Re: sasl on smtps: allowing plaintext

2013-07-17 Thread Viktor Dukhovni
On Wed, Jul 17, 2013 at 08:10:44PM +0200, Vincent Pelletier wrote: > On Wed, 17 Jul 2013 13:37:53 +, Viktor Dukhovni > wrote: > > The suggestion is I believe to use smtp_tls_policy_maps to ensure > > that TLS is used for destinations where you will be using plaintext > > authentication. > >

Re: sasl on smtps: allowing plaintext

2013-07-17 Thread Vincent Pelletier
On Wed, 17 Jul 2013 13:37:53 +, Viktor Dukhovni wrote: > The suggestion is I believe to use smtp_tls_policy_maps to ensure > that TLS is used for destinations where you will be using plaintext > authentication. Thanks, I think I understand now: main.cf (or a few -o in master.cf's submission

Re: sasl on smtps: allowing plaintext

2013-07-17 Thread Viktor Dukhovni
On Wed, Jul 17, 2013 at 08:19:56AM +0200, Vincent Pelletier wrote: > Maybe I'm being paranoid, but because not all my relays support TLS I > cannot be stricter than > smtp_tls_security_level = may > without also having separate transports (if I understand correctly). > So if I do not set noplain

Re: sasl on smtps: allowing plaintext

2013-07-16 Thread Vincent Pelletier
On Tue, 16 Jul 2013 18:10:27 -0500, /dev/rob0 wrote: > Sure, this works, but why is it a problem? Why not just enforce TLS > where it is needed? > > http://www.postfix.org/TLS_README.html#client_tls_policy > http://www.postfix.org/postconf.5.html#smtp_tls_policy_maps > > A Postfix which is usin

Re: sasl on smtps: allowing plaintext

2013-07-16 Thread /dev/rob0
On Tue, Jul 16, 2013 at 10:03:57PM +, Viktor Dukhovni wrote: > On Tue, Jul 16, 2013 at 11:06:47PM +0200, Vincent Pelletier wrote: > > > Following pointers and advice from pj and adaptr on freenode, > > I've setup postfix on my box to send mail through the mail > > accounts I have (including

Re: sasl on smtps: allowing plaintext

2013-07-16 Thread Viktor Dukhovni
On Tue, Jul 16, 2013 at 11:06:47PM +0200, Vincent Pelletier wrote: > Following pointers and advice from pj and adaptr on freenode, I've > setup postfix on my box to send mail through the mail accounts I have > (including the one I'm sending from now). The problem is, some of my > account providers

sasl on smtps: allowing plaintext

2013-07-16 Thread Vincent Pelletier
Hi. Following pointers and advice from pj and adaptr on freenode, I've setup postfix on my box to send mail through the mail accounts I have (including the one I'm sending from now). The problem is, some of my account providers do not support TLS, so I have to use stunnel. Then, postfix logs wa