Re: TLS Parameter Confusion

2010-03-23 Thread Voytek Eymont
On Wed, March 24, 2010 5:32 am, Victor Duchovni wrote: > Disable SASL authentication for un-encrypted connections. > Don't confuse SASL authentication (username/password typicall to verify > submission access rights) with session encryption (prevent passive wiretap > of session). > SASL and SSL a

Re: TLS Parameter Confusion

2010-03-23 Thread Victor Duchovni
On Tue, Mar 23, 2010 at 03:17:05PM -0400, Carlos Mennens wrote: > > > smtpd_tls_security_level = may > > > > Use this instead of "smtpd_use_tls". > > Noted. > > >> smtpd_tls_auth_only = yes # ? > > > > Disable SASL authentication for un-encrypted connections. > > I am guessing I only have the a

Re: TLS Parameter Confusion

2010-03-23 Thread Carlos Mennens
On Tue, Mar 23, 2010 at 2:32 PM, Victor Duchovni wrote: > On Tue, Mar 23, 2010 at 02:23:30PM -0400, Carlos Mennens wrote: > >> In my Postfix main.cf, I have the following TLS parameters: >> >> smtpd_use_tls = yes #announce STARTTLS support to SMTP clients, but do > > This is the Postfix 2.2 syntax

Re: TLS Parameter Confusion

2010-03-23 Thread Victor Duchovni
On Tue, Mar 23, 2010 at 02:23:30PM -0400, Carlos Mennens wrote: > In my Postfix main.cf, I have the following TLS parameters: > > smtpd_use_tls = yes #announce STARTTLS support to SMTP clients, but do This is the Postfix 2.2 syntax. With 2.3 and later, use: smtpd_tls_security_level = may N

TLS Parameter Confusion

2010-03-23 Thread Carlos Mennens
I am confused by the following Postfix definition of 'smtpd_tls_auth_only' & 'smtpd_tls_security_level' & would appreciate if someone could please help me understand this. TLS configuration is new to me so I appologise for my ignorance and I did bother to review: http://www.postfix.org/postconf.5.