3 `advfilter`: `<boolean>` ('default =' `0`)::
5 Enable advanced filters for statistic.
7 If this is enabled, the receiver statistic are limited to active ones
8 (receivers which also sent out mail in the 90 days before), and the contact
9 statistic will not contain these active receivers.
11 `avast`: `<boolean>` ('default =' `0`)::
13 Use Avast Virus Scanner (/usr/bin/scan). You need to buy and install 'Avast Core Security' before you can enable this feature.
15 `clamav`: `<boolean>` ('default =' `1`)::
17 Use ClamAV Virus Scanner. This is the default virus scanner and is enabled by default.
19 `custom_check`: `<boolean>` ('default =' `0`)::
21 Use Custom Check Script. The script has to take the defined arguments and can return Virus findings or a Spamscore.
23 `custom_check_path`: `^/([^/\0]+\/)+[^/\0]+$` ('default =' `/usr/local/bin/pmg-custom-check`)::
25 Absolute Path to the Custom Check Script
27 `dailyreport`: `<boolean>` ('default =' `1`)::
31 `demo`: `<boolean>` ('default =' `0`)::
33 Demo mode - do not start SMTP filter.
35 `dkim-use-domain`: `<envelope | header>` ('default =' `envelope`)::
37 Whether to sign using the address from the header or the envelope.
39 `dkim_selector`: `<string>` ::
43 `dkim_sign`: `<boolean>` ('default =' `0`)::
45 DKIM sign outbound mails with the configured Selector.
47 `dkim_sign_all_mail`: `<boolean>` ('default =' `0`)::
49 DKIM sign all outgoing mails irrespective of the Envelope From domain.
51 `email`: `<string>` ('default =' `admin@domain.tld`)::
53 Administrator E-Mail address.
55 `http_proxy`: `http://.*` ::
57 Specify external http proxy which is used for downloads (example: 'http://username:password@host:port/')
59 `statlifetime`: `<integer> (1 - N)` ('default =' `7`)::
61 User Statistics Lifetime (days)
65 `archiveblockencrypted`: `<boolean>` ('default =' `0`)::
67 Whether to mark encrypted archives and documents as heuristic virus match. A match does not necessarily result in an immediate block, it just raises the Spam Score by 'clamav_heuristic_score'.
69 `archivemaxfiles`: `<integer> (0 - N)` ('default =' `1000`)::
71 Number of files to be scanned within an archive, a document, or any other kind of container. Warning: disabling this limit or setting it too high may result in severe damage to the system.
73 `archivemaxrec`: `<integer> (1 - N)` ('default =' `5`)::
75 Nested archives are scanned recursively, e.g. if a ZIP archive contains a TAR file, all files within it will also be scanned. This options specifies how deeply the process should be continued. Warning: setting this limit too high may result in severe damage to the system.
77 `archivemaxsize`: `<integer> (1000000 - N)` ('default =' `25000000`)::
79 Files larger than this limit (in bytes) won't be scanned.
81 `dbmirror`: `<string>` ('default =' `database.clamav.net`)::
83 ClamAV database mirror server.
85 `maxcccount`: `<integer> (0 - N)` ('default =' `0`)::
87 This option sets the lowest number of Credit Card or Social Security numbers found in a file to generate a detect.
89 `maxscansize`: `<integer> (1000000 - N)` ('default =' `100000000`)::
91 Sets the maximum amount of data (in bytes) to be scanned for each input file.
93 `safebrowsing`: `<boolean>` ('default =' `0`)::
95 Enables support for Google Safe Browsing. (deprecated option, will be ignored)
97 `scriptedupdates`: `<boolean>` ('default =' `1`)::
99 Enables ScriptedUpdates (incremental download of signatures)
103 `banner`: `<string>` ('default =' `ESMTP Proxmox`)::
107 `before_queue_filtering`: `<boolean>` ('default =' `0`)::
109 Enable before queue filtering by pmg-smtp-filter
111 `conn_count_limit`: `<integer> (0 - N)` ('default =' `50`)::
113 How many simultaneous connections any client is allowed to make to this service. To disable this feature, specify a limit of 0.
115 `conn_rate_limit`: `<integer> (0 - N)` ('default =' `0`)::
117 The maximal number of connection attempts any client is allowed to make to this service per minute. To disable this feature, specify a limit of 0.
119 `dnsbl_sites`: `<string>` ::
121 Optional list of DNS white/blacklist domains (postfix option `postscreen_dnsbl_sites`).
123 `dnsbl_threshold`: `<integer> (0 - N)` ('default =' `1`)::
125 The inclusive lower bound for blocking a remote SMTP client, based on its combined DNSBL score (postfix option `postscreen_dnsbl_threshold`).
127 `dwarning`: `<integer> (0 - N)` ('default =' `4`)::
129 SMTP delay warning time (in hours). (postfix option `delay_warning_time`)
131 `ext_port`: `<integer> (1 - 65535)` ('default =' `25`)::
133 SMTP port number for incoming mail (untrusted). This must be a different number than 'int_port'.
135 `filter-timeout`: `<integer> (2 - 86400)` ('default =' `600`)::
137 Timeout for the processing of one mail (in seconds) (postfix option `smtpd_proxy_timeout` and `lmtp_data_done_timeout`)
139 `greylist`: `<boolean>` ('default =' `1`)::
141 Use Greylisting for IPv4.
143 `greylist6`: `<boolean>` ('default =' `0`)::
145 Use Greylisting for IPv6.
147 `greylistmask4`: `<integer> (0 - 32)` ('default =' `24`)::
149 Netmask to apply for greylisting IPv4 hosts
151 `greylistmask6`: `<integer> (0 - 128)` ('default =' `64`)::
153 Netmask to apply for greylisting IPv6 hosts
155 `helotests`: `<boolean>` ('default =' `0`)::
157 Use SMTP HELO tests. (postfix option `smtpd_helo_restrictions`)
159 `hide_received`: `<boolean>` ('default =' `0`)::
161 Hide received header in outgoing mails.
163 `int_port`: `<integer> (1 - 65535)` ('default =' `26`)::
165 SMTP port number for outgoing mail (trusted).
167 `max_filters`: `<integer> (3 - 40)` ('default =' `25`)::
169 Maximum number of pmg-smtp-filter processes.
171 `max_policy`: `<integer> (2 - 10)` ('default =' `5`)::
173 Maximum number of pmgpolicy processes.
175 `max_smtpd_in`: `<integer> (3 - 100)` ('default =' `100`)::
177 Maximum number of SMTP daemon processes (in).
179 `max_smtpd_out`: `<integer> (3 - 100)` ('default =' `100`)::
181 Maximum number of SMTP daemon processes (out).
183 `maxsize`: `<integer> (1024 - N)` ('default =' `10485760`)::
185 Maximum email size. Larger mails are rejected. (postfix option `message_size_limit`)
187 `message_rate_limit`: `<integer> (0 - N)` ('default =' `0`)::
189 The maximal number of message delivery requests that any client is allowed to make to this service per minute.To disable this feature, specify a limit of 0.
191 `ndr_on_block`: `<boolean>` ('default =' `0`)::
193 Send out NDR when mail gets blocked
195 `rejectunknown`: `<boolean>` ('default =' `0`)::
197 Reject unknown clients. (postfix option `reject_unknown_client_hostname`)
199 `rejectunknownsender`: `<boolean>` ('default =' `0`)::
201 Reject unknown senders. (postfix option `reject_unknown_sender_domain`)
203 `relay`: `<string>` ::
205 The default mail delivery transport (incoming mails).
207 `relaynomx`: `<boolean>` ('default =' `0`)::
209 Disable MX lookups for default relay (SMTP only, ignored for LMTP).
211 `relayport`: `<integer> (1 - 65535)` ('default =' `25`)::
213 SMTP/LMTP port number for relay host.
215 `relayprotocol`: `<lmtp | smtp>` ('default =' `smtp`)::
217 Transport protocol for relay host.
219 `smarthost`: `<string>` ::
221 When set, all outgoing mails are deliverd to the specified smarthost. (postfix option `default_transport`)
223 `smarthostport`: `<integer> (1 - 65535)` ('default =' `25`)::
225 SMTP port number for smarthost. (postfix option `default_transport`)
227 `smtputf8`: `<boolean>` ('default =' `1`)::
229 Enable SMTPUTF8 support in Postfix and detection for locally generated mail (postfix option `smtputf8_enable`)
231 `spf`: `<boolean>` ('default =' `1`)::
233 Use Sender Policy Framework.
235 `tls`: `<boolean>` ('default =' `0`)::
239 `tlsheader`: `<boolean>` ('default =' `0`)::
241 Add TLS received header.
243 `tlslog`: `<boolean>` ('default =' `0`)::
247 `verifyreceivers`: `<450 | 550>` ::
249 Enable receiver verification. The value specifies the numerical reply code when the Postfix SMTP server rejects a recipient address. (postfix options `reject_unknown_recipient_domain`, `reject_unverified_recipient`, and `unverified_recipient_reject_code`)
253 `bounce_score`: `<integer> (0 - 1000)` ('default =' `0`)::
255 Additional score for bounce mails.
257 `clamav_heuristic_score`: `<integer> (0 - 1000)` ('default =' `3`)::
259 Score for ClamAV heuristics (Encrypted Archives/Documents, PhishingScanURLs, ...).
261 `extract_text`: `<boolean>` ('default =' `0`)::
263 Extract text from attachments (doc, pdf, rtf, images) and scan for spam.
265 `languages`: `(all|([a-z][a-z])+( ([a-z][a-z])+)*)` ('default =' `all`)::
267 This option is used to specify which languages are considered OK for incoming mail.
269 `maxspamsize`: `<integer> (64 - N)` ('default =' `262144`)::
271 Maximum size of spam messages in bytes.
273 `rbl_checks`: `<boolean>` ('default =' `1`)::
275 Enable real time blacklists (RBL) checks.
277 `use_awl`: `<boolean>` ('default =' `0`)::
279 Use the Auto-Whitelist plugin.
281 `use_bayes`: `<boolean>` ('default =' `0`)::
283 Whether to use the naive-Bayesian-style classifier.
285 `use_razor`: `<boolean>` ('default =' `1`)::
287 Whether to use Razor2, if it is available.
289 `wl_bounce_relays`: `<string>` ::
291 Whitelist legitimate bounce relays.
295 `allowhrefs`: `<boolean>` ('default =' `1`)::
297 Allow to view hyperlinks.
299 `authmode`: `<ldap | ldapticket | ticket>` ('default =' `ticket`)::
301 Authentication mode to access the quarantine interface. Mode 'ticket' allows login using tickets sent with the daily spam report. Mode 'ldap' requires to login using an LDAP account. Finally, mode 'ldapticket' allows both ways.
303 `hostname`: `<string>` ::
305 Quarantine Host. Useful if you run a Cluster and want users to connect to a specific host.
307 `lifetime`: `<integer> (1 - N)` ('default =' `7`)::
309 Quarantine life time (days)
311 `mailfrom`: `<string>` ::
313 Text for 'From' header in daily spam report mails.
315 `port`: `<integer> (1 - 65535)` ('default =' `8006`)::
317 Quarantine Port. Useful if you have a reverse proxy or port forwarding for the webinterface. Only used for the generated Spam report.
319 `protocol`: `<http | https>` ('default =' `https`)::
321 Quarantine Webinterface Protocol. Useful if you have a reverse proxy for the webinterface. Only used for the generated Spam report.
323 `quarantinelink`: `<boolean>` ('default =' `0`)::
325 Enables user self-service for Quarantine Links. Caution: this is accessible without authentication
327 `reportstyle`: `<custom | none | short | verbose>` ('default =' `verbose`)::
331 `viewimages`: `<boolean>` ('default =' `1`)::
333 Allow to view images.
337 `allowhrefs`: `<boolean>` ('default =' `1`)::
339 Allow to view hyperlinks.
341 `lifetime`: `<integer> (1 - N)` ('default =' `7`)::
343 Quarantine life time (days)
345 `viewimages`: `<boolean>` ('default =' `1`)::
347 Allow to view images.