- master_cf
- Sunday, May 20th, 2007 at 5:15:08pm UTC
- #
- # Postfix master process configuration file. Each line describes how
- # a mailer component program should be run. The fields that make up
- # each line are described below. A "-" field value requests that a
- # default value be used for that field.
- #
- # Service: any name that is valid for the specified transport type
- # (the next field). With INET transports, a service is specified as
- # host:port. The host part (and colon) may be omitted. Either host
- # or port may be given in symbolic form or in numeric form. Examples
- # for the SMTP server: localhost:smtp receives mail via the loopback
- # interface only; 10025 receives mail on port 10025.
- #
- # Transport type: "inet" for Internet sockets, "unix" for UNIX-domain
- # sockets, "fifo" for named pipes.
- #
- # Private: whether or not access is restricted to the mail system.
- # Default is private service. Internet (inet) sockets can't be private.
- #
- # Unprivileged: whether the service runs with root privileges or as
- # the owner of the Postfix system (the owner name is controlled by the
- # mail_owner configuration variable in the main.cf file).
- #
- # Chroot: whether or not the service runs chrooted to the mail queue
- # directory (pathname is controlled by the queue_directory configuration
- # variable in the main.cf file). Presently, all Postfix daemons can run
- # chrooted, except for the pipe, virtual and local delivery daemons.
- # The files in the examples/chroot-setup subdirectory describe how
- # to set up a Postfix chroot environment for your type of machine.
- #
- # Wakeup time: automatically wake up the named service after the
- # specified number of seconds. A ? at the end of the wakeup time
- # field requests that wake up events be sent only to services that
- # are actually being used. Specify 0 for no wakeup. Presently, only
- # the pickup, queue manager and flush daemons need a wakeup timer.
- #
- # Max procs: the maximum number of processes that may execute this
- # service simultaneously. Default is to use a globally configurable
- # limit (the default_process_limit configuration parameter in main.cf).
- # Specify 0 for no process count limit.
- #
- # Command + args: the command to be executed. The command name is
- # relative to the Postfix program directory (pathname is controlled by
- # the program_directory configuration variable). Adding one or more
- # -v options turns on verbose logging for that service; adding a -D
- # option enables symbolic debugging (see the debugger_command variable
- # in the main.cf configuration file). See individual command man pages
- # for specific command-line options, if any.
- #
- # In order to use the "uucp" message tranport below, set up entries
- # in the transport table.
- #
- # In order to use the "cyrus" message transport below, configure it
- # in main.cf as the mailbox_transport.
- #
- # SPECIFY ONLY PROGRAMS THAT ARE WRITTEN TO RUN AS POSTFIX DAEMONS.
- # ALL DAEMONS SPECIFIED HERE MUST SPEAK A POSTFIX-INTERNAL PROTOCOL.
- #
- # DO NOT CHANGE THE ZERO PROCESS LIMIT FOR CLEANUP/BOUNCE/DEFER OR
- # POSTFIX WILL BECOME STUCK UP UNDER HEAVY LOAD
- #
- # DO NOT CHANGE THE ONE PROCESS LIMIT FOR PICKUP/QMGR OR POSTFIX WILL
- # DELIVER MAIL MULTIPLE TIMES.
- #
- # DO NOT SHARE THE POSTFIX QUEUE BETWEEN MULTIPLE POSTFIX INSTANCES.
- #
- # ==========================================================================
- # service type private unpriv chroot wakeup maxproc command + args
- # (yes) (yes) (yes) (never) (50)
- # ==========================================================================
- smtp inet n - y - - smtpd
- #smtps inet n - n - - smtpd
- # -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes
- #submission inet n - n - - smtpd
- # -o smtpd_enforce_tls=yes -o smtpd_sasl_auth_enable=yes
- #628 inet n - n - - qmqpd
- pickup fifo n - y 60 1 pickup
- cleanup unix n - y - 0 cleanup
- #qmgr fifo n - n 300 1 qmgr
- qmgr fifo n - y 300 1 qmgr
- #tlsmgr fifo - - n 300 1 tlsmgr
- rewrite unix - - y - - trivial-rewrite
- bounce unix - - y - 0 bounce
- defer unix - - y - 0 bounce
- flush unix n - y 1000? 0 flush
- smtp unix - - y - - smtp
- showq unix n - y - - showq
- error unix - - y - - error
- local unix - n n - - local
- virtual unix - n y - - virtual
- lmtp unix - - y - - lmtp
- #
- # Interfaces to non-Postfix software. Be sure to examine the manual
- # pages of the non-Postfix software to find out what options it wants.
- # The Cyrus deliver program has changed incompatibly.
- #
- #===============================================
- smtp inet n - n - 5 smtpd
- # -o content_filter=smtp-amavis:[127.0.0.1]:10024
- smtp-amavis unix - - n - 2 smtp
- -o smtp_data_done_timeout=1200
- -o disable_dns_lookups=yes
- 127.0.0.1:10025 inet n - n - - smtpd
- -o local_recipient_maps =
- -o smtpd_restriction_classes=
- -o smtpd_client_restrictions=
- -o smtpd_helo_restrictions=
- -o smtpd_sender_restrictions=
- -o smtpd_recipient_restrictions=permit_mynetworks,reject
- -o strict_rfc821_envelopes=yes
- #================================================
- cyrus unix - n n - - pipe
- flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user}
- uucp unix - n n - - pipe
- flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail.postfix ($recipient)
- ifmail unix - n n - - pipe
- flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
- bsmtp unix - n n - - pipe
- flags=Fq. user=foo argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient
- relay unix - - n - - smtp
- trace unix - - n - 0 bounce
- verify unix - - n - 1 verify
- proxymap unix - - n - - proxymap
- anvil unix - - n - 1 anvil
- scache unix - - n - 1 scache
- discard unix - - n - - discard
- tlsmgr unix - - n 1000? 1 tlsmgr
Update the Post
Either update this post and resubmit it with changes, or make a new post.
You may also comment on this post.
Please note that information posted here will expire by default in one month. If you do not want it to expire, please set the expiry time above. If it is set to expire, web search engines will not be allowed to index it prior to it expiring. Items that are not marked to expire will be indexable by search engines. Be careful with your passwords. All illegal activities will be reported and any information will be handed over to the authorities, so be good.