From 5b49c1c2314880ebd185eaec4445e05e97d3bb55 Mon Sep 17 00:00:00 2001
From: Florian Schaal <florian@schaal-24.de>
Date: Mon, 09 Mar 2015 05:15:37 -0400
Subject: [PATCH] RFC 7465 prohibits RC4 cipher suites in the ClientHello message.

---
 install/tpl/debian_postfix.conf.master |    2 ++
 1 files changed, 2 insertions(+), 0 deletions(-)

diff --git a/install/tpl/debian_postfix.conf.master b/install/tpl/debian_postfix.conf.master
index 36fd9c7..b3d7f74 100644
--- a/install/tpl/debian_postfix.conf.master
+++ b/install/tpl/debian_postfix.conf.master
@@ -38,3 +38,5 @@
 smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
 smtpd_tls_protocols = !SSLv2,!SSLv3
 smtp_tls_protocols = !SSLv2,!SSLv3
+smtpd_tls_exclude_ciphers = RC4, aNULL
+smtp_tls_exclude_ciphers = RC4, aNULL

--
Gitblit v1.9.1