-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Jerry said the following on 08/09/2013 13:24:
>> So maybe there is something in the configuration that does not tell
>> Postfix do use smtp_tls_policy_maps
>
> Why don't you post the output of: "postconf -n" and then we could tell
> you.
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
bounce_queue_lifetime = 2d
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
delay_warning_time = 2h
disable_vrfy_command = yes
html_directory = no
inet_interfaces = all
inet_protocols = ipv4
mail_owner = postfix
mailbox_size_limit = 0
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
maximal_queue_lifetime = 2d
message_size_limit = 0
mydestination = $myhostname, localhost.$mydomain, localhost
myhostname = oink.luigirosa.com
mynetworks = 10.1.7.0/24, 127.0.0.0/8, [2001:470:1f09:203::]/64,
[2001:470:6b9c::]/48, [::1]/128
mynetworks_style = subnet
newaliases_path = /usr/bin/newaliases.postfix
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.6.6/README_FILES
relay_clientcerts = hash:/etc/postfix/relay_clientcerts
sample_directory = /usr/share/doc/postfix-2.6.6/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtp_tls_CAfile = /etc/ssl/PositiveSSLCA2.crt
smtp_tls_fingerprint_digest = sha1
smtp_tls_loglevel = 1
smtp_tls_note_starttls_offer = yes
smtp_tls_policy_maps = hash:/etc/postfix/tls_policy
smtp_tls_security_level = may
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
smtp_tls_session_cache_timeout = 3600s
smtpd_client_event_limit_exceptions = static:all
smtpd_helo_required = yes
smtpd_recipient_restrictions = permit_mynetworks
reject_invalid_hostname reject_non_fqdn_hostname
reject_non_fqdn_sender reject_non_fqdn_recipient
reject_unknown_sender_domain reject_unknown_recipient_domain
reject_unauth_destination reject_rbl_client zen.spamhaus.org
permit_mx_backup permit
smtpd_tls_cert_file = /etc/ssl/luigirosa.com.crt
smtpd_tls_key_file = /etc/ssl/luigirosa.com.key
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_security_level = may
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtpd_tls_session_cache_timeout = 3600s
strict_7bit_headers = yes
strict_rfc821_envelopes = yes
tls_random_source = dev:/dev/urandom
unknown_local_recipient_reject_code = 550
Ciao,
luigi
- --
/
+--[Luigi Rosa]--
\
When a man is tired of London, he is tired of life.
--Samuel Johnson
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/
iEYEARECAAYFAlIsZ7QACgkQ3kWu7Tfl6ZRLpwCgi4sgEQPKhmPSV7TiGjLixvYB
25YAn39lNwR8CsozYKzLNweBOfkrunxe
=RmQb
-----END PGP SIGNATURE-----
