File: //proc/624551/root/etc/postfix/master.cf.bak.2025-10-31_1918
# === Postfix master.cf baseline (tanpa chroot, TLS OK) ===
# SMTP listener
smtp inet n - n - - smtpd
# Submission (587, STARTTLS wajib)
submission inet n - n - - smtpd
-o syslog_name=postfix/submission
-o smtpd_tls_security_level=encrypt
-o smtpd_sasl_auth_enable=yes
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
# SMTPS (465, TLS wrapper)
smtps inet n - n - - smtpd
-o syslog_name=postfix/smtps
-o smtpd_tls_wrappermode=yes
-o smtpd_sasl_auth_enable=yes
# Core daemons
pickup fifo n - n 60 1 pickup
cleanup unix n - n - 0 cleanup
qmgr fifo n - n 300 1 qmgr
# TLS helpers (WAJIB untuk TLS)
tlsmgr unix - - n - 1000 tlsmgr
tlsproxy unix - - n - 0 tlsproxy
# Transports & helpers
rewrite unix - - n - - trivial-rewrite
bounce unix - - n - 0 bounce
defer unix - - n - 0 bounce
trace unix - - n - 0 bounce
verify unix - - n - 1 verify
smtp unix - - n - - smtp
relay unix - - n - - smtp
showq unix n - n - - showq
error unix - - n - - error
retry unix - - n - - error
discard unix - - n - - discard
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - n - - lmtp
anvil unix - - n - 1 anvil
scache unix - - n - 1 scache
# --- Submission (587) STARTTLS ---
submission inet n - n - - smtpd
-o syslog_name=postfix/submission
-o smtpd_tls_security_level=encrypt
-o smtpd_sasl_auth_enable=yes
-o milter_macro_daemon_name=ORIGINATING
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
-o chroot=n
# --- SMTPS (465) TLS Wrapper ---
smtps inet n - n - - smtpd
-o syslog_name=postfix/smtps
-o smtpd_tls_wrappermode=yes
-o smtpd_sasl_auth_enable=yes
-o milter_macro_daemon_name=ORIGINATING
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
-o chroot=n
# --- Submission (587) STARTTLS ---
submission inet n - n - - smtpd
-o syslog_name=postfix/submission
-o smtpd_tls_security_level=encrypt
-o smtpd_sasl_auth_enable=yes
-o milter_macro_daemon_name=ORIGINATING
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
-o smtpd_milters=
-o non_smtpd_milters=
-o chroot=n
# --- SMTPS (465) TLS Wrapper ---
smtps inet n - n - - smtpd
-o syslog_name=postfix/smtps
-o smtpd_tls_wrappermode=yes
-o smtpd_sasl_auth_enable=yes
-o milter_macro_daemon_name=ORIGINATING
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
-o smtpd_milters=
-o non_smtpd_milters=
-o chroot=n
# --- Submission (587) STARTTLS ---
submission inet n - n - - smtpd
-o syslog_name=postfix/submission
-o smtpd_tls_security_level=encrypt
-o smtpd_sasl_auth_enable=yes
-o milter_macro_daemon_name=ORIGINATING
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
-o smtpd_milters=
-o non_smtpd_milters=
-o chroot=n
# --- SMTPS (465) TLS Wrapper ---
smtps inet n - n - - smtpd
-o syslog_name=postfix/smtps
-o smtpd_tls_wrappermode=yes
-o smtpd_sasl_auth_enable=yes
-o milter_macro_daemon_name=ORIGINATING
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
-o smtpd_milters=
-o non_smtpd_milters=
-o chroot=n
# --- Submission (587) STARTTLS ---
submission inet n - n - - smtpd
-o syslog_name=postfix/submission
-o smtpd_tls_security_level=encrypt
-o smtpd_sasl_auth_enable=yes
-o milter_macro_daemon_name=ORIGINATING
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
-o smtpd_milters=
-o non_smtpd_milters=
-o smtpd_proxy_filter=
-o chroot=n
# --- SMTPS (465) TLS Wrapper ---
smtps inet n - n - - smtpd
-o syslog_name=postfix/smtps
-o smtpd_tls_wrappermode=yes
-o smtpd_sasl_auth_enable=yes
-o milter_macro_daemon_name=ORIGINATING
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
-o smtpd_milters=
-o non_smtpd_milters=
-o smtpd_proxy_filter=
-o chroot=n
# --- Submission (587) STARTTLS (super-minimal) ---
submission inet n - n - - smtpd
-o syslog_name=postfix/submission
-o smtpd_tls_security_level=encrypt
-o smtpd_sasl_auth_enable=yes
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
-o smtpd_milters=
-o non_smtpd_milters=
-o smtpd_proxy_filter=
-o chroot=n
-o smtpd_delay_reject=no
-o strict_rfc821_envelopes=no
# --- SMTPS (465) TLS wrapper (super-minimal) ---
smtps inet n - n - - smtpd
-o syslog_name=postfix/smtps
-o smtpd_tls_wrappermode=yes
-o smtpd_sasl_auth_enable=yes
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
-o smtpd_milters=
-o non_smtpd_milters=
-o smtpd_proxy_filter=
-o chroot=n
-o smtpd_delay_reject=no
-o strict_rfc821_envelopes=no
# --- Submission (587) STARTTLS (minimal) ---
submission inet n - n - - smtpd
-o syslog_name=postfix/submission
-o smtpd_tls_security_level=encrypt
-o smtpd_sasl_auth_enable=yes
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
-o smtpd_milters=
-o non_smtpd_milters=
-o smtpd_proxy_filter=
-o chroot=n
# --- SMTPS (465) TLS wrapper (minimal) ---
smtps inet n - n - - smtpd
-o syslog_name=postfix/smtps
-o smtpd_tls_wrappermode=yes
-o smtpd_sasl_auth_enable=yes
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
-o smtpd_milters=
-o non_smtpd_milters=
-o smtpd_proxy_filter=
-o chroot=n
# --- Submission (587) STARTTLS (minimal & valid) ---
submission inet n - n - - smtpd
-o syslog_name=postfix/submission
-o smtpd_tls_security_level=encrypt
-o smtpd_sasl_auth_enable=yes
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
-o smtpd_milters=
-o non_smtpd_milters=
-o smtpd_proxy_filter=
# --- SMTPS (465) TLS wrapper (minimal & valid) ---
smtps inet n - n - - smtpd
-o syslog_name=postfix/smtps
-o smtpd_tls_wrappermode=yes
-o smtpd_sasl_auth_enable=yes
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
-o smtpd_milters=
-o non_smtpd_milters=
-o smtpd_proxy_filter=