On 2010-05-27 1:06 PM, Brandon Vargo wrote:
> You mentioned in your first mail that you use Dovecot. The easiest
> way to setup SASL for Postfix is to have Postfix authenticate
> against Dovecot,

+1, with one caveat - it doesn't work in client mode, only server mode...

> I also recommend adding the following option to main.cf if your
> clients support TLS encryption, which will not allow authentication
> over unencrypted connections:
> 
> smtpd_tls_auth_only = yes

This is deprecated...

Ror the submission port you should use:

smtpd_tls_security_level = encrypt

and for opportunistic TLS on port 25:

smtpd_tls_security_level = may

Reply via email to