diff --git a/install_postfix_advanced.sh b/install_postfix_advanced.sh index c8320e2..aea2dad 100755 --- a/install_postfix_advanced.sh +++ b/install_postfix_advanced.sh @@ -1747,7 +1747,6 @@ cat <> /etc/postfix/main.cf # ============ TLS parameters ============ - # What mechanisms the Postfix SMTP client uses to look up a host's IP address. # This parameter is ignored when DNS lookups are disabled (see: disable_dns_lookups # and smtp_dns_support_level). The "dns" mechanism is always tried before "native" @@ -1911,6 +1910,7 @@ smtp_tls_loglevel = 1 smtpd_tls_cert_file = $_TLS_CERT_FILE smtpd_tls_key_file = $_TLS_KEY_FILE + ## - File with DH parameters that the Postfix SMTP server should use with EDH ciphers. ## - ## - Dont't forget to create it, e.g with openssl: @@ -1998,7 +1998,7 @@ smtp_tls_mandatory_protocols = >=TLSv1.2 # Use EECDH with approximately 192 bits of security at computational cost that is # approximately twice as high as 128 bit strength ECC. # -smtpd_tls_eecdh_grade = auto +#smtpd_tls_eecdh_grade = auto # With SSLv3 and later, use the Postfix SMTP server's cipher preference order instead