On Fri, Apr 17, 2015 at 09:54:24AM -0800, Tim Johnson wrote: > > Any and all critiques are invited and welcome.
Absent requirements of what this MTA is supposed to do, it is impossible to comment. It seems it is an outbound-only configuration, as your MX records point to MTAs operated by others. In which case any reasonably minimal configuration will work. You're not observing any issues, so you're just fine. Nothing to worry about until you actually see a problem. > mydestination = linus.local, localhost.localdomain, localhost > mydomain_fallback = localhost > myhostname = tj49.com > smtp_helo_name = tjohnson.mtaonline.net > smtpd_tls_exclude_ciphers = SSLv2, aNULL, ADH, eNULL This looks reasonably minimal, just change the exclude ciphers setting to: smtpd_tls_exclude_ciphers = SSLv2 The eNULL ciphers are excluded by default, and there is no reason to exclude anonymous cipher-suites. -- Viktor.