virtual_mailbox_maps = proxy:ldap:/opt/zimbra/conf/ldap-vmm.cf
virtual_mailbox_domains = proxy:ldap:/opt/zimbra/conf/ldap-vmd.cf
virtual_alias_maps = proxy:ldap:/opt/zimbra/conf/ldap-vam.cf
virtual_alias_domains = proxy:ldap:/opt/zimbra/conf/ldap-vad.cf
virtual_transport = error
canonical_maps = proxy:ldap:/opt/zimbra/conf/ldap-canonical.cf
transport_maps = proxy:ldap:/opt/zimbra/conf/ldap-transport.cf
# If (email domain name == host name), we don't want $myhostname in
# mydestination for testing purposes.
mydestination = localhost
# Disable NIS which is in the default
alias_maps = lmdb:/etc/aliases
# for security...
allow_mail_to_commands =
allow_mail_to_files =
smtpd_helo_required = yes
smtpd_client_restrictions = reject_unauth_pipelining
smtpd_data_restrictions = reject_unauth_pipelining
smtpd_recipient_restrictions = check_client_access lmdb:/opt/zimbra/conf/postfix_blacklist, check_policy_service inet:localhost:10031, reject_non_fqdn_recipient, permit_sasl_authenticated, permit_mynetworks, reject_unlisted_recipient, reject_invalid_helo_hostname, reject_non_fqdn_sender, check_client_access lmdb:/opt/zimbra/conf/postfix_rbl_override, check_reverse_client_hostname_access pcre:/opt/zimbra/conf/fqrdns.pcre, permit
broken_sasl_auth_clients = yes
smtpd_use_tls = yes
smtpd_tls_cert_file = /opt/zimbra/conf/smtpd.crt
smtpd_tls_key_file = /opt/zimbra/conf/smtpd.key
smtpd_tls_loglevel = 1
smtputf8_enable = no
meta_directory = /opt/zimbra/common/conf
shlib_directory = no
sender_canonical_maps = 
postscreen_dnsbl_min_ttl = 60s
in_flow_delay = 1s
postscreen_dnsbl_whitelist_threshold = 0
postscreen_command_count_limit = 20
smtp_dns_support_level = enabled
smtpd_sasl_security_options = noanonymous
address_verify_positive_refresh_time = 12h
postscreen_pipelining_ttl = 30d
default_process_limit = 100
smtpd_tls_ask_ccert = no
smtpd_tls_ccert_verifydepth = 9
smtpd_error_sleep_time = 1s
lmtp_tls_security_level = may
smtp_tls_CApath = 
smtpd_reject_unlisted_sender = no
hopcount_limit = 50
address_verify_poll_delay = 3s
lmtp_host_lookup = native
lmtp_tls_loglevel = 0
smtpd_banner = $myhostname ESMTP $mail_name
lmtp_tls_ciphers = export
postscreen_greet_action = ignore
smtp_sasl_security_options = noplaintext,noanonymous
postscreen_blacklist_action = ignore
smtp_tls_ciphers = export
postscreen_pipelining_enable = no
delay_warning_time = 0h
bounce_queue_lifetime = 5d
smtpd_tls_auth_only = yes
local_header_rewrite_clients = permit_mynetworks,permit_sasl_authenticated
postscreen_watchdog_timeout = 10s
postscreen_access_list = permit_mynetworks
mailbox_size_limit = 0
notify_classes = resource, software
bounce_notice_recipient = postmaster
lmtp_tls_protocols = !SSLv2, !SSLv3
smtp_sasl_auth_enable = no
mynetworks = 127.0.0.0/8 10.0.0.0/8
message_size_limit = 51200000
smtpd_relay_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination
smtp_helo_name = $myhostname
address_verify_poll_count = ${stress?3}${stress:5}
maximal_queue_lifetime = 5d
postscreen_whitelist_interfaces = static:all
smtp_tls_loglevel = 0
myhostname = domain2
smtpd_sasl_auth_enable = no
postscreen_dnsbl_reply_map = 
virtual_alias_expansion_limit = 10000
postscreen_non_smtp_command_ttl = 30d
smtpd_client_port_logging = no
relayhost = 
postscreen_greet_ttl = 1d
smtp_sasl_password_maps = 
smtpd_tls_CAfile = 
smtpd_tls_security_level = may
postscreen_bare_newline_enable = no
import_environment = 
max_use = 100
milter_content_timeout = 300s
minimal_backoff_time = 300s
recipient_delimiter = 
unverified_recipient_defer_code = 250
postscreen_upstream_proxy_protocol = 
postscreen_non_smtp_command_action = drop
smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
postscreen_dnsbl_ttl = 1h
smtp_tls_mandatory_ciphers = medium
smtpd_sender_login_maps = 
lmtp_connection_cache_destinations = 
content_filter = smtp-amavis:[127.0.0.1]:10024
queue_run_delay = 300s
lmtp_tls_mandatory_ciphers = medium
smtp_generic_maps = 
milter_connect_timeout = 30s
milter_default_action = tempfail
address_verify_negative_refresh_time = 10m
lmtp_tls_exclude_ciphers = 
smtpd_end_of_data_restrictions = check_policy_service inet:localhost:10031
smtp_tls_security_level = may
smtpd_tls_mandatory_ciphers = medium
postscreen_non_smtp_command_enable = no
lmtp_tls_CAfile = 
lmtp_tls_mandatory_protocols = !SSLv2, !SSLv3
postscreen_bare_newline_action = ignore
postscreen_cache_retention_time = 7d
smtpd_milters = 
smtpd_sender_restrictions = check_sender_access lmdb:/opt/zimbra/postfix/conf/restricted_senders, check_policy_service inet:localhost:10031, check_sender_access regexp:/opt/zimbra/common/conf/tag_as_originating.re, permit_mynetworks, permit_sasl_authenticated, permit_tls_clientcerts, check_sender_access regexp:/opt/zimbra/common/conf/tag_as_foreign.re
smtp_tls_protocols = !SSLv2, !SSLv3
smtpd_sasl_tls_security_options = $smtpd_sasl_security_options
smtpd_tls_CApath = 
smtpd_soft_error_limit = 10
postscreen_dnsbl_action = ignore
postscreen_pipelining_action = enforce
smtp_transport_rate_delay = $default_transport_rate_delay
smtp_fallback_relay = 
lmtp_tls_CApath = 
smtp_cname_overrides_servername = no
postscreen_dnsbl_threshold = 1
postscreen_bare_newline_ttl = 30d
smtpd_proxy_timeout = 100s
smtpd_tls_dh1024_param_file = /opt/zimbra/conf/dhparam.pem
postscreen_cache_cleanup_interval = 12h
propagate_unmatched_extensions = canonical
smtp_sasl_mechanism_filter = 
milter_command_timeout = 30s
smtpd_client_auth_rate_limit = 0
non_smtpd_milters = 
smtpd_tls_ciphers = export
lmdb_map_size = 16777216
smtpd_sasl_authenticated_header = no
smtpd_hard_error_limit = 20
maximal_backoff_time = 4000s
smtp_tls_CAfile = 
smtpd_reject_unlisted_recipient = no
smtpd_tls_protocols = !SSLv2, !SSLv3
tls_append_default_CA = no
smtp_tls_dane_insecure_mx_policy = dane
smtp_tls_mandatory_protocols = 
postscreen_dnsbl_max_ttl = ${postscreen_dnsbl_ttl?{$postscreen_dnsbl_ttl}:{1}}h
smtpd_tls_received_header = no
always_add_missing_headers = yes
lmtp_connection_cache_time_limit = 4s
smtpd_tls_exclude_ciphers = 
smtpd_restriction_classes = local_only
local_only = check_recipient_access lmdb:/opt/zimbra/postfix/conf/local_domains, reject
postscreen_dnsbl_sites = b.barracudacentral.org=127.0.0.2*7 zen.spamhaus.org=127.0.0.[10;11]*8 zen.spamhaus.org=127.0.0.[4..7]*6 zen.spamhaus.org=127.0.0.3*4 zen.spamhaus.org=127.0.0.2*3