On Thursday, October 06, 2011 9:28 AM, "Jeroen Geilman"
wrote:
> That's a bad idea, unless you run an open relay; postfix should know
> what valid recipients are, so it can reject everything that is not.
It works fine. Users that are defined in Dovecot/LMTP pass/user-db are
accepted; if not d
> Well the full list of grades is:
Thanks. I finally found the GRADE's (default), editable cipherlists on
lmtp(8):
tls_high_cipherlist (ALL:!EXPORT:!LOW:!MEDIUM:+RC4:@STRENGTH)
tls_medium_cipherlist (ALL:!EXPORT:!LOW:+RC4:@STRENGTH)
tls_low_cipherlist(ALL:!EXPORT:+RC4:@STRENGTH)
tls_exp
My Postfix delivers to an IMAP store using LMTP.
I intend to have known users only defined in IMAP server's LMTP config.
To check for valid users, and reject if not found, I use Postfix's
(http://www.postfix.org/SASL_README.html)
reject_sender_login_mismatch
For simple config, I add that to
The TLS ciphers I use for transport between a number of our servers are
limited to
openssl ciphers -v "RSA:\!MEDIUM:\!LOW:\!EXPORT:\!NULL" -tls1 -ssl3
AES256-SHA SSLv3 Kx=RSA Au=RSA Enc=AES(256)
Mac=SHA1
CAMELLIA256-SHA SSLv3 Kx=RSA Au=RSA Enc=Camellia(256)
Ma