Michael B Allen: > Hello, > > I am using postfix 2.3 on CentOS and I would like to disable SSLv2. If > I do the following: > > smtpd_tls_mandatory_protocols = SSLv3, TLSv1 > smtpd_tls_mandatory_ciphers = medium, high
This is for mandatory TLS. > If I add smtpd_tls_security_level = encrypt it then works but then You are using opportunistic TLS instead of mandatory TLS. As documented, that is controlled with smtpd_tls_protocols/ciphers. Wietse