From 5b49c1c2314880ebd185eaec4445e05e97d3bb55 Mon Sep 17 00:00:00 2001 From: Florian Schaal <florian@schaal-24.de> Date: Mon, 09 Mar 2015 05:15:37 -0400 Subject: [PATCH] RFC 7465 prohibits RC4 cipher suites in the ClientHello message. --- install/tpl/debian_postfix.conf.master | 2 ++ install/tpl/fedora_postfix.conf.master | 2 ++ install/tpl/opensuse_postfix.conf.master | 2 ++ install/tpl/gentoo_postfix.conf.master | 2 ++ 4 files changed, 8 insertions(+), 0 deletions(-) diff --git a/install/tpl/debian_postfix.conf.master b/install/tpl/debian_postfix.conf.master index 36fd9c7..b3d7f74 100644 --- a/install/tpl/debian_postfix.conf.master +++ b/install/tpl/debian_postfix.conf.master @@ -38,3 +38,5 @@ smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3 smtpd_tls_protocols = !SSLv2,!SSLv3 smtp_tls_protocols = !SSLv2,!SSLv3 +smtpd_tls_exclude_ciphers = RC4, aNULL +smtp_tls_exclude_ciphers = RC4, aNULL diff --git a/install/tpl/fedora_postfix.conf.master b/install/tpl/fedora_postfix.conf.master index 0d4f3a5..0e868ca 100644 --- a/install/tpl/fedora_postfix.conf.master +++ b/install/tpl/fedora_postfix.conf.master @@ -35,3 +35,5 @@ smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3 smtpd_tls_protocols = !SSLv2,!SSLv3 smtp_tls_protocols = !SSLv2,!SSLv3 +smtpd_tls_exclude_ciphers = RC4, aNULL +smtp_tls_exclude_ciphers = RC4, aNULL diff --git a/install/tpl/gentoo_postfix.conf.master b/install/tpl/gentoo_postfix.conf.master index c7d8e10..72e458e 100644 --- a/install/tpl/gentoo_postfix.conf.master +++ b/install/tpl/gentoo_postfix.conf.master @@ -34,3 +34,5 @@ smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3 smtpd_tls_protocols = !SSLv2,!SSLv3 smtp_tls_protocols = !SSLv2,!SSLv3 +smtpd_tls_exclude_ciphers = RC4, aNULL +smtp_tls_exclude_ciphers = RC4, aNULL diff --git a/install/tpl/opensuse_postfix.conf.master b/install/tpl/opensuse_postfix.conf.master index 9ee3358..321e713 100644 --- a/install/tpl/opensuse_postfix.conf.master +++ b/install/tpl/opensuse_postfix.conf.master @@ -37,3 +37,5 @@ smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3 smtpd_tls_protocols = !SSLv2,!SSLv3 smtp_tls_protocols = !SSLv2,!SSLv3 +smtpd_tls_exclude_ciphers = RC4, aNULL +smtp_tls_exclude_ciphers = RC4, aNULL -- Gitblit v1.9.1