscreen:f:root:-:755 -$daemon_directory/proxymap:f:root:-:755 -$daemon_directory/qmgr:f:root:-:755 -$daemon_directory/qmqpd:f:root:-:755 -$daemon_directory/scache:f:root:-:755 -$daemon_directory/showq:f:root:-:755 -$daemon_directory/smtp:f:root:-:755 -$daemon_directory/smtpd:f:root:-:755 -$daemon_directory/spawn:f:root:-:755 -$daemon_directory/tlsproxy:f:root:-:755 -$daemon_directory/tlsmgr:f:root:-:755 -$daemon_directory/trivial-rewrite:f:root:-:755 -$daemon_directory/verify:f:root:-:755 -$daemon_directory/virtual:f:root:-:755 -$daemon_directory/nqmgr:h:$daemon_directory/qmgr -$daemon_directory/lmtp:h:$daemon_directory/smtp -$command_directory/postalias:f:root:-:755 -$command_directory/postcat:f:root:-:755 -$command_directory/postconf:f:root:-:755 -$command_directory/postfix:f:root:-:755 -$command_directory/postkick:f:root:-:755 -$command_directory/postlock:f:root:-:755 -$command_directory/postlog:f:root:$setgid_group:2755:u -$command_directory/postmap:f:root:-:755 -$command_directory/postmulti:f:root:-:755 -$command_directory/postsuper:f:root:-:755 -$command_directory/postdrop:f:root:$setgid_group:2755:u -$command_directory/postqueue:f:root:$setgid_group:2755:u -$sendmail_path:f:root:-:755 -$newaliases_path:l:$sendmail_path -$mailq_path:l:$sendmail_path -$config_directory/access:f:root:-:644:p1 -$config_directory/canonical:f:root:-:644:p1 -$config_directory/cidr_table:f:root:-:644:o -$config_directory/generic:f:root:-:644:p1 -$config_directory/generics:f:root:-:644:o -$config_directory/header_checks:f:root:-:644:p1 -$config_directory/install.cf:f:root:-:644:o -$config_directory/main.cf:f:root:-:644:p -$config_directory/master.cf:f:root:-:644:p -$config_directory/pcre_table:f:root:-:644:o -$config_directory/regexp_table:f:root:-:644:o -$config_directory/relocated:f:root:-:644:p1 -$config_directory/tcp_table:f:root:-:644:o -$config_directory/transport:f:root:-:644:p1 -$config_directory/virtual:f:root:-:644:p1 -$config_directory/postfix-script:f:root:-:755:o -$config_directory/postfix-script-sgid:f:root:-:755:o -$config_directory/postfix-script-nosgid:f:root:-:755:o -$config_directory/post-install:f:root:-:755:o -$manpage_directory/man1/mailq.postfix.1.gz:f:root:-:644 -$manpage_directory/man1/newaliases.postfix.1.gz:f:root:-:644 -$manpage_directory/man1/postalias.1.gz:f:root:-:644 -$manpage_directory/man1/postcat.1.gz:f:root:-:644 -$manpage_directory/man1/postconf.1.gz:f:root:-:644 -$manpage_directory/man1/postdrop.1.gz:f:root:-:644 -$manpage_directory/man1/postfix-tls.1.gz:f:root:-:644 -$manpage_directory/man1/postfix.1.gz:f:root:-:644 -$manpage_directory/man1/postkick.1.gz:f:root:-:644 -$manpage_directory/man1/postlock.1.gz:f:root:-:644 -$manpage_directory/man1/postlog.1.gz:f:root:-:644 -$manpage_directory/man1/postmap.1.gz:f:root:-:644 -$manpage_directory/man1/postmulti.1.gz:f:root:-:644 -$manpage_directory/man1/postqueue.1.gz:f:root:-:644 -$manpage_directory/man1/postsuper.1.gz:f:root:-:644 -$manpage_directory/man1/sendmail.postfix.1.gz:f:root:-:644 -$manpage_directory/man5/access.5.gz:f:root:-:644 -$manpage_directory/man5/aliases.postfix.5.gz:f:root:-:644 -$manpage_directory/man5/body_checks.5.gz:f:root:-:644 -$manpage_directory/man5/bounce.5.gz:f:root:-:644 -$manpage_directory/man5/canonical.5.gz:f:root:-:644 -$manpage_directory/man5/cidr_table.5.gz:f:root:-:644 -$manpage_directory/man5/generics.5.gz:f:root:-:644:o -$manpage_directory/man5/generic.5.gz:f:root:-:644 -$manpage_directory/man5/header_checks.5.gz:f:root:-:644 -$manpage_directory/man5/master.5.gz:f:root:-:644 -$manpage_directory/man5/memcache_table.5.gz:f:root:-:644 -$manpage_directory/man5/mongodb_table.5.gz:f:root:-:644 -$manpage_directory/man5/socketmap_table.5.gz:f:root:-:644 -$manpage_directory/man5/nisplus_table.5.gz:f:root:-:644 -$manpage_directory/man5/postconf.5.gz:f:root:-:644 -$manpage_directory/man5/postfix-wrapper.5.gz:f:root:-:644 -$manpage_directory/man5/regexp_table.5.gz:f:root:-:644 -$manpage_directory/man5/relocated.5.gz:f:root:-:644 -$manpage_directory/man5/tcp_table.5.gz:f:root:-:644 -$manpage_directory/man5/transport.5.gz:f:root:-:644 -$manpage_directory/man5/virtual.5.gz:f:root:-:644 -$manpage_directory/man8/bounce.8.gz:f:root:-:644 -$manpage_directory/man8/cleanup.8.gz:f:root:-:644 -$manpage_directory/man8/anvil.8.gz:f:root:-:644 -$manpage_directory/man8/defer.8.gz:f:root:-:644 -$manpage_directory/man8/discard.8.gz:f:root:-:644 -$manpage_directory/man8/dnsblog.8.gz:f:root:-:644 -$manpage_directory/man8/error.8.gz:f:root:-:644 -$manpage_directory/man8/flush.8.gz:f:root:-:644 -$manpage_directory/man8/lmtp.8.gz:f:root:-:644 -$manpage_directory/man8/local.8.gz:f:root:-:644 -$manpage_directory/man8/master.8.gz:f:root:-:644 -$manpage_directory/man8/nqmgr.8.gz:f:root:-:644:o -$manpage_directory/man8/oqmgr.8.gz:f:root:-:644: -$manpage_directory/man8/pickup.8.gz:f:root:-:644 -$manpage_directory/man8/pipe.8.gz:f:root:-:644 -$manpage_directory/man8/postlogd.8.gz:f:root:-:644 -$manpage_directory/man8/postscreen.8.gz:f:root:-:644 -$manpage_directory/man8/proxymap.8.gz:f:root:-:644 -$manpage_directory/man8/qmgr.8.gz:f:root:-:644 -$manpage_directory/man8/qmqpd.8.gz:f:root:-:644 -$manpage_directory/man8/scache.8.gz:f:root:-:644 -$manpage_directory/man8/showq.8.gz:f:root:-:644 -$manpage_directory/man8/smtp.postfix.8.gz:f:root:-:644 -$manpage_directory/man8/smtpd.postfix.8.gz:f:root:-:644 -$manpage_directory/man8/spawn.8.gz:f:root:-:644 -$manpage_directory/man8/tlsproxy.8.gz:f:root:-:644 -$manpage_directory/man8/tlsmgr.8.gz:f:root:-:644 -$manpage_directory/man8/trace.8.gz:f:root:-:644 -$manpage_directory/man8/trivial-rewrite.8.gz:f:root:-:644 -$manpage_directory/man8/verify.8.gz:f:root:-:644 -$manpage_directory/man8/virtual.8.gz:f:root:-:644 -$sample_directory/sample-aliases.cf:f:root:-:644:o -$sample_directory/sample-auth.cf:f:root:-:644:o -$sample_directory/sample-canonical.cf:f:root:-:644:o -$sample_directory/sample-compatibility.cf:f:root:-:644:o -$sample_directory/sample-debug.cf:f:root:-:644:o -$sample_directory/sample-filter.cf:f:root:-:644:o -$sample_directory/sample-flush.cf:f:root:-:644:o -$sample_directory/sample-ipv6.cf:f:root:-:644:o -$sample_directory/sample-ldap.cf:f:root:-:644:o -$sample_directory/sample-lmtp.cf:f:root:-:644:o -$sample_directory/sample-local.cf:f:root:-:644:o -$sample_directory/sample-mime.cf:f:root:-:644:o -$sample_directory/sample-misc.cf:f:root:-:644:o -$sample_directory/sample-pcre-access.cf:f:root:-:644:o -$sample_directory/sample-pcre-body.cf:f:root:-:644:o -$sample_directory/sample-pcre-header.cf:f:root:-:644:o -$sample_directory/sample-pgsql-aliases.cf:f:root:-:644:o -$sample_directory/sample-qmqpd.cf:f:root:-:644:o -$sample_directory/sample-rate.cf:f:root:-:644:o -$sample_directory/sample-regexp-access.cf:f:root:-:644:o -$sample_directory/sample-regexp-body.cf:f:root:-:644:o -$sample_directory/sample-regexp-header.cf:f:root:-:644:o -$sample_directory/sample-relocated.cf:f:root:-:644:o -$sample_directory/sample-resource.cf:f:root:-:644:o -$sample_directory/sample-rewrite.cf:f:root:-:644:o -$sample_directory/sample-scheduler.cf:f:root:-:644:o -$sample_directory/sample-smtp.cf:f:root:-:644:o -$sample_directory/sample-smtpd.cf:f:root:-:644:o -$sample_directory/sample-tls.cf:f:root:-:644:o -$sample_directory/sample-transport.cf:f:root:-:644:o -$sample_directory/sample-verify.cf:f:root:-:644:o -$sample_directory/sample-virtual.cf:f:root:-:644:o -$readme_directory/AAAREADME:f:root:-:644 -$readme_directory/ADDRESS_CLASS_README:f:root:-:644 -$readme_directory/ADDRESS_REWRITING_README:f:root:-:644 -$readme_directory/ADDRESS_VERIFICATION_README:f:root:-:644 -$readme_directory/BACKSCATTER_README:f:root:-:644 -$readme_directory/BASIC_CONFIGURATION_README:f:root:-:644 -$readme_directory/BDAT_README:f:root:-:644 -$readme_directory/BUILTIN_FILTER_README:f:root:-:644 -$readme_directory/COMPATIBILITY_README:f:root:-:644 -$readme_directory/CONNECTION_CACHE_README:f:root:-:644 -$readme_directory/CONTENT_INSPECTION_README:f:root:-:644 -$readme_directory/DATABASE_README:f:root:-:644 -$readme_directory/DB_README:f:root:-:644 -$readme_directory/DEBUG_README:f:root:-:644 -$readme_directory/DEPRECATION_README:f:root:-:644 -$readme_directory/DSN_README:f:root:-:644 -$readme_directory/ETRN_README:f:root:-:644 -$readme_directory/FILTER_README:f:root:-:644 -$readme_directory/FORWARD_SECRECY_README:f:root:-:644 -$readme_directory/HOSTING_README:f:root:-:644:o -$readme_directory/INSTALL:f:root:-:644 -$readme_directory/IPV6_README:f:root:-:644 -$readme_directory/LINUX_README:f:root:-:644 -$readme_directory/LOCAL_RECIPIENT_README:f:root:-:644 -$readme_directory/MACOSX_README:f:root:-:644:o -$readme_directory/MAILDROP_README:f:root:-:644 -$readme_directory/MAILLOG_README:f:root:-:644 -$readme_directory/MEMCACHE_README:f:root:-:644 -$readme_directory/MILTER_README:f:root:-:644 -$readme_directory/MONGODB_README:f:root:-:644 -$readme_directory/MULTI_INSTANCE_README:f:root:-:644 -$readme_directory/SMTPUTF8_README:f:root:-:644 -$readme_directory/NFS_README:f:root:-:644 -$readme_directory/OVERVIEW:f:root:-:644 -$readme_directory/PACKAGE_README:f:root:-:644 -$readme_directory/POSTSCREEN_3_5_README:f:root:-:644 -$readme_directory/POSTSCREEN_README:f:root:-:644 -$readme_directory/QMQP_README:f:root:-:644:o -$readme_directory/QSHAPE_README:f:root:-:644 -$readme_directory/RELEASE_NOTES:f:root:-:644 -$readme_directory/RESTRICTION_CLASS_README:f:root:-:644 -$readme_directory/SASL_README:f:root:-:644 -$readme_directory/SCHEDULER_README:f:root:-:644 -$readme_directory/SMTPD_ACCESS_README:f:root:-:644 -$readme_directory/SMTPD_POLICY_README:f:root:-:644 -$readme_directory/SMTPD_PROXY_README:f:root:-:644 -$readme_directory/SOHO_README:f:root:-:644 -$readme_directory/STANDARD_CONFIGURATION_README:f:root:-:644 -$readme_directory/STRESS_README:f:root:-:644 -$readme_directory/TLS_LEGACY_README:f:root:-:644 -$readme_directory/TLS_README:f:root:-:644 -$readme_directory/TUNING_README:f:root:-:644 -$readme_directory/ULTRIX_README:f:root:-:644 -$readme_directory/UUCP_README:f:root:-:644 -$readme_directory/VERP_README:f:root:-:644 -$readme_directory/VIRTUAL_README:f:root:-:644 -$readme_directory/XCLIENT_README:f:root:-:644 -$readme_directory/XFORWARD_README:f:root:-:644 -$html_directory/ADDRESS_CLASS_README.html:f:root:-:644 -$html_directory/ADDRESS_REWRITING_README.html:f:root:-:644 -$html_directory/ADDRESS_VERIFICATION_README.html:f:root:-:644 -$html_directory/BACKSCATTER_README.html:f:root:-:644 -$html_directory/BASIC_CONFIGURATION_README.html:f:root:-:644 -$html_directory/BDAT_README.html:f:root:-:644 -$html_directory/BUILTIN_FILTER_README.html:f:root:-:644 -$html_directory/CDB_README.html:f:root:-:644 -$html_directory/COMPATIBILITY_README.html:f:root:-:644 -$html_directory/CONNECTION_CACHE_README.html:f:root:-:644 -$html_directory/CONTENT_INSPECTION_README.html:f:root:-:644 -$html_directory/CYRUS_README.html:f:root:-:644:o -$html_directory/DATABASE_README.html:f:root:-:644 -$html_directory/DB_README.html:f:root:-:644 -$html_directory/DEBUG_README.html:f:root:-:644 -$html_directory/DEPRECATION_README.html:f:root:-:644 -$html_directory/DSN_README.html:f:root:-:644 -$html_directory/ETRN_README.html:f:root:-:644 -$html_directory/FILTER_README.html:f:root:-:644 -$html_directory/FORWARD_SECRECY_README.html:f:root:-:644 -$html_directory/INSTALL.html:f:root:-:644 -$html_directory/IPV6_README.html:f:root:-:644 -$html_directory/LDAP_README.html:f:root:-:644 -$html_directory/LINUX_README.html:f:root:-:644 -$html_directory/LMDB_README.html:f:root:-:644 -$html_directory/LOCAL_RECIPIENT_README.html:f:root:-:644 -$html_directory/MAILDROP_README.html:f:root:-:644 -$html_directory/MAILLOG_README.html:f:root:-:644 -$html_directory/MEMCACHE_README.html:f:root:-:644 -$html_directory/MILTER_README.html:f:root:-:644 -$html_directory/MONGODB_README.html:f:root:-:644 -$html_directory/MULTI_INSTANCE_README.html:f:root:-:644 -$html_directory/MYSQL_README.html:f:root:-:644 -$html_directory/SMTPUTF8_README.html:f:root:-:644 -$html_directory/SQLITE_README.html:f:root:-:644 -$html_directory/NFS_README.html:f:root:-:644 -$html_directory/OVERVIEW.html:f:root:-:644 -$html_directory/PACKAGE_README.html:f:root:-:644 -$html_directory/PCRE_README.html:f:root:-:644 -$html_directory/PGSQL_README.html:f:root:-:644 -$html_directory/POSTSCREEN_3_5_README.html:f:root:-:644 -$html_directory/POSTSCREEN_README.html:f:root:-:644 -$html_directory/QMQP_README.html:f:root:-:644:o -$html_directory/QSHAPE_README.html:f:root:-:644 -$html_directory/RESTRICTION_CLASS_README.html:f:root:-:644 -$html_directory/SASL_README.html:f:root:-:644 -$html_directory/SCHEDULER_README.html:f:root:-:644 -$html_directory/SMTPD_ACCESS_README.html:f:root:-:644 -$html_directory/SMTPD_POLICY_README.html:f:root:-:644 -$html_directory/SMTPD_PROXY_README.html:f:root:-:644 -$html_directory/SOHO_README.html:f:root:-:644 -$html_directory/STANDARD_CONFIGURATION_README.html:f:root:-:644 -$html_directory/STRESS_README.html:f:root:-:644 -$html_directory/TLS_LEGACY_README.html:f:root:-:644 -$html_directory/TLS_README.html:f:root:-:644 -$html_directory/TUNING_README.html:f:root:-:644 -$html_directory/ULTRIX_README.html:f:root:-:644:o -$html_directory/UUCP_README.html:f:root:-:644 -$html_directory/VERP_README.html:f:root:-:644 -$html_directory/VIRTUAL_README.html:f:root:-:644 -$html_directory/XCLIENT_README.html:f:root:-:644 -$html_directory/XFORWARD_README.html:f:root:-:644 -$html_directory/access.5.html:f:root:-:644 -$html_directory/aliases.5.html:f:root:-:644 -$html_directory/anvil.8.html:f:root:-:644 -$html_directory/bounce.5.html:f:root:-:644 -$html_directory/bounce.8.html:f:root:-:644 -$html_directory/canonical.5.html:f:root:-:644 -$html_directory/cidr_table.5.html:f:root:-:644 -$html_directory/cleanup.8.html:f:root:-:644 -$html_directory/defer.8.html:h:$html_directory/bounce.8.html:-:644 -$html_directory/discard.8.html:f:root:-:644 -$html_directory/dnsblog.8.html:f:root:-:644 -$html_directory/error.8.html:f:root:-:644 -$html_directory/flush.8.html:f:root:-:644 -$html_directory/generics.5.html:f:root:-:644:o -$html_directory/generic.5.html:f:root:-:644 -$html_directory/header_checks.5.html:f:root:-:644 -$html_directory/index.html:f:root:-:644 -$html_directory/ldap_table.5.html:f:root:-:644 -$html_directory/lmdb_table.5.html:f:root:-:644 -$html_directory/lmtp.8.html:f:root:-:644 -$html_directory/local.8.html:f:root:-:644 -$html_directory/mailq.1.html:f:root:-:644 -$html_directory/master.5.html:f:root:-:644 -$html_directory/master.8.html:f:root:-:644 -$html_directory/memcache_table.5.html:f:root:-:644 -$html_directory/mongodb_table.5.html:f:root:-:644 -$html_directory/mysql_table.5.html:f:root:-:644 -$html_directory/sqlite_table.5.html:f:root:-:644 -$html_directory/nisplus_table.5.html:f:root:-:644 -$html_directory/newaliases.1.html:h:$html_directory/mailq.1.html:-:644 -$html_directory/oqmgr.8.html:f:root:-:644 -$html_directory/pcre_table.5.html:f:root:-:644 -$html_directory/pgsql_table.5.html:f:root:-:644 -$html_directory/pickup.8.html:f:root:-:644 -$html_directory/pipe.8.html:f:root:-:644 -$html_directory/postalias.1.html:f:root:-:644 -$html_directory/postcat.1.html:f:root:-:644 -$html_directory/postconf.1.html:f:root:-:644 -$html_directory/postconf.5.html:f:root:-:644 -$html_directory/postdrop.1.html:f:root:-:644 -$html_directory/postfix-logo.jpg:f:root:-:644 -$html_directory/postfix-manuals.html:f:root:-:644 -$html_directory/postfix-tls.1.html:f:root:-:644 -$html_directory/postfix-wrapper.5.html:f:root:-:644 -$html_directory/postfix.1.html:f:root:-:644 -$html_directory/postfix-doc.css:f:root:-:644 -$html_directory/postkick.1.html:f:root:-:644 -$html_directory/postlock.1.html:f:root:-:644 -$html_directory/postlog.1.html:f:root:-:644 -$html_directory/postmap.1.html:f:root:-:644 -$html_directory/postmulti.1.html:f:root:-:644 -$html_directory/postlogd.8.html:f:root:-:644 -$html_directory/postqueue.1.html:f:root:-:644 -$html_directory/postscreen.8.html:f:root:-:644 -$html_directory/postsuper.1.html:f:root:-:644 -$html_directory/qshape.1.html:f:root:-:644 -$html_directory/proxymap.8.html:f:root:-:644 -$html_directory/qmgr.8.html:f:root:-:644 -$html_directory/qmqp-sink.1.html:f:root:-:644 -$html_directory/qmqp-source.1.html:f:root:-:644 -$html_directory/qmqpd.8.html:f:root:-:644 -$html_directory/regexp_table.5.html:f:root:-:644 -$html_directory/relocated.5.html:f:root:-:644 -$html_directory/scache.8.html:f:root:-:644 -$html_directory/sendmail.1.html:h:$html_directory/mailq.1.html:-:644 -$html_directory/showq.8.html:f:root:-:644 -$html_directory/smtp-sink.1.html:f:root:-:644 -$html_directory/smtp-source.1.html:f:root:-:644 -$html_directory/smtp.8.html:h:$html_directory/lmtp.8.html:-:644 -$html_directory/smtpd.8.html:f:root:-:644 -$html_directory/socketmap_table.5.html:f:root:-:644 -$html_directory/spawn.8.html:f:root:-:644 -$html_directory/tlsmgr.8.html:f:root:-:644 -$html_directory/tlsproxy.8.html:f:root:-:644 -$html_directory/tcp_table.5.html:f:root:-:644 -$html_directory/trace.8.html:h:$html_directory/bounce.8.html:-:644 -$html_directory/transport.5.html:f:root:-:644 -$html_directory/trivial-rewrite.8.html:f:root:-:644 -$html_directory/verify.8.html:f:root:-:644 -$html_directory/virtual.5.html:f:root:-:644 -$html_directory/virtual.8.html:f:root:-:644 diff --git a/templates/Fedora/41/etc/postfix/postfix-files.d/ldap b/templates/Fedora/41/etc/postfix/postfix-files.d/ldap deleted file mode 100644 index 684b05d..0000000 --- a/templates/Fedora/41/etc/postfix/postfix-files.d/ldap +++ /dev/null @@ -1,3 +0,0 @@ -$shlib_directory/postfix-ldap.so:f:root:-:755 -$manpage_directory/man5/ldap_table.5.gz:f:root:-:644 -$readme_directory/LDAP_README:f:root:-:644 diff --git a/templates/Fedora/41/etc/postfix/postfix-files.d/mysql b/templates/Fedora/41/etc/postfix/postfix-files.d/mysql deleted file mode 100644 index 8e41d61..0000000 --- a/templates/Fedora/41/etc/postfix/postfix-files.d/mysql +++ /dev/null @@ -1,3 +0,0 @@ -$shlib_directory/postfix-mysql.so:f:root:-:755 -$manpage_directory/man5/mysql_table.5.gz:f:root:-:644 -$readme_directory/MYSQL_README:f:root:-:644 diff --git a/templates/Fedora/41/etc/postfix/postfix-files.d/pcre b/templates/Fedora/41/etc/postfix/postfix-files.d/pcre deleted file mode 100644 index a34fd73..0000000 --- a/templates/Fedora/41/etc/postfix/postfix-files.d/pcre +++ /dev/null @@ -1,3 +0,0 @@ -$shlib_directory/postfix-pcre.so:f:root:-:755 -$manpage_directory/man5/pcre_table.5.gz:f:root:-:644 -$readme_directory/PCRE_README:f:root:-:644 diff --git a/templates/Fedora/41/etc/postfix/relocated b/templates/Fedora/41/etc/postfix/relocated deleted file mode 100644 index 5c43266..0000000 --- a/templates/Fedora/41/etc/postfix/relocated +++ /dev/null @@ -1,178 +0,0 @@ -# RELOCATED(5) RELOCATED(5) -# -# NAME -# relocated - Postfix relocated table format -# -# SYNOPSIS -# postmap /etc/postfix/relocated -# -# DESCRIPTION -# The optional relocated(5) table provides the information -# that is used in "user has moved to new_location" bounce -# messages. -# -# Normally, the relocated(5) table is specified as a text -# file that serves as input to the postmap(1) command. The -# result, an indexed file in dbm or db format, is used for -# fast searching by the mail system. Execute the command -# "postmap /etc/postfix/relocated" to rebuild an indexed -# file after changing the corresponding relocated table. -# -# When the table is provided via other means such as NIS, -# LDAP or SQL, the same lookups are done as for ordinary -# indexed files. -# -# Alternatively, the table can be provided as a regu- -# lar-expression map where patterns are given as regular -# expressions, or lookups can be directed to a TCP-based -# server. In those case, the lookups are done in a slightly -# different way as described below under "REGULAR EXPRESSION -# TABLES" or "TCP-BASED TABLES". -# -# Table lookups are case insensitive. -# -# CASE FOLDING -# The search string is folded to lowercase before database -# lookup. As of Postfix 2.3, the search string is not case -# folded with database types such as regexp: or pcre: whose -# lookup fields can match both upper and lower case. -# -# TABLE FORMAT -# The input format for the postmap(1) command is as follows: -# -# o An entry has one of the following form: -# -# pattern new_location -# -# Where new_location specifies contact information -# such as an email address, or perhaps a street -# address or telephone number. -# -# o Empty lines and whitespace-only lines are ignored, -# as are lines whose first non-whitespace character -# is a `#'. -# -# o A logical line starts with non-whitespace text. A -# line that starts with whitespace continues a logi- -# cal line. -# -# TABLE SEARCH ORDER -# With lookups from indexed files such as DB or DBM, or from -# networked tables such as NIS, LDAP or SQL, patterns are -# tried in the order as listed below: -# -# user@domain -# Matches user@domain. This form has precedence over -# all other forms. -# -# user Matches user@site when site is $myorigin, when site -# is listed in $mydestination, or when site is listed -# in $inet_interfaces or $proxy_interfaces. -# -# @domain -# Matches other addresses in domain. This form has -# the lowest precedence. -# -# ADDRESS EXTENSION -# When a mail address localpart contains the optional recip- -# ient delimiter (e.g., user+foo@domain), the lookup order -# becomes: user+foo@domain, user@domain, user+foo, user, and -# @domain. -# -# REGULAR EXPRESSION TABLES -# This section describes how the table lookups change when -# the table is given in the form of regular expressions or -# when lookups are directed to a TCP-based server. For a -# description of regular expression lookup table syntax, see -# regexp_table(5) or pcre_table(5). For a description of the -# TCP client/server table lookup protocol, see tcp_table(5). -# This feature is available in Postfix 2.5 and later. -# -# Each pattern is a regular expression that is applied to -# the entire address being looked up. Thus, user@domain mail -# addresses are not broken up into their user and @domain -# constituent parts, nor is user+foo broken up into user and -# foo. -# -# Patterns are applied in the order as specified in the ta- -# ble, until a pattern is found that matches the search -# string. -# -# Results are the same as with indexed file lookups, with -# the additional feature that parenthesized substrings from -# the pattern can be interpolated as $1, $2 and so on. -# -# TCP-BASED TABLES -# This section describes how the table lookups change when -# lookups are directed to a TCP-based server. For a descrip- -# tion of the TCP client/server lookup protocol, see tcp_ta- -# ble(5). This feature is available in Postfix 2.5 and -# later. -# -# Each lookup operation uses the entire address once. Thus, -# user@domain mail addresses are not broken up into their -# user and @domain constituent parts, nor is user+foo broken -# up into user and foo. -# -# Results are the same as with indexed file lookups. -# -# BUGS -# The table format does not understand quoting conventions. -# -# CONFIGURATION PARAMETERS -# The following main.cf parameters are especially relevant. -# The text below provides only a parameter summary. See -# postconf(5) for more details including examples. -# -# relocated_maps (empty) -# Optional lookup tables with new contact information -# for users or domains that no longer exist. -# -# Other parameters of interest: -# -# inet_interfaces (all) -# The local network interface addresses that this -# mail system receives mail on. -# -# mydestination ($myhostname, localhost.$mydomain, local- -# host) -# The list of domains that are delivered via the -# $local_transport mail delivery transport. -# -# myorigin ($myhostname) -# The domain name that locally-posted mail appears to -# come from, and that locally posted mail is deliv- -# ered to. -# -# proxy_interfaces (empty) -# The remote network interface addresses that this -# mail system receives mail on by way of a proxy or -# network address translation unit. -# -# SEE ALSO -# trivial-rewrite(8), address resolver -# postmap(1), Postfix lookup table manager -# postconf(5), configuration parameters -# -# README FILES -# Use "postconf readme_directory" or "postconf html_direc- -# tory" to locate this information. -# DATABASE_README, Postfix lookup table overview -# ADDRESS_REWRITING_README, address rewriting guide -# -# LICENSE -# The Secure Mailer license must be distributed with this -# software. -# -# AUTHOR(S) -# Wietse Venema -# IBM T.J. Watson Research -# P.O. Box 704 -# Yorktown Heights, NY 10598, USA -# -# Wietse Venema -# Google, Inc. -# 111 8th Avenue -# New York, NY 10011, USA -# -# RELOCATED(5) diff --git a/templates/Fedora/41/etc/postfix/transport b/templates/Fedora/41/etc/postfix/transport deleted file mode 100644 index bad7739..0000000 --- a/templates/Fedora/41/etc/postfix/transport +++ /dev/null @@ -1,317 +0,0 @@ -# TRANSPORT(5) TRANSPORT(5) -# -# NAME -# transport - Postfix transport table format -# -# SYNOPSIS -# postmap /etc/postfix/transport -# -# postmap -q "string" /etc/postfix/transport -# -# postmap -q - /etc/postfix/transport = 3.5): -# -# example.com smtp:bar.example, foo.example -# -# This tries to deliver to bar.example before trying to -# deliver to foo.example. -# -# The error mailer can be used to bounce mail: -# -# .example.com error:mail for *.example.com is not deliverable -# -# This causes all mail for user@anything.example.com to be -# bounced. -# -# REGULAR EXPRESSION TABLES -# This section describes how the table lookups change when -# the table is given in the form of regular expressions. For -# a description of regular expression lookup table syntax, -# see regexp_table(5) or pcre_table(5). -# -# Each pattern is a regular expression that is applied to -# the entire address being looked up. Thus, -# some.domain.hierarchy is not looked up via its parent -# domains, nor is user+foo@domain looked up as user@domain. -# -# Patterns are applied in the order as specified in the ta- -# ble, until a pattern is found that matches the search -# string. -# -# The trivial-rewrite(8) server disallows regular expression -# substitution of $1 etc. in regular expression lookup -# tables, because that could open a security hole (Postfix -# version 2.3 and later). -# -# TCP-BASED TABLES -# This section describes how the table lookups change when -# lookups are directed to a TCP-based server. For a descrip- -# tion of the TCP client/server lookup protocol, see tcp_ta- -# ble(5). This feature is not available up to and including -# Postfix version 2.4. -# -# Each lookup operation uses the entire recipient address -# once. Thus, some.domain.hierarchy is not looked up via -# its parent domains, nor is user+foo@domain looked up as -# user@domain. -# -# Results are the same as with indexed file lookups. -# -# CONFIGURATION PARAMETERS -# The following main.cf parameters are especially relevant. -# The text below provides only a parameter summary. See -# postconf(5) for more details including examples. -# -# empty_address_recipient (MAILER-DAEMON) -# The recipient of mail addressed to the null -# address. -# -# parent_domain_matches_subdomains (see 'postconf -d' out- -# put) -# A list of Postfix features where the pattern "exam- -# ple.com" also matches subdomains of example.com, -# instead of requiring an explicit ".example.com" -# pattern. -# -# transport_maps (empty) -# Optional lookup tables with mappings from recipient -# address to (message delivery transport, next-hop -# destination). -# -# SEE ALSO -# trivial-rewrite(8), rewrite and resolve addresses -# master(5), master.cf file format -# postconf(5), configuration parameters -# postmap(1), Postfix lookup table manager -# -# README FILES -# Use "postconf readme_directory" or "postconf html_direc- -# tory" to locate this information. -# ADDRESS_REWRITING_README, address rewriting guide -# DATABASE_README, Postfix lookup table overview -# FILTER_README, external content filter -# -# LICENSE -# The Secure Mailer license must be distributed with this -# software. -# -# AUTHOR(S) -# Wietse Venema -# IBM T.J. Watson Research -# P.O. Box 704 -# Yorktown Heights, NY 10598, USA -# -# Wietse Venema -# Google, Inc. -# 111 8th Avenue -# New York, NY 10011, USA -# -# TRANSPORT(5) diff --git a/templates/Fedora/41/etc/postfix/virtual b/templates/Fedora/41/etc/postfix/virtual deleted file mode 100644 index 96390fe..0000000 --- a/templates/Fedora/41/etc/postfix/virtual +++ /dev/null @@ -1,324 +0,0 @@ -# VIRTUAL(5) VIRTUAL(5) -# -# NAME -# virtual - Postfix virtual alias table format -# -# SYNOPSIS -# postmap /etc/postfix/virtual -# -# postmap -q "string" /etc/postfix/virtual -# -# postmap -q - /etc/postfix/virtual Date: Fri, 8 May 2026 20:01:10 -0400 Subject: [PATCH 47/47] More ansible core 2.20 fixes Signed-off-by: Jason Rothstein --- tasks/main.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tasks/main.yml b/tasks/main.yml index b7d01cb..bdbc9e9 100644 --- a/tasks/main.yml +++ b/tasks/main.yml @@ -113,8 +113,8 @@ - name: 'ensure firewall' when: - ansible_facts["system"] == 'Linux' - - packages["firewalld"] is defined - - packages["python3-firewall"] is defined + - ansible_facts.packages["firewalld"] is defined + - ansible_facts.packages["python3-firewall"] is defined - ensure_postfix is defined - ensure_postfix.firewall_list is defined - ensure_postfix.firewall_list is iterable