{"id":562,"date":"2014-01-09T16:50:40","date_gmt":"2014-01-09T15:50:40","guid":{"rendered":"http:\/\/ndk.sytes.net\/wordpress\/?p=562"},"modified":"2014-01-09T16:50:40","modified_gmt":"2014-01-09T15:50:40","slug":"postfix-running-smtp-with-tls","status":"publish","type":"post","link":"https:\/\/ndk.sytes.net\/wordpress\/?p=562","title":{"rendered":"Postfix: Running SMTP With TLS"},"content":{"rendered":"<p>\n\tHi, enabling TLS on your postfix server is quite simple. Only enable it using following lines in your <em>main.cf<\/em> config file (usually <em>\/etc\/postfix\/main.cf):<\/em>\n<\/p>\n<ul>\n<li>\n\t\t<em>smtpd_use_tls = yes<\/em> (e<span style=\"font-size: 13px;\">nable the TLS usage)<\/span>\n\t<\/li>\n<li>\n\t\t<em>smtpd_tls_cert_file = \/etc\/pki\/tls\/certs\/yourcertificate.crt<\/em> (s<span style=\"font-size: 13px;\">et your server certificate file)<\/span>\n\t<\/li>\n<li>\n\t\t<em>smtpd_tls_key_file = \/etc\/pki\/tls\/private\/yourkey.key<\/em> (s<span style=\"font-size: 13px;\">et your server key file)<\/span>\n\t<\/li>\n<li>\n\t\t<em>smtpd_tls_loglevel = 1<\/em> (e<span style=\"font-size: 13px;\">nable TLS logging*<\/span><span style=\"font-size: 13px;\">)<\/span>\n\t<\/li>\n<li>\n\t\t<em>smtpd_tls_security = may (s<\/em><span style=\"font-size: 13px;\">et TLS security level*)<\/span>\n\t<\/li>\n<li>\n\t\t<em><span style=\"font-size: 13px;\">smtpd_tls_received_header = yes<\/span><\/em><span style=\"font-size: 13px;\"> (write TLS status to email header)<\/span>\n\t<\/li>\n<\/ul>\n<p>\n\t<span style=\"font-size: 13px;\">\u200b*) TLS logging:<br \/>\n\tthis setting&#39;s values are different in postfix v2.9 and later. for example in postfix 2.9+ the TLS handshake is logged even if the value is 0. On the other hand you need to set the value to 1 in postfix earlier to 2.9.<\/span>\n<\/p>\n<p>\n\t<span style=\"font-size: 13px;\">*) TLS security level:<br \/>\n\tmay &#8211; if there is an encryption available it will be used<br \/>\n\tencrypt &#8211; means enforce the encryption. Any connection without TLS is refused<\/span>\n<\/p>\n<p>\n\tyou can find more infos on the <a href=\"http:\/\/www.postfix.org\/TLS_README.html\" target=\"_blank\">postfix website<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hi, enabling TLS on your postfix server is quite simple. Only enable it using following lines in your main.cf config file (usually \/etc\/postfix\/main.cf): smtpd_use_tls = yes (enable the TLS usage) smtpd_tls_cert_file = \/etc\/pki\/tls\/certs\/yourcertificate.crt (set your server certificate file) smtpd_tls_key_file = \/etc\/pki\/tls\/private\/yourkey.key (set your server key file) smtpd_tls_loglevel = 1 (enable TLS logging*) smtpd_tls_security = may [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11,7],"tags":[],"class_list":["post-562","post","type-post","status-publish","format-standard","hentry","category-linuxunix","category-servers"],"_links":{"self":[{"href":"https:\/\/ndk.sytes.net\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/562","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ndk.sytes.net\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ndk.sytes.net\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ndk.sytes.net\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ndk.sytes.net\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=562"}],"version-history":[{"count":0,"href":"https:\/\/ndk.sytes.net\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/562\/revisions"}],"wp:attachment":[{"href":"https:\/\/ndk.sytes.net\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=562"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ndk.sytes.net\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=562"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ndk.sytes.net\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=562"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}