Asai skrev den 2020-08-06 00:08:
to allow clients you should enable ports submission (587) and
submissions
(465) in master.cf.
Thanks for your reply. We are already doing that. The main question
is just what will break if we allow TLS only. Do you have any
experience with this?
nothing will break if tlsv1.1 is disabled, so end result is to not
support sslv2, sslv3, tlsv1.1, all enabled is then tlsv1.0 tlsv1.2
tlsv1.3 if availble in openssl
disable tlsv1.0 tlsv1.1 will break windows 7, but its unsupported so if
none use tlsv1.0 its safe to disabled it
overall details is more complicated