On Sun, Aug 09, 2015 at 12:42:00PM -0400, Mike wrote:
> On this page:
> http://www.postfix.org/FORWARD_SECRECY_README.html#client_fs
>
> There is:
>
> Once the parameters are in place, update main.cf as follows:
>
> /etc/postfix/main.cf:
> smtpd_tls_dh1024_param_file = ${config_directory}/dh2048.pem
> smtpd_tls_dh512_param_file = ${config_directory}/dh512.pem
These are SMTP server not SMTP client settings (for some reason
your subject line says "Client").
> I notice the line starting with 'smtpd_tls_dh1024_param_file' points to
> a 2048 file.
>
> Is that correct, or might it be a typo?
It is not a typo and rationale is explained in the document.
http://www.postfix.org/FORWARD_SECRECY_README.html#server_fs
EDH Server support:
...
Take a few minutes to read more of the document.
--
Viktor.
