On 5/26/2012 9:18 PM, Carlos Raúl Laguna Mendoza wrote:
> Hello everyone i am setting up a server for internet but i has no
> experience with this setup so i would like
> some advice here what kind of considerations should i take.
>
...

> 'postconf -n'
> 
> alias_database = hash:/etc/aliases
> alias_maps = hash:/etc/aliases
> append_dot_mydomain = no
> biff = no
> config_directory = /etc/postfix
> inet_interfaces = all
> inet_protocols = ipv4
> mailbox_size_limit = 0

It's generally better to set an insanely large limit rather than no
limit at all.

> mydestination = $myhostname, localhost.$mydomain, localhost
> mydomain = jovenclub.cu
> myhostname = nscu.jovenclub.cu
> mynetworks = 127.0.0.0/8, 172.16.1.7
> myorigin = /etc/mailname
> recipient_delimiter = +
> relay_domains = jovenclub.cu *.jovenclub.cu cubava.cu *.cubava.cu
> ecured.cu *.ecured.cu

The relay_domains parameter is documented.
http://www.postfix.org/postconf.5.html#relay_domains
http://www.postfix.org/postconf.5.html#parent_domain_matches_subdomains
http://www.postfix.org/BASIC_CONFIGURATION_README.html#relay_to

With the default setting of parent_domain_matches_subdomains, a
domain will automatically match all subdomains.

> relayhost =
> smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
> smtpd_error_sleep_time = 60

Not a good idea, this will DOS yourself.  Leave this at the default 1s.

> smtpd_hard_error_limit = 10

This disables the built-in stress parameters.  Better:
  smtpd_hard_error_limit = ${stress?1}${stress:10}

> smtpd_recipient_restrictions = permit_mynetworks,   
> reject_non_fqdn_hostname,   
> reject_non_fqdn_sender,reject_non_fqdn_recipient,   
> reject_unknown_sender_domain,    reject_unauth_destination,   
> check_policy_service inet:127.0.0.1:60000    check_policy_service
> unix:private/policy-spf

OK.

> smtpd_soft_error_limit = 60

Why do you set this so high?  The default of 10 should be generous
enough.


> transport_maps = hash:/etc/postfix/transport
> 
> I added the spf and the postgrey deamon but no sure if this conf is ok
> Actually have no idea if postfix accept the declarations of
> subdamins like this
> relay_domains = jovenclub.cu *.jovenclub.cu cubava.cu *.cubava.cu
> ecured.cu *.ecured.cu some light ove here would be fine and any
> suggestion would be appreciated. Regards

http://www.postfix.org/documentation.html




  -- Noel Jones

Reply via email to