Re: postfix+tls

[Santiago José López Borrazás <sjlopezb@hackindex.com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

El 10/10/06 15:41, JULIO Cayo escribió:

Yo tengo estas líneas en el main.cf:

queue_directory = /var/spool/postfix
command_directory = /usr/sbin
daemon_directory = /usr/lib/postfix
mail_owner = postfix
mydomain = hackindex.com # Aunque, tengo hackindex.es, pero eso no afecta.
myorigin = $mydomain
local_recipient_maps = $alias_maps unix:passwd.byname
unknown_local_recipient_reject_code = 450
mynetworks = 127.0.0.1
alias_database = hash:/etc/aliases
header_checks = regexp:/etc/postfix/header_checks
body_checks = regexp:/etc/postfix/body_checks
smtpd_banner = $myhostname ESMTP Hackindex's (No UCE/UBE) # Aunque, se puede
cambiar por otro...
local_destination_concurrency_limit = 2
default_destination_concurrency_limit = 20
debug_peer_level = 2
debugger_command =
         PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
         xxgdb $daemon_directory/$process_name $process_id & sleep 5
sendmail_path = /usr/sbin/sendmail
newaliases_path = /usr/bin/newaliases
mailq_path = /usr/bin/mailq
setgid_group = postdrop
manpage_directory = /usr/share/man
readme_directory = /usr/share/doc/packages/postfix/README_FILES
mail_spool_directory = /var/mail
canonical_maps = hash:/etc/postfix/canonical
virtual_maps = hash:/etc/postfix/virtual
relocated_maps = hash:/etc/postfix/relocated
transport_maps = hash:/etc/postfix/transport
disable_vrfy_command = yes
sender_canonical_maps = hash:/etc/postfix/sender_canonical
masquerade_exceptions = root
masquerade_classes = envelope_sender, header_sender, header_recipient
myhostname = smtp.hackindex.com
program_directory = /usr/lib/postfix
inet_interfaces = all
masquerade_domains =
mydestination = $myhostname, localhost.$mydomain, $mydomain, hackindex.es,
localhost.hackindex.es
defer_transports =
disable_dns_lookups = no
smtp_connect_timeout = 180s
content_filter = vscan:
mailbox_command = procmail -a "$EXTENSION"
mailbox_transport =
smtpd_sender_restrictions = hash:/etc/postfix/access
smtpd_helo_required = yes
smtpd_recipient_restrictions = permit_sasl_authenticated permit_mynetworks
reject_unauth_destination
smtpd_data_restrictions = reject_unauth_pipelining
strict_rfc821_envelopes = yes
smtpd_sasl_auth_enable = yes
broken_sasl_auth_clients = yes
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
smtpd_use_tls = yes
smtp_use_tls = yes
smtp_tls_key_file = /etc/postfix/ssl/smtpd.key
smtp_tls_cert_file = /etc/postfix/ssl/smtpd.crt
smtp_tls_CAfile = /etc/postfix/ssl/cacert.pem
smtp_tls_loglevel = 1
smtp_tls_received_header = yes
smtp_tls_sesseion_cache_timeout = 3600s
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom
alias_maps = hash:/etc/aliases
mailbox_size_limit = 104857600
message_size_limit = 104857600
maximal_queue_lifetime = 5d
html_directory = /usr/share/doc/packages/postfix/html
recipient_delimiter = +
content_filter=smtp-amavis:[127.0.0.1]:10024
default_process_limit = 300
##########

Y perfecto. Aunque, también tengo configurado el transport, el master.cf y
poca cosa más.

- --
Slds de Santiago José López Borrazás. Admin de hackindex.com/.es
Conocimientos avanzados en seguridad informática.
Conocimientos avanzados en redes pequeñas y grandes.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iQIVAwUBRSumMbuF9/q6J55WAQptfQ/9GXxqnkYWn6DGgyJVr8LvI/87rczwEcMw
Ya/ajT2xUCFkLNPK5L0L+YY7bMWAEafFmtYfYI3SiYna6AvEiHA4z5BHmgEH+eiu
s9zYNd0fx/Aw1FzvvBt67vsKvsq1o6FWecLSasTo3u0CMoPz3ROPbSEd5kMP8c+t
0MBxHkUbcZPd4OXAs0AVlZXHgmtuHSRIc5DWXkfsfH7g3+4U8wT+am8Fno/uXtY3
6OFQWFiWQ0rBDAsP9yfNGs8y3KpMLtFinJb3FYw9xKJFTMDrORsOcEv1hiZOEKDH
EvRGusczSfdKwjxWkbevgmiDNs4VJg5t8SweBzFuXIHctVc0qfQk2HWQcvsb5ZWU
IWE+LFQLSD/kz1/7T2yGGjjiWQSGT9yFaw884g4CreLAhgvrALaxq+HLJICNixkM
f1WEPO1kCG/VS+S9H0s2VZlCCVY8mmnLqY/WkKwMxN1J/xQsnMddUnJqS+6b0tM2
ncUYcM4Tpd9aDE+gXdl8bqef5jRLMEbBZM0bxWJ5YLLwJkKqXPROazfdDyydbGAy
pKuLskoS4mhskv+xd1qoEjy1eSQGFRXMKmIHUaeOKSiVzfV8FAKT2AfQus85KROo
XILt3HN4+BvWMK55qDBSxkDXpp9h01cstaEiYR4rWqwFK/qwpHGNZwW9L0rUDDHg
weICIHQY0to=
=hJPI
-----END PGP SIGNATURE-----