text:
The Postfix project, originally named VMailer (fortunately for everyone, the name was changed before release due to legal entanglements of the VMailer name), is designed as a group of related but separate executable components, providing security through segmentation. Smaller parts are easier to debug, as well. The Internet home of Postfix is www.postfix.org. Postfix is an ideal mail server choice for new mail administrators, and even experienced Sendmail administrators might find its simplicity appealing. Because it provides a quite compatible Sendmail-ish exterior, and provides programs of the same names (such as
sendmail for sending mail,
mailq for managing the queue, etc.), and can utilize the same type of aliases and forwarding files that Sendmail uses, it is possible to replace Sendmail without reconfiguring existing mail-related tools, or rewriting local scripts. After such a switch, local users may not even notice the difference.
The previous statements should not be viewed as an endorsement of Postfix as being a better mail transport agent than Sendmail. The two projects have different emphasis, and have had very different development models. Sendmail has been in use all over the world for over 20 years in one form or another, and thus has an extremely large head start on Postfix with regard to maturity, available documentation, number of experienced administrators, and support tools. Postfix is only a few years old and has much more limited supporting documentation and tools to enhance it. The decision for which mail transfer agent is appropriate for your network will be dictated by the requirements and the availability of local expertise.
The General Options page configures a number of options regarding the general behavior of Postfix. Specifically, most of the configuration options that impact all users and all messages are configured here. Postfix, keeping with its philosophy of simplicity, usually requires only a few configuration file changes to get a mail server running efficiently and securely.
The General Options page is divided into two parts. The upper section is labeled Most Useful General Options and the lower section Other General Options. In many standard installations, it may be possible to start up a Postfix installation with just configuration of one or more of the three directives in the upper section. Unless otherwise stated, all of the options on this page correspond to directives in the
main.cf file in the Postfix configuration directory.
The three options in this section are, in some installations, the only options that need to be altered to get Postfix running for both sending and receiving email (Figure 10.2, Most Useful General Options).
Here you may specify the domain or host name to use to identify the source on outgoing mail. Postfix defaults to using the host name of the server, but you most likely will want it to identify mail as coming from your domain name instead. If your mail server will be accepting mail for a large number of users under a single domain name, you will most likely configure domain name here, and create a domain-wide alias database to map user names to their respective local mail servers. This option correlates to the
myorigin Postfix directive.
This option accepts a list of domains and addresses to receive mail as its final destination. In other words, when mail reaches the server destined for addresses in this field, it will deliver the mail to a local user, rather than forward it to another mail server. By default, this is all configured addresses on the machine as well as
localhost within the local domain. You may specify any number of domains or host names separated by commas, or you may provide a full path to a file containing similar entries. The variables
$myhostname and
$mydomain may be used to represent those concepts to Postfix automatically. The ability of Postfix to use such variables throughout its configuration files makes it easier to maintain a number of Postfix servers with very similar configurations. This option correlates to the
mydestination directive.
Postfix provides the ability to select what types of error messages will be mailed to the designated postmaster of the mail server. Assuming you have setup a
postmaster alias that directs mail to a real person, Postfix will send reports of all of the types of trouble designated here. The available classes are:
When this option is selected, whenever a message is undeliverable, a bounce message (called a single bounce message will be sent to the sender of the message and the local postmaster. For the sake of privacy only the headers will be sent in the message to the postmaster. If the first bounce to the sender is returned as undeliverable, a double bounce message will be sent to the postmaster with the entire contents of the first single bounce message.
Causes double bounce messages to be sent to the postmaster.
If the delivery of a message is delayed, the postmaster will receive a notice, along with the headers of the delayed message.
Notifies the postmaster of messages that were rejected due to a unsolicited commercial email policy restriction. The complete transcript of the SMTP session is sent.
Notifies the postmaster of protocol errors, or client requests that contained unimplemented commands. The complete transcript of the SMTP session is included in the message.
Informs the postmaster of undelivered mail due to resource problems, such as a queue file write error.
Notifies the postmaster of mail not delivered due to software failures.
This option correlates to the
notify_classes directive, and defaults to reporting only problems that usually indicate a misconfiguration or serious problem (specifically
resource and
software). In some high load environments, altering this to include bounce notifications could lead to a large number of notices.
The lower section of this page is devoted to global options which are less likely to need to be altered (Figure 10.3, Other General Options. In many installations these options will remain at their defaults.
This option configures whether outgoing mail should be delivered directly to the recipients mail server, or if a parent mail gateway should be used as an intermediary. If the server is behind a firewall, behind a network address translating router/gateway, or similar, it may be necessary to use an intermediary server to achieve reliable service. Many mail servers on the Internet will not accept mail from a server that does not have a working DNS entry and a routable IP address, in order to help prevent spam from forged addresses. Also, local network use policy may require the use of an intermediary for logging, virus scanning, or other purposes that require aggregation of outgoing mail traffic onto a central server. This option corresponds to the
relayhost directive and defaults to sending mail directly.
With this
option, an optional email address may be specified that will receive a copy
of every message that enters the Postfix system, excluding locally generated
bounce messages. This can represent a breach of privacy in many
circumstances, and may be illegal in some countries. It is advisable to be
especially cautious about utilizing this option. It can be useful in some
environments, however, where central archival of email is valuable for legal
or technical reasons. This option correlates to the
always_bcc directive and defaults to none.
This option determines how
long a Postfix daemon will wait on a request to complete before it assumes
the daemon has locked up, at which time the daemon will be killed. This
option corresponds to the
daemon_timeout and defaults to
18000 seconds.
This option determines the type
of database to use in the
postalias and
postmap commands. This option corresponds to the
default_database_type directive and the default depends on
the OS and installed system libraries at the time of building Postfix.
Ordinarily on UNIX systems this will be
hash or
The term
delivery transport refers to the protocol, or
language, used to deliver the message from one mail server to another. The
transport on modern systems is nearly always
smtp, and this
is the default in Postfix, but there are still a few legacy
uucp systems in use. This option is merely the default
choice, when no transport is explicitly selected for the destination in the
optional transport table. This option corresponds to the
default_transport directive.
In the event a message
double-bounces, or first bounces from the recipient and then bounces from
the sender when the first bounce notice is sent, the message will be sent to
this address. All messages to this address will be silently discarded. In
this way bounce-loops can be avoided. This option correlates to the
double_bounce_sender and defaults to
double-bounce. The name may be any arbitrary name, but must be unique.
This option configures the number of subdirectory levels below the configured queue directories will be used by Postfix for mail storage. Because of the design of the traditional UNIX filesystem, which includes UFS used by all modern BSD systems and the Linux ext2 and ext3 filesystems, performance becomes measurably slower when an extremely large number of files are stored in a single directory. Thus, programs that generate a large number of files often provide the ability to split files out to a number of subdirectories to keep lookups fast. This option correlates to the
hash_queue_depth directive and defaults to 2, which is suitable for most moderate and even relatively large installations. Because the number of directories in use increases the search time for object seeks, using a too high value here can be harmful to performance.
Postfix uses a
number of queues to organize messages with varying states and destinations.
Each of these queues can be configured to use hashed subdirectories or not.
If a queue is selected here, it will be stored in a hashed subdirectory. In
some cases, a queue mus not be listed here as performance will be severely
impacted, specifically the world-writable mail drop directory. The defer
log file directory, on the other hand must be stored in hashed directories or
performance will suffer. This option corresponds to the
hash_queue_names directive and defaults to
incoming,active,deferred,bounce,defer,flush and it is rarely necessary or beneficial to alter this configuration.
A message that contains more
Received: headers than this will
bounce. An extremely large number of this header may indicate a mail loop
or a misconfigured mail server somewhere in the path of this message. This
option correlates to the
hopcount_limit directive and
defaults to 50. This value rarely needs to be altered from its default.
If a message cannot be delivered immediately, it will be queued for later
delivery. If after this number of hours, the message still cannot be
delivered, a warning will be sent to the sender notifying them that the
server has been unable to send the message for a specified time. This
correlates to the
delay_warning_time directive and defaults
to not sending a warning.
This option
configures the network addresses on which Postfic will accept mail
deliveries. By default Postfix will accept mail on every active interface.
Here, Postfix will accept the variables discussed earlier. This option
configures the
inet_interfaces directive.
option sets the time in seconds after which an internal IPC client
disconnects. This allows servers to terminate voluntarily. This feature is
used by the address resolution and rewriting clients. This option
correlates to the
idle_time directive and defaults to 100s.
This option should probably never need to be altered under normal
This option
determines the amount of time in seconds the server will wait for I/O on
internal communication channels before breaking. If the timeout is
exceeded, the server aborts with a fatal error. This directive corresponds
to the
ipc_timeout directive and defaults to 3600 seconds,
or 60 minutes.
This option identifies the mail server
system in use to connecting users. It will be used in the
smtpd_banner which is sent in
headers, the SMTP greeting banner, and in bounced mail. Some security experts, who promote security through obscurity, suggest anonymizing all server software to prevent potential crackers from being able to identify the software in use on the server. It is probably not the best use of an administrators time or effort in most environments, however, and many other security tactics are more effective, without negatively impacting the ability to track software problems. This option correlates to the
mail_name directive and defaults to
This option specifies the owner of the Postfix mail queue, and most of the Postfix daemon processes. This user should be unique on the system, and share no groups with other accounts or own any other files or processes on the system. After binding to the SMTP port (25), postfix can then drop root privileges and become the user specified here for all new daemon processes. Because of this, if the Postfix daemon is ever compromised the exploiter will only have access to mail and a few other files. Obviously it is good to avoid this as well, but it is certainly better than a root exploit which would allow the exploiter to access and alter anything on the system. This option correlates to the
mail_owner directive and defaults to
This paremeter configures the version number that will be reported by Postfix in the SMTP greeting banner, among other things. This correlates to the
mail_version directive and defaults to the version of Postfix that is installed. Once again, security by obscurity promoters may encourage obfuscation of this value.
A Postfix daemon process will exit after the time specified here, if it does not receive a new request for service during that time. This option corresponds to the
max_idle directive and defaults to
100s. This directive does not impact the queue manager daemon process.
This option configures the maximum number of requests that a single Postfix daemon process will answer before exiting. This option configures the
max_use directive and defaults to
This option specifies the Internet host name of the mail server. By default this value will be set to the fully qualified host name of the server, as determined by a call to
gethostname(). This option sets the
$myhostname variable which is used in the defaults to many other options. This option correlates to the
myhostname directive.
This option corresponds to
mydomain directive and defaults to the contents of the
$myhostname variable minus the first component. This
option defines the
$mydomain variable and is used in a
number of other configuration option defaults.
Postfix provides a flexible set of
options to help prevent UCE, or other unauthorized uses of the mail server. This option defines what networks will be considered to be local by Postfix. The value is used to determine whether a client is a local client or a remote client. Policies can be more relaxed for local clients. This option configures the
mynetworks directive and defaults to a list of all networks attached to the server. For example, if the server has an IP of 192.168.1.48, and a netmask of 255.255.255.0, all of the 192.168.1.0 network will be considered local. If you would like stricter control, or the ability to treat other network blocks as local clients, you can specify
them here in the form of network/mask pairs (i.e.,
172.16.0.0/16. Network/mask pairs may be inserted from a separate file, if preferred, by specifying the absolute path to the file here.
This option
configures the user name or email address to whom bounce notices will be
sent. This option correlates to the
and is set to
postmaster by default.
This option
configures the user name or email address to whom second bounce messages will
be sent. This allows an administrator to watch for second bounces warnings
more closely than first bounce messages, because first bounces are far more
common and less likely to indicate serious problems. The option configures
2bounce_notice_recipient directive and defaults to
This option
configures where delay warnings will be sent. This option correlates to the
delay_notice_recipient directive and defaults to
Specifies where
error warnings will be sent. This option correlates to the
error_notice_recipient directive and defaults to
This specifies the directory where
Postfix will store queued mail. This will also be the root directory for
Postfix daemons that run in a chroot environment. The queue is where
messages that are awaiting delivery are stored, thus enough space to
accommodate your user mail load should be provided in this directory. This
option correlates to the
queue_directory directive and
usually defaults to a sensible location for your OS. Many Linux systems
will have the mail queue in
/var/spool/mail or
This option
configures the location of the Postfix lock directory. It should be
specified relative to the queue directory, and generally will simply be a
subdirectory of the queue directory. This option configures the
process_id_directory directive and defaults to
This option specifies the separator character between user names and address
extensions. This option correlates to the
recipient_delimiter directive and defaults to using no delimiter. This option impacts Canonical Mapping, Relocated Mapping and Virtual Domains.
This option
specifies the directory where Postfix will look for its various support
programs and daemons. The directory should be owned by
root. This option correlates to the
program_directory directive and defaults vary depending on installation method and OS variant. On many Linux systems this will be
Postfix can provide a
relocation notice in response to messages sent to users who no longer
receive mail from this server. If enabled, this option specifies the
location of the file containing a table of contact information for users who
no longer exist on this system. By default this feature is disabled. This
option correlates to the
relocated_maps directive. If
enabled a reasonable choice for this option might be
On Sun
workstations, kernel file locks can cause problems, because
mailtool program holds an exclusive lock whenever
its window is open. Users of other OS variants, or Sun systems where no
Sun mail software is in use, may ignore this option. This option correlates
to the
sun_mailtool_compatibility directive and defaults to
This option
specifies the maximum amount of time allowed to send a trigger to a Postfix
daemon. This limit helps prevent programs from getting hung when the mail
system is under extremely heavy load. This option correlates to the
opts_trigger_timeout directive and defaults to
Postfix offers a relatively easy to use, and flexible, address rewriting system, allowing it to act as a mail gateway for a large network, or as a gateway between legacy mail systems and the Internet at large (Figure 10.4, Address Rewriting and Masquerading).
The options on this page are also discussed on the Postfix Configuration - Address Manipulation page at the Postfix homepage. It is worth reading if advanced address rewriting is required in your mail system.
This option is
useful for some legacy systems that used strange address trickery such as,
user%domain@otherdomain. It is not generally useful in
modern environments, but it is not harmful so usually defaults to
Yes. This option correlates to the
allow_percent_hack directive.
This option
configures how Postfix will handle an address that has no domain name in the
destination. If enabled, it will append the value of
$mydomain to the address. This option correlates to the
append_at_myorigin directive and defaults to
Yes. Because most Postfix components expect addresses to be of the form
user@domain it is probably never appropriate to disable this feature.
option configures whether simple host addresses will have the value of
$mydomain appended to them. This option correlates to the
append_dot_mydomain directive and defaults to
Yes. Some administrators may find that this explicit
rewrite has unexpected consequences, but it is very rarely a problem.
Legacy UUCP networks
use a different addressing format than modern SMTP systems. This option
enables Postfix to convert the old-style address to a modern address for
delivery via the standard SMTP protocol. This option configures the
swap_bangpath directive and defaults to
The specifies the
destination of mail that is undeliverable. Typically, this will be bounce
notifications and other error messages. This option correlates to the
empty_address_recipient directive and defaults to
MAILER-DAEMON, which by default is simply an alias to
Address masquerading is a method
whereby hosts behind the gateway mail server may be hidden, and all mail
will appear to have originated from the gateway server. If enabled, the
host and/or subdomain portion of an address will be stripped off and only
the domain specified here will be included in the address. For example, if
$mydomain is specified here, an outgoing mail from
firstname.lastname@example.com would become simply
email@example.com, assuming the $mydomain variable contains
swelltech.com. This option correlates to the
masquerade_domains directive and it is disabled by default.
It is possible to skip over the
masquerade rules define above for some user names. The names to be excepted
from those rules can be entered here. This option corresponds to the
masquerade_exceptions directive and by default no
exceptions are made.
Mail aliases provide a means to redirect mail to local recipients.
Specifically, it allows mail destined for a number of different addresses to
be delivered to a single mailbox. A common use for this is to direct mail
for users like
postmaster to a real person. This page is
divided into two sections. The upper section labeled Aliases
Options contains the location and format of the alias
files that Postfix should use to construct its alias databases and specifies
the type of database to use. The lower section provides a list of all
configured aliases on the system, and what the alias maps to.
option sets the filenames that Postfix will use for local delivery alias
translation. The filename will have a suffix appended to it based on the
file type. This option correlates to the
directive and the default is system dependent. Some common defaults
hash:/etc/aliases or
hash:/etc/postfix/aliases. The first part of the
entry, preceding the colon, is the type of database to use, which will be
one of
hash for systems with a modern Berkeley DB
dbm for older style systems that only have
dbm available, or
nis for systems that
run NIS. The after-colon portion of the entry is the path to the filename
from which the database name is derived. The databases will be built from the contents of the flat files by Postfix on startup, or when running the
newaliases command.
This option, closely
related to the above, specifies the alias database file(s) that are built
when the
newaliases or
sendmail -bi commands are run. These commands generate the alias database from the flat file in the above option, in order to speed alias lookups performed by Postfix. Because there may be thousands of aliases on a large mail server, importing them into a database is necessary to maintain efficiency. This option correlates to the
alias_database directive. Defaults are system dependent, but will commonly be the same as the above option, with the appropriate database file suffix appended.
This section of the page provides a list of all configured aliases. To edit an alias, click on the name of the alias. To create an alias, click on the Create a new alias button and fill in the alias
Name, and
Alias to... fields. Whenever the aliases files have been modified, it is necessary to recreate the aliases database files as well in order for the changes to take effect. When using Webmin this step is performed automatically, and no additional
steps are required.
Canonical mapping in Postfix is used for modifying mail in the incoming queue, and it alters both the message headers and the message envelope information for local or remote mail. This mapping can be useful to replace login names with Firstname.Lastname style addresses, or to clean up odd addresses produced by legacy mail systems.
If you use any canonical mapping tables, they must be specified in the first section of the Canonical Mapping module. After defining them, you can edit them from the second section of the module.
This option specifies the location of the optional canonical address mapping table file. This mapping is applied to both sender and recipient addresses, in both envelopes and headers. This option configures the
canonical_maps directive and is disabled by default. Much like the aliases files discussed in the last section, canonical mapping files are specified by a database type and a filename. The accepted database types depend on your operating system, and installed components. Usually
hash and
dbm are used as the database type. A common choice for this value, then, might be
This parameter
configures address mapping only on recipient addresses, and not sender
addresses. Mapping is performed on both envelopes and headers. These
lookups are performed before the above configured Address mapping
lookup tables. This option correlates to the
recipient_canonical_maps directive and is disabled by
Similar to the previous
option, this configures mapping for sender addresses only, and not recipient
addresses. Both envelope and header information is modified. This option
correlates to the
sender_canonical_maps directive and by
default is disabled.
Once a filename is selected for any of the canonical mapping tables, it may be edited by clicking the appropriate Edit... buttons. A new page will open, listing any existing mappings and allowing creation of new mappings. The format of mappings in all files is the same.
Canonical mappings may seem, on the surface, to be similar to aliases or virtual domains. However, they are quite distinct and are useful for other purposes. While aliases merely make a decision about which user will receive an email, and virtual domains only impact the envelope address, the canonical mapping alters both the envelope address and the SMTP header address. This change can be used to make mail appear to come from a different user or domain, or direct mail to a different user or domain by changing the address on the message.
For example, if I have a number of local subdomains, but would like all mail
to appear to originate from a single domain, it is possible to create a
canonical mapping to make the translations. In the Edit a Map page, the
Name will be a subdomain that is to be mapped to the domain, such as
@lab.swelltech.com. The
Mapts to... value will simply be the domain I'd like this subdomain converted to,
@swelltech.com. After saving the mapping and applying changes, all outgoing mail from
lab.swelltech.com will appear to originate from
Virtual domains functionality in Postfix provides a means to redirect messages to different locations by altering the message envelope address. The header address is not altered by a virtual domain mapping. While some functionality of virtual domains overlaps with features available in aliases, virtual domains can be used for local or non-local addresses, while aliases can only be used for local address.
Much like aliases tables
and canonical mapping tables discussed in the previous sections, this is
simply the path to a file containing the mapping tables for virtual domains.
This is usually something along the lines of
hash:/etc/postfix/virtual, and must be converted to a database format for use in Postfix. Webmin will perform the database generation step for you.
The term transport refers to the mechanism used to deliver a piece of email. Specifically, SMTP and UUCP are mail transports that are supported by Postfix. Transport mapping can be used for a number of purposes, including SMTP to UUCP gatewaying, operating Postfix on a firewall with forwarding to an internal mail server, etc.
This option configures
the path to a file containing one or more transport mappings. These tables
are much like the mapping tables discussed already, and are converted to a
database and used by Postfix in the same way. This option correlates to the
transport_maps directive. This feature is disabled by
default. A common value for this option is
To create a new mapping, first define the mapping file. Then click
Add a mapping. If your goal is to redirect mail to an
protected internal host from Postfix running on a firewall, for example, you
could enter the outside domain name into the Name field,
swelltech.com and then
enter into the Maps to... field the address of the
internal machine,
smtp:privatehost.swelltech.com. To
further improve upon this, local delivery on this machine could be disabled,
and increased controls over where and to whom mail should be accepted.
There are more examples of such a configuration in the tutorial section of
this chapter.
Using this option it is possible to notify senders if a local user has moved to another address. For example, if a user leaves an organization but still receives occasional mail at her local address, it may be convenient to notify anyone sending mail to the user of the move and new contact information for that user. Usage is just like the previous types of mappings and so won't be documented specifically here, though and example of a relocated mapping will be given to display the types of information that can be provided by this feature.
As an example, let's say I move from my current company to the far more relaxed atmosphere of the Oval Office. To make sure all of my friends and clients can keep in touch with me, I could provide a relocated mapping with a Name of
firstname.lastname@example.com with a Maps to... of
firstname.lastname@example.com. While this won't redirect mail to me at my new home, it will notify the people trying to contact me that I've changed email addresses. Hopefully they will all update their address books and resend their mail to my new address.
Local delivery is what Postfix does when it reaches the end of all of its list of mappings and access controls, and still finds that the message is allowed and destined for a user on the local machine (i.e., a mapping could potentially send the message elsewhere for final delivery, so all mappings as well as various access checks are performed before reaching this stage). This page configures a number of options relating to how Postfix handles the delivery of mail for local users (Figure 10.5, Local Delivery).
configures the name of the transport that will be used for delivery to
destination that match the $mydestination or $inet_interfaces variables.
This can be a simple mailbox drop handled by the Postfix local delivery
agent, or any appropriate delivery command. This option correlates to the
local_transport directive and defaults to the defined
transport type named
If a
command shell is required to communicate properly with your chosen local
delivery transport, this option selects the shell that will be used. By
default no shell is used, and the transport command will be executed
directly. However, if the command contains shell meta-characters or shell
built-in commands they will be passed to
/bin/sh or
whatever shell you configure here. A popular choice for this is
smrsh, or Sendmail's Restricted Shell,
which is included in recent Sendmail distributions.
smrsh allows for more precise control over what
commands users can execute from their
.forward files.
This option corresponds to the
local_command_shell and
defaults to
This is a comma-separated list
of possible
locations for user forward files. Postfix will try each entry in the list
until a forward file is found, or until all have been checked and no match
is found. The forward file allows users to configure delivery options for
themselves, including delivery-time processing by a program like
procmail as well as forwarding of messages to a
different server. A number of variable expansions are performed on the
entries. The expansions are currently:
Forward search path variable expansions
The user name of the recipient.
The shell of the recipient.
Recipient's home directory.
The full recipient address.
Recipient address extensions. This is a separate part of the email address, separated by the Separator between user names and address extensions defined on the General Options page.
The recipient's domain name.
The entire local part of the recipient address.
The separation delimiter for the recipient.
This parameter
restricts mail delivery to only those commands specified here. The default
is to disallow delivery to commands specified in
files, and allow execution of commands in
alias and
forward files. This option correlates to the
allow_mail_to_command directive.
This option
restricts mail delivery to external files. The default is to disallow
delivery to files specified in
:include: but to allow
delivery to files specified in
aliases and
forward files. This option correlates to the
allow_mail_to_files directive.
This option
configures the privileges that the delivery agent will have for delivery to
a file or a command. This option should never be a privileged user or the
postfix owner. This option corresponds to the
default_privs directive and defaults to
When delivering mail
locally, Postfix will drop mail in the directory configured here, or in its
default mail spool directory. If you wish to use the maildir
format for mail storage, this value can be appended with a trailing slash.
For example, to store mail in the users home directory in the
Maildir subdirectory, the value would be
Maildir/. This option correlates to the
home_mailbox directive and usually defaults to some
location under
/var/spool/mail or
If a
message is received for a recipient that does not exist, the message is
normally bounced. However, it is possible to instead have the message
delivered to an alternate address. This option corresponds to the
luser_relay directive. Variable expansions matching those
discussed for the Search list for forward are also valid
for this directive.
This option specifies the directory where UNIX-style mailboxes are stored. Defaults vary depending on OS variant and version, but a common choice is
/var/spool/mail. This option correlates to the
mail_spool_directory option.
This option defines a command to use for delivery instead of delivering
straight to the users mailbox. The command will be run as the recipient of
the message with appropriate
SHELL and
LOGNAME environment variables set. This option is
commonly used to set up system-wide usage of
Beware that if you use a command to deliver mail to all users, you
must configure an alias for
root, as
the command will be executed with the permissions of the
$default_user. This option correlates to the
mailbox_command directive and is disabled by default.
This option configures
the message transport to use for all local users, whether they are in the
UNIX passwd database or not. If provided, the value will override all other
forms of local delivery, including Destination address for unknown
recipients. This option corresponds to the
mailbox_transport directive and is disabled by default.
This option may be useful in some environments, for example, to delegate all
delivery to an agent like the cyrus IMAPD.
If a user
cannot be found in the UNIX passwd database, and no alias matches the name,
the message will ordinarily be bounced, or handled via the
Destination address for unknown recipients option.
However, if you would like unknown users to be handled by a separate
transport method. This option overrides the Destination address for unknown recipients option above. This option correlates to the
fallback_transport directive and is disabled by default.
This option limits the number of simultaneous
deliveries to a single local recipient. If
files are allowed for users, a user may run a time-consuming command or shell
script, leading to overload caused by several such processes being started
up at once. This option correlates to the
local_destination_concurrency_limit directive and the
default is
2. A low value is recommended for this option, unless it is certain that no complex
.forward files will be in use.
This option configures the maximum number of recipients per local message
delivery. This option correlates to the
local_destination_recipient_limit and is set to the value of
Max number of recipients per message delivery by default.
This parameter determines when Postfix should insert a
Delivered-to: message header. By default Postfix inserts this header when forwarding mail and when delivering to a file. The defaults are recommended, and it is generally preferable not to disable insertion into forwarded mail. This option corresponds to the
prepend_delivered_header directive.
This page provides access to the various memory and process limits for the Postfix processes (Figure 10.6, General resource control. It is rarely necessary to alter the values on this page, except for highly loaded servers or very low resource machines.
This option limits the
amount of the original message content in bytes that will be sent in a
bounce notification. This option correlates to
bounce_size_limit and defaults to 50000.
When delivering mail to an external command (rather than via direct mailbox delivery), Postfix will wait this amount of time for the delivery to complete. If this value is to be set to a high limit (3600s or more) the value of Timeout for I/O on internal comm channels in General Options must also be increased. This option correlates to the
command_time_limit directive and defaults to
This option limits the number of child processes that Postfix will spawn. On high load servers the default may be too low, and may need to be raised to as much as
500 or more. More likely, for most environments, 50 is more than adequate and may even be overkill. For example on dial-up, or consumer broadband serving one to ten users, a more appropriate limit might be
10. If in doubt, leave it at its default unless it causes problems. This option correlates to the
default_process_limit directive and defaults to
While expanding aliases and
.forward files Postfix will remember addresses that are being delivered to and attempt to prevent duplicate deliveries to the same address. This option limits the number of recipient addresses that will be remembered. It corresponds to the
duplicate_filter_limit directive and defaults to
1000. There is probably no compelling reason to increase this value.
This option limits
the number of attempts Postfix will make when attempting to obtain an
exclusive lock on a mailbox or other file requiring exclusive access. It
corresponds to the
deliver_lock_attempts directive and
defaults to
Postfix will
wait a specified time between attempts to lock a given file, after a failed
lock attempt. This option configures the
directive and defaults to
If Postfix attempts to
fork a new process and fails, due to errors or a lack of available
resources, it will try again a specified number of times. This option
correlates to the
fork_attempts directive and defaults to
Postfix will
try to spawn a new process a specified time after a failed attempt. This
option correlates to the
fork_delay directive and defaults
This option
limits the amount of memory in bytes that Postfix will use to process message
headers. If a message header is too large to fit into the memory specified,
the headers that do not fit into memory will be treated as part of the
message body. This option correlates to the
header_size_limit directive and defaults to
This option
limits the amount of memory in bytes that Postfix will use to handle input
lines. And input line is any line read from an
.forward file. In order to prevent the mail server
from using excessive amounts of memory, it will break up these files into
chunks of this length. This option correlates to the
line_length_limit directive and defaults to
This option limits the size in
bytes of a message that will be delivered, including the message envelope information. This limit should be set high enough to support any email messages your users will need to be able to send or receive. This option correlates to the
message_size_limit directive and defaults to
This option limits the number of messages that can exist in the message queue at any given time. It correlates to the
qmgr_message_active_limit directive and defaults to
This parameter limits the number of in-memory recipient data structures. This memory contains the short-term dead list, which indicates a destination was unavailable when last contacted, among other things. This option correlates to the
qmgr_message_recipient_limit directive and defaults to
Postfix will refuse mail if the filesystem on which the queue is located has less available space in bytes than the value set in this option. This option correlates to the
queue_minfree directive and defaults to
This option configures how old an external lock file may be before it is forcibly removed. This option correlates to the
stale_lock_time and defaults to
This option configures the time in seconds between the queue manager attempts to contact an unresponsive mail delivery transport. This option correlates to the
transport_retry_time and defaults to
This page configures the majority of the options that directly effect the behavior of the SMTP server portion of Postfix, specifically the portions of Postfix that impact how the server behaves towards an SMTP client that connects to the server.
When a client connects to an SMTP
server a greeting banner will be sent to the client
(note the term client in this context is not
the end user, but rather the email software program that is being used to
make the connection). This option configures the text that will follow the
status code in the banner. It is possible to use a number of variable
expansions, for example, to display the specific version of the
server software, though Postfix does not include the version by default. If
configuring this option to be other than the default, you must include
$myhostname at the start of this line, as it allows Postfix
to report and respond to a mailer loop rather than overloading the system
with many multiple deliveries. This option correlates to the
smtpd_banner directive and contains
$myhostname ESMTP $mail_name by default.
A proposed federal law in the US would make it illegal to send unsolicited commercial email through a mail server if the server included in its SMTP greeting the words
option limits the number of recipients that may be specified in a single
message header. It is usually rare for legitimate messages to have an
extremely large number of recipients specified in a single message header,
but it is often done in UCE messages. The legitimate exception is messages
to a mailing list (possibly sent by mailing list software like
majordomo or
mailman. This option correlates to the
smtpd_recipient_limit and defaults to
Normally, the SMTP VRFY
command is used to verify the existence of a particular user. However, it
is also illegitimately used by spammers to harvest live email addresses.
Thus it is sometimes useful to disable this command. This option correlates
disable_vrfy_command and defaults to
This option
sets the timeout in seconds for a client to respond to the SMTP servers
response with an SMTP request. The connection process involves the client
opening a connection to the server, the server replies with a greeting, and
then the client makes its request. If the client request does not come
within the time specified here, the connection will be closed. This option
correlates to the
opts_smtpd_timeout directive and defaults
sending an error response to a client, the server will sleep a specified
time. The purpose of this feature is to prevent certain buggy clients from
hitting the server with repeated requests in rapid succession. This option
correlates to the
smtpd_error_sleep_time directive and defaults to
This option
configures the number of errors that a client may generate before Postfix
will stop responding to requests for a specified time. Some buggy mail
clients may send a large number of requests, while ignoring or responding
incorrectly to, the error messages that result. Postfix attempts to
minimize the impact of these buggy clients on normal service. This option
correlates to the
smtpd_soft_error_limit and defaults to
If the number
exceeds this limit the connection will be closed. This option correlates to
smtpd_hard_error_limit and defaults to
Enabling this option causes Postfix to
require clients to introduce themselves with a
HELO header
at the beginning of an SMTP session. This may prevent some UCE software
packages from connecting, though it may also impact other legitimate clients
from connecting. This option correlates to the
smtpd_helo_required and defaults to
This option configures whether
Postfix will forward messages with sender-specified routing from untrusted clients to destinations within the accepted relay domains. This feature closes a sneaky potential loophole in access controls that would normally prevent the server from being an open relay for spammers. If this behavior is allowed, a malicious user could possibly exploit a backup MX mail host into forwarding junk mail to a primary MX server which believes the mail has originated from a local address, and thus delivers it as the spammer intended. This option correlates to the
allow_untrusted_routing and is disabled by default. Enabling this option should only be done with extreme caution and care to prevent turning your Postfix installation into an open relay.
The SMTP
ETRN command is a rather clumsy means for a client that is not always connected to the Internet to retrieve mail from the server. The usage of this command is rather outdated, and rarely used, as POP3 and IMAP are better suited to solve this problem in the general case. This option correlates to the
smtpd_etrn_restrictions directive and the default is to allow
ETRN from any host. This option accepts the following directives:
check_etrn_access maptype:mapname,
permit_naked_ip_address ,
check_helo_access maptype:mapname,
warn_if_reject, and
This option, as well as the following three Restrictions... options accept one or all of the following values in the text field. Each is described only once here and the specific entry will include the list of accepted directives for the option. The impact of some of these choices depends on configuration performed elsewhere, and could potentially open security holes if not configured carefully.
Permit the message if the relevant address (sender or recipient depending on the restriction) is within the local network.
The request will be refused is the client IP has no PTR record in the DNS. This means that a client with an IP address that cannot be resolved to a host name cannot send mail to this host.
check_client_access maptype:mapname
This option requires the inclusion of an already configured map, as discussed earlier. This will restrict based on the contents of the map, allowing only clients that are allowed by the map. The map may contain networks, parent domains, or client addresses, and Postfix will strip off unnecessary information to match the client to the level of specificity needed.
check_sender_access maptype:mapname
This will restrict based on the contents of the map, allowing only senders that are allowed by the map. The map may contain networks, parent domains, or
An RBL is a relay domain black hole list. By testing a reverse domain lookup against a name server that receives a domain black hole list transfer, the server can know if the mail was sent through a known open mail relay. There are a number of free and for-fee services providing black hole data. The largest and longest lasting is the service operated by MAPS, while two new similar services are operated by the Open Relay Database and by Distributed Sender Boycott List. All operated on the principle of allowing administrators to choose to refuse mail sent from open mail relays. If this option is listed, the client will be checked against the available RBL domains, and if any match the mail will be refused.
If using any of the free RBL services on the network, consider donating money, time, or resources to the project maintainers. The projects are generally run by volunteer labor, and using network resources that have been paid for by the maintainers.
If the client host name is invalid, due to bad syntax, the request will be rejected.
If the client
HELO or
EHLO command contains a naked IP address without the enclosing
[] brackets as require by the mail RFC, the message will be rejected. Beware that some popular mail clients send a
HELO greeting that is broken this way.
Reject the request if the host name in the client
HELO command has no A or MX record in the DNS.
If the client host name is not in the form of a fully-qualified domain name, as required by the RFC, the message will be rejected.
check_helo_access maptype:mapname
The server will search the named access database map for the
HELO host name or parent domains. If the result from the database search is
REJECT or a
text or
text error code the message will be refused, while a response of
OK or
RELAY or an all numerical response the message will be permitted.
This simply permits anything. Generally this will be at the end of a set of restrictions in order to allow anything that has not been explicitly prohibited.
Rejects everything. This can be used at the end of a chain of restrictions to prohibit anything that has not be explicitly permitted.
This is a special option that changes the meaning of the following restriction, so that a message that would have been rejected will be logged but still accepted. This can be used for testing new rules on production mail servers without risk of denying mail due to a problem with the rules.
If the client sends commands ahead of time without first confirming that the server support SMTP command pipelining, the message will be rejected. This will prevent mail from some poorly written bulk email software that improperly uses pipelining to speed up mass deliveries.
This restriction applies to the client host name and/or address. By
default, Postfix will allow connections from any host, but you may add
additional restrictions using the following:
This option specifies additional restrictions on what information can be
sent by client in the
HELO and
commands. This option correlates to the
smtpd_helo_restrictions directive. By default Postfix
accepts anything, and the following restrictions may be added:
This option restricts what can be contained in the
MAIL FROM command in a message. It may be used to prevent specific email addresses from sending mail, reject clients without a resolvable host name, etc. This option correlates to the
smtpd_sender_restrictions directive and may contain any of the following restrictions:
This parameter places restrictions on the recipients that can be contained in the
RCPT TO command of a sent message. It can be used to dictate where email may be sent. This option correlates to the
smtpd_recipient_restrictions, and may contain any of the following restrictions:
This option configures the optional blacklist DNS servers that will be used for all RBL checks that have been specified in all access restrictions. It may contain any number of servers in a whitespace separated list. These services can be used to help prevent spam, as discussed earlier in this section, with the Restrict ETRN command upon... parameter. This option configures the
maps_rbl_domains directive and is empty, by default.
This option specifies from which hosts, networks, domains, etc. Postfix will relay email for. This option correlates to the
relay_domains directive, and defaults to
These options configure the error result code that will be sent to the client when any of the specified restrictions are being applied. These errors have sensible default values and generally should not need to be changed. Consult with RFC 822 if you wish to understand more about the SMTP error codes, or have a reason to change any of these values.
The SMTP client options configures how Postfix will behave when dealing with other mail servers as a client, i.e., when sending mail on behalf of a user. This portion of the configuration primarily dictates how the server will respond to certain error conditions..
As discussed in the BIND chapter, a mail server performs a name server query to find the MX, or mail server, record for the destination domain. If this record indicates that the local server is the server to which mail should be sent, it can respond in a couple of ways. The default is to bounce the message with an error indicating a mail loop. If the field is selected and
local is entered, the mail will be directed to the local delivery agent instead of bouncing the mail. This option correlates to the
best_mx_transport directive.
By default, a mail that cannot be delivered because the destination is invalid will be bounced with an appropriate error message. However, it is possible to configure
postfix to hand off email to another server instead. This option correlates to the
fallback_relay directive.
If a name server query fails to provide an MX record, the server defaults to deferring the mail and trying again later. If
Yes is selected instead, an A record query will be done and an attempt will be made to deliver to the resulting address. This option correlates to the
ignore_mx_lookup_error directive.
If a remote server responds to a connection with a 4XX status code,
postfix will, by default, select the next available mail exchanger specified by the MX records. If set to
No, mail delivery will be deferred after the first mail delivery attempt and another attempt will be made later. This option correlates to the
smtp_skip_4xx_greeting directive.
This option configures whether Postfix will wait for the receiving mail server to respond to the
QUIT command. This option correlates to the
smtp_skip_quit_response directive and defaults to no.
This option specifies the maximum number of deliveries that Postfix will perform to the same destination simultaneously. This option correlates to the
smtp_destination_concurrency_limit directive and defaults to the system-wide limit for parellel deliveries configured in the Delivery Rates page documented in the next section.
Limits the number of recipients per delivery. This option correlates to the
smtp_destination_recipient_limit directive and defaults to the system-wide limit for recipients per delivery.
Specifies the time in seconds that the Postfix delivery agent will wait before timing out a TCP connection. This option correlates to the
smtp_connect_timeout directive and defaults to 0, which disables connection timeouts.
Limits how long Postfix will wait for a greeting banner to be received from the destination server. This option corresponds to the
smtp_helo_timeout directive and defaults to 300 seconds.
Sets the timeout in seconds for sending the
SMTP MAIL FROM command and for receiving the destination servers response. This option correlates to the
smtp_mail_timeout, and defaults to 300 seconds.
Sets the timeout in seconds for sending the
SMTP RCPT TO command and for receiving the destination servers response. This option correlates to the
smtp_rcpt_timeout directive and defaults to 300 seconds.
Sets the timeout in seconds sending the
SMTP DATA command and for receiving the destination servers response. This option correlates to the
smtp_data_init_timeout and defaults to 120 seconds.
Specifies the SMTP client timeout in seconds for sending the contents of the message. If the connection stalls for longer than this timeout, the delivery agent will terminate to transfer. This option corresponds to the
smtp_data_xfer_timeout directive and defaults to 180 seconds.
Specifies the SMTP client timeout in seconds for sending the closing SMTP "." and receiving the destination servers reply. This option correlates to the
smtp_data_done_timeout directive and defaults to 600 seconds.
Sets the timeout in seconds sending the
SMTP QUIT command and for receiving the destination servers response. This option correlates to the
smtp_quit_timeout and defaults to 300 seconds
This page contains the options for setting the default rate and concurrency limits for all Postfix components. These rates can usually be overridden within their respective configuration sections.
This option specifies the maximum number of deliveries that Postfix will perform to the same destination simultaneously. This option correlates to the
default_destination_concurrency_limit directive and defaults to
Limits the number of recipients per delivery. This option correlates to the
default_destination_recipient_limit directive and defaults to
Specifies the initial number of simultaneous deliveries to the same destination. This limit applies to all SMTP, local, and pipe mailer deliveries. A concurrency of less than two could lead to a single problem email backing up delivery of other mail to the same destination. This option configures the
initial_destination_concurrency directive and defaults to
Defines the number of days a message will remain queued for delivery in the event of delivery problems before the message is sent back to the sender as undeliverable. This option configures the
maximal_queue_lifetime directive and defaults to 5 days.
In the event of a delivery deferral, Postfix will wait the specified amount of time before reattempting delivery. This value also specifies the time an unreachable destination will remain in the destination status cache. This option correlates to the
minimal_backoff_time directive and defaults to 1000 seconds.
Specifies the maximum amount of time between delivery attempts in the event of a deferred delivery. This option configures the
maximal_backoff_time directive and defaults to 4000 seconds.
Specifies the time in seconds between queue scans by the queue management task. This option correlates to the
queue_run_delay and defaults to 1000 seconds.
This field specifies which delivery transports, if any, of the transports defined in the Transport Mapping section will not have their messages sent automatically. Instead the messages for these transports will be queued, and can be delivered manually using the
sendmail -q command. This option correlates to the
defer_transports directive, and contains nothing by default.
Postfix has two levels of logging. The first level is the normal
maillog, which reports on all normal mail activities such as received and sent mail, server errors, shutdowns and startups. The second level is more verbose, and can be tuned to log activity relating to specific SMTP clients, host names, or addresses. This page contains the configuration for the second level of logging.
This is a list of patterns or addresses that match the clients, hosts, or addresses whose activity you would like to have more verbose logging for. Values here could be an IP address like
192.168.1.1 or a domain name like
swelltech.com. This option correlates to the
debug_peer_list directive and is empty by default.
Specifies the level of verbosity of the logging for the activity that matches the above patterns. This option correlates to the
debug_peer_level directive and defaults to 2. The above field must have at least one value for this debug level to have any impact.
Postfix offers an extremely flexible set of access controls, primarily targeted at preventing unsolicited commercial email from being delivered through the server. In order to construct a suitable set of controls it is necessary to understand the order in which rules are checked, and how they interact. By default Postfix will accept mail for delivery from or to any client on your local network and any domains that are hosted by Postfix. So, by default, Postfix is not an open relay. This is a good beginning, and may be all that is needed in many environments. However, because UCE is such a nuisance for users and network administrators, it may be worthwhile to implement more advanced filtering. This section will address the basics of the Postfix UCE control features.
Every message that enters the
smtpd delivery daemon will be processed by a number of access control lists and checked against a number of rules to insure that the message is one that the administrator actually wants delivered. The goal for most administrators is to prevent unsolicited commercial email from passing through these rules, yet allow every legitimate email to be delivered. This is a lofty goal, and a delicate balance. No perfect solution exists, as long as people are willing to steal the resources of others for their own commercial gain and go to great lengths to overcome the protections in place to prevent such abuse. However, in most environments it is possible to develop a reasonable set of rules that prevents most spam and allows most or all legitimate mail through unharmed.
It is important to understand the order of processing if complex sets or rules are to be used, as attempting to use a particular rule too early in the chain can lead to subtle errors, or strange mail client behavior. Because not all clients react exactly correctly to some types of refusals, and not all clients create correctly formed SMTP requests, it is not unlikely that a misplaced rule will lock out some or all of your clients from sending legitimate mail. It could also just as easily lead to opening a hole in your spam protections early in the rule set, which would allow illicit mail to pass.
The Postfix UCE controls begin with a couple of simple yes or no checks,
smtpd_helo_required and
strict_rfc821_envelopes, both configured in the SMTP Server Options page. The first, if enabled, requires a connecting mail client to introduce itself fully by sending a HELO command. This can stop some poorly designed bulk email programs. The second option requires for the envelope to fit the SMTP specification precisely, thus enforcing complete headers. Though the envelope and HELO can be forged by a bulk mailer, it may stop the more hastily implemented variants (well, how many good programmers do you know that write tools to help spammers?).
The next stage is the four SMTP restrictions also found on the SMTP Server Options page. These further limit from where and to where mail will be delivered. The order of traversal for these four lists of rules is:
Each of these checks can return
OK, or
DUNNO. If
REJECT, the message will be refused, and no further rules will be checked. If
OK, no further rules in the given restriction will be checked, and the next restriction list will be checked. If
DUNNO, the list will continue to process the current restriction until it gets another result (
OK or
REJECT) or until the list end is reached, which is an implicit
OK. If all lists return
OK, the message will be passed to the regular expressions checks, otherwise it will be rejected.
Next come the regular expression-based
header_checks and
body_checks. These options, if enabled, provide a means to test the actual contents of the headers and the body of the email, respectively. Both operate in the same way, though they should be used somewhat differently. Header checks can be used to prevent well-known spamming domains from sending you email, or for stopping some well-known bulk-mailer software. By entering some signature of the offender, like the domain name, or the X-mailer field identifying the software, the mail can be rejected before the body is even sent. Body checks, though the use the same regular expressions and file format as header checks, should be used more sparingly, as the mail must be accepted before it can be checked. Thus bandwidth is wasted on receipt of the mail, and worse, the server will be occupied for a potentially long while with processing the entire contents of every email. In short, use header checks whenever is convenient, and use body checks only when an effective header check cannot be devised. Only
REJECT or
OK are permitted for the returned values.
Webmin, as of this writing (version 1.020), does not provide access to the regular expressions based checks,
As with most of the server software documented here, Postfix has an intimidatingly large number of options and features. But, as we've already seen with BIND and Apache, even complex software can be easy and quick to setup if you know just what to do to get started. Postfix is no different. At the end of this short section you'll have a fully functioning mail server, capable of sending and receiving mail on behalf of one or more domains.
In most environments, only three configuration details are needed to begin providing mail service with Postfix. First, browse the the General Options page of the module. The top two options, What domain to use in outbound mail and What domains to receive mail for, need to be configured to suit your environment.
For the first option, you will likely want to select
Use domainname in order to select the domain name of your server as the source of email sent from it. For example, if my mail server is named
mail.swelltech.com and I selected this option, mail will appear to originate from
The second option specifies the domains for which you will receive email. The default is probably too restrictive in that it will only permit receipt of mail to
$mydomainname and
localhost.$mydomain, or the server itself. While this depends on your environment and needs, it is likely that you will want to at least add the
$mydomain variable to the list of accepted domains.
The last step to making Postfix fully functional for sending and receiving mail is to insure the Local networks parameter is set appropriately. If you only have one network block, this will already be set appropriately, as the default is to accept mail for delivery from all attached networks (i.e., all configured and active network addresses). However, if you have a public and private network interface, you'll likely want to remove to the public interface to prevent other clients of your ISP from being able to relay mail through your server.
Click the Save and Apply button to make your changes take effect. It is, of course, a good idea to test your changes to make sure things are working as intended. First, assuming an appropriate DNS MX record has already been configured as discussed in the BIND tutorials, you can send yourself an email at the new domain. Watch the
maillog in the System Logs module for errors and to see if the message is delivered as expected. Next configure your mail client to send through your new mail server, to insure it is working for sending mail, as well. The
maillog will likely give clues about what is wrong in the event of problems.
At this point, if you've performed the configuration in the previous tutorial, you'll be able to accept mail for any number of domains. However, this is not the same as providing independent virtual hosting support with Postfix, because you can only have one user of a given name and mail sent to that user name at any of the domains for which you accept mail will be delivered to that user. So, for example, if you hosted
penguinfeet.org, and
nostarch.com on the same server, and mail was sent to user
joe at each of those domains, all three mails would end up in the same mailbox. Therefore, you have to introduce another layer to solve this problem.
Postfix has two commonly used methods for solving this problem. The first is the native Postfix method, using a virtual table to direct mail to the correct destination. The second method is modeled after the way Sendmail handles the problem, and is therefore a lot more complex. Because simplicity is better than complexity, you'll learn the native Postfix mechanism exclusively. The Postfix
virtual man page covers both methods in moderate detail. If you have an older Sendmail installation that is being converted to Postfix you may wish to use the second method and maintain your current virtual mail configuration. If you will be running an extremely large number of virtual domains, it is likely preferable to use the second method, as well.
The first step for setting up virtual domain delivery is for you to create a virtual map table using the Virtual Domains page (Figure 10.7, The Virtual Domains Table. Enter the map type (
dbm, etc.), followed by the file name of the flat file that will contain the table information. For example, you could use
/etc/postfix/virtual for this purpose. This is a pretty common location for this file.
Save and apply the change, and return to the Virtual Domains page. Now, you can click the New mapping button. You first have to create a generic map for the new domain. So, for the Name field, enter your virtual domain name. In the Maps to... field, you can technically enter anything you like (as long as we enter something). The custom seems to be to enter
virtual in this field, as that is its purpose. Click Save mapping to add it to the virtual table.
Next, you'll want to add a
postmaster alias, as all mail servers must have a functioning
postmaster address to be compliant with the relevant RFC. So, click New mapping again. This time enter
email@example.com into the Name field, where
virtual.domain is the name of your domain. Then enter
postmaster into the Maps to... field so that mail to this address will be mapper to the local
postmaster address for normal delivery.
Finally, you're ready to start adding your virtual domain users to the table. Once again, create a new mapping. Fill in your new virtual domain mail address in the Name field. For example, you might fill in
email@example.com. In the Maps to... section, enter the name of a local user that you would like to receive mail for this address. In this case, you would use
virtual-joe or perhaps
virtual.domain.joe. This new local user must exist for mail to be delivered, therefore you'll need to add the new user to the system.
Now, Save and Apply your changes, and test it out! The virtual maps can be handled by various database types, or exported to an LDAP database. There is no reasonable limit to the number of virtual users and domains you can have.


text:
Pepper Coulis
Notes: Executive chef Michel Stroot at the Golden Door uses red and yellow pepper coulis side by side in plate presentations to add color, moisture, texture, and flavor. If you're in a hurry, instead of roasting fresh peppers, you can use 1 1/4 cups rinsed, drained canned roasted peppers. You can make the coulis ahead of time; cover and chill up to 3 days or freeze up to 6 months.
This recipe goes with Grilled Portabellas with Couscous
Yield: Makes 3/4 to 1 cup
More From Sunset
Nutritional Information
Amount per serving
- Calories: 26
- Calories from fat: 42%
- Protein: 0.5g
- Fat: 1.2g
- Saturated fat: 0.2g
- Carbohydrate: 3.7g
- Fiber: 0.9g
- Sodium: 1.2mg
- Cholesterol: 0.0mg
- 1 red or yellow bell pepper (about 10 oz.)
- 1 tablespoon water
- 1 teaspoon olive oil
- salt to taste
- cayenne pepper to taste
- Rinse 1 red or yellow bell pepper (about 10 oz.); pat dry. Set pepper in a 9-inch pie or cake pan and broil 3 to 4 inches from heat, turning as needed, until charred on all sides, about 15 minutes total. Let cool. With a small, sharp knife, remove and discard skin, stem, and seeds. Coarsely chop pepper and place in a blender or food processor. Add 1 tablespoon water and 1 teaspoon olive oil; whirl until smooth. Add salt and cayenne to taste. If coulis is thicker than desired, thin with 1 to 2 more tablespoons water.
- Nutritional analysis per 1/4 cup.
My Notes
Only you will be able to view, print, and edit this note.Add Note
Pepper Coulis Recipe at a Glance
- COURSE: Sauces/Condiments
- CONVENIENCE: Make-Ahead, Quick/Easy
- CUISINE: American
- MAIN INGREDIENT: Vegetables
- DIETARY CONSIDERATION: Low Calorie, Low Cholesterol, Low Fat, Low Saturated Fat, Low Sodium, Meatless
- COOKING METHOD: Blender, Food Processor
- PUBLICATION: Sunset
More Recipes Like This
Find out what we've got cooking...
Get our Free Weekly Specials Newsletter filled with our favorite recipes, seasonal menus, and special features.
We Respect Your Privacy. Privacy Policy

subset: commoncrawl


text:
Take a look back at some images of Hollywood hunk Matthew McConaughey -- a Best Actor nominee for his role in "Dallas Buyers Club" -- through the years.
Weather Alerts
Matthew McConaughey through the yearsUPDATED 9:14 AM CST Feb 14, 2014
Slideshow Central
CommentsThe views expressed are not those of this site, this station or its affiliated companies. By posting your comments you agree to accept our terms of use. Your comment will not appear here until you verify your email address with Disqus. KETV NewsWatch 7 encourages users to report violations of our terms of use by flagging the inappropriate comment. Hold your mouse over the comment to reveal the flag on the right side, then click the flag.blog comments powered by Disqus
Latest from KETV Channel 7
AdvertisingBest 7's Sure Bets


text:
If Greg wins the job it's not because E. Brown isn't good enough, it's because he's just that good. I was really shocked at how easily he blew past double teams, can't wait to see him again this Sat.
I would be happy as poo if it was just an issue of a logjam of talent at DE


text:
An Independent Family-Owned Newspaper
Tuesday, September 23, 2014
Subscribe to our RSS News Feed
Local News
From The Editor's Chair.
SEATON: Village to commemorate World War I centenary
Friday, 24 January 2014
Plans for events in Beer to commemorate the centenary of the outbreak of the First World War are progressing well.
A grant from Seaton Phoenix will enable commemorative mugs to be given to children from the village who attend the primary school and playgroup, while an art competition is being organised for students at local schools.
More details of these developments will be available shortly.
The main events will take place between August 1st and 4th.
From Friday 1st to Monday, August 4th, an exhibition will be held in the Congregational Hall, featuring research into men from Beer who served in all the armed forces during World War I, and those who served as merchant seamen.
These include men who served in France, Belgium, Italy, East Africa, Mesopotamia (modern Iraq), the Mediterranean, the Dardanelles, the South Atlantic, the North Sea and the Indian Ocean.
Photos and a diary which have been lent to the project have added extra detail to the research.
Two historians from the Imperial War Museum will give lectures in the Mariners Hall on Saturday, August 2nd.
Peter Hart, author of many books on World War I, is the museum's oral historian, and will give a presentation on the Battle of Jutland, in which four men from Beer were killed.
Alan Wakefield is a curator in the museum's photographic collection, and will lecture on the Zeebrugge Raid in 1918, after which a submariner from Beer (who survived the war) was awarded the Conspicuous Gallantry Medal.
Sunday, August 3rd will see a re-enactment of events which occurred in Beer exactly 100 years before, when the Royal Naval Reservists from the village were called up and marched along the main street, led by the village band.
This time, the Ottery St Mary Silver Band will lead the way, and members of the original families will take part, representing their family members who marched away in 1914. This occasion will be used to represent the departure of all those from Beer who served during the war.
After the parade, the Ottery St Mary band will stage a concert in the open air, or in the Mariners Hall if the weather is poor.
A meeting to discuss detailed plans for the events will be held in the Congregational Hall, Beer at 7pm on Wednesday, February 5th.
Anyone interested in being involved in any way is invited to attend. Further details are available from Richard Scott on 01297 24157 or Peter Anderson on 01297 23507.
All content © of Pulmans Weekly News unless stated otherwise.
Comments on this news item:
Be the first to comment using the form below.
Add your comment:
Local Newspapers
Advertise with us
Something to sell?
Most Read


text:
Four months later violent protests around the world (London, Afghanistan, Libya, Saudi Arabia, Syria, Pakistan, for example) continue to make headlines with their death tolls and numbers of inured, causing Danish Prime Minister Anders Fogh Rasmussen to describe the controversy as Denmarks worst international crisis since World War II.
My experiences traveling to Bangladesh last Janurary and studying Islam have helped me understand the offense many Muslims take to cartoons that portray their prophet with violent intent.
It seems distasteful, irresponsible journalism to publish such an offensive feature. Whats more, Flemming Rose, the Cultural Editor of the conservative Jyllands-Posten, originally contacted forty cartoonists and enlisted them to draw the prophet as they saw him. Was Rose trying to create controversy?
Rose published the twelve cartoons he received in order to highlight the difficulty Danish writer Kåre Bluitgen experienced in finding an artist to illustrate his childrens book about Muhammad. However, the article that accompanies the illustrations promotes a different agenda.
[Some Muslims] insist on special consideration of their own religious feelings. It is incompatible with contemporary democracy and freedom of speech, where you must be ready to put up with insults, mockery, and ridicule. [ ] That is why [we] invited members of the Danish editorial cartoonists union to draw Muhammad as they see him, Rose said in the article that accompanied the illustrations.
The text does not discuss Bluitgens experience, nor do the cartoons appear to have been designed for the purposes of a respectful childrens book.
Social justice and unity are fundamental virtues in Islam. But despite Islams peaceful nature, the cartoons promote common prejudices against Islam, depicting Muhammad as violent.
In total, five of the 12 cartoons depict religiously offensive material; two of the cartoons portray the prophet neutrally, and five of the cartoons directly refer to Roses publishing the cartoons as a publicity stunt for the Jyllands-Posten.
Perhaps Rose published the cartoons to send a message to some radical Muslims to buck up, and stop playing the victim. Perhaps the message meant to censure violent reactions to negative press. Or perhaps the whole feature was a ploy to increase Jyllands-Postens circulation.
After chairing a Muttahida Majiis-I-Amal (MMA) religious party alliance meeting in Pakistan on Monday, MMA President Qazi Hussain Mahmad called the publication of the cartoons in Europe part of the clash of civilizations led by (U.S. President George W.) Bush, CNN reported.
Therefore our movement is against Bush as well as against Mush, Mahmad reportedly said, referring to Pakistani President Pervez Musharraf, a key ally in Bushs war on terrorism. Last week Musharraf announced a ban on cartoon-related rallies in Islamabad, Pakistans capital, but protesters continued to gather in defiance of the ban.
Mahmads response seems disproportionate to the cartoons themselves, which are not connected to Bush or Mush in any way.
Mahmads response seems to support the theory that radical Muslims are using the cartoons to promote radical action and fuel a fire that seems destined for detonation. Just think, all this because of a Danish newspaper.
Brenna Bray is a senior from Stillwater, Minn. She majors in psychology with a concentration in media studies.


text:
Denial of Service Attack Causes Windows NT Systems to Restart
Article ID: 180963 - View products that this article applies to.
This article was previously published under Q180963
This article has been archived. It is offered "as is" and will no longer be updated.
During the processing of a Server Message Block (SMB) logon request, memory corruption occurs causing one of the following errors:
STOP 0x0000000A
STOP 0x00000050
The result is for the system to restart or stop responding (hang).
Note: The STOP errors will vary from case to case.
The size of data to follow is contained in the SMB logon request. When the size specified in the request does not match the size actually present, the corruption occurs.
To resolve this problem, obtain the latest service pack for Windows NT 4.0 or Windows NT Server 4.0, Terminal Server Edition. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/152734/EN-US/ )How to Obtain the Latest Windows NT 4.0 Service Pack
For your convenience, the English version of this post-SP3 hotfix has been posted to the following Internet location. However, Microsoft recommends that you install Windows NT 4.0 Service Pack 4 to correct this problem.
Microsoft has confirmed this problem could result in some degree of security vulnerability in Windows NT version 4.0. This problem was first corrected in Windows NT 4.0 Service Pack 4.0 and Windows NT Server 4.0, Terminal Server Edition Service Pack 4.
Article ID: 180963 - Last Review: October 7, 2013 - Revision: 1.2


text:
October 20, 2014 – March 30, 2015
- Location Chicago, IL
- Price Series subscriptions start at $101 (Nat Geo members and Goodman Theatre subscribers) and $115 (general public).
National Geographic Live, National Geographic's popular and entertaining speaker series, will showcase the world through the eyes of great explorers, filmmakers, and photographers with a new season starting October 2014 at Chicago's Goodman Theatre. If you're a previous attendee, you already know that Nat Geo Live events are lavishly illustrated, firsthand presentations by people who travel the world to get the powerful stories and images you've seen on the National Geographic Channel and in National Geographic magazine. Join us!
Both subscription and single-event tickets for our 2014–15 series are now on sale now. A limited number of seats remain. Check the links below to find out more about our new season of events. Please note that member pricing is available only by phone or in person at the Ticket Office (+1 312 443 3800).
Join the Explorers Circle! Enhance your National Geographic Live experience by becoming a member of the Explorers CIrcle. Find out how.
View our Tickets and Information page.
Award-winning photographer Steve Winter has tracked tigers in the jungles of Asia, searched for snow leopards in the Himalaya, and gone to Hollywood in pursuit of a cougar. Co-author of the National Geographic book Tigers Forever, Winter strives to share the beauty of big cats while working to save them.
Veteran climbers Mike Libecki and Cory Richards tell the story of their journey to Antarctica, where they battled extreme cold, furious winds, and fickle weather to summit a remote 2,000-foot spire. Join them for a humorous but gripping firsthand account of this first ascent at the bottom of the world.
Explore undersea worlds with photographic legend David Doubilet and his wife and underwater partner, photojournalist Jennifer Hayes. From the coral reefs of Papua New Guinea to the icebergs of Antarctica and the harp seals of Canada's Gulf of St. Lawrence, they'll go beyond the published stories to share their behind-the-camera adventures.
A veteran National Geographic photographer whose career has spanned four decades, Jodi Cobb takes audiences on a moving and humorous journey as she chronicles her public—and private—path from young photojournalist to world-renowned photographer.
Event Sponsors
Lead Education Sponsor


text:
Heart Disease Health Center
How Red Wine Helps the Heart
June 21, 2010 -- How does drinking red wine manage to keep the cardiologist at bay? Two studies suggest different approaches as to how merlots and cabernet sauvignons and other types of red wine offer heart-healthy benefits.
In the first of two studies published in the July issue of American Journal of Clinical Nutrition, scientists at the University of Ulm, Germany, investigated the biological behaviors of resveratrol in human fat cell biology. Resveratrol is found in the skins of red grapes and has been shown to be a potent biological agent that may offer protection against cardiovascular disease, cancer, type 2 diabetes, and neurodegenerative disorders such as Alzheimer's disease.
Researchers hypothesized that resveratrol might decrease obesity by preventing immature fat cells from fully maturing, and also help activate sirtuin 1 (Sirt 1), a protein that protects the heart from inflammation.
Laboratory tests conducted in vitro on human cells, in which cells were managed in a control environment, such as a petri dish, showed that resveratrol influenced fat cells' form and function. Resveratrol blocked immature fat cells from developing and differentiating, which, in turn, affected the fat cells' abilities to function. Several studies have used animals to examine resveratrol's effects, but this is one of the first to use human fat cells.
They also found that resveratrol stimulated glucose uptake into human fat cells and blocked molecules from converting into fat. Moreover, resveratrol influenced Sirt1 in a beneficial way and it also affected the secretion of adipokines, fat cells that engage in cell-to-cell communication. The findings indicate that resveratrol might interfere with obesity and other metabolic effects that could increase the risk for cardiovascular disease.
Researchers suggest resveratrol could offer some therapeutic opportunities in the treatment of obesity, which is quite prevalent in the industrialized world. Reducing obesity, a major risk factor for cardiovascular disease, may also help improve heart health. According to the World Health Organization (WHO), there are 1.6 billion people age 15 and older who are overweight -- meaning they have a body mass index (BMI) of 25 or higher -- and at least 400 million people who are obese, meaning their BMI is 30 or higher. The WHO projects that in five years there will be 2.3 billion overweight adults and more than 700 million obese adults.
"Our findings open up the new perspective that resveratrol-induced intracellular pathways could be a target for prevention or treatment of obesity-associated endocrine and metabolic adverse effects," the authors write. "Resveratrol may act on different levels of cell signaling."
Red Wine and Blood Vessel Cells
In the second study, researchers from the Israel Institute of Technology, Haifa found that red wine enhanced the health of the cells in blood vessels. The research team studied 15 healthy adults with a mean age of 29 years who agreed to consume 250 mL (8.5 ounces or two servings) of red wine everyday for three consecutive weeks. The participants provided blood samples at the beginning and end of the three-week study period so that researchers could evaluate blood vessel function.


text:
Public Relations
The Division's Public Relations work plays an important part in building and maintaining the reputation of the University through effective communication to the public and to external and internal stakeholders. It communicates the achievements and aspirations of the University through a variety of media.
The Public Relations team co-ordinates and provides leadership for public relations across the university including internal communications, production and distribution of key publications, and promotion of the University through media at local, national and international level. The team responds to more than 600 media queries each year and co-ordinates high-profile award entries such Queen's Anniversary Prizes.
The team also co-ordinates public affairs activity, commissions photography and video, oversees social media and web content, and manages major events such as Court and Graduation.


text:
Bunch a penguins from my sketchbook. I like to put hats on them, what can I say
I refuse to sink
Flight Facilities - Clair De Lune (Feat. Christine Hoberg)
"Don't go,
Tell me that the lights won't change
Tell me that you'll feel the same.
And they'll stay here forever."
get a life - fritz kalkbrenner
The new death grips, punishing. nothing like it. http://soundcloud.com/deathgrips/death-grips-stockton


text:
Others are more critical of the military-led transition.
Na'eem Jeenah, the executive director of the Afro-Middle East Center in Johannesburg, sees political manipulation behind the choice of election dates.
"You [could] have the election of a strong president who would be able to dictate the time table and the rules for how the parliamentary elections take place," he said. "[Head of the armed forces, General Adbul Fattal] al Sisi [may] stand for president, and he [would] be the kind of strongman president which the continent has been suffering under for decades."
Jeenah says the current crackdown does not just affect the Islamists but anyone who disagrees with the military -led ouster of former President Morsi. He says the stand-off is not between Islamists and secularists, but between those for and against the military-led intervention.
He says among those imprisoned by what he calls draconian anti-terror laws are secular activists, and journalists. He says the laws are meant to silence critics prior to the referendum on the new constitution.
Media bias
Analyst Mohamad Hamas Elmasry says polling data continue to show that Egyptian society is largely split, with a one-sided media environment that promotes the interim government, not reconciliation.
Elmasry is an assistant professor and the graduate director in the Department of Journalism and Mass Communication at the American University in Cairo.
He says both the media and government routinely suggest the Brotherhood is treasonous and un-Egyptian, and have praised massacres of Brotherhood protesters.
As an example, he referred to the killings of hundreds of protestors at Rabba al-Adawiya camp outside Cairo by security forces. The government said troops fired in self defense.
"After the massacres in August," says Elmasry, "the Egyptian media were praising the government-instigated violence. One of the private networks on TV was showing footage of the dispersal of the largest protests, while playing the [triumphant soundtrack to the film] Rocky in the background. "
Paper promises
Elmasry doubts that the proposed new constitution will restore civil liberties, despite articles that promise freedoms. He says the constitution under former president Hosni Mubarak, who ruled for over 30 years, also guaranteed press and personal freedoms. However, those promises were replaced by what he calls draconian laws which remain on the books today.
"Another problem with the [proposed] constitution," he says, "is that the minister of defense is going to be essentially the most powerful person in the country. His appointment must be approved by the military [over the next two presidential terms], the president can not remove him, and his term is eight years long, which is twice as long as the president's term."
Elmasry says democracy can not develop in an environment of systematic exclusion, a repressive legal framework, and military domination.
Others say what Egypt needs is stability, and evolution not revolution. They say a government headed by a military-backed president and a multi-party parliament is a step in the right direction.


text:
Buy My House? This is the easiest way to sell your house online without stress.
Do you want sell your house fast and without stress, but still achieve the best possible price?
We buy houses in a time scale to suit you, regardless of the condition. In some cases you may be able to sell your house the very same day.
We buy every kind of properties: e.g. Houses, Condos, Lands, Mobile, Townhouses, Timeshare. Request your Instant Online Offer without any obligation now.
• No Cost • No Obligation • No Commitment.
• No Agents Fees • No Hidden Fees.
• Cash Offers • Quick Sales.
Selling your house through real estate agents can be very stressful and expensive and it may take very long. If other buyers notice your in a desperate situation, they will try to negotiate to the lowest possible price. We and our partners make fair offers, pay in cash and close fast. Give us a try. As stated our offers are without any fees, obligation or any kind of cost.
Selling Your House was never easier.
HBS based on 1231 ratings.


text:
Product Recall: We are voluntarily recalling fewer than 8,000 cases of regular Kraft American Singles Pasteurized Prepared Cheese Productlimited to 4 SKUs on two "Best When Used By" dates of February 20, 2015 and February 21, 2015. Click Here.
HEAT oven to 325ºF.
REMOVE kale ribs; discard. Tear each leaf into 5 or 6 pieces; place in medium bowl. Add oil; toss to evenly coat.
SPREAD half the kale pieces into single layer on each of 2 parchment-covered baking sheets.
BAKE 14 min., turning after 7 min. Sprinkle chips evenly with half the cheese; turn. Sprinkle with remaining cheese. Cool completely.


text:
Chrono Tigger
9 notes
Posted 10 months ago
My favorite town in VIII
30 notes
Posted 1 year ago
Rapture in Disney world
26 notes
32 notes
disc 2..
1 note
Posted 1 year ago
2 notes
It begins…
27 notes
grr tumbler.
29 notes
what's going on….
133 notes
Page 1 of 37
inspired by the work of SAUL BASS, ART GOODMAN and DAVE NAGATA.hitchcock typeface by MATT TERICH. tumblr theme by MATTHEW BUCHANAN.


text: Jefferie Gibson, the Tigers' only defensive back commit of the class, officially signed his letter of intent today. Gibson, a 3 star recruit from North Carolina, most likely projects as a safety, as he boasts a lot of size for a DB. The 6'3″ nearly 200 lb defensive back was the 25th rated prospect in the state of North Carolina, according to rivals.com.


text:
The Greencards
Until they open their mouths to speak, you'd think this bluegrass-infused duo hailed from our general vicinity. These Australian expatriates don't deal in the spoken word, though, and their music sounds thoroughly American. Kym Warner and Carol Young have been in the studio recording a new album, which will be their first since fiddler and founding member Eamon McLoughlin left the band in late 2009.
8 p.m. Jan. 7. $18; $15 in advance. Eddie's Attic, 515 N. McDonough St., Decatur. 404-377-4976.
Big Mike Geier's "Elvis Royale" featuring Kingsized Orchestra and Dames Aflame
It's been more than 30 years since his death, but it seems that nothing can dull the king's shine. This annual tribute is headlined by Kingsized, a supremely entertaining retro combo led by imposing singer-actor Mike Geier. The festivities are gussied up with an injection of Vegas-y cheese by the glamorous Dames Aflame burlesque troupe. This is one of Geier's two annual tributes to Tupelo's favorite son. There are also festivities each August on the anniversary of Presley's death.
8:30 p.m. Jan. 7-8. $25; $23 advance. Variety Playhouse, 1099 Euclid Ave. N.E., Atlanta. 404-524-7354.
Patty Larkin
Larkin's lovely, soul-searching songs break no new ground. Instead, they touch upon familiar themes with a cautious grace. She's an underrated artist who still takes the time to shine a spotlight on other musicians who don't get the respect they deserve. On her latest recording, "25," she gets a little help from artists she's inspired and those who inspired her. The album celebrates her 25 years of recording with new versions of 25 songs. She sent the stripped-down recordings to friends and colleagues — including Rosanne Cash, Mary Chapin Carpenter, Shawn Colvin, Bruce Cockburn and Martin Sexton — who added their own contributions. Another one of the contributors, Peter Mulvey, joins Larkin at this show.
8 p.m. Jan. 8. $20. Red Light Cafe, 533 Amsterdam Ave. N.E., Atlanta. 404-874-7828.
Crooked Fingers
Eric Bachmann used to be part of noisy North Carolina indie-rock merchants Archers of Loaf. The complex and adventurous Crooked Fingers is an entirely different proposition. Crooked Fingers' dark, melancholy mode owes a debt to Leonard Cohen and Tom Waits, and the music was immersed in a Spanish-flavored world of torment, toreros and amor on 2005's "Dignity and Shame" and 2008's "Forfeit/Fortune." Bachmann has been working on a new album, so we should know sometime this year if he's still in an Iberian state of mind.
9 p.m. Jan. 8. $12. The EARL, 488 Flat Shoals Ave., Atlanta. 404-522-3950.
Danny Barnes
Former Bad Livers leader and banjo player extraordinaire comes back through town on a solo tour. He's still working his latest album, "Pizza Box," which marked his debut on Dave Matthews' ATO Records. Barnes has recorded with the Dave Matthews Band, joining the group on stage at last year's Bonnaroo festival in Tennessee. Barnes also joined Matthews on Herbie Hancock's latest album, "The Imagine Project," for a version of the Beatles' "Tomorrow Never Knows."
8 p.m. Jan. 12. $15; $12 in advance. Smith's Olde Bar, 1578 Piedmont Road, Atlanta. 404-875-1522.


text:
(based on 4 reviews)
Ratings Distribution
5 Stars
4 Stars
3 Stars
2 Stars
1 Stars
of respondents would recommend this to a friend.
Best Uses
Reviewed by 4 customers
Sort by
Displaying reviews 1-4
Back to top
I am thinking buying it for my sisters!
By Gigi
from Hickory Creek, TX
Comments about iPad® mini / 7" Tablet Sleeve with Pocket:
Use it to keep it from scratching, use the pocket to put the charger, pen, small note book, screen leaner cloth.
Bottom Line Yes, I would recommend this to a friend
Was this review helpful? Yes / No
- You may also flag this review
Great case!
By Derek
from Spokane, WA
See pros
Great Transport Case
By LD
from Alameda, CA
Perfect fit. Nice materials and finish. Water resistant.Neatly keeps everything together (see video):-Nexus 7 (2013 version 2) housed in cover-Nexus USB charging plug and cable-OTG (On-The-Go) cable-USB flash drive-USB flash card reader-Microfiber screen cleaning cloth-EarbudsI use an old clip-on camera strap that easily attaches to the Case Logic zipper pulls and creates a shoulder/carrying strap.
It's the size that counts.
By Hambone
from Arvada, CO
Right size.
Newsletter via e-mail
Iscriviti per ricevere offerte e promozioni esclusive
Dove acquistare
Informazioni sull'azienda
La nostra storia
Contatti aziendali
Protezione della privacy
Segui Case Logic


text:
Rumsey is located in California.
Rumsey, California has a population of
Rumsey is
family-centric than the surrounding county with
0% of the households
containing married families with children.
The county average for households married with children is 39.06%.
The median household income in Rumsey, California is
The median household income for the surrounding county is $57,260
compared to the national median of $53,046.
The median age of people living in Rumsey is
25.7 years.
The average high temperature in July is 97
degrees, with an average low temperature in January of 33.3 degrees.
The average rainfall is approximately 22.3 inches
per year, with 0.2 inches of snow per year.
Pacific Union International
One Letterman Drive, Building C, Suite 300
San Francisco, CA
Real Estate Agents & Staff