Re: Update to recommended TLS settings

2015-08-15 Thread Thomas Keller
On 2015-08-06 09:08, Viktor Dukhovni wrote: > > You should in most cases update main.cf by setting: > > # Exclude obsolete weak crypto. > # > smtpd_tls_protocols = !SSLv2, !SSLv3 > smtpd_tls_ciphers = medium > smtp_tls_protocols = !SSLv2, !SSLv3 > smtp_tls_ciphers = medium

Re: Update to recommended TLS settings

2015-08-15 Thread Viktor Dukhovni
On Sat, Aug 15, 2015 at 09:02:24PM +0200, Thomas Keller wrote: > > # Exclude obsolete weak crypto. > > # > > smtpd_tls_protocols = !SSLv2, !SSLv3 > > smtpd_tls_ciphers = medium > > smtp_tls_protocols = !SSLv2, !SSLv3 > > smtp_tls_ciphers = medium > > > > If I set "smtpd_t

Re: Postfix multi instance for incoiming and outgoing mail

2015-08-15 Thread Viktor Dukhovni
On Fri, Aug 14, 2015 at 11:53:41PM -0700, NFXDD wrote: > I have been trying to give postfix multi instance a go for the past week. > With this came to the conclusion that going with a multi instance solution > where one instance for incoming mail and another for outgoing seems to be > good perform

Re: Postfix multi instance for incoiming and outgoing mail

2015-08-15 Thread NFXDD
Viktor Dukhovni wrote > On Fri, Aug 14, 2015 at 11:53:41PM -0700, NFXDD wrote: > > Separating inbound and outbound configurations is often sensible. > > Some care is required when routing outbound mail (bounces, ...) > sent by the inbound instance, or conversely inbound mail sent by > the outboun