smtpd_helo_required = yes
strict_rfc821_envelopes = yes
#disable_vrfy_command = yes
recipient_delimiter = +
smtpd_sasl_initialize = /etc/postfix/sasl/smtpd.conf
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
smtpd_recipient_restrictions =
   permit_sasl_authenticated,
   permit_mynetworks,
   reject_unauth_destination,
   reject_invalid_hostname,
   reject_non_fqdn_hostname,
   reject_non_fqdn_sender,
   reject_non_fqdn_recipient,
   reject_unknown_sender_domain,
   reject_unknown_recipient_domain,
   reject_unauth_pipelining,
   check_policy_service inet:127.0.0.1:60000,
   permit
# reject_invalid_helo_hostname in postfix > 2.3
# reject_non_fqdn_helo_hostname in postfix > 2.3
unknown_address_reject_code = 553
smtpd_data_restrictions =
   reject_unauth_pipelining,
   permit
smtpd_etrn_restrictions = reject
smtpd_tls_cert_file = /etc/ssl/certs/imapd.pem
smtpd_tls_key_file = /etc/ssl/private/imapd.pem
smtpd_tls_loglevel = 0
smtpd_use_tls = yes
#smtpd_tls_session_cache_database = sdbm:/var/cache/postfix/smtpd_scache
smtpd_tls_auth_only = yes
tls_random_source = dev:/dev/urandom