update inc/postfix.inc disable SSLv3 protocols

centminmod · Oct 17, 2014 · 6e37d52 · 6e37d52
1 parent 1d8cd45
commit 6e37d52
Showing 1 changed file with 15 additions and 0 deletions.
diff --git a/inc/postfix.inc b/inc/postfix.inc
@@ -40,7 +40,22 @@ postconf -e 'recipient_delimiter = +'
 postconf -e smtpd_recipient_limit=2000
 postconf -e smtpd_recipient_overshoot_limit=2000
 postconf -e default_destination_recipient_limit=10000
+
+postconf -d | egrep 'smtpd_tls_mandatory_protocols|smtpd_tls_protocols'
 postconf -e 'smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3'
+postconf -e 'smtpd_tls_protocols = !SSLv2 !SSLv3'
+postconf -n | egrep 'smtpd_tls_mandatory_protocols|smtpd_tls_protocols'
+
+postconf -d | egrep 'smtp_tls_mandatory_protocols|smtp_tls_protocols'
+postconf -e 'smtp_tls_mandatory_protocols = !SSLv2 !SSLv3'
+postconf -e 'smtp_tls_protocols = !SSLv2 !SSLv3'
+postconf -n | egrep 'smtp_tls_mandatory_protocols|smtp_tls_protocols'
+
+postconf -d | egrep 'lmtp_tls_protocols|lmtp_tls_mandatory_protocols'
+postconf -e 'lmtp_tls_mandatory_protocols = !SSLv2 !SSLv3'
+postconf -e 'lmtp_tls_protocols = !SSLv2 !SSLv3'
+postconf -n | egrep 'lmtp_tls_protocols|lmtp_tls_mandatory_protocols'
+
 /etc/init.d/postfix restart
 postconf -n | grep mailbox_size_limit | head -n1 | awk '{print $3}'