user = postfix

password = password

hosts = localhost

dbname = mail

table = alias

select_field = goto

where_field = address

additional_conditions = and active = '1'

user = postfix

password = password

hosts = localhost

dbname = mail

table = domain

select_field = domain

where_field = domain

additional_conditions = and backupmx = '0' and active = '1'

user = postmaster

password = password

hosts = localhost

dbname = mail

table = mailbox

select_field = CONCAT (domain,'/',maildir)

where_field = username

additional_conditions = and active = '1'

# Postfix master process configuration file.  For details on the format
# of the file, see the Postfix master(5) manual page.
#
# ==========================================================================
# service type  private unpriv  chroot  wakeup  maxproc command + args
#               (yes)   (yes)   (yes)   (never) (100)
# ==========================================================================
smtp      inet  n       -       n       -       -       smtpd
#submission inet n      -       n       -       -       smtpd
#    -o smtpd_etrn_restrictions=reject
#    -o smtpd_client_restrictions=permit_sasl_authenticated,reject
#smtps    inet  n       -       n       -       -       smtpd
#  -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes
#submission   inet    n       -       n       -       -       smtpd
#  -o smtpd_etrn_restrictions=reject
#  -o smtpd_enforce_tls=yes -o smtpd_sasl_auth_enable=yes
#628      inet  n       -       n       -       -       qmqpd
pickup    fifo  n       -       n       60      1       pickup
cleanup   unix  n       -       n       -       0       cleanup
dovecot   unix  -       n       n       -       -       pipe
             flags=DRhu user=vmail:mail argv=/usr/libexec/dovecot/deliver -d $(recipient)
qmgr      fifo  n       -       n       300     1       qmgr
#qmgr     fifo  n       -       n       300     1       oqmgr
tlsmgr    unix  -       -       n       1000?   1       tlsmgr
rewrite   unix  -       -       n       -       -       trivial-rewrite
bounce    unix  -       -       n       -       0       bounce
defer     unix  -       -       n       -       0       bounce
trace     unix  -       -       n       -       0       bounce
verify    unix  -       -       n       -       1       verify
flush     unix  n       -       n       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
smtp      unix  -       -       n       -       -       smtp
# When relaying mail as backup MX, disable fallback_relay to avoid MX loops
relay     unix  -       -       n       -       -       smtp
    -o fallback_relay=
#       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq     unix  n       -       n       -       -       showq
error     unix  -       -       n       -       -       error
discard   unix  -       -       n       -       -       discard
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       n       -       -       lmtp
anvil     unix  -       -       n       -       1       anvil
scache      unix    -    -    n    -    1    scache
#
# ====================================================================
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# Many of the following services use the Postfix pipe(8) delivery
# agent.  See the pipe(8) man page for information about ${recipient}
# and other message envelope options.
# ====================================================================
#
# maildrop. See the Postfix MAILDROP_README file for details.
# Also specify in main.cf: maildrop_destination_recipient_limit=1
#
maildrop  unix  -       n       n       -       -       pipe
  flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}
#
# The Cyrus deliver program has changed incompatibly, multiple times.
#
old-cyrus unix  -       n       n       -       -       pipe
  flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user}
# Cyrus 2.1.5 (Amos Gouaux)
# Also specify in main.cf: cyrus_destination_recipient_limit=1
cyrus     unix  -       n       n       -       -       pipe
  user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user}
#
# See the Postfix UUCP_README file for configuration details.
#
uucp      unix  -       n       n       -       -       pipe
  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
#
# Other external delivery methods.
#
ifmail    unix  -       n       n       -       -       pipe
  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp     unix  -       n       n       -       -       pipe
  flags=Fq. user=foo argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient

Dec 27 13:56:43 fedora postfix/postfix-script[1291]: starting the Postfix mail system
Dec 27 13:56:43 fedora postfix/master[1296]: daemon started -- version 2.8.5, configuration /etc/postfix
Dec 27 13:58:21 fedora dovecot: master: Dovecot v2.0.15 starting up (core dumps disabled)
Dec 27 13:58:21 fedora dovecot: config: Warning: NOTE: You can get a new clean config file with: doveconf -n > dovecot-new.conf
Dec 27 13:58:21 fedora dovecot: config: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:132: add auth_ prefix to all settings inside auth {} and remove the auth {} section completely
Dec 27 13:58:21 fedora dovecot: config: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:134: passdb sql {} has been replaced by passdb { driver=sql }
Dec 27 13:58:21 fedora dovecot: config: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:138: userdb sql {} has been replaced by userdb { driver=sql }
Dec 27 13:58:23 fedora postfix/postfix-script[1307]: starting the Postfix mail system
Dec 27 13:58:23 fedora postfix/master[1309]: daemon started -- version 2.8.5, configuration /etc/postfix
Dec 27 15:22:52 fedora dovecot: master: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill)
Dec 27 15:22:52 fedora dovecot: log: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill)
Dec 27 15:22:52 fedora dovecot: master: Dovecot v2.0.15 starting up (core dumps disabled)
Dec 27 15:23:04 fedora postfix/postfix-script[1757]: stopping the Postfix mail system
Dec 27 15:23:04 fedora postfix/master[1309]: terminating on signal 15
Dec 27 15:23:04 fedora postfix/postfix-script[1836]: starting the Postfix mail system
Dec 27 15:23:04 fedora postfix/master[1837]: daemon started -- version 2.8.5, configuration /etc/postfix
Dec 27 15:24:33 fedora dovecot: master: Dovecot v2.0.15 starting up (core dumps disabled)
Dec 27 15:24:33 fedora dovecot: config: Warning: NOTE: You can get a new clean config file with: doveconf -n > dovecot-new.conf
Dec 27 15:24:33 fedora dovecot: config: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:132: add auth_ prefix to all settings inside auth {} and remove the auth {} section completely
Dec 27 15:24:33 fedora dovecot: config: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:134: passdb sql {} has been replaced by passdb { driver=sql }
Dec 27 15:24:33 fedora dovecot: config: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:138: userdb sql {} has been replaced by userdb { driver=sql }
Dec 27 15:24:35 fedora postfix/postfix-script[1274]: starting the Postfix mail system
Dec 27 15:24:35 fedora postfix/master[1279]: daemon started -- version 2.8.5, configuration /etc/postfix

## Dovecot configuration file

# If you're in a hurry, see [url]http://wiki2.dovecot.org/QuickConfiguration[/url]

# "doveconf -n" command gives a clean output of the changed settings. Use it
# instead of copy&pasting files when posting to the Dovecot mailing list.

# '#' character and everything after it is treated as comments. Extra spaces
# and tabs are ignored. If you want to use either of these explicitly, put the
# value inside quotes, eg.: key = "# char and trailing whitespace  "

# Default values are shown for each setting, it's not required to uncomment
# those. These are exceptions to this though: No sections (e.g. namespace {})
# or plugin settings are added by default, they're listed only as examples.
# Paths are also just examples with the real defaults being based on configure
# options. The paths listed here are for configure --prefix=/usr
# --sysconfdir=/etc --localstatedir=/var

# Protocols we want to be serving.
#protocols = imap pop3 lmtp
 protocols = pop3 imap
 disable_plaintext_auth = no

 # Каталог для хранения временных файлов

base_dir = /var/run/dovecot/

# Отключение команды LOGIN, соединения принимаются только через SSL/TLS

#disable_plaintext_auth = yes


# Перед выключением Dovecot master process останавливаем все IMAP- и POP3-процессы

#shutdown_clients = yes


# Время в журнале в формате strftime(3)

log_timestamp = "%Y-%m-%d %H:%M:%S "

login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c

syslog_facility = mail


# IP-адрес, с которого будут приниматься SSL-соединения (по умолчанию все)

#ssl_listen =


# Отключение поддержки SSL/TLS

#ssl_disable = no


# Ключи и сертификаты

#ssl_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem

#ssl_key_file = /etc/ssl/private/ssl-cert-snakeoil.key


# Пароль для доступа к файлу ключей и файл с сертификатом CA SSL (если требуются)

#ssl_key_password =

#ssl_ca_file = 

# Расположение почтовых ящиков пользователей (ранее default_mail_env setting)

# По умолчанию параметр пустой, и Dovecot пробует ящики самостоятельно.

mail_location = maildir:/var/mail/%u/Maildir:INDEX=/var/mail/%u


# Группы, позволяющие получить доступ к каталогам почтовых ящиков 

mail_access_groups = mail


# Полный доступ в пределах почтового ящика

mail_full_filesystem_access = yes


# Первый разрешенный UID, для того чтобы пользователи не могли регистрироваться как демоны или системные пользователи

first_valid_uid = 1150

last_valid_uid = 1150


# Маска для вновь создаваемых файлов

#umask = 0077


# Механизмы SASL-аутентификации

# auth default {

# возможны варианты: plain login digest-md5 cram-md5 ntlm rpa apop anonymous gssapi

#mechanisms = plain login


# SQL database

        auth_verbose = yes
        auth_debug = yes
        auth_debug_passwords = yes
        auth default {
             mechanisms = plain login
             passdb sql {
                args = /etc/dovecot/dovecot-mysql.conf
             }
             userdb sql {
                 args = /etc/dovecot/dovecot-mysql.conf
             }
        #     user = root
             socket listen {
             master {
                 path = /var/run/dovecot/auth-master
                 mode = 0660
                 user = vmail
                 group = mail
                }
                 client {
                 path = /var/spool/postfix/private/auth
                 mode = 0660
                 user = postfix
                 group = postdrop
                 }
            }
        }
        dict {
        }
        plugin {
        }


# If non-zero, run mail commands via this many connections to doveadm server,
# instead of running them directly in the same process.
#doveadm_worker_count = 0
# UNIX socket or host:port used for connecting to doveadm server
#doveadm_socket_path = doveadm-server

# Space separated list of environment variables that are preserved on Dovecot
# startup and passed down to all of its child processes. You can also give
# key=value pairs to always set specific settings.
#import_environment = TZ

##
## Dictionary server settings
##

# Dictionary can be used to store key=value lists. This is used by several
# plugins. The dictionary can be accessed either directly or though a
# dictionary server. The following dict block maps dictionary names to URIs
# when the server is used. These can then be referenced using URIs in format
# "proxy::<name>".

dict {
  #quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext
  #expire = sqlite:/etc/dovecot/dovecot-dict-sql.conf.ext
}

# Most of the actual configuration gets included below. The filenames are
# first sorted by their ASCII value and parsed in that order. The 00-prefixes
# in filenames are intended to make it easier to understand the ordering.
!include conf.d/*.conf

# A config file can also tried to be included without giving an error if
# it's not found:
!include_try local.conf

# Имя, домен и псевдонимы почтового узла

myhostname = mail.domain.ru

mydomain = domain.ru

alias_maps = hash:/etc/aliases

alias_database = hash:/etc/aliases

myorigin = $myhostname


# Список доменов, через которые будет осуществляться локальная доставка

mydestination = $mydomain

relay_domains = $mydestination

# Список сетей, которым разрешен relay; слушаем на всех интерфейсах (Обязательна ли эта строчка: mynetworks_style = subnet ????)

mynetworks_style = subnet

mynetworks = 127.0.0.0/8, 192.168.0.0/24, 192.168.2.0/24, 10.10.11.0/24

proxy_interfaces = ip

inet_interfaces = all

# Стандартные параметры

command_directory = /usr/sbin

daemon_directory = /usr/libexec/postfix

mail_owner = postfix

unknown_local_recipient_reject_code = 550

debug_peer_level = 2

debugger_command =
     PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
     xxgdb $daemon_directory/$process_name $process_id & sleep 5

sendmail_path = /usr/sbin/sendmail.postfix

newaliases_path = /usr/bin/newaliases.postfix

mailq_path = /usr/bin/mailq.postfix

setgid_group = postdrop

manpage_directory = /usr/share/man

sample_directory = /etc/postfix

sample_directory = /usr/share/doc/postfix-2.8.5/samples

readme_directory = /usr/share/doc/postfix-2.8.5/README_FILES

# Спам фильтр

header_checks = regexp:/etc/postfix/maps/header_checks

body_checks = regexp:/etc/postfix/maps/body_checks

strict_rfc821_envelopes = yes

disable_vrfy_command = yes

smtpd_delay_reject = yes

smtpd_helo_required = yes

smtpd_recipient_limit = 100

# Размеры письма и почтового ящика

body_checks_size_limit = 10485760

header_size_limit = 204800

bounce_size_limit = 50000

mailbox_size_limit = 0

message_size_limit = 104857600

# recipient_delimiter = +

# Доставка письма

maximal_queue_lifetime = 6h

minimal_backoff_time = 180s

queue_run_delay = 180s

maximal_backoff_time = 7200s

bounce_queue_lifetime = 6h

# Запрос для получения соответствия login : email

smtpd_sender_login_maps = pcre:/etc/postfix/maps/sender_login.pcre

# Для  клиентов Outlook

broken_sasl_auth_clients = yes

# Баннер, выдаваемый при подключении

smtpd_banner = $myhostname ESMTP server

# biff = no

# Формат почтового ящика, возможен вариант Mailbox

home_mailbox = Maildir/


# Каталоги для хранения почты и очереди Postfix

mail_spool_directory = /var/mail

queue_directory = /var/spool/postfix


# Генерация сообщения о задержке почты

delay_warning_time = 1h


# TLS-настройки (Стоит ли включать данную функцию??)

# smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem

# smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key

# smtpd_use_tls=yes

# smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache

# smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache


# Настройки SASL

# smtpd_sasl_auth_enable = yes

# smtpd_sasl_authenticated_header = yes

# smtpd_sasl_local_domain = $myhostname

# smtpd_sasl_exceptions_networks = $mynetworks


# Файл-сокет для обмена информацией с Dovecot;

# путь указывается относительно queue_directory

# smtpd_sasl_path = private/auth

# smtpd_sasl_security_options = noanonymous

# Используем тип dovecot

# smtpd_sasl_type = dovecot

dovecot_destination_recipient_limit = 1

# Подключаем к MySQL

virtual_alias_maps = mysql:/etc/postfix/maps/mysql_virtual_alias_maps.cf

virtual_gid_maps = static:12

virtual_mailbox_base = /var/mail

virtual_mailbox_domains = mysql:/etc/postfix/maps/mysql_virtual_domains_maps.cf

virtual_mailbox_maps = mysql:/etc/postfix/maps/mysql_virtual_mailbox_maps.cf

virtual_minimum_uid = 1150

virtual_transport = dovecot

virtual_uid_maps = static:1150

broken_sasl_auth_clients = yes

smtpd_recipient_restrictions =

 permit_mynetworks,

 permit_sasl_authenticated,

 reject_unauth_destination,

 reject_non_fqdn_recipient,

 reject_unverified_recipient,

 reject_rbl_client cbl.abuseat.org,

 reject_rbl_client dialups.mail-abuse.org,

 reject_rbl_client dull.ru