address_verify_sender = $double_bounce_sender
broken_sasl_auth_clients = yes
command_directory = /usr/local/sbin
config_directory = /etc/postfix
daemon_directory = /usr/local/libexec/postfix
data_directory = /var/postfix
debug_peer_level = 8
disable_vrfy_command = yes
double_bounce_sender = double-bounce
html_directory = /usr/local/share/doc/postfix/html
inet_interfaces = all
inet_protocols = all
mail_name = mx
mail_owner = _postfix
mail_spool_directory = /var/mail/
manpage_directory = /usr/local/man
message_size_limit = 22020096
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
mydomain = tsl-broker.com
myhostname = mx.tsl-broker.com
mynetworks = 127.0.0.0/8, 10.10.0.0/24, 192.168.0.0/24
myorigin = $mydomain
queue_directory = /var/spool/postfix
readme_directory = /usr/local/share/doc/postfix/read
sample_directory = /etc/postfix
setgid_group = _postdrop
smtp_tls_note_starttls_offer = yes
smtp_use_tls = yes
smtpd_banner = $mydomain ESMTP readysmtpd_client_restrictions = permit_mynetworks, check_client_access hash:/etc/postfix/client_access, check_dull_checks regexp:/etc/postfix/dul_checks, reject_rbl_client list.dsbl.org, reject_rbl_client bl.spamcop.net, reject_rbl_client cbl.abuseat.org, reject_rbl_client psbl.surriel.com, reject_rbl_client spamsources.fabel.dk, reject_rbl_client opm.blitzed.org, reject_rbl_client combined.njabl.org, reject_rbl_client dialup.balcklist.jippg.org, reject_rbl_client relays.mail-abuse.org, reject_rbl_client dnsbl.sorbs.net, reject_unknown_client, permit
smtpd_delay_reject = no
smtpd_helo_required = no
smtpd_helo_restrictions = reject_invalid_hostname, permit_mynetworks, check_helo_access hash:/etc/postfix/helo_access, regexp:/etc/postfix/helo_regexp, reject_non_fqdn_hostname, reject_unknown_hostname, permit
smtpd_recipient_restrictions = permit_sasl_authenticated, reject_unauth_pipelining, check_recipient_access hash:/etc/postfix/recipient_access, reject_non_fqdn_recipient, reject_non_fqdn_hostname, reject_non_fqdn_sender, reject_unknown_recipient_domain, permit_mynetworks, reject_maps_rbl, maps_rbl_domains = work.drbl.caravan.ru, dul.ru, relays.ordb.org, maps_rbl_reject_code = 550, smtpd_client_restrictions = reject_maps_rbl, reject_unauth_destination, permit
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = yes
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_path = private/auth
smtpd_sasl_security_options = noanonymous
smtpd_sasl_type = dovecot
smtpd_sender_restrictions = permit_sasl_authenticated, permit_mynetworks, check_sender_access regexp:/etc/postfix/sender_access, reject_non_fqdn_sender, reject_unknown_sender_domain, permit
smtpd_tls_cert_file = /etc/ssl/2/smtpd.crt
smtpd_tls_key_file = /etc/ssl/2/smtpd.key
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
strict_rfc821_envelopes = yes
tls_random_source = dev:/dev/urandom
unknown_address_reject_code = 450
unknown_client_reject_code = 421
unknown_hostname_reject_code = 450
unknown_local_recipient_reject_code = 550
unknown_relay_recipient_reject_code = 550
unknown_virtual_alias_reject_code = 550
unknown_virtual_mailbox_reject_code = 550