thomas
/
sovereign
Watch 1
Star 0
Fork 0
Code Issues 0 Pull Requests 0 Releases 0 Wiki Activity
Browse Source

Increase security of postfix smtp tls ciphers, that is sending email to other smtp servers using encryption

Michael West 10 years ago
parent
0c01f4cdf0
commit
aa2e1a0e74
1 changed files with 3 additions and 0 deletions
Unified View Show Diff Stats
  1. 3
    0
      roles/mailserver/templates/etc_postfix_main.cf.j2

+ 3
- 0
roles/mailserver/templates/etc_postfix_main.cf.j2 View File

45 
 smtpd_tls_received_header = yes
 45 
 smtpd_tls_received_header = yes
46 
 smtp_tls_note_starttls_offer = yes
 46 
 smtp_tls_note_starttls_offer = yes
47 
 smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt
 47 
 smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt
48 
+# http://www.postfix.org/FORWARD_SECRECY_README.html
49 
+smtp_tls_ciphers = medium
50 
+
48
51
49 
 smtpd_sasl_type = dovecot
 52 
 smtpd_sasl_type = dovecot
50 
 smtpd_sasl_path = private/auth
 53 
 smtpd_sasl_path = private/auth

Write Preview
Loading…
Cancel
Save