#
# $Id: sample-configure,v 1.1.1.1 2002/01/22 01:13:46 kos Exp $
#

primary_hostname = mx1.foo.net
qualify_domain = foo.net
forbid_domain_literals
never_users = root
host_lookup = 0.0.0.0/0
smtp_expn_hosts = localhost
rfc1413_query_timeout = 0s
#receiver_verify
ldap_default_servers = 127.0.0.1::389
auth_over_tls_hosts = *
tls_advertise_hosts = *
tls_certificate = /opt/certs/mx1.foo.net.pem
tls_privatekey = /opt/certs/mx1.foo.net.pem
log_queue_run_level = 10

host_accept_relay = ldapm;ldap::///mailSetting=host_accept_relay,o=top?mailSettingValue?base?(mailSettingValue=$key)
host_auth_accept_relay = *
local_domains = ldapm;ldap::///dc=$key,o=top
#local_domains_include_host_literals
relay_domains = ldapm;ldap::///mailSetting=relay_domains,o=top?mailSettingValue?sub?(mailSettingValue=$key)
sender_reject_recipients = ldapm;ldap::///mailSetting=recipient_blacklist,o=top?mailSettingValue?sub?(mailSettingValue=$key)
#daemon_smtp_port = 26

# Limits
remote_max_parallel = 20
queue_run_max = 20
smtp_accept_max = 200
smtp_accept_max_per_host = 100
smtp_accept_queue = 100
smtp_accept_queue_per_connection = 15
smtp_accept_reserve = 5
smtp_connect_backlog = 20
smtp_load_reserve = 15

end




#
# Transports
#

remote_smtp:
  driver = smtp

bsd_delivery:
  driver = appendfile
  file = /opt/mailspool/${lc:$domain}/${lc:$local_part}
  create_directory
  directory_mode = 0775
  mode = 0620
  delivery_date_add
  envelope_to_add
  return_path_add
  quota = ${lookup ldap{ldap:///uid=${local_part},dc=${domain},o=top?mailQuota}{$value}fail}

maildir_delivery:
  driver = appendfile
  maildir_format
  create_directory
  directory_mode = 0775
  mode = 0620
  directory = /opt/mailspool/${lc:$domain}/${lc:$local_part}/Maildir
  no_from_hack

address_pipe:
  driver = pipe
  return_output

address_file:
  driver = appendfile
  delivery_date_add
  envelope_to_add
  return_path_add

address_reply:
  driver = autoreply

end




#
# Directors
#
userforward:
  driver = forwardfile
  file = .forward
  no_verify
  no_expn
  check_ancestor
# filter
  file_transport = address_file
  pipe_transport = address_pipe
  reply_transport = address_reply

# XXX: the alias doesn't have a uid
aliases:
  driver = aliasfile
  search_type = ldap
  query = "ldap:///mailAlias=$local_part,dc=$domain,o=top?mailAliasedName"
  file_transport = address_file
  pipe_transport = address_pipe
  user = mail
  group = mail

localuser:
  driver = aliasfile
  transport = bsd_delivery
  search_type = ldap
  query = "ldap:///uid=$local_part,dc=$domain,o=top?uid"
  #user = ${lookup ldap{ldap:///uid=${local_part},dc=${domain},o=top?uidNumber}{$value}fail}
  #group = ${lookup ldap{ldap:///uid=${local_part},dc=${domain},o=top?gidNumber}{$value}fail}
  user = mail
  group = mail

defaultalias:
  driver = aliasfile
  search_type = ldap
  query = "ldap:///mailAlias=default,dc=$domain,o=top?mailAliasedName"
  file_transport = address_file
  pipe_transport = address_pipe
  user = mail
  group = mail

end



#
# Routers
#

lookuphost:
  driver = lookuphost
  transport = remote_smtp

end

#
# Retry
#

# Domain               Error       Retries
# ------               -----       -------

*                      *           F,2h,15m; G,16h,1h,1.5; F,4d,8h


end

#
# Rewrite
#
# There are no rewriting specifications in this default configuration file.

end

#
# Authentication
#
# netscape communicator
ptext:
  driver = plaintext
  public_name = PLAIN
  server_condition = ${if eq {${lookup ldap \
   {user="uid=${extract{1}{@}{$2}},dc=${extract{2}{@}{$2}},o=top" pass=$3 \
   ldap:///dc=${extract{2}{@}{$2}},o=top?uid?sub?(uid=${extract{1}{@}{$2}}) } \
   {$value}}} {${extract{1}{@}{$2}}} {yes}{no}}
  server_set_id = $2

# outlook express
ltext:
  driver = plaintext
  public_name = LOGIN
  server_prompts = "Username:: : Password::"
  server_condition = ${if eq {${lookup ldap \
   {user="uid=${extract{1}{@}{$1}},dc=${extract{2}{@}{$1}},o=top" pass=$2 \
   ldap:///dc=${extract{2}{@}{$1}},o=top?uid?sub?(uid=${extract{1}{@}{$1}}) } \
   {$value}}} {${extract{1}{@}{$1}}} {yes}{no}}
  server_set_id = $1