Re: TLSv1.2 only for auth connection

2018-10-26 Thread Thomas Bourdon
That's what I do, it works perfectly. Thanks. Le 25.10.2018 19:39, Wietse Venema a écrit : Thomas Bourdon: Hi, First of all, I apologize for my bad english. I use postfix-3.3.1 and openssl-1.0.2. Actual ssl config : tlsv1.0 minimum is set for smtp and smtpd. tlsv1.2 minimum is set for submis

Re: TLSv1.2 only for auth connection

2018-10-25 Thread @lbutlr
On Oct 25, 2018, at 15:04, @lbutlr wrote: > Authentication port 25 is often simply opportunistic Sorry. I meant to type encryption, not authentication. -- This is my signature. There are many like it, but this one is mine.

Re: TLSv1.2 only for auth connection

2018-10-25 Thread @lbutlr
On Oct 25, 2018, at 06:08, Thomas Bourdon wrote: > > My goal : All auth connections must be done with tlsv1.2 minimum. Others > connections can be done with tlsv1.0 minimum. This is fine. Authentication port 25 is often simply opportunistic and does not imply identify, only securing the data t

Re: TLSv1.2 only for auth connection

2018-10-25 Thread Wietse Venema
Thomas Bourdon: > Hi, > > First of all, I apologize for my bad english. > > I use postfix-3.3.1 and openssl-1.0.2. > > Actual ssl config : tlsv1.0 minimum is set for smtp and smtpd. tlsv1.2 > minimum is set for submission/starttls. > > My goal : All auth connections must be done with tlsv1.2 m

Re: TLSv1.2 only for auth connection

2018-10-25 Thread Bastien Durel
Le jeudi 25 octobre 2018 à 15:31 +0200, Matus UHLAR - fantomas a écrit : > maybe port 465 was originally taken (by microsoft, btw) for server- > to-server > smtp over ssl, but I think I ever saw anyone using it as such. > > for now, many companies use port 465 as authenticated submission-only > p

Re: TLSv1.2 only for auth connection

2018-10-25 Thread Thomas Bourdon
Thank you guys to explain me how works smtp<->smtp. I set up tlsv1.0 minimum for smtp<->smtp and tlsv1.2 minimum for auth connections, it seems working. :) Thanks again ! Le 25.10.2018 15:10, B. Reino a écrit : On Thu, 25 Oct 2018, Thomas Bourdon wrote: Because mail providers send mail to my

Re: TLSv1.2 only for auth connection

2018-10-25 Thread Matus UHLAR - fantomas
On Thu, 25 Oct 2018, Thomas Bourdon wrote: Is there a way to allow tlsv1.0 minimum for unauth connection and allow tlsv1.2 minimum for auth connection on port 465 ? Le 25.10.2018 15:00, B. Reino a écrit : Why would you want unauthenticated connections on port 465? (smtps). It's AFAIK a submis

Re: TLSv1.2 only for auth connection

2018-10-25 Thread B. Reino
On Thu, 25 Oct 2018, Thomas Bourdon wrote: Because mail providers send mail to my smtp server through this port, don't they ? Le 25.10.2018 15:00, B. Reino a écrit : On Thu, 25 Oct 2018, Thomas Bourdon wrote: Is there a way to allow tlsv1.0 minimum for unauth connection and allow tlsv1.2 mi

Re: TLSv1.2 only for auth connection

2018-10-25 Thread Thomas Bourdon
Because mail providers send mail to my smtp server through this port, don't they ? Le 25.10.2018 15:00, B. Reino a écrit : On Thu, 25 Oct 2018, Thomas Bourdon wrote: Is there a way to allow tlsv1.0 minimum for unauth connection and allow tlsv1.2 minimum for auth connection on port 465 ? Why

Re: TLSv1.2 only for auth connection

2018-10-25 Thread B. Reino
On Thu, 25 Oct 2018, Thomas Bourdon wrote: Is there a way to allow tlsv1.0 minimum for unauth connection and allow tlsv1.2 minimum for auth connection on port 465 ? Why would you want unauthenticated connections on port 465? (smtps). It's AFAIK a submission port.

TLSv1.2 only for auth connection

2018-10-25 Thread Thomas Bourdon
Hi, First of all, I apologize for my bad english. I use postfix-3.3.1 and openssl-1.0.2. Actual ssl config : tlsv1.0 minimum is set for smtp and smtpd. tlsv1.2 minimum is set for submission/starttls. My goal : All auth connections must be done with tlsv1.2 minimum. Others connections can be