P.V.Anthony:
> On 18/2/22 00:13, Noel Jones wrote:
> 
> > The fix is to tell your postfix to not offer STARTTLS in the EHLO 
> > response, using smtpd_discard_ehlo_keyword_address_maps
> > http://www.postfix.org/postconf.5.html#smtpd_discard_ehlo_keyword_address_maps
> >  
> > 
> > 
> > something like:
> > 
> > # main.cf
> > smtpd_discard_ehlo_keyword_address_maps =
> >  ? cidr:/etc/postfix/discard_ehlo_keyword_map.cidr
> > 
> > # /etc/postfix/discard_ehlo_keyword_map.cidr
> > 216.109.104.12? starttls
> > 
> >  ? -- Noel Jones
> 
> I am reporting back to say it works well.
> 
> One more question. In the maps file is it possible to use a hostname 
> instead of an ip address?

No, we want this to be RELIABLE. Specify a net/masl form
to exclude a rangeof IP addresses.

        Wietse

Reply via email to