Re: Location for LMTP:reject_sender_login_mismatch specification when multiple instances/filters are added to config?

2011-10-06 Thread mephistopheles
On Thursday, October 06, 2011 9:28 AM, "Jeroen Geilman" wrote: > That's a bad idea, unless you run an open relay; postfix should know > what valid recipients are, so it can reject everything that is not. It works fine. Users that are defined in Dovecot/LMTP pass/user-db are accepted; if not d

Re: Postfix/TLS support for Openssl cipher groups/names?

2011-10-05 Thread mephistopheles
> Well the full list of grades is: Thanks. I finally found the GRADE's (default), editable cipherlists on lmtp(8): tls_high_cipherlist (ALL:!EXPORT:!LOW:!MEDIUM:+RC4:@STRENGTH) tls_medium_cipherlist (ALL:!EXPORT:!LOW:+RC4:@STRENGTH) tls_low_cipherlist(ALL:!EXPORT:+RC4:@STRENGTH) tls_exp

Location for LMTP:reject_sender_login_mismatch specification when multiple instances/filters are added to config?

2011-10-05 Thread mephistopheles
My Postfix delivers to an IMAP store using LMTP. I intend to have known users only defined in IMAP server's LMTP config. To check for valid users, and reject if not found, I use Postfix's (http://www.postfix.org/SASL_README.html) reject_sender_login_mismatch For simple config, I add that to

Postfix/TLS support for Openssl cipher groups/names?

2011-10-04 Thread mephistopheles
The TLS ciphers I use for transport between a number of our servers are limited to openssl ciphers -v "RSA:\!MEDIUM:\!LOW:\!EXPORT:\!NULL" -tls1 -ssl3 AES256-SHA SSLv3 Kx=RSA Au=RSA Enc=AES(256) Mac=SHA1 CAMELLIA256-SHA SSLv3 Kx=RSA Au=RSA Enc=Camellia(256) Ma