diff options
| author | arf20 <aruizfernandez05@gmail.com> | 2024-02-23 18:05:25 +0000 |
|---|---|---|
| committer | arf20 <aruizfernandez05@gmail.com> | 2024-02-23 18:05:25 +0000 |
| commit | 291156ae4a7ef65fae14e7f5ea1fd465e9d3d018 (patch) | |
| tree | dd0e94a8bdcb95bc477944454bee41a6f9528565 /postfix | |
| parent | caedd7c4d010b0ec1af94f874b837034bf35ebd8 (diff) | |
| download | mail-conf-291156ae4a7ef65fae14e7f5ea1fd465e9d3d018.tar.gz mail-conf-291156ae4a7ef65fae14e7f5ea1fd465e9d3d018.zip | |
Actually use opendkim milter in postfix
Diffstat (limited to 'postfix')
| -rw-r--r-- | postfix/main.cf | 12 |
1 files changed, 11 insertions, 1 deletions
diff --git a/postfix/main.cf b/postfix/main.cf index 7b71024..d73d523 100644 --- a/postfix/main.cf +++ b/postfix/main.cf @@ -19,7 +19,12 @@ smtpd_tls_cert_file=/etc/letsencrypt/live/mail.arf20.com/fullchain.pem smtpd_tls_key_file=/etc/letsencrypt/live/mail.arf20.com/privkey.pem smtpd_use_tls=yes smtpd_tls_security_level=may -smtpd_tls_protocols = !SSLv2, !SSLv3 +smtpd_tls_mandatory_ciphers = high +smtpd_tls_mandatory_exclude_ciphers = aNULL, MD5 +smtpd_tls_mandatory_protocols = >=TLSv1.2 +smtpd_tls_protocols = >=TLSv1.2 +smtpd_tls_ciphers = high +smtpd_tls_exclude_ciphers = aNULL, MD5 smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtpd_relay_before_recipient_restrictions=no # restriction options @@ -37,6 +42,11 @@ insiders_only = check_sender_access hash:/etc/postfix/insiders, reject smtpd_sasl_auth_enable=yes smtpd_sasl_type=dovecot smtpd_sasl_path=private/auth +# milter options +# chrooted to /var/spool/postfix/ +smtpd_milters=unix:/opendkim/opendkim.sock +non_smtpd_milters = $smtpd_milters +milter_default_action = accept # common smtp (outgoing) options # tls options |