alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases, hash:/etc/postfix/user_maps
anvil_rate_time_unit = 3m
append_dot_mydomain = no
biff = no
command_directory = /usr/sbin
inet_interfaces = all
inet_protocols = all
local_recipient_maps = $alias_maps
mail_spool_directory = /var/maildirs
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 510000000
mailbox_transport =
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
masquerade_exceptions = root
message_size_limit = 81920000
mydestination = $myhostname, krl.owl.de
mydomain = owl.de
myhostname = klr.owl.de
mynetworks = hash:/etc/postfix/network_table
myorigin = /etc/mailname
newaliases_path = /usr/bin/newaliases
policyd-spf_time_limit = 3600
queue_directory = /var/spool/postfix
recipient_delimiter = +
relay_domains = $mydestination krl.owl.de
relayhost =
sender_canonical_maps = hash:/etc/postfix/sender_canonical
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtp_sasl_auth_enable = no
smtp_sasl_password_maps = hash:/etc/sasldb2
smtp_use_tls = yes
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
smtpd_client_auth_rate_limit = 5
smtpd_client_connection_count_limit = 5
smtpd_client_connection_rate_limit = 5
smtpd_client_event_limit_exceptions = static:all
smtpd_client_restrictions = permit_sasl_authenticated permit_mynetworks check_client_access hash:/etc/postfix/client check_sender_access hash:/etc/postfix/sender check_client_access regexp:/etc/postfix/client_restrictions reject_non_fqdn_sender reject_unknown_sender_domain reject_unknown_client
smtpd_error_sleep_time = 3s
smtpd_hard_error_limit = 8
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_sasl_authenticated permit_mynetworks regexp:/etc/postfix/helo_restrictions reject_unknown_hostname reject_invalid_hostname reject_non_fqdn_sender reject_unknown_client
smtpd_relay_restrictions = permit_sasl_authenticated, permit_mynetworks check_sender_access hash:/etc/postfix/relay reject_unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = klr.owl.de
smtpd_sasl_security_options = noanonymous
smtpd_sender_restrictions = permit_sasl_authenticated, permit_mynetworks, check_sender_access hash:/etc/postfix/access-neu, check_sender_access hash:/etc/postfix/client, check_sender_access regexp:/etc/postfix/client_restrictions, reject_unknown_sender_domain, reject_invalid_hostname, reject_non_fqdn_sender, reject_unauth_destination, check_policy_service unix:private/policyd-spf,
smtpd_soft_error_limit = 5
smtpd_tls_cert_file = /etc/letsencrypt/live/klr.owl.de/fullchain.pem
smtpd_tls_key_file = /etc/letsencrypt/live/klr.owl.de/privkey.pem
smtpd_use_tls = yes
strict_rfc821_envelopes = no
transport_maps = hash:/etc/postfix/transport
unknown_local_recipient_reject_code = 550