biff = no
append_dot_mydomain = no
smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
smtpd_use_tls=yes
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache

home_mailbox = Maildir/

virtual_maps = hash:/etc/postfix/virtual
transport_maps = hash:/etc/postfix/transport

smtpd_banner = smtp

myhostname = xxxxx
mydomain = xxx
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
mydestination = $myhostname, router_rhenus, localhost.localdomain, localhost, 
relayhost = xxx
mynetworks = 127.0.0.0/8 10.224.34.0/24 10.232.129.0/25
mailbox_size_limit = 0
message_size_limit = 15000000
recipient_delimiter = +
inet_interfaces = all

smtpd_helo_required = yes
disable_vrfy_command = yes
allow_untrusted_routing = no

smtpd_client_restrictions =
	permit_mynetworks
	permit_sasl_authenticated
	check_client_access hash:/etc/postfix/client_access
	reject_unknown_client_hostname
smtpd_helo_restrictions =
	permit_mynetworks
	permit_sasl_authenticated
	reject_invalid_helo_hostname
	reject_unknown_helo_hostname
	reject_non_fqdn_helo_hostname
smtpd_sender_restrictions =
	permit_mynetworks
	permit_sasl_authenticated
	check_sender_access hash:/etc/postfix/sender_access
	reject_non_fqdn_sender
#	reject_unknown_sender_domain
smtpd_recipient_restrictions =
	permit_mynetworks
	permit_sasl_authenticated
	reject_non_fqdn_recipient
	reject_unknown_recipient_domain
	reject_unauth_pipelining
	reject_unauth_destination
	reject_rhsbl_sender dsn.rfc-ignorant.org
	reject_rbl_client zen.spamhaus.org
	reject_rbl_client dnsbl.sorbs.net
	reject_rbl_client bl.spamcop.net
	reject_rbl_client combined.njabl.org
#	check_policy_service inet:127.0.0.1:60000 # pozastavene, antispam by mali robit nemci na relay
	permit
#smtpd_data_restrictions =

smtpd_sasl_auth_enable	    = yes
#smtpd_sasl_security_options = noanonymous,noplaintext
#smtpd_sasl_application_name = smtpd
#smtpd_sasl_local_domain     = $mydomain
#broken_sasl_auth_clients    = no

#smtp_sasl_auth_enable   = yes
#smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd

access_map_reject_code = 550
invalid_hostname_reject_code = 501
maps_rbl_reject_code = 550
reject_code = 550
relay_domains_reject_code = 550
unknown_address_reject_code = 450
unknown_client_reject_code = 450
unknown_hostname_reject_code = 450
content_filter = scan:127.0.0.1:10025
receive_override_options = no_address_mappings