Miscellany

smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no
append_dot_mydomain = no
delay_warning_time = 4h
readme_directory = no
smtpd_tls_cert_file = /etc/dovecot/dovecot.cert.pem
smtpd_tls_key_file = /etc/dovecot/dovecot.key.pem
smtpd_tls_CAfile = /etc/dovecot/dovecot.ca.pem
smtpd_use_tls=yes
smtpd_tls_security_level = may
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
myhostname = ...
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination = ..., localhost
relayhost = ...
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
mailbox_command = /usr/bin/procmail-wrapper -o -a $DOMAIN -d $LOGNAME
mailbox_size_limit = 0
message_size_limit = 102400000
recipient_delimiter = +
inet_interfaces = all
virtual_alias_maps = hash:/etc/postfix/virtual
sender_bcc_maps = hash:/etc/postfix/bcc
home_mailbox = Maildir/
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtp_sasl_password_maps = hash:/etc/postfix/saslpasswd
smtp_always_send_ehlo = yes
broken_sasl_auth_clients = yes
allow_percent_hack = no
smtpd_delay_reject = yes
smtpd_helo_required = yes
disable_vrfy_command = yes
unverified_sender_reject_code = 550
policy_time_limit = 3600
policyd-spf_time_limit = 3600
address_verify_map = btree:/usr/lib/postfix/verify

smtpd_helo_restrictions =
     permit_sasl_authenticated,
     permit_mynetworks,
     check_helo_access hash:/etc/postfix/helo_access,
     permit

smtpd_sender_restrictions =
     permit_sasl_authenticated,
     permit_mynetworks,
     reject_non_fqdn_sender,
     reject_unknown_sender_domain,
     check_sender_access hash:/etc/postfix/sender_access,
     permit

smtpd_recipient_restrictions =
	permit_sasl_authenticated,
	permit_mynetworks,
	reject_non_fqdn_sender,
	reject_unknown_sender_domain,
	reject_non_fqdn_recipient,
	reject_unknown_recipient_domain,
	reject_non_fqdn_helo_hostname,
	reject_invalid_helo_hostname,
	reject_unauth_destination,
	check_recipient_access hash:/etc/postfix/recipient_access,
	check_policy_service unix:private/policyd-spf,
	check_policy_service inet:127.0.0.1:10023,
	reject_rbl_client zen.spamhaus.org,
	permit
	
smtpd_data_restrictions =
     reject_unauth_pipelining,
     permit

transport_maps = hash:/etc/postfix/transport
relay_domains = $mydestination, ...
milter_default_action = accept
milter_protocol = 2
smtpd_milters = inet:localhost:8891
non_smtpd_milters = inet:localhost:8891