From: Louis Bohm (lbohmadnexustx.com)
Date: Wed Jun 13 2007 - 06:36:14 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Martin,

I am running Postfix 2.4.1. Should I still follow what you suggest?
And if so what do you mean that it will disclose envelope data?

Thanks,
Louis
~~
-------------------------------------
Louis Bohm
Network Administrator
Adnexus Therapeutics
781.209.2324
-------------------------------------

-----Original Message-----
From: owner-postfix-userspostfix.org
[mailto:owner-postfix-userspostfix.org] On Behalf Of Martin Schmitt
Sent: Wednesday, June 13, 2007 7:24 AM
To: Louis Bohm
Cc: postfix-userscloud9.net
Subject: Re: Postfix not doing TLS like I need

Louis Bohm schrieb:

> smtpd_tls_policy_maps = hash:/etc/postfix_out/tls_policy_map

There is no such configuration option here (on 2.3):

# postconf | grep tls_policy_maps
lmtp_tls_policy_maps =
smtp_tls_policy_maps =

Instead, use something like this in main.cf:
smtpd_sender_restrictions =
        check_sender_access hash:/etc/postfix/tls_only_senders

In tls_only_senders:
example.com reject_plaintext_session

(Untested as I recommend everyone who asks for it to not implement such
a policy.)

Also, please be aware that this will disclose envelope data in plain.

-martin

--
Schmitt Systemberatung Linux/UNIX
Giessener Str. 18 Internet/Intranet
35415 Pohlheim/Germany E-Mail Infrastructure
http://www.scsy.de Antispam/Antivirus

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]