mirror of
https://github.com/deuill/coreos-home-server.git
synced 2024-09-21 13:40:45 +00:00
postfix: Use strict encryption for SMTPS, Submission
The SMTPS (465) And Submission (587) ports expect encryption, either implicitly (i.e. via direct TLS connection) or explicitly (i.e. via STARTTLS), but this was not enforced previously. Port 25 remains configured for opportunistic encryption, but will still not allow for authentication over unencrypted transports.
This commit is contained in:
parent
16ddc3ab79
commit
c730ec37f0
@ -6,8 +6,8 @@
|
|||||||
# (yes) (yes) (no) (never) (100)
|
# (yes) (yes) (no) (never) (100)
|
||||||
# ==========================================================================
|
# ==========================================================================
|
||||||
smtp inet n - n - - smtpd
|
smtp inet n - n - - smtpd
|
||||||
smtps inet n - n - - smtpd
|
smtps inet n - n - - smtpd -o smtpd_tls_wrappermode=yes
|
||||||
submission inet n - n - - smtpd
|
submission inet n - n - - smtpd -o smtpd_tls_security_level=encrypt
|
||||||
pickup unix n - n 60 1 pickup
|
pickup unix n - n 60 1 pickup
|
||||||
cleanup unix n - n - 0 cleanup
|
cleanup unix n - n - 0 cleanup
|
||||||
qmgr unix n - n 300 1 qmgr
|
qmgr unix n - n 300 1 qmgr
|
||||||
|
Loading…
Reference in New Issue
Block a user