public
nobgit
read
NobMail
Based on mailcow: dockerized
Languages
Repository composition by tracked source files.
PHP
49%
JavaScript
35%
HTML
9%
CSS
4%
Shell
2%
Python
1%
Lua
0%
Perl
0%
Ruby
0%
SCSS
0%
Create file
Wiki Documentation
Clone
https://nobgit.com/orgs/nobgit/nobmail.git
ssh://[email protected]:2222/orgs/nobgit/nobmail.git
Trace
data/conf/postfix/master.cf
Trace helps you understand code history line by line. See who changed each line, when it changed, and which commit introduced it.
Author
Date
Commit
Line
Code
1
# inter-mx with postscreen on 25/tcp
2
smtp inet n - n - 1 postscreen
3
10025 inet n - n - 1 postscreen
4
-o postscreen_upstream_proxy_protocol=haproxy
5
-o syslog_name=haproxy
6
smtpd pass - - n - - smtpd
7
-o smtpd_sasl_auth_enable=no
8
-o smtpd_sender_restrictions=permit_mynetworks,reject_unlisted_sender,reject_unknown_sender_domain
10
# smtpd tls-wrapped (smtps) on 465/tcp
11
# TLS protocol can be modified by setting smtps_smtpd_tls_mandatory_protocols in extra.cf
12
smtps inet n - n - - smtpd
13
-o smtpd_tls_wrappermode=yes
14
-o smtpd_client_restrictions=permit_mynetworks,permit_sasl_authenticated,reject
15
-o smtpd_tls_mandatory_protocols=$smtps_smtpd_tls_mandatory_protocols
16
-o tls_preempt_cipherlist=yes
17
-o cleanup_service_name=smtp_sender_cleanup
18
-o syslog_name=postfix/smtps
19
10465 inet n - n - - smtpd
20
-o smtpd_upstream_proxy_protocol=haproxy
21
-o smtpd_tls_wrappermode=yes
22
-o smtpd_client_restrictions=permit_mynetworks,permit_sasl_authenticated,reject
23
-o smtpd_tls_mandatory_protocols=$smtps_smtpd_tls_mandatory_protocols
24
-o tls_preempt_cipherlist=yes
25
-o cleanup_service_name=smtp_sender_cleanup
26
-o syslog_name=postfix/smtps-haproxy
28
# smtpd with starttls on 587/tcp
29
# TLS protocol can be modified by setting submission_smtpd_tls_mandatory_protocols in extra.cf
30
submission inet n - n - - smtpd
31
-o smtpd_client_restrictions=permit_mynetworks,permit_sasl_authenticated,reject
32
-o smtpd_tls_security_level=encrypt
33
-o smtpd_tls_mandatory_protocols=$submission_smtpd_tls_mandatory_protocols
34
-o tls_preempt_cipherlist=yes
35
-o cleanup_service_name=smtp_sender_cleanup
36
-o syslog_name=postfix/submission
37
10587 inet n - n - - smtpd
38
-o smtpd_upstream_proxy_protocol=haproxy
39
-o smtpd_client_restrictions=permit_mynetworks,permit_sasl_authenticated,reject
40
-o smtpd_tls_security_level=encrypt
41
-o smtpd_tls_mandatory_protocols=$submission_smtpd_tls_mandatory_protocols
42
-o tls_preempt_cipherlist=yes
43
-o cleanup_service_name=smtp_sender_cleanup
44
-o syslog_name=postfix/submission-haproxy
46
# used by SOGo
47
# smtpd_sender_restrictions should match main.cf, but with check_sasl_access prepended for login-as-mailbox-user function
48
588 inet n - n - - smtpd
49
-o smtpd_client_restrictions=permit_mynetworks,permit_sasl_authenticated,reject
50
-o smtpd_tls_auth_only=no
51
-o smtpd_sender_restrictions=check_sasl_access,regexp:/opt/postfix/conf/allow_mailcow_local.regexp,reject_authenticated_sender_login_mismatch,permit_mynetworks,permit_sasl_authenticated,reject_unlisted_sender,reject_unknown_sender_domain
52
-o cleanup_service_name=smtp_sender_cleanup
53
-o syslog_name=postfix/sogo
55
# used to reinject quarantine mails
56
590 inet n - n - - smtpd
57
-o smtpd_helo_restrictions=
58
-o smtpd_client_restrictions=permit_mynetworks,reject
59
-o smtpd_tls_auth_only=no
60
-o smtpd_milters=
61
-o non_smtpd_milters=
62
-o syslog_name=postfix/quarantine
64
# used to send bcc mails
65
591 inet n - n - - smtpd
66
-o smtpd_helo_restrictions=
67
-o smtpd_client_restrictions=permit_mynetworks,reject
68
-o smtpd_tls_auth_only=no
69
-o smtpd_milters=
70
-o non_smtpd_milters=
71
-o syslog_name=postfix/bcc
73
# enforced smtp connector
74
smtp_enforced_tls unix - - n - - smtp
75
-o smtp_tls_security_level=encrypt
76
-o syslog_name=enforced-tls-smtp
77
-o smtp_delivery_status_filter=pcre:/opt/postfix/conf/smtp_dsn_filter
79
# smtp connector used, when a transport map matched
80
# this helps to have different sasl maps than we have with sender dependent transport maps
81
smtp_via_transport_maps unix - - n - - smtp
82
-o smtp_sasl_password_maps=proxy:mysql:/opt/postfix/conf/sql/mysql_sasl_passwd_maps_transport_maps.cf
84
tlsproxy unix - - n - 0 tlsproxy
85
dnsblog unix - - n - 0 dnsblog
86
pickup fifo n - n 60 1 pickup
87
cleanup unix n - n - 0 cleanup
88
qmgr fifo n - n 300 1 qmgr
89
tlsmgr unix - - n 1000? 1 tlsmgr
90
rewrite unix - - n - - trivial-rewrite
91
bounce unix - - n - 0 bounce
92
defer unix - - n - 0 bounce
93
trace unix - - n - 0 bounce
94
verify unix - - n - 1 verify
95
flush unix n - n 1000? 0 flush
96
proxymap unix - - n - - proxymap
97
proxywrite unix - - n - 1 proxymap
98
smtp unix - - n - - smtp
99
relay unix - - n - - smtp
100
showq unix n - n - - showq
101
error unix - - n - - error
102
retry unix - - n - - error
103
discard unix - - n - - discard
104
local unix - n n - - local
105
virtual unix - n n - - virtual
106
lmtp unix - - n - - lmtp flags=O
107
anvil unix - - n - 1 anvil
108
scache unix - - n - 1 scache
109
maildrop unix - n n - - pipe flags=DRhu
110
user=vmail argv=/usr/bin/maildrop -d ${recipient}
112
# used to anonymize sender IP
113
smtp_sender_cleanup unix n - y - 0 cleanup
114
-o header_checks=$smtp_header_checks
116
# start whitelist_fwd
117
127.0.0.1:10027 inet n n n - 0 spawn user=nobody argv=/usr/local/bin/whitelist_forwardinghosts.sh
118
# end whitelist_fwd
120
# start watchdog-specific
121
# logs to local7 (hidden)
122
589 inet n - n - - smtpd
123
-o smtpd_client_restrictions=permit_mynetworks,reject
124
-o syslog_name=watchdog
125
-o syslog_facility=local7
126
-o smtpd_milters=
127
-o cleanup_service_name=watchdog_cleanup
128
-o non_smtpd_milters=
129
watchdog_cleanup unix n - n - 0 cleanup
130
-o syslog_name=watchdog
131
-o syslog_facility=local7
132
-o queue_service_name=watchdog_qmgr
133
watchdog_qmgr fifo n - n 300 1 qmgr
134
-o syslog_facility=local7
135
-o syslog_name=watchdog
136
-o rewrite_service_name=watchdog_rewrite
137
watchdog_rewrite unix - - n - - trivial-rewrite
138
-o syslog_facility=local7
139
-o syslog_name=watchdog
140
-o local_transport=watchdog_discard
141
watchdog_discard unix - - n - - discard
142
-o syslog_facility=local7
143
-o syslog_name=watchdog
144
# end watchdog-specific