Merge pull request #43 from d-fens/patch-2

Update postfix SSL/TLS configuration
8 years ago · 207e351276
parent 2f9319e454 a3d8daa585
commit 207e351276
1 changed files with 4 additions and 0 deletions
--- a/postfix/conf/main.cf
+++ b/postfix/conf/main.cf
@ -26,6 +26,10 @@ smtpd_tls_key_file=/certs/key.pem
 smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
 smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
 smtp_tls_security_level = may
+smtpd_tls_protocols=!SSLv2,!SSLv3
+smtpd_tls_ciphers=medium
+smtpd_tls_exclude_ciphers=aNULL,RC4
+

 ###############
 # SASL