> On Dec 26, 2017, at 1:39 AM, li...@sbt.net.au wrote:
Overall quite standard. Nothing to worry about.
> smtpd_tls_session_cache_timeout = 36000s
10 hours is perhaps too long to be useful. Just let the default stand.
> smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
With Postfix 2.11 or later, just leave this empty, session tickets work
better.
> smtp_tls_security_level = may
> smtp_tls_note_starttls_offer = yes
The second is not needed.
> smtp_tls_session_cache_timeout = 3600s
> smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
By way of contrast these are fine.
--
Viktor.
