P.V.Anthony:
> On 18/2/22 00:13, Noel Jones wrote:
>
> > The fix is to tell your postfix to not offer STARTTLS in the EHLO
> > response, using smtpd_discard_ehlo_keyword_address_maps
> > http://www.postfix.org/postconf.5.html#smtpd_discard_ehlo_keyword_address_maps
> >
> >
> >
> > something like:
> >
> > # main.cf
> > smtpd_discard_ehlo_keyword_address_maps =
> > ? cidr:/etc/postfix/discard_ehlo_keyword_map.cidr
> >
> > # /etc/postfix/discard_ehlo_keyword_map.cidr
> > 216.109.104.12? starttls
> >
> > ? -- Noel Jones
>
> I am reporting back to say it works well.
>
> One more question. In the maps file is it possible to use a hostname
> instead of an ip address?
No, we want this to be RELIABLE. Specify a net/masl form
to exclude a rangeof IP addresses.
Wietse