Re: More secure postfix

2018-12-22 Thread Philippe - Forums
It's seem to be good with this option. Thanks. --- ## Philippe - Forums Le 2018-12-22 22:46, Wietse Venema a écrit : > Philippe - Forums: > >> Yes, with this option I can't send an email with my smartphone, because >> the smartphone IP have not proper reverse DNS. >> >>

Re: More secure postfix

2018-12-22 Thread Wietse Venema
Philippe - Forums: > Yes, with this option I can't send an email with my smartphone, because > the smartphone IP have not proper reverse DNS. > > And there is my problem: reject all IPs without proper reverse DNS but > accept my smartphone. Use permit_sasl_authenticated before reject_unknown_cli

Re: More secure postfix

2018-12-22 Thread Richard Damon
On 12/22/18 4:26 PM, Philippe - Forums wrote: > > Yes, with this option I can't send an email with my smartphone, > because the smartphone IP have not proper reverse DNS. > > And there is my problem: reject all IPs without proper reverse DNS but > accept my smartphone. > And what is special about y

Re: More secure postfix

2018-12-22 Thread Philippe - Forums
Yes, with this option I can't send an email with my smartphone, because the smartphone IP have not proper reverse DNS. And there is my problem: reject all IPs without proper reverse DNS but accept my smartphone. --- ## Philippe - Forums Le 2018-12-22 10:55, Matus UHLAR - fant

Re: More secure postfix

2018-12-22 Thread Viktor Dukhovni
> On Dec 22, 2018, at 4:13 AM, Philippe - Forums wrote: > > smtpd_tls_cert_file=/path/to/certs/fullchain.pem > smtpd_tls_key_file=/path/to/certs/privkey.pem Fine, but if Let's Encrypt creates a single file with both the key and the certificate use that instead. > smtpd_tls_CAfile=/path/to/ce

Re: More secure postfix

2018-12-22 Thread Matus UHLAR - fantomas
On 22.12.18 10:13, Philippe - Forums wrote: I would like to secure more my postfix. My SMTP configuration actually is: _smtpd_tls_cert_file=/path/to/certs/fullchain.pem_ _smtpd_tls_key_file=/path/to/certs/privkey.pem_ _smtpd_tls_CAfile=/path/to/certs/chain.pem_ _smtpd_use_tls=yes_ _smtpd_tls_se