deac
/
ansible-role-mail
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

postfix expects listed TLS-versions.

master
Denis Knauf 2020-12-27 17:41:00 +01:00
parent 2fe2645da8
commit 3049e878a0
1 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
tasks/postfix.yml
View File

@ -35,16 +35,16 @@
smtpd_tls_auth_only: 'yes' smtpd_tls_auth_only: 'yes'
tls_ssl_options: NO_COMPRESSION tls_ssl_options: NO_COMPRESSION
# Some servers are crapy. If we provide only TLSv1.2, he would try it unencrypted again. # Some servers are crapy. If we provide only TLSv1.2, he would try it unencrypted again.
smtpd_tls_mandatory_protocols: '>=TLSv1.2' smtpd_tls_mandatory_protocols: 'TLSv1.2, TLSv1.3'
smtpd_tls_protocols: '>=TLSv1.2' smtpd_tls_protocols: 'TLSv1.2, TLSv1.3'
# Same for sending mails: :/ # Same for sending mails: :/
smtp_tls_mandatory_protocols: '>=TLSv1.2' smtp_tls_mandatory_protocols: 'TLSv1.2, TLSv1.3'
smtp_tls_protocols: '>=TLSv1.2' smtp_tls_protocols: 'TLSv1.2, TLSv1.3'
# Internal/Clients must support better crypto: # Internal/Clients must support better crypto:
lmtp_tls_mandatory_protocols: '>=TLSv1.2' lmtp_tls_mandatory_protocols: 'TLSv1.2, TLSv1.3'
lmtp_tls_protocols: '>=TLSv1.2' lmtp_tls_protocols: 'TLSv1.2, TLSv1.3'
submission_tls_mandatory_protocols: '>=TLSv1.2' submission_tls_mandatory_protocols: 'TLSv1.2, TLSv1.3'
submission_tls_protocols: '>=TLSv1.2' submission_tls_protocols: 'TLSv1.2, TLSv1.3'
smtpd_tls_mandatory_ciphers: high smtpd_tls_mandatory_ciphers: high
#tls_high_cipherlist: 'EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA256:EECDH:+CAMELLIA128:+AES128:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDEA:!ECDSA:kEDH:CAMELLIA128-SHA:AES128-SHA' #tls_high_cipherlist: 'EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA256:EECDH:+CAMELLIA128:+AES128:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDEA:!ECDSA:kEDH:CAMELLIA128-SHA:AES128-SHA'
smtpd_tls_exclude_ciphers: MD5, DES, eNULL, 3DES, EXP, RC4, DSS, PSK, SEED, IDEA, ECDSA, aNULL smtpd_tls_exclude_ciphers: MD5, DES, eNULL, 3DES, EXP, RC4, DSS, PSK, SEED, IDEA, ECDSA, aNULL