1 Topic by RichieX (edited by RichieX 2018-06-06 22:19:06)

  • RichieX
  • Member
  • Offline
  • Registered: 2018-05-18
  • Posts: 15

Topic: smtp_tls_security_level = encrypt

==== Required information ====
- iRedMail version (0.9.8 MYSQL edition):
- Linux/BSD distribution name and version: Ubuntu 18.04 LTS
- Store mail accounts in which backend (MySQL):
- Web server (Apache or Nginx):Nginx
- Manage mail accounts with iRedAdmin-Pro? No.
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====
I want setup a GDPR like secure mailserver with postfix parameter "smtp_tls_security_level = encrypt" to send mails to other smtp server only encrypted.

How can i solve this error in maillog from (maybe) amavisd?
"(TLS is required, but was not offered by host 127.0.0.1[127.0.0.1])"

RichieX

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by RichieX (edited by RichieX 2018-06-06 23:26:21)

  • RichieX
  • Member
  • Offline
  • Registered: 2018-05-18
  • Posts: 15

Re: smtp_tls_security_level = encrypt

solution:
in master.cf in section smtp-amavis:
-o smtp_tls_security_level = none

3 Reply by RichieX (edited by RichieX 2018-06-07 18:46:01)

  • RichieX
  • Member
  • Offline
  • Registered: 2018-05-18
  • Posts: 15

Re: smtp_tls_security_level = encrypt

Force "smtp_tls_security_level = encrypt" also incoming (from other smtp servers) TLS encryption?

RichieX

4 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,094

Re: smtp_tls_security_level = encrypt

The problem is, not all other mail servers offer tls/ssl for secure connection, in this case, mail delivery will fail.

5 Reply by RichieX (edited by RichieX 2018-06-08 14:21:38)

  • RichieX
  • Member
  • Offline
  • Registered: 2018-05-18
  • Posts: 15

Re: smtp_tls_security_level = encrypt

Thats not a problem, that would be OK. This Mailserver should be only be used for TLS transfer. We only want to allow encrypted communication.