Re: Postfix ignores smtpd_tls_security_level = encrypt ?

2019-10-31 Thread Viktor Dukhovni
> On Oct 31, 2019, at 10:58 AM, Ferdinand Goldmann > wrote: > > I need a Postfix (3.3) installation to only accept mails sent after STARTTLS, > so I've set smtpd_tls_security_level = encrypt in main.cf. However, Postfix > still allows sending mails withouth encryption. That's not correct.

Re: Postfix ignores smtpd_tls_security_level = encrypt ?

2019-10-31 Thread Wietse Venema
Ferdinand Goldmann: > Hi, > > I need a Postfix (3.3) installation to only accept mails sent after STARTTLS, > so I've set smtpd_tls_security_level = encrypt in main.cf. However, Postfix > still allows sending mails withouth encryption. I assume that you are talking about receiving emailwith

Re: Postfix ignores smtpd_tls_security_level = encrypt ?

2019-10-31 Thread Bastian Blank
On Thu, Oct 31, 2019 at 03:58:03PM +0100, Ferdinand Goldmann wrote: > I need a Postfix (3.3) installation to only accept mails sent after STARTTLS, > so I've set smtpd_tls_security_level = encrypt in main.cf. However, Postfix > still allows sending mails withouth encryption. accept != send.

Postfix ignores smtpd_tls_security_level = encrypt ?

2019-10-31 Thread Ferdinand Goldmann
Hi, I need a Postfix (3.3) installation to only accept mails sent after STARTTLS, so I've set smtpd_tls_security_level = encrypt in main.cf. However, Postfix still allows sending mails withouth encryption. Do the permit_mynetworks settings in smtpd_relay_restrictions and