Thank you for your response. I cant update because postfix is 2.9 in the debian repository and is a plesk server so i dont want to install manually. If i do i get in trouble when the plesk goes to update :(
As you say the problem is that the "auditor" wants to disable :( Best Regards. 2014-09-22 13:47 GMT+02:00 [email protected] <[email protected]>: > > Am 22.09.2014 um 13:32 schrieb Jose J: >> I have postfix 2.9 installed and i want to disable the tls >> compression, in postfix 2.11 i have to add a line with >> "tls_ssl_options = no_compression" but what about postfix 2.9? >> >> Anyone know how to disable tls compression in postfix 2.9? > > first: > the so called CRIME-attack is *completly* irrelevant for SMTP > and so there is no good reason and if some security auditor > comes with that fire him because he has no clue what he > is talking about > > http://en.wikipedia.org/wiki/CRIME > > second: why do you not just update postfix if you need a new > option - i have never seen a postfix setup breaking existing > configurations the last 8 years > > maybe "smtpd_relay_restrictions" needs to be adjusted, that's all > http://www.postfix.org/postconf.5.html#smtpd_relay_restrictions -- Jose J. Anton
