Update postfix SSL/TLS configuration

Ensure that RC4 and SSLv3 is not used. This is based off mailinabox project settings, while not the most ideal settings this improves the configuration from what it is currently.
8 years ago · a3d8daa585
parent 84769cab3e
commit a3d8daa585
1 changed files with 4 additions and 0 deletions
--- a/postfix/conf/main.cf
+++ b/postfix/conf/main.cf
@ -26,6 +26,10 @@ smtpd_tls_key_file=/certs/key.pem
 smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
 smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
 smtp_tls_security_level = may
+smtpd_tls_protocols=!SSLv2,!SSLv3
+smtpd_tls_ciphers=medium
+smtpd_tls_exclude_ciphers=aNULL,RC4
+

 ###############
 # SASL