Florian Piekert:
> Question:
> I assume, it is not possible, based on EHLO of sending server, to
> NOT list STARTTLS in the pf 250 capabilities listing?

POstfix can suppress the STARTTLS by client IP address.

Example with table inlined in main.cf:

/etc/postfix/main.cf:
    smtpd_discard_ehlo_keyword_address_maps = cidr:{
        {192.168.3.4 starttls}}

Example with table in separate file:

/etc/postfix/main.cf:
    smtpd_discard_ehlo_keyword_address_maps = 
cidr:/etc/postfix/smtpd_discard_ehlo

/etc/postfix/smtpd_discard_ehlo:
     192.168.3.4 starttls

https://www.postfix.org/postconf.5.html#smtpd_discard_ehlo_keyword_address_maps
https://www.postfix.org/postconf.5.html#smtpd_discard_ehlo_keywords
https://www.postfix.org/cidr_table.5.html

        Wietse
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to