On Mar 13, 2018, at 09:17, Viktor Dukhovni <postfix-us...@dukhovni.org> wrote: >> smtpd_tls_exclude_ciphers = eNULL, aNULL, LOW, EXP, MEDIUM, ADH, AECDH, MD5, >> DSS, ECDSA, CAMELLIA128, CAMELLIA256, 3DES > > This too is unwise. Remove this setting.
In general, or these specific exclusions? I've had smtpd_tls_exclude_ciphers = MD5, SEED, IDEA, RC2, RC4 For a pretty long time now -- My main job is trying to come up with new and innovative and effective ways to reject even more mail. I'm up to about 97% now.
