# See /usr/share/postfix/main.cf.dist for a commented, more complete version

smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no

# appending .domain is the MUA's job.
append_dot_mydomain = no

# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h

myhostname = mydomain.lu
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
#myorigin = /etc/mailname
mydestination = roma.local, localhost.local, localhost
relayhost =
queue_run_delay = 60
minimal_backoff_time  = 60
maximal_backoff_time = 60
relay_recipient_maps =
mynetworks = 127.0.0.0/8
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
virtual_alias_domains =
virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-virtual_forwardings.cf proxy:mysql:/etc/postfix/mysql-virtual_email2email.cf
virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf
virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual_mailboxes.cf
#transport_maps = mysql:/etc/postfix/mysql-virtual_transports.cf
virtual_mailbox_base = /home/vmail
virtual_uid_maps = static:5000
virtual_gid_maps = static:5000
smtpd_sasl_auth_enable = yes
broken_sasl_auth_clients = yes
smtpd_recipient_restrictions = permit_mynetworks,permit_sasl_authenticated,reject_rbl_client relays.ordb.org,reject_rbl_client xbl.spamhaus.org,reject_rbl_client proxies.relays.monkeys.com,reject_rbl_client opm.blitzed.org,reject_rbl_client dnsbl.njabl.org,reject_rbl_client blackholes.wirehub.net,reject_rbl_client list.dsbl.org,reject_rbl_client dul.dnsbl.sorbs.net,reject_unlisted_recipient,reject_unauth_destination
# add above: check_policy_service inet:127.0.0.1:60000
smtpd_use_tls = yes
smtpd_tls_cert_file = /etc/postfix/smtpd.cert
smtpd_tls_key_file = /etc/postfix/smtpd.key

#relay_domains = proxy:mysql:/etc/postfix/mysql-relay_domains_maps.cf

virtual_overquota_bounce = yes
virtual_maildir_limit_message = "The user you are trying to reach is over quota."
virtual_mailbox_limit_maps = mysql:/etc/postfix/mysql-virtual_mailbox_limit_maps.cf
virtual_mailbox_limit_inbox = yes
virtual_mailbox_limit_override = yes
virtual_maildir_extended = yes
virtual_create_maildirsize = yes

content_filter = amavis:[127.0.0.1]:10024
receive_override_options = no_address_mappings

#proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $virtual_mailbox_limit_maps

soft_bounce = yes

# Antispam measures:
smtpd_delay_reject = yes
smtpd_helo_required = yes
#smtpd_helo_restrictions =
#  check_helo_access
#     hash:/etc/postfix/helo_access,
#  reject_non_fqdn_hostname,
#  reject_invalid_hostname,
#  permit

smtpd_error_sleep_time = 0s
smtpd_hard_error_limit = 2
smtpd_soft_error_limit = 1

header_checks = regexp:/etc/postfix/header_checks