2
0
Эх сурвалжийг харах

[Postfix] IMPORTANT: Disabling TLS 1.0 and 1.1 for submission and smtps

andryyy 5 жил өмнө
parent
commit
b5c844d704

+ 3 - 2
data/conf/postfix/main.cf

@@ -192,8 +192,9 @@ postscreen_discard_ehlo_keywords = silent-discard, dsn
 compatibility_level = 2
 compatibility_level = 2
 smtputf8_enable = yes
 smtputf8_enable = yes
 # Define protocols for SMTPS and submission service
 # Define protocols for SMTPS and submission service
-submission_smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
-smtps_smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
+submission_smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1
+smtps_smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1
+
 smtpd_client_recipient_rate_limit = 50
 smtpd_client_recipient_rate_limit = 50
 
 
 # DO NOT EDIT ANYTHING BELOW #
 # DO NOT EDIT ANYTHING BELOW #