OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Postfix does not use TLS in outside emails.

From: Arne Hoffmann (arnefish.in-berlin.de)
Date: Tue May 13 2008 - 02:35:31 CDT


Josep M. wrote:
> I have Postfix with TLS and in the logs when enter mail all is ok, but
> when Postfix send emails to another server, do not use TLS, or at least
> is not registered in log files.

You are missing a smtp_use_tls = yes in your main.cf.

> # ==========================================================================
> # service type private unpriv chroot wakeup maxproc command + args
> # (yes) (yes) (yes) (never) (100)
> # ==========================================================================
>
> smtp inet n - - - - smtpd
> -o smtpd_enforce_tls=yes
> -o smtpd_sasl_auth_enable=yes

This is not a good idea.

,----[ postconf(5) ]
| smtpd_enforce_tls (default: no)
| Mandatory TLS: announce STARTTLS support to SMTP clients, and require
| that clients use TLS encryption. According to RFC 2487 this MUST NOT be
| applied in case of a publicly-referenced SMTP server. This option is off
| by default and should be used only on dedicated servers.
`----