Browse Source

[Postfix] IMPORTANT: Disabling TLS 1.0 and 1.1 for submission and smtps

andryyy 5 years ago
parent
commit
b5c844d704
1 changed files with 3 additions and 2 deletions
  1. 3 2
      data/conf/postfix/main.cf

+ 3 - 2
data/conf/postfix/main.cf

@@ -192,8 +192,9 @@ postscreen_discard_ehlo_keywords = silent-discard, dsn
 compatibility_level = 2
 smtputf8_enable = yes
 # Define protocols for SMTPS and submission service
-submission_smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
-smtps_smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
+submission_smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1
+smtps_smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1
+
 smtpd_client_recipient_rate_limit = 50
 
 # DO NOT EDIT ANYTHING BELOW #