From ad1d844b54f4dabbae0daa8589a7899f0cefecbf Mon Sep 17 00:00:00 2001 From: Christoph Date: Tue, 1 Oct 2024 00:20:04 +0200 Subject: [PATCH] install_postfix_advanced.sh: some minor changes in writing 'main.cf'. --- install_postfix_advanced.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/install_postfix_advanced.sh b/install_postfix_advanced.sh index c8320e2..aea2dad 100755 --- a/install_postfix_advanced.sh +++ b/install_postfix_advanced.sh @@ -1747,7 +1747,6 @@ cat <> /etc/postfix/main.cf # ============ TLS parameters ============ - # What mechanisms the Postfix SMTP client uses to look up a host's IP address. # This parameter is ignored when DNS lookups are disabled (see: disable_dns_lookups # and smtp_dns_support_level). The "dns" mechanism is always tried before "native" @@ -1911,6 +1910,7 @@ smtp_tls_loglevel = 1 smtpd_tls_cert_file = $_TLS_CERT_FILE smtpd_tls_key_file = $_TLS_KEY_FILE + ## - File with DH parameters that the Postfix SMTP server should use with EDH ciphers. ## - ## - Dont't forget to create it, e.g with openssl: @@ -1998,7 +1998,7 @@ smtp_tls_mandatory_protocols = >=TLSv1.2 # Use EECDH with approximately 192 bits of security at computational cost that is # approximately twice as high as 128 bit strength ECC. # -smtpd_tls_eecdh_grade = auto +#smtpd_tls_eecdh_grade = auto # With SSLv3 and later, use the Postfix SMTP server's cipher preference order instead