How best to make changes to postfix ?

[liverpoolfcfan]

I have a number of settings I need to add to the main.cf file each time I upgrade zimbra. Mostly they relate to TLS verification of email - both inbound and outbound.

What is the most automated way possible to do this.


smtp_tls_security_level = may
smtp_tls_policy_maps = hash:/etc/zimbra_tls_policy
smtp_tls_note_starttls_offer = yes
smtp_tls_loglevel = 1
smtp_tls_CApath = /etc/postfixCAcerts
smtp_tls_cert_file = /opt/zimbra/conf/smtpd.crt
smtp_tls_key_file = /opt/zimbra/conf/smtpd.key
smtpd_tls_received_header = yes
smtpd_tls_CAfile = /etc/postfixCAcerts/Thawte_Server_CA.pem
smtpd_tls_CApath = /etc/postfixCAcerts
smtpd_restriction_classes = permitted_senders_list
permitted_senders_list = check_sender_access hash:/etc/permitted_senders, reject


Is there any hook provided at the end of the install/upgrade script to call a user script file ?

For example - the very end of the zimbra install/upgrade script might be configured to look for a script file called

/etc/zimbraPostUpgrade

and if it finds it - to execute it. This would have to reside outside of /opt/zimbra so it would survive the upgrade, and would allow admins to automate a lot of the manual work that needs doing after an upgrade.

[lytledd]

What is the most automated way possible to do this.

I was thinking that Postfix might have a #include directive, but found out in their FAQ this isn't the case

8. Is there some kind of 'include' directive for main.cf?

No. Most administrators with complex configurations create a Makefile that will cat the necessary files together. If you have other regular administrative tasks, add them to your Makefile too. Your Makefile can have an entry something like this:

main.cf: file1 file2 file3
cat file1 file2 file3 > main.cf.new
mv main.cf.new main.cf

Then type make main.cf to rebuild your configuration file.

Postfix FAQ

Doug

[liverpoolfcfan]

Thanks for the information