CentOS5$B$X$N%a!<%k4D6-9=C[(B (2007/11/01)

        IN      TXT     "v=spf1 ip4:$B%M%C%H%o!<%/(B/$B%^%9%/(B ip6:v6$B%M%C%H%o!<%/(B/$B%^%9%/(B ~all"

_domainkey              IN      TXT     "t=y; o=~;"
$B%;%l%/%?L>(B._domainkey    IN      TXT     "v=DKIM1; k=rsa; t=y; p=$B8x3+80(B"
_policy._domainkey      IN      TXT     "t=y; o=~"

smtpd_milters = unix:/var/milter/dkim-filter.socket
non_smtpd_milters = $smtpd_milters

  -o smtpd_milters=

$mydomain = '$B%I%a%$%sL>(B';
...
$sa_tag_level_deflt  = 0.0;
$sa_tag2_level_deflt = 13.0;
#$sa_kill_level_deflt = 6.9;
#$sa_dsn_cutoff_level = 10;
...
#$sa_spam_subject_tag = '***SPAM*** ';
...
$final_spam_destiny       = D_PASS;
...
@av_scanners = (
### http://www.clamav.net/
['ClamAV-clamd',
  \&ask_daemon, ["CONTSCAN {}\n", "/var/run/clamav/clamd.socket"],
  qr/\bOK$/, qr/\bFOUND$/,
  qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],
# NOTE: run clamd under the same user as amavisd, or run it under its own
#   uid such as clamav, add user clamav to the amavis group, and then add
#   AllowSupplementaryGroups to clamd.conf;
# NOTE: match socket name (LocalSocket) in clamav.conf to the socket name in
#   this entry; when running chrooted one may prefer socket "$MYHOME/clamd".
);

content_filter=smtp-amavis:[127.0.0.1]:10024

smtp-amavis
          unix  -       -       n       -       2       smtp
  -o smtp_data_done_timeout=1200
  -o smtp_send_xforwardommand=yes
  -o disable_dns_lookups=yes
  -o smtpd_milters=
127.0.0.1:10025
          inet  n       -       n       -       -       smtpd
  -o content_filter=
  -o local_recipient_maps=
  -o relay_recipient_maps=
  -o smtpd_restriction_classes=
  -o smtpd_client_restrictions=
  -o smtpd_helo_restrictions=
  -o smtpd_sender_restrictions=
  -o smtpd_recipient_restrictions=permit_mynetworks,reject
  -o mynetworks=127.0.0.0/8
  -o strict_rfc821_envelopes=yes
  -o smtpd_error_sleep_time=0
  -o smtpd_soft_error_limit=1001
  -o smtpd_hard_error_limit=1000
  -o smtpd_milters=

LocalSocket /var/run/clamav/clamd.socket
...
#TCPSocket 3310
...
#TCPAddr 127.0.0.1

loadplugin Mail::SpamAssassin::Plugin::TextCat
loadplugin Mail::SpamAssassin::Plugin::DomainKeys

loadplugin Mail::SpamAssassin::Plugin::DKIM

# Maildir
home_mailbox = Maildir/


# SMTP Auth
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = yes

smtpd_client_restrictions =
        permit_mynetworks,
        reject_non_fqdn_recipient,
        reject_unknown_recipient_domain,
        reject_rbl_client all.rbl.jp,
        permit

smtpd_sender_restrictions =
        permit_mynetworks,
        reject_non_fqdn_sender,
        reject_unknown_sender_domain,
        permit

smtpd_recipient_restrictions =
        permit_mynetworks,
        permit_sasl_authenticated,
        reject_non_fqdn_recipient,
        reject_unlisted_recipient,
        reject_unknown_recipient_domain,
        reject_unauth_destination,
        check_policy_service unix:private/spf,          # spf
        check_policy_service inet:127.0.0.1:10023,      # postgrey
        permit_auth_destination,
        reject

# TLS/SSL
smtpd_use_tls                           = yes
smtpd_tls_received_header               = yes
smtpd_tls_cert_file                     = /etc/pki/postfix/mail.crt
smtpd_tls_key_file                      = /etc/pki/postfix/mail.key
smtpd_tls_ask_ccert                     = no
smtpd_tls_session_cache_database        = btree:/etc/postfix/smtpd_scache

smtp_use_tls                            = yes
smtp_tls_cert_file                      = /etc/pki/postfix/mail.crt
smtp_tls_key_file                       = /etc/pki/postfix/mail.key
smtp_tls_ask_ccert                      = no
smtp_tls_session_cache_database         = btree:/etc/postfix/smtp_scache

#dkim
smtpd_milters = unix:/var/milter/dkim-filter.socket
non_smtpd_milters = $smtpd_milters

# amavis
content_filter=smtp-amavis:[127.0.0.1]:10024

# mailman
owner_request_special = no
recipient_delimiter = +

#
# SPF/SenderID (http://www.openspf.org/)
#
spf       unix  -       n       n       -       -       spawn
  user=nobody argv=/usr/libexec/postfix/postfix-policyd-spf.pl

#
# amavis
#
smtp-amavis
          unix  -       -       n       -       2       smtp
  -o smtp_data_done_timeout=1200
  -o smtp_send_xforwardommand=yes
  -o disable_dns_lookups=yes
  -o smtpd_milters=
127.0.0.1:10025
          inet  n       -       n       -       -       smtpd
  -o content_filter=
  -o local_recipient_maps=
  -o relay_recipient_maps=
  -o smtpd_restriction_classes=
  -o smtpd_client_restrictions=
  -o smtpd_helo_restrictions=
  -o smtpd_sender_restrictions=
  -o smtpd_recipient_restrictions=permit_mynetworks,reject
  -o mynetworks=127.0.0.0/8
  -o strict_rfc821_envelopes=yes
  -o smtpd_error_sleep_time=0
  -o smtpd_soft_error_limit=1001
  -o smtpd_hard_error_limit=1000
  -o smtpd_milters=

smtpd_tls_CAfile                        = /etc/postfix/certs/root.crt

smtp_tls_CAfile                         = /etc/postfix/certs/root.crt

... can't read SMFIC_HEADER reply packet header: Connection reset by peer
... milter-reject: END-OF-MESSAGE from $B%[%9%H(B[IP$B%"%I%l%9(B]: 4.7.1 Service unavailable - try again later; from=...

(snip)

#SOCKET=local:/var/milter/dkim-filter.socket
SOCKET=inet:10026

(snip)

start() {
    echo -n $"Starting dkim-filter: "
    daemon --user milter \
	"umask 117; $PROG -p $SOCKET -d $DOMAINLIST -k $KEY -l -P $PID -s $SELECTOR"
    RETVAL=$?
    echo
    [ $RETVAL -eq 0 ] && touch /var/lock/subsys/dkim-filter
    return $RETVAL
}

(snip)

stop() {
    echo -n $"Shutting down dkim-filter: "
    killproc $PROG
#   rm -f $SOCKET
    RETVAL=$?
    echo
    return $RETVAL
}

#dkim
#smtpd_milters = unix:/var/milter/dkim-filter.socket
smtpd_milters = inet:10026
non_smtpd_milters = $smtpd_milters

smtpd_milters = inet:$B%5!<%P%[%9%H(B:10026