(For High-Volume Production Email Delivery) # ------------------------------------------------------------------- # PowerMTA Configuration File - Sample for High-Volume Email Delivery # ------------------------------------------------------------------- # Version: 4.5+ # Purpose: Production-ready configuration with deliverability tuning # Notes: Adjust paths, IPs, domains, and resources to your environment. # ------------------------------------------------------------------- --------------------------- Global Process Directives --------------------------- process-id-file /var/run/powermta/pmta.pid spool-directory /var/spool/pmta log-directory /var/log/pmta max-smtp-out 100 # Max concurrent outbound connections (all MTAs) max-errors-per-domain 10 # Failures before marking domain dead max-errors-per-recipient 3 domain-error-expiration 30m # Retry dead domain after 30 minutes recipient-error-expiration 30m --------------------------- SMTP Service (Inbound) --------------------------- smtp-service port 25 access-source config # Use IP-based rules below access-rule allow 127.0.0.1 access-rule allow 192.168.1.0/24 access-rule deny all
# Require authentication for relaying auth-require true auth-scheme LOGIN auth-source file /etc/pmta/auth.db sample powermta configuration file
virtual-mta gmail-pool smtp-service outbound source-ip 192.0.2.20 192.0.2.21 max-smtp-out 20 max-msg-rate 15000/h connect-timeout 45s use-starttls yes require-tls true domain-throttle gmail.com max-msg-rate 12000/h max-conn 12 virtual-mta sample powermta configuration file
# Custom throttles for ISP reputation domain-throttle hotmail.com max-msg-rate 10000/h max-conn 15 domain-throttle outlook.com max-msg-rate 10000/h max-conn 15 domain-throttle live.com max-msg-rate 8000/h max-conn 10 virtual-mta sample powermta configuration file
dkim-sign domain example.org default dkim-keyfile /etc/pmta/dkim/example.org/default.pem dkim-identity @example.org dkim-sign dkim-sign-policy * { sign-control * dkim-sign(example.com) # Default } --------------------------- Authentication (SPF, Return-Path) --------------------------- auth-domain example.com # Bounce handling domain (different from sending domain) bounce-domain bounce.example.com bounce-address bounces@bounce.example.com spf-identity mfrom spf-pass-action none spf-fail-action tag auth-domain