Nikolaos Milas:
[ Charset UTF-8 unsupported, converting... ]
> On 19/1/2012 7:06 ??, Noel Jones wrote:
>
> > or define the restriction in main.cf and refer to it
> > ...
> > (or make up your own macro names)
>
> Thank you all for your valuable suggestions.
>
> These "macro names" seem really interesting. Can we use them in main.cf
> too (to define sets of restrictions) and how?
tls_export_cipherlist = ALL:+RC4:@STRENGTH
tls_high_cipherlist = ALL:!EXPORT:!LOW:!MEDIUM:+RC4:@STRENGTH
tls_low_cipherlist = ALL:!EXPORT:+RC4:@STRENGTH
tls_medium_cipherlist = ALL:!EXPORT:!LOW:+RC4:@STRENGTH
tls_null_cipherlist = eNULL:!aNULL
I found these with: postconf | grep '[A-Z][A-Z][A-Z]:' :-)
Careful, this kind of settings provide a lot of opportunity
for shooting yourself into the foot.
Wietse
