1 |
On Dec 7, 2011 8:01 AM, "Grant" <emailgrant@×××××.com> wrote: |
2 |
> |
3 |
> > That will disable postgrey, but isn't enough to enable postscreen. There |
4 |
> > are a couple of daemons you have to enable in master.cf (steps 2 |
5 |
through 6): |
6 |
> > |
7 |
> > http://www.postfix.org/POSTSCREEN_README.html#enable |
8 |
> > |
9 |
> > That README refers to lines that are commented-out in master.cf; of |
10 |
> > course, if you've upgraded from an earlier of postfix, you won't have |
11 |
them. |
12 |
> |
13 |
> Don't you let etc-update add them for you? |
14 |
> |
15 |
> > What I did was to untar the latest postfix release under my home |
16 |
> > directory, and find the master.cf that ships with it. Then, I |
17 |
> > copy/pasted the lines mentioned in the README over to my real master.cf. |
18 |
> > |
19 |
> > After a restart, you should see lines like this in your mail log: |
20 |
> > |
21 |
> > Dec 6 03:13:46 mx1 postfix/postscreen[2810]: CONNECT from ... |
22 |
> > |
23 |
> > that let you know its' working. |
24 |
> |
25 |
> Working now, thanks a lot. I should only need the tlsproxy line if my |
26 |
> users connect to port 25 to send mail, correct? |
27 |
> |
28 |
|
29 |
I've perused the relevant documentation, and to my knowledge you need to |
30 |
enable tlsproxy if you want to use TLS, be it through port 25 or 587. |
31 |
|
32 |
Don't forget to test it using openssl s_client. |
33 |
|
34 |
Rgds, |