· 9 years ago · Sep 21, 2016, 07:42 PM
1cat /etc/postfix/tls_policy
2 gmail.com may
3
4alias_database = hash:/etc/aliases
5 alias_maps = hash:/etc/aliases
6 command_directory = /usr/sbin
7 config_directory = /etc/postfix
8 daemon_directory = /usr/libexec/postfix
9 data_directory = /var/lib/postfix
10 debug_peer_level = 2
11disable_dns_lookups = no
12 html_directory = no
13inet_interfaces = all
14inet_protocols = ipv4
15 mail_owner = postfix
16 mailq_path = /usr/bin/mailq.postfix
17manpage_directory = /usr/share/man
18maximal_backoff_time = 14400s
19maximal_queue_lifetime = 1d
20milter_default_action = accept
21minimal_backoff_time = 3600s
22mydestination = $myhostname, localhost.$mydomain, localhost
23mydomain = abc.com
24mynetworks = 10.5.78.0/24, 127.0.0.0/8
25myorigin = $myhostname
26newaliases_path = /usr/bin/newaliases.postfix
27non_smtpd_milters = $smtpd_milters
28queue_directory = /var/spool/postfix
29readme_directory = /usr/share/doc/postfix-2.6.6/README_FILES
30sample_directory = /usr/share/doc/postfix-2.6.6/samples
31sendmail_path = /usr/sbin/sendmail.postfix
32setgid_group = postdrop
33smtp_pix_workarounds = delay_dotcrlf
34smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt
35smtp_tls_policy_maps = hash:/etc/postfix/tls_policy
36smtpd_client_restrictions = check_client_access hash:/etc/postfix/access
37smtpd_milters = inet:127.0.0.1:8891
38smtpd_starttls_timeout = 300s
39smtpd_tls_CAfile = /etc/pki/tls/certs/abc-int-cert.crt
40smtpd_tls_cert_file = /etc/pki/tls/certs/abc.com.crt
41smtpd_tls_key_file = /etc/pki/tls/private/abc.com.key
42 smtpd_tls_loglevel = 1
43 smtpd_tls_mandatory_ciphers = high
44 smtpd_tls_mandatory_exclude_ciphers = aNULL, MD5
45 smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
46 smtpd_tls_received_header = yes
47smtpd_tls_security_level = may
48transport_maps = hash:/etc/postfix/transport
49unknown_local_recipient_reject_code = 550
50
51gmail.com secure match=mx.google.com:.mx.google.com
52.gmail.com secure match=mx.google.com:.mx.google.com