]> git.proxmox.com Git - pmg-docs.git/blame - pmg.conf.5-opts.adoc
run make update
[pmg-docs.git] / pmg.conf.5-opts.adoc
CommitLineData
f872534d
DM
1.Section 'admin'
2
f6fe5021 3`advfilter`: `<boolean>` ('default =' `0`)::
9fda36b0 4
40ce6cfd
SI
5Enable advanced filters for statistic.
6+
7If this is enabled, the receiver statistic are limited to active ones
8(receivers which also sent out mail in the 90 days before), and the contact
9statistic will not contain these active receivers.
9fda36b0 10
f225b3b4
DM
11`avast`: `<boolean>` ('default =' `0`)::
12
241ac83c 13Use Avast Virus Scanner (/usr/bin/scan). You need to buy and install 'Avast Core Security' before you can enable this feature.
f225b3b4
DM
14
15`clamav`: `<boolean>` ('default =' `1`)::
16
17Use ClamAV Virus Scanner. This is the default virus scanner and is enabled by default.
18
241ac83c
TL
19`custom_check`: `<boolean>` ('default =' `0`)::
20
21Use Custom Check Script. The script has to take the defined arguments and can return Virus findings or a Spamscore.
22
23`custom_check_path`: `^/([^/\0]+\/)+[^/\0]+$` ('default =' `/usr/local/bin/pmg-custom-check`)::
24
25Absolute Path to the Custom Check Script
26
f872534d
DM
27`dailyreport`: `<boolean>` ('default =' `1`)::
28
29Send daily reports.
30
f872534d
DM
31`demo`: `<boolean>` ('default =' `0`)::
32
33Demo mode - do not start SMTP filter.
34
d210277a
TL
35`dkim_selector`: `<string>` ::
36
37Default DKIM selector
38
39`dkim_sign`: `<boolean>` ('default =' `0`)::
40
41DKIM sign outbound mails with the configured Selector.
42
43`dkim_sign_all_mail`: `<boolean>` ('default =' `0`)::
44
45DKIM sign all outgoing mails irrespective of the Envelope From domain.
46
eff914dc
DM
47`email`: `<string>` ('default =' `admin@domain.tld`)::
48
49Administrator E-Mail address.
50
9fda36b0 51`http_proxy`: `http://.*` ::
f872534d 52
9fda36b0 53Specify external http proxy which is used for downloads (example: 'http://username:password@host:port/')
f872534d 54
a55e94a6
DM
55`statlifetime`: `<integer> (1 - N)` ('default =' `7`)::
56
57User Statistics Lifetime (days)
58
f872534d
DM
59.Section 'clamav'
60
61`archiveblockencrypted`: `<boolean>` ('default =' `0`)::
62
6a73cfb0 63Whether to mark encrypted archives and documents as heuristic virus match. A match does not necessarily result in an immediate block, it just raises the Spam Score by 'clamav_heuristic_score'.
f872534d
DM
64
65`archivemaxfiles`: `<integer> (0 - N)` ('default =' `1000`)::
66
67Number of files to be scanned within an archive, a document, or any other kind of container. Warning: disabling this limit or setting it too high may result in severe damage to the system.
68
69`archivemaxrec`: `<integer> (1 - N)` ('default =' `5`)::
70
71Nested archives are scanned recursively, e.g. if a ZIP archive contains a TAR file, all files within it will also be scanned. This options specifies how deeply the process should be continued. Warning: setting this limit too high may result in severe damage to the system.
72
73`archivemaxsize`: `<integer> (1000000 - N)` ('default =' `25000000`)::
74
6a73cfb0 75Files larger than this limit (in bytes) won't be scanned.
f872534d
DM
76
77`dbmirror`: `<string>` ('default =' `database.clamav.net`)::
78
79ClamAV database mirror server.
80
f872534d
DM
81`maxcccount`: `<integer> (0 - N)` ('default =' `0`)::
82
83This option sets the lowest number of Credit Card or Social Security numbers found in a file to generate a detect.
84
85`maxscansize`: `<integer> (1000000 - N)` ('default =' `100000000`)::
86
6a73cfb0 87Sets the maximum amount of data (in bytes) to be scanned for each input file.
f872534d 88
0362f73f 89`safebrowsing`: `<boolean>` ('default =' `0`)::
f245a28c 90
0362f73f 91Enables support for Google Safe Browsing. (deprecated option, will be ignored)
f245a28c 92
b4ec4bc2 93`scriptedupdates`: `<boolean>` ('default =' `1`)::
549cfb68
TL
94
95Enables ScriptedUpdates (incremental download of signatures)
96
f872534d
DM
97.Section 'mail'
98
99`banner`: `<string>` ('default =' `ESMTP Proxmox`)::
100
101ESMTP banner.
102
d210277a
TL
103`before_queue_filtering`: `<boolean>` ('default =' `0`)::
104
105Enable before queue filtering by pmg-smtp-filter
106
f872534d
DM
107`conn_count_limit`: `<integer> (0 - N)` ('default =' `50`)::
108
109How many simultaneous connections any client is allowed to make to this service. To disable this feature, specify a limit of 0.
110
111`conn_rate_limit`: `<integer> (0 - N)` ('default =' `0`)::
112
113The maximal number of connection attempts any client is allowed to make to this service per minute. To disable this feature, specify a limit of 0.
114
f872534d
DM
115`dnsbl_sites`: `<string>` ::
116
40ce6cfd 117Optional list of DNS white/blacklist domains (postfix option `postscreen_dnsbl_sites`).
f872534d 118
1ed9e770
DM
119`dnsbl_threshold`: `<integer> (0 - N)` ('default =' `1`)::
120
40ce6cfd 121The inclusive lower bound for blocking a remote SMTP client, based on its combined DNSBL score (postfix option `postscreen_dnsbl_threshold`).
1ed9e770 122
f872534d
DM
123`dwarning`: `<integer> (0 - N)` ('default =' `4`)::
124
40ce6cfd 125SMTP delay warning time (in hours). (postfix option `delay_warning_time`)
f872534d 126
4a46ced6 127`ext_port`: `<integer> (1 - 65535)` ('default =' `25`)::
eff914dc
DM
128
129SMTP port number for incoming mail (untrusted). This must be a different number than 'int_port'.
130
f872534d
DM
131`greylist`: `<boolean>` ('default =' `1`)::
132
549cfb68
TL
133Use Greylisting for IPv4.
134
135`greylist6`: `<boolean>` ('default =' `0`)::
136
137Use Greylisting for IPv6.
138
139`greylistmask4`: `<integer> (0 - 32)` ('default =' `24`)::
140
141Netmask to apply for greylisting IPv4 hosts
142
143`greylistmask6`: `<integer> (0 - 128)` ('default =' `64`)::
144
145Netmask to apply for greylisting IPv6 hosts
f872534d
DM
146
147`helotests`: `<boolean>` ('default =' `0`)::
148
40ce6cfd 149Use SMTP HELO tests. (postfix option `smtpd_helo_restrictions`)
f872534d
DM
150
151`hide_received`: `<boolean>` ('default =' `0`)::
152
153Hide received header in outgoing mails.
154
4a46ced6 155`int_port`: `<integer> (1 - 65535)` ('default =' `26`)::
eff914dc
DM
156
157SMTP port number for outgoing mail (trusted).
158
f6fe5021 159`max_filters`: `<integer> (3 - 40)` ('default =' `15`)::
f872534d
DM
160
161Maximum number of pmg-smtp-filter processes.
162
163`max_policy`: `<integer> (2 - 10)` ('default =' `5`)::
164
165Maximum number of pmgpolicy processes.
166
f6fe5021 167`max_smtpd_in`: `<integer> (3 - 100)` ('default =' `97`)::
f872534d
DM
168
169Maximum number of SMTP daemon processes (in).
170
f6fe5021 171`max_smtpd_out`: `<integer> (3 - 100)` ('default =' `97`)::
f872534d
DM
172
173Maximum number of SMTP daemon processes (out).
174
175`maxsize`: `<integer> (1024 - N)` ('default =' `10485760`)::
176
40ce6cfd 177Maximum email size. Larger mails are rejected. (postfix option `message_size_limit`)
f872534d
DM
178
179`message_rate_limit`: `<integer> (0 - N)` ('default =' `0`)::
180
181The maximal number of message delivery requests that any client is allowed to make to this service per minute.To disable this feature, specify a limit of 0.
182
d210277a
TL
183`ndr_on_block`: `<boolean>` ('default =' `0`)::
184
185Send out NDR when mail gets blocked
186
f872534d
DM
187`rejectunknown`: `<boolean>` ('default =' `0`)::
188
40ce6cfd 189Reject unknown clients. (postfix option `reject_unknown_client_hostname`)
f872534d
DM
190
191`rejectunknownsender`: `<boolean>` ('default =' `0`)::
192
40ce6cfd 193Reject unknown senders. (postfix option `reject_unknown_sender_domain`)
f872534d
DM
194
195`relay`: `<string>` ::
196
197The default mail delivery transport (incoming mails).
198
199`relaynomx`: `<boolean>` ('default =' `0`)::
200
6bd70b95 201Disable MX lookups for default relay (SMTP only, ignored for LMTP).
f872534d
DM
202
203`relayport`: `<integer> (1 - 65535)` ('default =' `25`)::
204
6bd70b95
TL
205SMTP/LMTP port number for relay host.
206
207`relayprotocol`: `<lmtp | smtp>` ('default =' `smtp`)::
208
209Transport protocol for relay host.
f872534d 210
eff914dc
DM
211`smarthost`: `<string>` ::
212
40ce6cfd 213When set, all outgoing mails are deliverd to the specified smarthost. (postfix option `default_transport`)
eff914dc 214
851283b1
DM
215`smarthostport`: `<integer> (1 - 65535)` ('default =' `25`)::
216
40ce6cfd 217SMTP port number for smarthost. (postfix option `default_transport`)
851283b1 218
8c308065
TL
219`smtputf8`: `<boolean>` ('default =' `1`)::
220
40ce6cfd 221Enable SMTPUTF8 support in Postfix and detection for locally generated mail (postfix option `smtputf8_enable`)
8c308065 222
f872534d
DM
223`spf`: `<boolean>` ('default =' `1`)::
224
225Use Sender Policy Framework.
226
227`tls`: `<boolean>` ('default =' `0`)::
228
eff914dc
DM
229Enable TLS.
230
231`tlsheader`: `<boolean>` ('default =' `0`)::
232
233Add TLS received header.
234
235`tlslog`: `<boolean>` ('default =' `0`)::
236
237Enable TLS Logging.
f872534d 238
eff914dc 239`verifyreceivers`: `<450 | 550>` ::
f872534d 240
40ce6cfd 241Enable receiver verification. The value spefifies the numerical reply code when the Postfix SMTP server rejects a recipient address. (postfix options `reject_unknown_recipient_domain`, `reject_unverified_recipient`, and `unverified_recipient_reject_code`)
f872534d
DM
242
243.Section 'spam'
244
245`bounce_score`: `<integer> (0 - 1000)` ('default =' `0`)::
246
247Additional score for bounce mails.
248
a18c67c0 249`clamav_heuristic_score`: `<integer> (0 - 1000)` ('default =' `3`)::
f872534d 250
0362f73f 251Score for ClamAV heuristics (Encrypted Archives/Documents, PhishingScanURLs, ...).
f872534d 252
8c308065
TL
253`extract_text`: `<boolean>` ('default =' `0`)::
254
255Extract text from attachments (doc, pdf, rtf, images) and scan for spam.
256
f872534d
DM
257`languages`: `(all|([a-z][a-z])+( ([a-z][a-z])+)*)` ('default =' `all`)::
258
259This option is used to specify which languages are considered OK for incoming mail.
260
a18c67c0 261`maxspamsize`: `<integer> (64 - N)` ('default =' `262144`)::
f872534d
DM
262
263Maximum size of spam messages in bytes.
264
265`rbl_checks`: `<boolean>` ('default =' `1`)::
266
267Enable real time blacklists (RBL) checks.
268
f6fe5021 269`use_awl`: `<boolean>` ('default =' `0`)::
f872534d
DM
270
271Use the Auto-Whitelist plugin.
272
f6fe5021 273`use_bayes`: `<boolean>` ('default =' `0`)::
f872534d
DM
274
275Whether to use the naive-Bayesian-style classifier.
276
f872534d
DM
277`use_razor`: `<boolean>` ('default =' `1`)::
278
279Whether to use Razor2, if it is available.
280
281`wl_bounce_relays`: `<string>` ::
282
283Whitelist legitimate bounce relays.
284
f245a28c
DM
285.Section 'spamquar'
286
287`allowhrefs`: `<boolean>` ('default =' `1`)::
288
289Allow to view hyperlinks.
290
291`authmode`: `<ldap | ldapticket | ticket>` ('default =' `ticket`)::
292
293Authentication mode to access the quarantine interface. Mode 'ticket' allows login using tickets sent with the daily spam report. Mode 'ldap' requires to login using an LDAP account. Finally, mode 'ldapticket' allows both ways.
294
f245a28c
DM
295`hostname`: `<string>` ::
296
b81b1f95 297Quarantine Host. Useful if you run a Cluster and want users to connect to a specific host.
f245a28c
DM
298
299`lifetime`: `<integer> (1 - N)` ('default =' `7`)::
300
301Quarantine life time (days)
302
303`mailfrom`: `<string>` ::
304
305Text for 'From' header in daily spam report mails.
306
b81b1f95
DM
307`port`: `<integer> (1 - 65535)` ('default =' `8006`)::
308
309Quarantine Port. Useful if you have a reverse proxy or port forwarding for the webinterface. Only used for the generated Spam report.
310
311`protocol`: `<http | https>` ('default =' `https`)::
312
313Quarantine Webinterface Protocol. Useful if you have a reverse proxy for the webinterface. Only used for the generated Spam report.
314
ab2b846b
TL
315`quarantinelink`: `<boolean>` ('default =' `0`)::
316
317Enables user self-service for Quarantine Links. Caution: this is accessible without authentication
318
d7cd791b 319`reportstyle`: `<custom | none | short | verbose>` ('default =' `verbose`)::
f245a28c
DM
320
321Spam report style.
322
323`viewimages`: `<boolean>` ('default =' `1`)::
324
325Allow to view images.
326
327.Section 'virusquar'
328
329`allowhrefs`: `<boolean>` ('default =' `1`)::
330
331Allow to view hyperlinks.
332
f245a28c
DM
333`lifetime`: `<integer> (1 - N)` ('default =' `7`)::
334
335Quarantine life time (days)
336
337`viewimages`: `<boolean>` ('default =' `1`)::
338
339Allow to view images.
340