Re: Secure config - main.cf

2015-02-05 Thread SW
I thought I'd post the contents of my master.cf file as well (for completeness): smtp inet n - n - 1 postscreen smtpd pass - - n - - smtpd dnsblog unix - - n - 0 dnsblog tlsproxy unix -

Re: Secure config - main.cf

2015-02-05 Thread li...@rhsoft.net
Am 05.02.2015 um 22:26 schrieb SW: li...@rhsoft.net wrote Am 05.02.2015 um 22:00 schrieb SW: smtpd_tls_exclude_ciphers = aNULL, eNULL, DES, 3DES, MD5, DES+MD5, RC4 disable DES *and* Rc4 is pure nonsense because it leads in some servers not able to send mail to you at all and way more fall b

Re: Secure config - main.cf

2015-02-05 Thread SW
Thanks Viktor. I have set it to: smtpd_tls_exclude_ciphers = LOW, EXPORT, MD5 How does the rest of the config look? Secure? Any silly mistakes? -- View this message in context: http://postfix.1071664.n5.nabble.com/Secure-config-main-cf-tp74536p74542.html Sent from the Postfix Users mailing

Re: Secure config - main.cf

2015-02-05 Thread Viktor Dukhovni
On Thu, Feb 05, 2015 at 10:23:10PM +0100, li...@rhsoft.net wrote: > Am 05.02.2015 um 22:00 schrieb SW: > >smtpd_tls_exclude_ciphers = aNULL, eNULL, DES, 3DES, MD5, DES+MD5, RC4 > > disable DES *and* RC4 is pure nonsense because it leads in some servers not > able to send mail to you at all and wa

Re: Secure config - main.cf

2015-02-05 Thread SW
li...@rhsoft.net wrote > Am 05.02.2015 um 22:00 schrieb SW: >> smtpd_tls_exclude_ciphers = aNULL, eNULL, DES, 3DES, MD5, DES+MD5, RC4 > > disable DES *and* Rc4 is pure nonsense because it leads in some servers > not able to send mail to you at all and way more fall back to plain as > needed Goo

Re: Secure config - main.cf

2015-02-05 Thread li...@rhsoft.net
Am 05.02.2015 um 22:00 schrieb SW: smtpd_tls_exclude_ciphers = aNULL, eNULL, DES, 3DES, MD5, DES+MD5, RC4 disable DES *and* Rc4 is pure nonsense because it leads in some servers not able to send mail to you at all and way more fall back to plain as needed

Secure config - main.cf

2015-02-05 Thread SW
Hi All After building my new Postfix server I spent days securing it as best I could. So far it seems to be running fine but I was wondering if someone would mind having a look at my main.cf file to see if there are any "holes"/issues in the config. I'm particularly interested to hear what people