Skip to content

Commit d5e4e94

Browse files
committed
mail: disable chroot
postfix IRC channel don't recommend it
1 parent caabd52 commit d5e4e94

File tree

1 file changed

+25
-25
lines changed

1 file changed

+25
-25
lines changed

mail/files/master.cf

Lines changed: 25 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -9,11 +9,11 @@
99
# service type private unpriv chroot wakeup maxproc command + args
1010
# (yes) (yes) (no) (never) (100)
1111
# ==========================================================================
12-
smtp inet n - y - 1 postscreen
13-
smtpd pass - - y - - smtpd
14-
#dnsblog unix - - y - 0 dnsblog
15-
#tlsproxy unix - - y - 0 tlsproxy
16-
#submission inet n - y - - smtpd
12+
smtp inet n - n - 1 postscreen
13+
smtpd pass - - n - - smtpd
14+
#dnsblog unix - - n - 0 dnsblog
15+
#tlsproxy unix - - n - 0 tlsproxy
16+
#submission inet n - n - - smtpd
1717
# -o syslog_name=postfix/submission
1818
# -o smtpd_tls_security_level=encrypt
1919
# -o smtpd_sasl_auth_enable=yes
@@ -25,7 +25,7 @@ smtpd pass - - y - - smtpd
2525
# -o smtpd_recipient_restrictions=
2626
# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject
2727
# -o milter_macro_daemon_name=ORIGINATING
28-
#smtps inet n - y - - smtpd
28+
#smtps inet n - n - - smtpd
2929
# -o syslog_name=postfix/smtps
3030
# -o smtpd_tls_wrappermode=yes
3131
# -o smtpd_sasl_auth_enable=yes
@@ -36,33 +36,33 @@ smtpd pass - - y - - smtpd
3636
# -o smtpd_recipient_restrictions=
3737
# -o smtpd_relay_restrictions=permit_sasl_authenticated,reject
3838
# -o milter_macro_daemon_name=ORIGINATING
39-
#628 inet n - y - - qmqpd
40-
pickup unix n - y 60 1 pickup
41-
cleanup unix n - y - 0 cleanup
39+
#628 inet n - n - - qmqpd
40+
pickup unix n - n 60 1 pickup
41+
cleanup unix n - n - 0 cleanup
4242
qmgr unix n - n 300 1 qmgr
4343
#qmgr unix n - n 300 1 oqmgr
44-
tlsmgr unix - - y 1000? 1 tlsmgr
45-
rewrite unix - - y - - trivial-rewrite
46-
bounce unix - - y - 0 bounce
47-
defer unix - - y - 0 bounce
48-
trace unix - - y - 0 bounce
49-
verify unix - - y - 1 verify
50-
flush unix n - y 1000? 0 flush
44+
tlsmgr unix - - n 1000? 1 tlsmgr
45+
rewrite unix - - n - - trivial-rewrite
46+
bounce unix - - n - 0 bounce
47+
defer unix - - n - 0 bounce
48+
trace unix - - n - 0 bounce
49+
verify unix - - n - 1 verify
50+
flush unix n - n 1000? 0 flush
5151
proxymap unix - - n - - proxymap
5252
proxywrite unix - - n - 1 proxymap
53-
smtp unix - - y - - smtp
54-
relay unix - - y - - smtp -o syslog_name=postfix/$service_name
53+
smtp unix - - n - - smtp
54+
relay unix - - n - - smtp -o syslog_name=postfix/$service_name
5555
# -o smtp_helo_timeout=5
5656
# -o smtp_connect_timeout=5
57-
showq unix n - y - - showq
58-
error unix - - y - - error
59-
retry unix - - y - - error
60-
discard unix - - y - - discard
57+
showq unix n - n - - showq
58+
error unix - - n - - error
59+
retry unix - - n - - error
60+
discard unix - - n - - discard
6161
local unix - n n - - local
6262
virtual unix - n n - - virtual
63-
lmtp unix - - y - - lmtp
64-
anvil unix - - y - 1 anvil
65-
scache unix - - y - 1 scache
63+
lmtp unix - - n - - lmtp
64+
anvil unix - - n - 1 anvil
65+
scache unix - - n - 1 scache
6666
postlog unix-dgram n - n - 1 postlogd
6767
#
6868
# ====================================================================

0 commit comments

Comments
 (0)