Differences

This shows you the differences between two versions of the page.

--- technical:internet_email_server_setup [2019/01/03 09:58] – bob
+++ technical:internet_email_server_setup [2019/11/15 10:27] (current) – [DANE] bob
@@ Line 31: / Line 31: @@
   /usr/libexec/dovecot/mkcert.sh
+In PostFix be sure to set these in main.cf:
+<code>
+# From http://www.postfix.org/TLS_README.html#quick-start
+smtp_tls_loglevel = 1
+smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
+smtp_tls_security_level = may
+smtp_tls_cert_file =
+smtp_tls_key_file =
+smtp_tls_CAfile =
+smtp_tls_mandatory_protocols=!SSLv2,!SSLv3
+smtpd_tls_loglevel = 1
+smtpd_tls_received_header = yes
+smtpd_tls_security_level = may
+smtpd_tls_cert_file =
+smtpd_tls_key_file =
+smtpd_tls_CAfile =
+smtpd_tls_mandatory_protocols=!SSLv2,!SSLv3
+smtpd_tls_exclude_ciphers = MD5,DES,RC4
+</code>
+SMTP TLS checker tools
+  * [[https://ssl-tools.net/mailservers/|SSL Tools]]
+  * [[https://luxsci.com/smtp-tls-checker|LUXSCI]]
 ===== SPF =====
@@ Line 82: / Line 109: @@
 https://ssl-tools.net/dane
+https://ssl-tools.net/tlsa-generator