search for: smtpd_tls_protocols

Am 26.08.2018 um 20:48 schrieb TE Dukes: >> You see a basic error message "Could not connect to localhost:143". So >> test that without using additional software. Foremost consult the >> maillog, in this case the log content produced by dovecot. And test >> connectivity on the lowest level. >> >> echo QUIT | openssl s_client -connect localhost:143

...gt;> > when trying to run the above commad >> >> Can we guess that you don't offer TLS for IMAP connections? >> > I added this to /etc/postfix/main.cf from > https://access.redhat.com/solutions/120383 > > smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3 > smtpd_tls_protocols = !SSLv2, !SSLv3 > smtp_tls_mandatory_protocols = !SSLv2, !SSLv3 > smtp_tls_protocols = !SSLv2, !SSLv3 > Randomly adding lines to a config file isn't going to help things. Those lines, which you added to the postfix config (which will have no impact on dovecot), are -- as the RH docu...

...rs to be help file with various options when trying to > > run the above commad > > Can we guess that you don't offer TLS for IMAP connections? > I added this to /etc/postfix/main.cf from https://access.redhat.com/solutions/120383 smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3 smtpd_tls_protocols = !SSLv2, !SSLv3 smtp_tls_mandatory_protocols = !SSLv2, !SSLv3 smtp_tls_protocols = !SSLv2, !SSLv3 > >> That must be successful first. You can too test "lsof -i :143" or "ss > >> -tulpen | grep 143". And tail your maillog. > >> > > Running lsof...

...bove commad > >> > >> Can we guess that you don't offer TLS for IMAP connections? > >> > > I added this to /etc/postfix/main.cf from > > https://access.redhat.com/solutions/120383 > > > > smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3 > > smtpd_tls_protocols = !SSLv2, !SSLv3 > > smtp_tls_mandatory_protocols = !SSLv2, !SSLv3 > > smtp_tls_protocols = !SSLv2, !SSLv3 > > > > Randomly adding lines to a config file isn't going to help things. > Those lines, which you added to the postfix config (which will have > no impact...

...> >> Can we guess that you don't offer TLS for IMAP connections? >> >> >> > I added this to /etc/postfix/main.cf from >> > https://access.redhat.com/solutions/120383 >> > >> > smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3 >> > smtpd_tls_protocols = !SSLv2, !SSLv3 >> > smtp_tls_mandatory_protocols = !SSLv2, !SSLv3 >> > smtp_tls_protocols = !SSLv2, !SSLv3 >> > >> >> Randomly adding lines to a config file isn't going to help things. >> Those lines, which you added to the postfix config (which...

...hat you don't offer TLS for IMAP connections? > >> >> > >> > I added this to /etc/postfix/main.cf from > >> > https://access.redhat.com/solutions/120383 > >> > > >> > smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3 > >> > smtpd_tls_protocols = !SSLv2, !SSLv3 > >> > smtp_tls_mandatory_protocols = !SSLv2, !SSLv3 > >> > smtp_tls_protocols = !SSLv2, !SSLv3 > >> > > >> > >> Randomly adding lines to a config file isn't going to help things. > >> Those lines, which you added t...

...= smtpd_tls_eckey_file = $smtpd_tls_eccert_file smtpd_tls_eecdh_grade = strong smtpd_tls_exclude_ciphers = smtpd_tls_fingerprint_digest = md5 smtpd_tls_key_file = smtpd_tls_loglevel = 0 smtpd_tls_mandatory_ciphers = medium smtpd_tls_mandatory_exclude_ciphers = smtpd_tls_mandatory_protocols = !SSLv2 smtpd_tls_protocols = smtpd_tls_received_header = no smtpd_tls_req_ccert = no smtpd_tls_security_level = smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtpd_tls_session_cache_timeout = 3600s smtpd_tls_wrappermode = no smtpd_use_tls = no soft_bounce = no stale_lock_time = 500s stress = strict_...

...s = permit_sasl_authenticated, permit_mynetworks smtpd_timeout = 300s smtpd_tls_auth_only = yes smtpd_tls_cert_file = /etc/ssl/postfix/mail.mydomain.crt smtpd_tls_key_file = /etc/ssl/postfix/mail.mydomain.pem smtpd_tls_loglevel = 1 smtpd_tls_mandatory_protocols = !SSLv2,!SSLv3,TLSv1,TLSv1.1,TLSv1.2 smtpd_tls_protocols = !SSLv2,TLSv1,TLSv1.1,!SSLv3,TLSv1.2 smtpd_tls_received_header = yes smtpd_tls_security_level = encrypt smtpd_tls_session_cache_timeout = 3600s soft_bounce = no tls_random_source = dev:/dev/urandom unknown_local_recipient_reject_code = 550 virtual_alias_maps = proxy:mysql:/local/etc/postfix/mysql_...

...tpd_tls_eccert_file smtpd_tls_eecdh_grade = strong smtpd_tls_exclude_ciphers = smtpd_tls_fingerprint_digest = md5 smtpd_tls_key_file = /etc/ssl/private/server.pem smtpd_tls_loglevel = 0 smtpd_tls_mandatory_ciphers = medium smtpd_tls_mandatory_exclude_ciphers = smtpd_tls_mandatory_protocols = !SSLv2 smtpd_tls_protocols = smtpd_tls_received_header = no smtpd_tls_req_ccert = no smtpd_tls_security_level = smtpd_tls_session_cache_database = smtpd_tls_session_cache_timeout = 3600s smtpd_tls_wrappermode = no smtpd_upstream_proxy_protocol = smtpd_upstream_proxy_timeout = 5s smtpd_use_tls = yes soft_bounce = no stale_loc...

HI, > You could set > > syslog_facility = local5 > > and have all the log messages in the messages file. According to the output of command # doveadm log find every type of message goes to the file I was looking at, "/var/spool/maillog". >> So, is it postfix doing the local mail delivery, not dovecot? >> > To answer this question please post relevant

...e = $smtpd_tls_eccert_file smtpd_tls_eecdh_grade = strong smtpd_tls_exclude_ciphers = smtpd_tls_fingerprint_digest = md5 smtpd_tls_key_file = $smtpd_tls_cert_file smtpd_tls_loglevel = 0 smtpd_tls_mandatory_ciphers = medium smtpd_tls_mandatory_exclude_ciphers = smtpd_tls_mandatory_protocols = !SSLv2 smtpd_tls_protocols = smtpd_tls_received_header = no smtpd_tls_req_ccert = no smtpd_tls_security_level = smtpd_tls_session_cache_database = smtpd_tls_session_cache_timeout = 3600s smtpd_tls_wrappermode = no smtpd_use_tls = no soft_bounce = no stale_lock_time = 500s stress = strict_7bit_headers = no strict_8bitmime = n...