Michael B Allen:
> Hello,
> 
> I am using postfix 2.3 on CentOS and I would like to disable SSLv2. If
> I do the following:
> 
> smtpd_tls_mandatory_protocols = SSLv3, TLSv1
> smtpd_tls_mandatory_ciphers = medium, high

This is for mandatory TLS. 

> If I add smtpd_tls_security_level = encrypt it then works but then

You are using opportunistic TLS instead of mandatory TLS. As
documented, that is controlled with smtpd_tls_protocols/ciphers.

        Wietse

Reply via email to