On 2015-08-06 09:08, Viktor Dukhovni wrote:
>
> You should in most cases update main.cf by setting:
>
> # Exclude obsolete weak crypto.
> #
> smtpd_tls_protocols = !SSLv2, !SSLv3
> smtpd_tls_ciphers = medium
> smtp_tls_protocols = !SSLv2, !SSLv3
> smtp_tls_ciphers = medium
On Sat, Aug 15, 2015 at 09:02:24PM +0200, Thomas Keller wrote:
> > # Exclude obsolete weak crypto.
> > #
> > smtpd_tls_protocols = !SSLv2, !SSLv3
> > smtpd_tls_ciphers = medium
> > smtp_tls_protocols = !SSLv2, !SSLv3
> > smtp_tls_ciphers = medium
> >
>
> If I set "smtpd_t
On Fri, Aug 14, 2015 at 11:53:41PM -0700, NFXDD wrote:
> I have been trying to give postfix multi instance a go for the past week.
> With this came to the conclusion that going with a multi instance solution
> where one instance for incoming mail and another for outgoing seems to be
> good perform
Viktor Dukhovni wrote
> On Fri, Aug 14, 2015 at 11:53:41PM -0700, NFXDD wrote:
>
> Separating inbound and outbound configurations is often sensible.
>
> Some care is required when routing outbound mail (bounces, ...)
> sent by the inbound instance, or conversely inbound mail sent by
> the outboun