postfix how to, mali mail server

Code:

command_directory         = /usr/sbin
daemon_directory         = /usr/libexec/postfix
sendmail_path             = /usr/sbin/sendmail.postfix
newaliases_path             = /usr/bin/newaliases.postfix
mailq_path                 = /usr/bin/mailq.postfix
setgid_group             = postdrop
html_directory             = no
manpage_directory         = /usr/share/man
sample_directory             = /usr/share/doc/postfix-2.1.5/samples
readme_directory         = /usr/share/doc/postfix-2.1.5/README_FILES

mail_owner                 = postfix

myhostname             = neki.domen.com
myorigin                 = $mydomain
inet_interfaces             = all

##    Ovo je relay mail mydestination ne treba da se popuni
mydestination             = 
local_recipient_maps         =

#############################################################################################################################
## Dodato sa sajta: http://www.knowplace.org/pages...h_postfix.php#relay_recipients
#############################################################################################################################
local_transport             = error:local mail delivery is disabled
parent_domain_matches_subdomains     = debug_peer_list, smtpd_access_maps
relay_recipient_maps         = hash:/etc/postfix/maps/relay_recipients.map
show_user_unknown_table_name     = no
smtpd_recipient_restrictions     = permit_mynetworks, reject_unauth_destination ,    check_policy_service inet:127.0.0.1:10040
#############################################################################################################################
#        TEST
#    http://www.mailradar.com/openrelay/
#    http://www.mxtoolbox.com/SuperTool.aspx?action=mx%3adomen.com
#
#    Radi kako treba ali ne radi MRTG 
#
#############################################################################################################################

mynetworks             = 192.168.0.0/16 127.0.0.1/32 IP.200.115.124/32 IP.65.196.24/32 IP.200.115.12/32
relay_domains             = domen.com domen.rs domen.co.rs

#relayhost                 = [192.168.IP.210]
smtpd_banner             = $myhostname

message_size_limit         = 20480000
disable_vrfy_command         = yes
smtpd_helo_required         = yes
smtpd_delay_reject         = yes
strict_rfc821_envelopes     = yes
address_verify_negative_cache     = yes
address_verify_sender         = [email protected]
smtp_skip_4xx_greeting         = yes
smtp_skip_5xx_greeting         = yes
maximal_queue_lifetime         = 2d
delay_warning_time             = 2h
content_filter             = lmtp:127.0.0.1:10025    

header_checks             = regexp:/etc/postfix/restrikcije/mime_header_checks.maps
transport_maps             = hash:/etc/postfix/maps/transport.map
relocated_maps             = hash:/etc/postfix/maps/relocated.map
canonical_maps             = hash:/etc/postfix/maps/canonical.map
#virtual_alias_maps         = hash:/etc/postfix/maps/virtual.map
alias_maps                 = hash:/etc/aliases
alias_database             = hash:/etc/aliases
    

##    Ovo je postavljeno radi TLS/SASL autentikacije

smtpd_sasl_local_domain         =
smtpd_sasl_auth_enable         = yes
smtpd_sasl_security_options             = noanonymous
broken_sasl_auth_clients         = yes
smtpd_tls_auth_only             = no
smtp_use_tls                 = yes
smtpd_use_tls                     = yes
smtp_tls_note_starttls_offer             = yes
smtpd_tls_key_file             = /etc/postfix/ssl/smtpd.key
smtpd_tls_cert_file             = /etc/postfix/ssl/smtpd.crt
smtpd_tls_CAfile                    = /etc/postfix/ssl/cacert.pem
smtpd_tls_loglevel             = 0
smtpd_tls_received_header         = yes
smtpd_tls_session_cache_timeout     = 3600s
tls_random_source             = dev:/dev/urandom

smtpd_helo_restrictions         =     permit_mynetworks,
                        check_helo_access regexp:/etc/postfix/restrikcije/whitelist.maps,
#                        reject_unknown_helo_hostname,                        
                        reject_non_fqdn_hostname,
                        reject_invalid_hostname,
                         check_helo_access regexp:/etc/postfix/restrikcije/helo_rejections.maps,
#                        check_policy_service inet:127.0.0.1:12525,
                        check_policy_service inet:127.0.0.1:10040
#                        reject

smtpd_sender_restrictions         =     permit_mynetworks,
                        check_sender_access regexp:/etc/postfix/restrikcije/whitelist.maps
#                        reject_non_fqdn_sender,
#                        reject_unknown_sender_domain,
#                        reject

smtpd_etrn_restrictions         =     reject

smtpd_client_restrictions         =     permit_mynetworks,
                        check_client_access regexp:/etc/postfix/restrikcije/whitelist.maps,
                        check_client_access regexp:/etc/postfix/restrikcije/rejections.maps
                        

smtpd_data_restrictions         =    reject_unauth_pipelining,
                        reject_multi_recipient_bounce

masquerade_domains             = domen.com

#always_bcc                 = [email protected]

biff                     = no

smtpd_recipient_limit         = 10
#swap_bangpath             = no
append_dot_mydomain         = no
#append_at_myorigin         = no
allow_percent_hack         = no
allow_untrusted_routing     = no
hopcount_limit             = 20
in_flow_delay             = 5
smtpd_error_sleep_time     = 3s
smtpd_soft_error_limit         = 3
smtpd_hard_error_limit         = 5
smtpd_junk_command_limit     = 5

unknown_local_recipient_reject_code     = 450 

debug_peer_list             = 
debug_peer_level         = 2
debugger_command         =    PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
                         xxgdb $daemon_directory/$process_name $process_id & sleep 5

Code:

domen.com    smtp:192.168.IP.2
domen.rs    smtp:192.168.IP.123
domen.co.rs    smtp:192.IP.IP.111

Code:
# See /usr/share/postfix/main.cf.dist for a commented, more complete version


# Debian specific:  Specifying a file name will cause the first
# line of that file to be used as the name.  The Debian default
# is /etc/mailname.
#myorigin = /etc/mailname


smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no

# appending .domain is the MUA's job.
append_dot_mydomain = no

# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h

readme_directory = no

# TLS parameters
smtpd_tls_cert_file = /etc/ssl/certs/iRedMail_CA.pem
smtpd_tls_key_file = /etc/ssl/private/iRedMail.key
smtpd_use_tls=yes
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache

# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.

myhostname = freeland.brokenbyte.org
alias_maps = hash:/etc/postfix/aliases
alias_database = hash:/etc/postfix/aliases
myorigin = freeland.brokenbyte.org
#mydestination = $myhostname, localhost, localhost.localdomain, localhost.$myhostname
relayhost = 
mynetworks = 127.0.0.0/8
mailbox_command = /usr/lib/dovecot/deliver
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
virtual_alias_domains = 
mydomain = brokenbyte.org
inet_protocols = ipv4
mynetworks_style = subnet
smtpd_data_restrictions = reject_unauth_pipelining
smtpd_reject_unlisted_recipient = yes
smtpd_sender_restrictions = permit_mynetworks, reject_sender_login_mismatch, permit_sasl_authenticated
delay_warning_time = 0h
policy_time_limit = 3600
maximal_queue_lifetime = 1d
bounce_queue_lifetime = 1d
proxy_read_maps = $canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions
smtp_data_init_timeout = 240s
smtp_data_xfer_timeout = 600s
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks,permit_sasl_authenticated, check_helo_access pcre:/etc/postfix/helo_access.pcre
queue_run_delay = 300s
minimal_backoff_time = 300s
maximal_backoff_time = 4000s
enable_original_recipient = no
disable_vrfy_command = yes
home_mailbox = Maildir/
allow_min_user = no
message_size_limit = 15728640
virtual_minimum_uid = 1001
virtual_uid_maps = static:1001
virtual_gid_maps = static:1001
virtual_mailbox_base = /var/vmail
transport_maps = proxy:mysql:/etc/postfix/mysql/transport_maps_user.cf, proxy:mysql:/etc/postfix/mysql/transport_maps_domain.cf
virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql/virtual_mailbox_domains.cf
virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql/virtual_mailbox_maps.cf
virtual_alias_maps = proxy:mysql:/etc/postfix/mysql/virtual_alias_maps.cf, proxy:mysql:/etc/postfix/mysql/domain_alias_maps.cf, proxy:mysql:/etc/postfix/mysql/catchall_maps.cf, proxy:mysql:/etc/postfix/mysql/domain_alias_catchall_maps.cf
sender_bcc_maps = proxy:mysql:/etc/postfix/mysql/sender_bcc_maps_domain.cf, proxy:mysql:/etc/postfix/mysql/sender_bcc_maps_user.cf
recipient_bcc_maps = proxy:mysql:/etc/postfix/mysql/recipient_bcc_maps_domain.cf, proxy:mysql:/etc/postfix/mysql/recipient_bcc_maps_user.cf
relay_domains =  $mydestination
#relay_domains = smtp.maksnet.org ,  $mydestination , proxy:mysql:/etc/postfix/mysql/relay_domains.cf

smtpd_sender_login_maps = proxy:mysql:/etc/postfix/mysql/sender_login_maps.cf
smtpd_reject_unlisted_sender = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = 
broken_sasl_auth_clients = yes
smtpd_sasl_security_options = noanonymous
smtpd_sasl_authenticated_header = no
smtpd_recipient_restrictions = reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unlisted_recipient, check_policy_service inet:127.0.0.1:7777, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, reject_non_fqdn_helo_hostname, reject_invalid_helo_hostname, check_policy_service inet:127.0.0.1:10031
smtpd_tls_security_level = may
smtpd_enforce_tls = no
smtpd_tls_loglevel = 0
smtpd_tls_CAfile = /etc/ssl/certs/iRedMail_CA.pem
tls_random_source = dev:/dev/urandom
tls_daemon_random_source = dev:/dev/urandom
#
# Uncomment the following line to enable policyd sender throttle.
#
#smtpd_end_of_data_restrictions = check_policy_service inet:127.0.0.1:10032
virtual_transport = dovecot
dovecot_destination_recipient_limit = 1
smtpd_sasl_type = dovecot
smtpd_sasl_path = ./dovecot-auth
content_filter = smtp-amavis:[127.0.0.1]:10024
smtp-amavis_destination_recipient_limit = 1
#

Code:
Oct  3 10:06:01 freeland postfix/smtp[24103]: 35673A03A2: to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=1.5, delays=0.13/0.01/0.01/1.3, dsn=2.0.0, status=sent (250 $
Oct  3 10:06:01 freeland postfix/qmgr[23695]: 35673A03A2: removed
Oct  3 10:06:02 freeland postfix/smtp[24108]: 617E0A03AE: host mta5.am0.yahoodns.net[98.137.54.237] refused to talk to me: 553 5.7.1 [BL21] Connections will not be accepted from 212.2$
Oct  3 10:06:02 freeland postfix/smtp[24108]: 617E0A03AE: host mta6.am0.yahoodns.net[98.137.54.238] refused to talk to me: 553 5.7.1 [BL21] Connections will not be accepted from 212.2$
Oct  3 10:06:02 freeland postfix/smtp[24108]: 617E0A03AE: host mta7.am0.yahoodns.net[66.94.236.34] refused to talk to me: 553 5.7.1 [BL21] Connections will not be accepted from 212.20$
Oct  3 10:06:03 freeland postfix/smtp[24108]: 617E0A03AE: host mta6.am0.yahoodns.net[66.94.236.34] refused to talk to me: 553 5.7.1 [BL21] Connections will not be accepted from 212.20$
Oct  3 10:06:03 freeland postfix/smtp[24108]: 617E0A03AE: to=<[email protected]>, relay=mta7.am0.yahoodns.net[98.137.54.238]:25, delay=2.3, delays=0.07/0.02/2.2/0, dsn=4.7.1, status=$
Oct  3 10:06:51 freeland postfix/smtpd[24094]: connect from localhost[127.0.0.1]
Oct  3 10:06:51 freeland postfix/smtpd[24094]: 72AA7A037B: client=localhost[127.0.0.1], sasl_method=LOGIN, [email protected]
Oct  3 10:06:51 freeland postfix/cleanup[24099]: 72AA7A037B: message-id=<[email protected]>
Oct  3 10:06:51 freeland postfix/qmgr[23695]: 72AA7A037B: from=<[email protected]>, size=1915, nrcpt=1 (queue active)
Oct  3 10:06:51 freeland roundcube: User [email protected] [192.168.1.15]; Message for [email protected]; 250: 2.0.0 Ok: queued as 72AA7A037B
Oct  3 10:06:51 freeland postfix/smtpd[24094]: disconnect from localhost[127.0.0.1]
cerveni@dziti,com Oct  3 10:06:52 freeland postfix/smtpd[24107]: connect from localhost[127.0.0.1]
Oct  3 10:06:52 freeland postfix/smtpd[24107]: 8868EA03B0: client=localhost[127.0.0.1]
Oct  3 10:06:52 freeland postfix/cleanup[24099]: 8868EA03B0: message-id=<[email protected]>
Oct  3 10:06:52 freeland postfix/qmgr[23695]: 8868EA03B0: from=<[email protected]>, size=2867, nrcpt=1 (queue active)
Oct  3 10:06:52 freeland postfix/smtpd[24107]: disconnect from localhost[127.0.0.1]
Oct  3 10:06:52 freeland amavis[1341]: (01341-12) Passed CLEAN, MYNETS/MYUSERS LOCAL [127.0.0.1] [127.0.0.1] <[email protected]> -> <[email protected]>, Message-ID: <a$

Code:

Poruka s greskom, kad sam crvenom poslao mail

<[email protected]>: host mx1.njegovmail.com[85.222.163.166] said: 554
    <212-200-205-68.dynamic.isp.telekom.rs[212.200.205.68]>: Client host
    rejected: SPAM check FQDN (in reply to RCPT TO command)

Code:


Oct  3 11:44:06 freeland postfix/qmgr[2510]: A9DCEA05DB: from=<[email protected]>, size=1549, nrcpt=1 (queue active)
Oct  3 11:44:06 freeland amavis[1346]: (01346-01) Passed CLEAN, MYNETS/MYUSERS LOCAL [127.0.0.1] [127.0.0.1] <[email protected]> -> <[email protected]>, Message-ID: <$
Oct  3 11:44:06 freeland postfix/smtp[2587]: 68FA5A058F: to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=2.7, delays=1.3/0.01/0.01/1.3, dsn=2.0.0, status=sent (250 2.0$
Oct  3 11:44:06 freeland postfix/qmgr[2510]: 68FA5A058F: removed
Oct  3 11:44:07 freeland postfix/smtp[2594]: A9DCEA05DB: to=<[email protected]>, relay=mx1.dziti.com[85.222.163.166]:25, delay=0.89, delays=0.08/0.01/0.65/0.15, dsn=5.0.0, status=boun$
Oct  3 11:44:07 freeland postfix/cleanup[2583]: A27C5A0604: message-id=<[email protected]>
Oct  3 11:44:07 freeland postfix/qmgr[2510]: A27C5A0604: from=<>, size=3760, nrcpt=1 (queue active)
Oct  3 11:44:07 freeland postfix/bounce[2596]: A9DCEA05DB: sender non-delivery notification: A27C5A0604
Oct  3 11:44:07 freeland postfix/qmgr[2510]: A9DCEA05DB: removed
Oct  3 11:44:08 freeland postfix/pipe[2597]: A27C5A0604: to=<[email protected]>, relay=dovecot, delay=0.71, delays=0.07/0.03/0/0.61, dsn=2.0.0, status=sent (delivered$
Oct  3 11:44:08 freeland postfix/qmgr[2510]: A27C5A0604: removed
Oct  3 11:44:18 freeland postfix/smtpd[2577]: connect from unknown[192.168.1.15]
Oct  3 11:44:18 freeland postfix/smtpd[2577]: NOQUEUE: reject: RCPT from unknown[192.168.1.15]: 553 5.7.1 <[email protected]>: Sender address rejected: not logged in;$
Oct  3 11:44:18 freeland postfix/smtpd[2577]: disconnect from unknown[192.168.1.15]