#
# Extensive documentation for this file and its settings is
# included in the docs directory of the Mail::Toaster
# distribution, in perl pod format (perldoc toaster-watcher.conf)
# and posted online at the following URL:
#
#   http://mail-toaster.org/docs/
#
# Many values require keyword parameters, pathnames, or a binary value
# binary values are either 0 or 1, 1 being yes, 0 being no
#
# Most elements in this file pertain to toaster_setup.pl and the
# toaster-watcher.pl script, both of which are run as root. Other
# settings needed by non-root scripts are in toaster.conf.
#
# A current copy of this file is posted on the Mail::Toaster web site:
# http://www.tnpi.net/internet/mail/toaster/etc/toaster-watcher.conf

######################################
#            TOASTER
######################################

toaster_version                    = 0               # ver, 0 = latest release
toaster_hostname                   = mail.example.com
toaster_admin_email                = postmaster@example.com
toaster_test_email                 = test@example.com
toaster_test_email_pass            = cHanGeMe

toaster_verbose                    = 0
supervise_rebuild_notice           = 1       # email admin when a run file is updated

system_config_dir                  = /usr/local/etc

toaster_prefix                     = /usr/local
toaster_src_dir                    = /usr/local/src
toaster_http_base                  = /usr/local/www
toaster_http_docs                  = /usr/local/www/toaster
toaster_cgi_bin                    = /usr/local/www/cgi-bin.toaster
toaster_tmp_dir                    = /tmp
toaster_watcher_log                = /var/log/mail/watcher.log

toaster_sf_mirror                  = downloads.sourceforge.net/project
toaster_dl_site                    = http://www.tnpi.net    # select a mirror
toaster_dl_url                     = /internet/mail/toaster

preserve_cgifiles                  = 0
toaster_apache_vhost               = 1

package_install_method             = ports     # packages | ports
                                     # if both options are supported, the setup
                                     # script will prefer the one you choose.


######################################
#        FreeBSD Specific
######################################

cvsup_server_preferred             = fastest         # fastest or a hostname
cvsup_server_country               = US
cvsup_supfile_ports                = portsnap        # portsnap or path to file
                                                     # ex: /etc/cvsup-ports
cvsup_supfile_sources              = cvsup-sources
toaster_pkg_site                   = ftp://ftp.freebsd.org
use_pkgng                          = 1               # Use the new package format pkgng see https://wiki.freebsd.org/pkgng


######################################
#           Programs
######################################

# You can pass the version number of some programs
# if you with to install a particular version
#    0  = do not install
#    1  = install
# port  = install from FreeBSD or Darwin ports
# other = install particular version
#
# Extra options are noted after the # where available. Selecting 1 is the most reliable
# and will install trying first via ports, then sources if the port install fails.

install_squirrelmail               = 1.4.22  # 0, ver, port
install_squirrelmail_sql           = 0       # use MySQL for user prefs and address book?
install_squirrelmail_sql_pass      = chAnge7his
install_lighttpd                   = 1
install_apache                     = 0       # 0, 1, 2, 21, 22
install_apache_etc                 = /usr/local/etc/apache22
install_apache_user                = www
install_apache_suexec              = 0
install_apache_proxy               = 0
install_apache_bdb                 = 0       # berkeley DB
install_cronolog                   = 1.6.2   # ver, port
install_phpmyadmin                 = 0       # 0, 1
install_mysql                      = 0       # 0, 1, 2, 3, 40, 41, 5, 51
install_mysqld                     = 0       # 0, 1
install_mysql_optimized            = 0
install_mysql_dir                  = /var/db/mysql
install_courier_imap               = port    # 0, ver, port
install_sqwebmail                  = 0       # 0, ver, port
install_dovecot                    = port    # 0, ver, port
install_gnupg                      = 1       # 0, port
install_qmail                      = 0       # 0, ver
install_netqmail                   = 1.05    # 0, ver
install_qmailadmin                 = 1.2.15  # 0, ver, port
install_autorespond                = 2.0.5   # 0, ver, port
install_daemontools                = 0.76    # ver, port
install_djbdns                     = 1.05    # ver, port
install_vpopmail                   = port    # ver, port
install_vqadmin                    = 0       # 0, ver, port
install_isoqlog                    = 0       # 0, ver, port
install_portupgrade                = 0
install_portaudit                  = 1
install_portmaster                 = 1
install_openldap_client            = 0
install_net_snmpd                  = 0       # 4, 5
install_ezmlm                      = 5.1.0   # 0, ver, port
install_ezmlm_cgi                  = 0
install_ezmlm_mysql                = 0
install_qmail_notify               = 0
install_aspell                     = 0
install_ispell                     = 1
install_quota_tools                = 0
install_roundcube                  = port    # 0, port
install_roundcube_db_pass          = To4st3dR0ndc@be
install_munin                      = port

# openssl
install_openssl                    = 1
openssl_ciphers                    = pci  # a list of OpenSSL ciphers, or one of the following:
                                          # high:    256-bit encryption
                                          # pci:     include only PCI compliant ciphers
                                          # medium:  128-bit or higher, secure as of 2009
                                          # default: (see 'openssl ciphers DEFAULT')
                                          # all:     (see 'openssl ciphers ALL')

######################################
#           Mail Filtering
######################################

install_mail_filtering             = 1
install_procmail                   = 0
install_maildrop                   = 1       # 0, 1, ver
install_spamassassin               = 1
install_spamassassin_flags         = -v -u spamd -H /var/spool/spamd -x # Add -q for per user SQL
install_spamassassin_sql           = 0       # use AWL, bayes, and per-user prefs from MySQL
install_spamassassin_dbuser        = spamassassin
install_spamassassin_dbpass        = assSPAMing
install_dspam                      = 0
install_simscan                    = 1.4.0   # 0, ver
install_qmailscanner               = 0       # 0, ver       (1.25  as of 04/08/05)
install_qmailscanner_stats         = 0       # 0, ver       (2.0.2 as of 02/02/05)
install_clamav                     = port    # 0, port, ver
install_clamav_user                = clamav  # qscand | clamav
install_pyzor                      = 0
install_razor                      = port    # 0, port, ver
install_bogofilter                 = 0
install_dcc                        = 0
install_ripmime                    = port    # 0, port, ver
install_qmail_deliverable          = 1

filtering_method                   = tcpserver  # smtp | tcpserver  # see docs for details
filtering_spamassassin_method      = site       # site | user | domain
filtering_maildrop_filter_file     = /usr/local/etc/mail/mailfilter
filtering_spama_discard_score      = 12      # discard messages above this score
filtering_report_spam_spamassassin = 1
filtering_report_spam_pyzor        = 0       # don't enable with report_spamassassin
filtering_verbose                  = 1


######################################
#           Qmail Settings
######################################

qmail_dir                          = /var/qmail
qmail_supervise                    = /var/qmail/supervise
qmail_service                      = /var/service
qmail_toaster_patch_version        = 3.1
qmail_smtp_reject_patch            = 1
qmail_mfcheck_enable               = 1
qmail_domainkeys                   = 0
qmail_tarpit_count                 = 50
qmail_tarpit_delay                 = 5
qmail_spf_behavior                 = 2
qmail_concurrencyremote            = 100     # don't crank this up unless you need to!
qmail_smtpd_auth_0.31              = 0       # leave this zero!
qmail_queue_extra                  = 0       # 0, 1
qmail_log_base                     = /var/log/mail
qmail_log_user                     = qmaill
qmail_log_group                    = qnofiles
qmail_mysql_include                = /usr/local/lib/mysql/libmysqlclient.a


######################################
#           Vpopmail
######################################

vpopmail_user                      = vpopmail
vpopmail_group                     = vchkpw
vpopmail_home_dir                  = /usr/local/vpopmail
vpopmail_learn_passwords           = 1
vpopmail_roaming_users             = 0
vpopmail_relay_clear_minutes       = 180
vpopmail_mysql                     = 0       # enables all mysql options
vpopmail_mysql_limits              = 0
vpopmail_mysql_replication         = 0
vpopmail_mysql_logging             = 0
vpopmail_mysql_repl_master         = localhost
vpopmail_mysql_repl_master_port    = 3306
vpopmail_mysql_repl_slave          = localhost
vpopmail_mysql_repl_slave_port     = 3306
vpopmail_mysql_database            = vpopmail
vpopmail_mysql_user                = vpopmail
vpopmail_mysql_pass                = supersecretword
vpopmail_auth_logging              = 1
vpopmail_logging                   = 1
vpopmail_logging_verbose           = 1
vpopmail_valias                    = 1
vpopmail_qmail_ext                 = 1
vpopmail_rebuild_tcpserver_file    = 0
vpopmail_ip_alias_domains          = 0
vpopmail_etc_passwd                = 0
vpopmail_domain_quotas             = 0
vpopmail_default_quota             = 100000000S,10000C  # deprecated in 5.4.0+
vpopmail_disable_many_domains      = 0
vpopmail_maildrop                  = 0
vpopmail_daemon                    = 0


#######################################
#           qmail-send                #
#######################################

# send_log_method - [ syslog | multilog | verbose | stats | disabled ]
# see smtpd_log_method for complete details
#
send_log_method                    = syslog
send_log_maxsize_bytes             = 100000     # make this > 5 minutes of logging
send_log_isoqlog                   = 1
send_mailbox_string                = ./Maildir/


#######################################
#           qmail-smtpd               #
#######################################

smtpd_daemon                       = qmail      # qmail, qpsmtpd
smtpd_listen_on_address            = all        # all, a hostname, or IP
smtpd_listen_on_port               = smtp       # smtp or a port number
smtpd_hostname                     = 0

# smtpd_hostname [ system | qmail | mail.example.com ]
#
#  system - will set to the systems hostname
#  qmail  - will set to contents of qmail/control/me
#  other  - anything else is considered to be a hostname
##

smtpd_max_memory_per_connection    = 50         # in megabytes
smtpd_max_connections              = 10
smtpd_max_memory                   = 512
smtpd_use_mysql_relay_table        = 0
smtpd_lookup_tcpremotehost         = 0          # tcpserver -H
smtpd_lookup_tcpremoteinfo         = 0          # tcpserver -R
smtpd_dns_paranoia                 = 0          # tcpserver -p
smtpd_dns_lookup_timeout           = 26         # tcpserver -tNN
smtpd_verbose                      = 0          # tcpserver -v
smtpd_run_as_user                  = vpopmail
smtpd_run_as_group                 = qmail
smtpd_auth_enable                  = 1          # enable SMTP auth
smtpd_checkpasswd_bin              = vpopmail_home_dir/bin/vchkpw
smtpd_relay_database               = vpopmail_home_dir/etc/tcp.smtp.cdb
smtpd_qmail_queue                  = /var/qmail/bin/qmail-queue
#smtpd_qmail_queue                 = /var/qmail/bin/simscan
smtpd_fixcrio                      = 0
smtpd_recordio                     = 0

##
# smtpd_log_method - [ syslog | multilog | verbose | stats | disabled ]
#
# - syslog   - logs to syslog ( /var/log/mail* )
# - multilog - logs via multilog to $qmail_log_base/smtp
# - verbose  - enables full debugging, records entire SMTP converation
# - stats    - only logs stats lines
# - disabled - silently discards all logs
##

smtpd_log_method                   = syslog
smtpd_log_maxsize_bytes            = 100000     # make sure this is larger than 5 minutes of logging

rbl_enable                         = 0       # master RBL switch. Enables all RBLs
rbl_enable_fail_closed             = 1       # default is on
rbl_enable_soft_failure            = 1       # default is on (off means bounce immediately (553)
rbl_enable_lookup_using            = net-dns # dig, net-dns
rbl_timeout                        = 60      # default is 60 seconds
rbl_reverse_dns                    = 1       # block based on presence of reverse DNS
rbl_reverse_dns_failure            = soft    # soft | hard  (temporary (451) or permanent (553) error)
                                             # currently the only way to block based on DNS is modifying
                                             # your ~vpopmail/etc/tcp.smtp file. See the FAQ for details
# zen.spamhaus.org combines the sbl, xbl, and pbl
rbl_zen.spamhaus.org               = 1       # http://www.spamhaus.org/zen/
rbl_bl.spamcop.net                 = 1       # http://www.spamcop.net/
rbl_dnsbl-1.uceprotect.net         = 1       # http://www.uceprotect.net/en/index.php?m=3&s=3
rbl_rbl-plus.mail-abuse.org        = 0       # Subscription only!
rbl_korea.services.net             = 1       # Block all of Korea
rbl_dnsbl.sorbs.net                = 1       # aggregate: includes all sorbs.net lists
rbl_psbl.surriel.com               = 1       # http://psbl.surriel.com/
#          new and not heavily tested as of 5/1/05
rbl_dnsbl.ahbl.org                 = 0       # http://www.ahbl.org/
rbl_multi.surbl.org                = 0       # http://www.surbl.org/
rbl_cbl.abuseat.org                = 0       # http://cbl.abuseat.org/ (part of sbl-xbl)
#      individual lists included in combined lists above
rbl_sbl.spamhaus.org               = 0       # http://www.spamhaus.org/sbl/
rbl_xbl.spamhaus.org               = 0       # http://www.spamhaus.org/xbl/
rbl_pbl.spamhaus.org               = 0       # http://www.spamhaus.org/pbl/
rbl_dul.dnsbl.sorbs.net            = 0
rbl_zombie.dnsbl.sorbs.net         = 0       # http://www.dnsbl.sorbs.net/
rbl_socks.dnsbl.sorbs.net          = 0
rbl_blackholes.mail-abuse.org      = 0       # Subscription only!
rbl_relays.mail-abuse.org          = 0       # Subscription only!
rbl_dialups.mail-abuse.org         = 0       # Subscription only!
#            deprecated/defunct RBLs
rbl_opm.blitzed.org                = 0       # http://opm.blitzed.org/info
rbl_cn-kr.blackholes.us            = 0       # block china & korea
rbl_dnsbl.njabl.org                = 0       # http://www.dnsbl.njabl.org/  # dead: 3/1/13
rbl_dsn.rfc-ignorant.org           = 0       # http://rfc-ignorant.org/
rbl_whois.rfc-ignorant.org         = 0
rbl_abuse.rfc-ignorant.org         = 0       # http://www.rfc-ignorant.org/policy-abuse.php
rbl_postmaster.rfc-ignorant.org    = 0       # http://www.rfc-ignorant.org/policy-postmaster.php
rbl_bogusmx.rfc-ignorant.org       = 0       # http://www.rfc-ignorant.org/policy-bogusmx.php
rbl_list.dsbl.org                  = 0       # http://dsbl.org/
rbl_sbl-xbl.spamhaus.org           = 0       # replaced by zen.spamhaus.org
rbl_dynablock.njabl.org            = 0       # being dropped as of 2007.01.??
rbl_combined.njabl.org             = 0       # aggregate: all njabl.org lists
rbl_relays.ordb.org                = 0       # DEAD - 2006.12.18 http://www.ordb.org/
rbl_spews.blackhole.us             = 0       # not available directly - part of dnsbl.sorbs.net
rbl_bl.ordb.org                    = 0       # DEAD -
rbl_dialups.visi.com               = 0       # DEAD - no NS records as of 2004.05.02
rbl_relays.visi.com                = 0       # DEAD - donation required
rbl_cn.rbl.cluecentral.net         = 0       # DEAD - Block all of China
rbl_kr.rbl.cluecentral.net         = 0       # DEAD - Block all of Korea
rbl_dev.null.dk                    = 0       # DEAD
rbl_relays.osirusoft.com           = 0       # DEAD
rbl_formmail.relays.monkeys.com    = 0       # monkeys.com DEAD as of 2003.09.22
rbl_proxies.relays.monkeys.com     = 0       # monkeys.com DEAD as of 2003.09.22
rbl_abuse.easynet.nl               = 0       # DEAD as of 2003.12.11

rwl_enable                         = 0       # master RWL switch. Disables all RWLs
rwl_list.dnswl.org                 = 0       # http://www.dnswl.org/
rwl_qmail.bondedsender.org         = 0       # http://www.bondedsender.org/


#######################################
#              POP3D                  #
#######################################
# pop3_daemon - you must choose qpop3d if you need POP before SMTP auth.
# Don't use POP before SMTP, use SMTP AUTH instead.
##

pop3_daemon                        = dovecot # qpop3d | courier | dovecot

##
# pop3_hostname [ system | qmail | mail.example.com ]
#
#  system - will set to the systems hostname
#  qmail  - will set to contents of qmail/control/me
#  other  - anything else is considered to be a hostname
##

pop3_hostname                      = system
pop3_max_memory_per_connection     = 16
pop3_max_connections               = 30
pop3_max_memory                    = 500
pop3_lookup_tcpremotehost          = 0
pop3_lookup_tcpremoteinfo          = 0
pop3_dns_paranoia                  = 0
pop3_dns_lookup_timeout            = 26
pop3_verbose                       = 0
pop3_listen_on_address             = all
pop3_checkpasswd_bin               = vpopmail_home_dir/bin/vchkpw

##
# pop3_log_method - [ syslog | multilog | verbose | stats | disabled ]
##

pop3_log_method                    = syslog     # multilog required for RRDutil
pop3_log_maxsize_bytes             = 100000     # make this > 5 minutes of logging


#######################################
#            POP3D-SSL                #
#######################################

pop3_ssl_daemon                    = dovecot    #  qpop3d | courier | dovecot

# NOTICE: if you choose qpop3d, then stunnel will be installed
# and courier's pop3ssl will be disabled.

#######################################
#         qmail-smtpd-submit          #
#######################################

submit_enable                      = 1
submit_listen_on_address           = all        # all, hostname, IP
submit_listen_on_port              = submission # submission, port number
submit_hostname                    = 0
submit_daemon                      = qmail      # qpsmtpd, qmail

# smtp-submit_hostname [ system | qmail | mail.example.com ]
#
#  system - will set to the systems hostname
#  qmail  - will set to contents of qmail/control/me
#  other  - anything else is considered to be a hostname
##

submit_max_memory_per_connection   = 50         # in megabytes
submit_max_connections             = 15
submit_use_mysql_relay_table       = 0
submit_lookup_tcpremotehost        = 0
submit_lookup_tcpremoteinfo        = 0
submit_dns_paranoia                = 0
submit_dns_lookup_timeout          = 26
submit_verbose                     = 0          # tcpserver -v
submit_run_as_user                 = vpopmail
submit_run_as_group                = vchkpw
submit_auth_enable                 = 1          # enable SMTP auth
submit_checkpasswd_bin             = vpopmail_home_dir/bin/vchkpw
submit_relay_database              = vpopmail_home_dir/etc/tcp.smtp.cdb
submit_qmail_queue                 = /var/qmail/bin/simscan
#submit_qmail_queue                = /var/qmail/bin/qmail-queue

##
# submit_log_method - [ syslog | multilog | verbose | stats | disabled ]
#
# - syslog   - logs to syslog ( /var/log/mail* )
# - multilog - logs via multilog to $qmail_log_base/submit
# - verbose  - enables full debugging, records entire SMTP converation
# - stats    - only logs stats lines
# - disabled - silently discards all logs
##

submit_log_method                  = syslog
submit_log_maxsize_bytes           = 100000     # make sure this is larger than 5 minutes of logging



#######################################
#            QMAILADMIN               #
#######################################

qmailadmin_spam_option             = 1
qmailadmin_help_links              = 1.0.8
qmailadmin_install_as_root         = 0
qmailadmin_modify_quotas           = 1
qmailadmin_domain_autofill         = 1
qmailadmin_spam_command            = | /usr/local/bin/maildrop /usr/local/etc/mail/mailfilter
qmailadmin_cgi_bin_dir             = 0  # override toaster_cgi_bin
qmailadmin_http_docroot            = 0  # override toaster_http_docs
qmailadmin_http_images             = /usr/local/www/data/images
qmailadmin_catchall                = 0


#######################################
#            phpMyAdmin               #
#######################################

phpMyAdmin_controluser             = pma
phpMyAdmin_controlpassword         = pmapass
phpMyAdmin_auth_type               = cookie  ( cookie | http )


#######################################
#               Simscan               #
#######################################

simscan_user                       = clamav
simscan_trophie                    = 0       # use trophie?
simscan_clamav                     = 1       # use clamav?
simscan_ripmime                    = 1       # 0, 1  use ripmime?
simscan_quarantine                 = 0       # 0, or a directory for spam/viral messages
simscan_spamassassin               = 1       # 0, 1
simscan_spamc_args                 = 0       # 0, list of options to pass to spamc
simscan_spam_hits_reject           = 12      # reject messages with a spam score higher than
simscan_spam_passthru              = 0       # allow spam messages to be delivered?
simscan_per_domain                 = 1       # use /var/qmail/control/simcontrol
simscan_block_attachments          = 1       # block attachments in /var/qmail/control/ssattach
simscan_block_types                = exe,com,vbs,lnk,scr,wsh,hta,pif
simscan_received                   = 0       # add the Received: by simscan header
simscan_custom_smtp_reject         = 1       # does qmail have the custom smtp reject patch?
simscan_regex_scanner              = 0       #
simscan_debug                      = 0


#######################################
#      Maildir Old Message Cleanup    #
#######################################

maildir_clean_interval             = 7       # The # of days between cleanup runs
                                             #  This is the "master" switch for all the
                                             #  following cleanup options. If this is
                                             #  set to zero, nothing below matters.
maildir_clean_Read                 = 0       # remove read messages
maildir_clean_Unread               = 365     # remove unread messages (days)
maildir_clean_Sent                 = 180     # sent messages over x days are removed
maildir_clean_Trash                = 14      # trashed messages over x days are removed
maildir_clean_Spam                 = 14      # spam messages over x days are removed

#######################################
#    SpamAssassin Message Learning    #
#######################################

maildir_learn_interval             = 1       # how many days between spam learning runs
maildir_learn_Spam                 = 1       # feed spam through sa-learn (SpamAssassin)
maildir_learn_Spam_unread          = 0       # learn from unread messages in Spam folders?
maildir_learn_Read                 = 1       # feed ham through sa-learn (SpamAssassin)
maildir_learn_Read_days            = 1       # only learn from messages older than x days


#######################################
#      Apache Suexec Options          #
#######################################

apache_suexec_docroot              = /usr/local/www/data
apache_suexec_userdir              = html
apache_suexec_safepath             = /usr/local/bin:/usr/bin:/bin
apache_suexec_logfile              = /var/log/apache/suexec.log
apache_suexec_uidmin               = 1000
apache_suexec_gidmin               = 1000
apache_suexec_caller               = www
apache_suexec_umask                =


#######################################
#      OpenSSL config values          #
#######################################

ssl_certificate                    = 0       # /path/to/certificate/file.pem
ssl_country                        = SU
ssl_state                          = saxeT
ssl_locality                       = dnalraG
ssl_organization                   = moc.elpmaxE
ssl_common_name                    = 0                         # 0, hostname
ssl_email_address                  = 0                         # 0, email address

