[pfx] Re: [ext] list.sys4.de fails with starttls

On Fri, 17 Mar 2023 14:32:06 +0100, Ralf Hildebrandt via Postfix-users wrote: > > * Benny Pedersen via Postfix-users : > > Mar 17 11:38:31 localhost postfix/smtpd[22150]: lost connection after > > STARTTLS from list.sys4.de[2a03:4000:10:51d:b8ce:63ff:feca:a5a0] > > Mar 17 12:09:10 localhost postf

[pfx] Re: SMTP Smuggling, workarounds and fix // Clarification on BDAT

On Fri, Dec 29, 2023 at 10:16:20AM +0100, natan via Postfix-users wrote: > Hi > In postfix-3.4.23 (debian) I set > > (I use always) > smtpd_data_restrictions = reject_unauth_pipelining > > And today I put > smtpd_discard_ehlo_keywords = chunking > > > And I get many many logs like: > ... > Dec

[pfx] Re: smtp_tls_security_level = dane but have encrypt as fallback

On Mon, 28 Jan 2019 13:59:23 +0100, Stefan Bauer wrote: > > Hi, > > we would like to go the next step, enable smtp_tls_security_level = dane. > Currently we have encrypt site-wide. > > But in cases where remote sites do not have published key material, the > fallback is may with dane, which is a

[pfx] Re: smtps starttls

On Thu, Apr 03, 2025 at 11:16:15AM +0200, Paul Neuwirth via Postfix-users wrote: > Hello, > after an upgrade of postfix I am checking my config. > > I am in the impression, this should work: > # openssl s_client -connect mail.swabian.net:465 -starttls smtp -tls1_3 > CONNECTED(0003) > Didn't fi