On 12/06/11 19:57, Grant wrote: >> That will disable postgrey, but isn't enough to enable postscreen. There >> are a couple of daemons you have to enable in master.cf (steps 2 through 6): >> >> http://www.postfix.org/POSTSCREEN_README.html#enable >> >> That README refers to lines that are commented-out in master.cf; of >> course, if you've upgraded from an earlier of postfix, you won't have them. > > Don't you let etc-update add them for you?
Well, etc-update offers to overwrite the old one with the new, but that would be bad since we have a few custom services. I do try to patch the new comments into my configuration files when possible, but my master.cf is so far away from upstream's that the patch file is basically, - Everything old + Everything new These days I'm almost ready to claim that I actually understand how postfix works, so I'm not afraid to maintain main.cf and master.cf by hand anymore. > Working now, thanks a lot. I should only need the tlsproxy line if my > users connect to port 25 to send mail, correct? You should enable it anyway: many remote MTAs will use encryption if you let them.