myhostname = smtp.system-linux.net
mydestination = $myhostname, localhost.$mydomain, $mydomain
virtual_alias_domains = domain1, domain2, domain3
virtual_alias_maps = hash:/etc/postfix/virtual
canonical_maps=hash:/etc/postfix/canonical

#Dans /etc/postfix/virtual
user1@domain1	user1
user2@domain2	user2
user3@domain1	user3
user4@domain3	user4

#Dans /etc/postfix/canonical
user1	user1@domain1
user2	user2@domain2
user3	user3@domain1
user4	user4@domain3

smtp_tls_key_file = /etc/ssl/imap/ipop3sd.pem
smtp_tls_cert_file = /etc/ssl/imap/ipop3sd.pem
smtpd_tls_key_file = /etc/ssl/imap/ipop3sd.pem
smtpd_tls_cert_file = /etc/ssl/imap/ipop3sd.pem
smtpd_tls_CAfile = /etc/ssl/imap/ipop3sd.pem
smtp_tls_CAfile = /etc/ssl/imap/ipop3sd.pem
#
# c'est ici que l'on controle l'utilisation ou non de TLS
smtp_use_tls = yes
smtpd_use_tls = yes
smtpd_tls_loglevel = 1
smtp_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600
smtp_tls_session_cache_timeout = 3600

# Configuration TLS pour le client smtp
smtp_use_tls = yes
smtp_tls_dcert_file = /etc/ssl/imap/ipop3sd.pem
smtp_tls_dkey_file = /etc/ssl/imap/ipop3sd.pem
smtp_tls_CApath = /etc/ssl/imap/

# Configuration SASL via sasldb (/etc/sasldb) uniquement en TLS.
# Sinon le pass passe en clair et c'est mal !
#smtpd_tls_auth_only = yes
#smtpd_sasl_auth_enable = yes
#smtpd_sasl_local_domain = postfix
#smtpd_sasl_security_options = noanonymous
#enable_sasl_authentification = yes
#broken_sasl_auth_clients = yes

# Pour éviter certains vieux spammeurs.
disable_vrfy_command = yes

smtp	inet	n	-	y	-	-	smtpd -o content_filter=filter:
smtps	  inet	n	-	y	-	-	smtpd -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=no -o content_filter=filter:
#  -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes
submission	inet	n	-	n	-	-	smtpd -o smtpd_enforce_tls=yes -o smtpd_sasl_auth_enable=yes
#  -o smtpd_enforce_tls=yes -o smtpd_sasl_auth_enable=yes
#628      inet  n       -       n       -       -       qmqpd
pickup	fifo	n	-	y	60	1	pickup
cleanup	unix	n	-	y	-	0	cleanup
qmgr      fifo  n       -       n       300     1       qmgr
#qmgr	fifo	n	-	y	300	1	nqmgr
tlsmgr	  fifo	-	-	n	300	1	tlsmgr
rewrite	unix	-	-	y	-	-	trivial-rewrite
bounce	unix	-	-	y	-	0	bounce
defer	unix	-	-	y	-	0	bounce
flush	unix	n	-	y	1000?	0	flush
proxymap  unix  -       -       n       -       -       proxymap
smtp	unix	-	-	y	-	-	smtp
relay	unix	-	-	y	-	-	smtp
#       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq	unix	n	-	y	-	-	showq
error	unix	-	-	y	-	-	error
local     unix  -       n       n       -       -       local
virtual	unix	-	n	y	-	-	virtual
lmtp	unix	-	-	y	-	-	lmtp
#
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# maildrop. See the Postfix MAILDROP_README file for details.
#
maildrop  unix  -       n       n       -       -       pipe
  flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}
#
# The Cyrus deliver program has changed incompatibly, multiple times.
#
old-cyrus unix  -       n       n       -       -       pipe
  flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user}
# Cyrus 2.1.5 (Amos Gouaux)
cyrus     unix  -       n       n       -       -       pipe
  user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}
uucp      unix  -       n       n       -       -       pipe
  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
ifmail    unix  -       n       n       -       -       pipe
  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp     unix  -       n       n       -       -       pipe
  flags=Fq. user=foo argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient
filter unix - n n - - pipe flags=Rq user=mail
  argv=/usr/bin/amavis ${sender} -- ${recipient}