Blame SOURCES/postfix-3.5.0-config.patch

8c23a1
diff --git a/conf/main.cf b/conf/main.cf
e8f820
index 7af8bde..495e346 100644
8c23a1
--- a/conf/main.cf
8c23a1
+++ b/conf/main.cf
8c23a1
@@ -132,6 +132,10 @@ mail_owner = postfix
8c23a1
 #inet_interfaces = all
8c23a1
 #inet_interfaces = $myhostname
8c23a1
 #inet_interfaces = $myhostname, localhost
8c23a1
+inet_interfaces = localhost
8c23a1
+
8c23a1
+# Enable IPv4, and IPv6 if supported
8c23a1
+inet_protocols = all
8c23a1
 
8c23a1
 # The proxy_interfaces parameter specifies the network interface
8c23a1
 # addresses that this mail system receives mail on by way of a
8c23a1
@@ -176,7 +180,7 @@ mail_owner = postfix
8c23a1
 #
8c23a1
 # See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS".
8c23a1
 #
8c23a1
-#mydestination = $myhostname, localhost.$mydomain, localhost
8c23a1
+mydestination = $myhostname, localhost.$mydomain, localhost
8c23a1
 #mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
8c23a1
 #mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain,
8c23a1
 #	mail.$mydomain, www.$mydomain, ftp.$mydomain
8c23a1
@@ -398,7 +402,7 @@ unknown_local_recipient_reject_code = 550
8c23a1
 # "postfix reload" to eliminate the delay.
8c23a1
 #
8c23a1
 #alias_maps = dbm:/etc/aliases
8c23a1
-#alias_maps = hash:/etc/aliases
8c23a1
+alias_maps = hash:/etc/aliases
8c23a1
 #alias_maps = hash:/etc/aliases, nis:mail.aliases
8c23a1
 #alias_maps = netinfo:/aliases
8c23a1
 
8c23a1
@@ -409,7 +413,7 @@ unknown_local_recipient_reject_code = 550
8c23a1
 #
8c23a1
 #alias_database = dbm:/etc/aliases
8c23a1
 #alias_database = dbm:/etc/mail/aliases
8c23a1
-#alias_database = hash:/etc/aliases
8c23a1
+alias_database = hash:/etc/aliases
8c23a1
 #alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases
8c23a1
 
8c23a1
 # ADDRESS EXTENSIONS (e.g., user+foo)
8c23a1
@@ -479,7 +483,27 @@ unknown_local_recipient_reject_code = 550
8c23a1
 #
8c23a1
 # Cyrus IMAP over LMTP. Specify ``lmtpunix      cmd="lmtpd"
8c23a1
 # listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf.
8c23a1
-#mailbox_transport = lmtp:unix:/var/imap/socket/lmtp
8c23a1
+#mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp
8c23a1
+
8c23a1
+# If using the cyrus-imapd IMAP server deliver local mail to the IMAP
8c23a1
+# server using LMTP (Local Mail Transport Protocol), this is prefered
8c23a1
+# over the older cyrus deliver program by setting the
8c23a1
+# mailbox_transport as below:
8c23a1
+#
8c23a1
+# mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp
8c23a1
+#
8c23a1
+# The efficiency of LMTP delivery for cyrus-imapd can be enhanced via
8c23a1
+# these settings.
8c23a1
+#
8c23a1
+# local_destination_recipient_limit = 300
8c23a1
+# local_destination_concurrency_limit = 5
8c23a1
+#
8c23a1
+# Of course you should adjust these settings as appropriate for the
8c23a1
+# capacity of the hardware you are using. The recipient limit setting
8c23a1
+# can be used to take advantage of the single instance message store
8c23a1
+# capability of Cyrus. The concurrency limit can be used to control
8c23a1
+# how many simultaneous LMTP sessions will be permitted to the Cyrus
8c23a1
+# message store.
8c23a1
 #
8c23a1
 # Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and
8c23a1
 # subsequent line in master.cf.
8c23a1
@@ -499,8 +523,7 @@ unknown_local_recipient_reject_code = 550
8c23a1
 # the main.cf file, otherwise the SMTP server will reject mail for    
8c23a1
 # non-UNIX accounts with "User unknown in local recipient table".
8c23a1
 #
8c23a1
-#fallback_transport = lmtp:unix:/file/name
8c23a1
-#fallback_transport = cyrus
8c23a1
+#fallback_transport = lmtp:unix:/var/lib/imap/socket/lmtp
8c23a1
 #fallback_transport =
8c23a1
 
8c23a1
 # The luser_relay parameter specifies an optional destination address
8c23a1
@@ -673,4 +696,41 @@ sample_directory =
8c23a1
 # readme_directory: The location of the Postfix README files.
8c23a1
 #
8c23a1
 readme_directory =
8c23a1
-inet_protocols = ipv4
8c23a1
+
8c23a1
+# TLS CONFIGURATION
8c23a1
+#
8c23a1
+# Basic Postfix TLS configuration by default with self-signed certificate
8c23a1
+# for inbound SMTP and also opportunistic TLS for outbound SMTP.
8c23a1
+
8c23a1
+# The full pathname of a file with the Postfix SMTP server RSA certificate
8c23a1
+# in PEM format. Intermediate certificates should be included in general,
8c23a1
+# the server certificate first, then the issuing CA(s) (bottom-up order).
8c23a1
+#
8c23a1
+smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem
8c23a1
+
8c23a1
+# The full pathname of a file with the Postfix SMTP server RSA private key
8c23a1
+# in PEM format. The private key must be accessible without a pass-phrase,
8c23a1
+# i.e. it must not be encrypted.
8c23a1
+#
8c23a1
+smtpd_tls_key_file = /etc/pki/tls/private/postfix.key
8c23a1
+
8c23a1
+# Announce STARTTLS support to remote SMTP clients, but do not require that
8c23a1
+# clients use TLS encryption (opportunistic TLS inbound).
8c23a1
+#
8c23a1
+smtpd_tls_security_level = may
8c23a1
+
8c23a1
+# Directory with PEM format Certification Authority certificates that the
8c23a1
+# Postfix SMTP client uses to verify a remote SMTP server certificate.
8c23a1
+#
8c23a1
+smtp_tls_CApath = /etc/pki/tls/certs
8c23a1
+
8c23a1
+# The full pathname of a file containing CA certificates of root CAs
8c23a1
+# trusted to sign either remote SMTP server certificates or intermediate CA
8c23a1
+# certificates.
8c23a1
+#
8c23a1
+smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt
8c23a1
+
8c23a1
+# Use TLS if this is supported by the remote SMTP server, otherwise use
8c23a1
+# plaintext (opportunistic TLS outbound).
8c23a1
+#
8c23a1
+smtp_tls_security_level = may
8c23a1
diff --git a/conf/master.cf b/conf/master.cf
e8f820
index c0f2508..05c5d07 100644
8c23a1
--- a/conf/master.cf
8c23a1
+++ b/conf/master.cf
e8f820
@@ -98,14 +98,14 @@ postlog   unix-dgram n  -       n       -       1       postlogd
8c23a1
 # Also specify in main.cf: cyrus_destination_recipient_limit=1
8c23a1
 #
8c23a1
 #cyrus     unix  -       n       n       -       -       pipe
e8f820
-#  flags=DRX user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}
e8f820
+#  flags=DRX user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user}
8c23a1
 #
8c23a1
 # ====================================================================
8c23a1
 #
8c23a1
 # Old example of delivery via Cyrus.
8c23a1
 #
8c23a1
 #old-cyrus unix  -       n       n       -       -       pipe
8c23a1
-#  flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user}
8c23a1
+#  flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user}
8c23a1
 #
8c23a1
 # ====================================================================
8c23a1
 #