Re: SSL/TLS configuration for relaying

2017-10-01 Thread Viktor Dukhovni
On Sun, Oct 01, 2017 at 07:15:36PM +0200, Matus UHLAR - fantomas wrote: > > The remote mailserver is configured to accept SSL/TLS on port 587. This is > > proven to work since user mail clients successfully directly connect to > > hmailserver using the related port with SSL/TLS. > > tried > http:

Re: SSL/TLS configuration for relaying

2017-10-01 Thread Matus UHLAR - fantomas
On 29.09.17 13:09, Nachtfalter wrote: I got a postfix mail server (host=smtp) configured for some domains that relay all messages for these domains to a second mail server (hmailserver, host = mail). This setup works fine when I use smtp:25 to forward mail from postfix to hmailserver. Now I wo

Re: SSL/TLS configuration for relaying

2017-09-29 Thread Marat Khalili
I don't pretend to be expert, but that's what works for me with postfix 3.1: smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt smtp_tls_mandatory_ciphers = high smtp_tls_security_level = secure smtp_tls_secure_cert_match = nexthop smtp_tls_session_cache_database = btree:${data_directory}/smtp

SSL/TLS configuration for relaying

2017-09-29 Thread Nachtfalter
Hi all I'm stuck with enabling SSL/TLS on an existing setup. I got a postfix mail server (host=smtp) configured for some domains that relay all messages for these domains to a second mail server (hmailserver, host = mail). This setup works fine when I use smtp:25 to forward mail from postf