[Postfixbuch-users] Config okay so?

[Andreas Gehrke]

Hallo,

falls jemand mal Zeit *gelächter* und Lust hat, kann jemand mal bitte 
einige Kommentare zu meiner config abgeben? Also z.B. ob die 
Grundsätzlich scheiße ist oder ob ich was wichtiges vergessen habe oder 
etwas total sinnlos ist.
Ich möchte nicht, dass mir jemand ne besser Config fertig präsentiert 
sondern nur, dass mich jemand mit der Nase auf dass stößt, was ich 
übersehe oder vielleicht auch unter-/ überschätze.


# postconf -n
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
broken_sasl_auth_clients = yes
config_directory = /etc/postfix
content_filter = lmtp-amavis:[127.0.0.1]:10024
delay_warning_time = 4h
inet_interfaces = all
local_recipient_maps = mysql:/etc/postfix/mysql-canonical.cf, $alias_maps
mailbox_command = /usr/sbin/cyrdeliver
mailbox_size_limit = 0
mailbox_transport = cyrus
message_size_limit = 0
mydestination = localhost.localdomain, localhost, 
mysql:/etc/postfix/mysql-mydestination.cf
myhostname = mail.alonso-heul-doch.de
mynetworks = 127.0.0.0/8, xxx.xxx.xxx.xxx/32
myorigin = /etc/mailname
notify_classes = resource, software, 2bounce, delay
recipient_delimiter = +
relay_domains = domain.tld
sender_canonical_maps = mysql:/etc/postfix/mysql-canonical.cf
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/smtp_auth
smtp_sasl_security_options = noanonymous
smtp_use_tls = yes
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
smtpd_recipient_restrictions =    permit_mynetworks,      
                                                     
permit_sasl_authenticated,     
                                                     
permit_tls_clientcerts,
                                                     
reject_invalid_helo_hostname,  
                                                     
reject_non_fqdn_helo_hostname,       
                                                     
reject_unauth_destination,     
                                                     
reject_unlisted_recipient,     
                                                     
reject_non_fqdn_recipient,     
                                                     
reject_unknown_recipient_domain,
                                                     reject_non_fqdn_sender,
                                                     
reject_unknown_sender_domain,
                                                     
reject_invalid_hostname,
                                                     
reject_non_fqdn_hostname,
                                                     
reject_unauth_pipelining,      
                                                     reject_rbl_client 
zen.spamhaus.org,
                                                     reject_rbl_client 
dnsbl.njabl.org,     
                                                     
check_policy_service inet:127.0.0.1:12525,     
                                                     
check_policy_service inet:127.0.0.1:60000
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
smtpd_tls_CAfile = /etc/postfix/mailserver.cert
smtpd_tls_auth_only = no
smtpd_tls_cert_file = /etc/postfix/mailserver.cert
smtpd_tls_key_file = /etc/postfix/mailserver.key
smtpd_use_tls = yes
strict_rfc821_envelopes = yes
virtual_alias_maps = mysql:/etc/postfix/mysql-virtual.cf

Vielen Dank!
Andy