[Dovecot] LMTP Setup/Design Help Request

[Jan Phillip Greimann]

(forgot to send to list)

Hi Matthias,

Here a litte bit of code snipplets how I configured dovecot 
authentication via relay domains. No user-handling in postfix exept 
relay domains and virtual alias map, user-handling over dovecot SASL/LMTP.

This is no complete configuration, no warranty that this works for you!

Greetings, Jan

------------------------------------------------------------

# /etc/dovecot/conf.d/10-master.conf

#

service auth {
   unix_listener auth-userdb {
     mode = 0600
     user = dovemail
     group = dovemail
   }

   unix_listener /var/spool/postfix/private/auth {
     mode = 0660
     # Assuming the default Postfix user and group
     user = postfix
     group = postfix
   }
### Also possible:
#  inet_listener {
#    port = 12345
#  }
}

service lmtp {
   unix_listener /var/spool/postfix/private/dovecot-lmtp {
     mode = 0660
     user = postfix
     group = postfix
   }
### Also possible:
#  inet_listener lmtp {
#    address = 192.168.0.123 127.0.0.1 ::1
#    port = 24
#  }
}

------------------------------------------------------------

# /etc/postfix/lmtp_domains

yourdomain.invalid lmtp:unix:private/dovecot-lmtp

------------------------------------------------------------

# /etc/postfix/main.cf

transport_maps = btree:/etc/postfix/lmtp_domains,[...]
relay_domains = btree:/etc/postfix/lmtp_domains,[...]

unverified_recipient_reject_code = 577

smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth

smtpd_recipient_restrictions =
# no dirty mails
         reject_non_fqdn_sender,
         reject_non_fqdn_recipient,
         reject_unknown_sender_domain,
         reject_unknown_recipient_domain,
# Authorized mailers
         permit_sasl_authenticated,
         permit_mynetworks,
# Policyd-Weight
         check_policy_service inet:127.0.0.1:12525,
# Dynamic check of relay-recipients
        reject_unverified_recipient,
#       permit_mx_backup,
         reject_unauth_destination,
         permit

------------------------------------------------------------