#######################
#paramétres généraux
myorigin = /etc/mailname
mydestination = effraie.org, fix.effraie.org, localhost.localdomain, localhost
mynetworks = 127.0.0.0/8, 192.168.0.0/24
smtpd_banner = $myhostname --[Effraie.org mailsystem]
mail_name               = MailServerEffraie
append_dot_mydomain = no
biff = no
delay_warning_time = 4h

########################
#Paramétres des mailbox
home_mailbox = Maildir/
# + ou - 2 Gigas de stockage
mailbox_size_limit = 2100000000
# + ou - 10 Mo autorisés par mail
message_size_limit = 10500000
recipient_delimiter = +

######################
#SASL
smtpd_sasl_auth_enable  = yes
smtpd_sasl_type         = dovecot
smtpd_sasl_path         = private/auth
#####################
# Paramétres TLS
#smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_cert_file=/etc/ssl/effraie.org/server.crt
#smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
smtpd_tls_key_file=/etc/ssl/effraie.org/server.key
smtpd_use_tls=yes
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache
########################
#Tables des alias
alias_maps = hash:/etc/aliases, hash:/var/lib/mailman/data/aliases
alias_database = hash:/etc/aliases
########################
#transport
transport_maps          = hash:/etc/postfix/transport

#######################
# Support Amavis
content_filter = amavis:[127.0.0.1]:10024
#receive_override_options = no_address_mappings

########################
# Antispam
disable_vrfy_command    = yes
strict_rfc821_envelopes = yes
smtpd_helo_required = yes
smtpd_recipient_restrictions =
 		 reject_invalid_hostname
			       reject_non_fqdn_hostname
		 reject_unknown_hostname
                 reject_non_fqdn_sender
                               reject_non_fqdn_recipient
                 reject_unknown_sender_domain
                 reject_unknown_recipient_domain
######### au dessus ce que meme les domaines internes ne peuvent pas faire
                permit_sasl_authenticated
		permit_mynetworks
                reject_unauth_destination
######### !! ne mettre aucun OK au dessus de cette ligne !! (sinon openRelay) !!
#               check_recipient_access  hash:/xxxx/postfix/etc/checks/access_recipient_check
                check_helo_access       hash:/etc/postfix/access_helo_check
#               check_client_access     hash:/xxxxx/postfix/etc/checks/access_client_check
#               check_sender_access     hash:/xxxx/postfix/etc/checks/access_sender_check
		check_sender_mx_access  cidr:/etc/postfix/mx_access.cidr
#               check_policy_service    unix:private/policy
#       	reject_rbl_client 	sbl-xbl.spamhaus.org
		reject_rbl_client	zen.spamhaus.org
		reject_rbl_client       bl.spamcop.net
		reject_rbl_client       cbl.abuseat.org
	 	reject_rbl_client 	list.dsbl.org
		check_policy_service inet:127.0.0.1:60000

##########################
#smtpd_data_restrictions =
            reject_unauth_pipelining

##########################
#header_checks = regexp:/etc/postfix/mime_header_checks
#mime_header_checks = pcre:/etc/postfix/mime_header_checks
header_checks = regexp:/etc/postfix/header_checks.cf
body_checks = regexp:/etc/postfix/body_checks.cf
mime_header_checks = regexp:/etc/postfix/mime_headers_checks.cf

####== Virtual ========================================
#virtual_mailbox_domains = hash:/etc/postfix/vdomains
#virtual_mailbox_base = /home
#virtual_mailbox_maps = hash:/etc/postfix/vmailbox
#virtual_uid_maps = hash:/etc/postfix/virtual_uids
#virtual_gid_maps = hash:/etc/postfix/virtual_gids
### 200 Mo ( a peu pres )
#virtual_mailbox_limit = 200000000
#local_recipient_maps    = proxy:unix:passwd.byname $alias_maps $virtual_mailbox_maps