Month: October 2014

  • October 27, 2014 · Article

    Disable SSLv3 in Postfix, Dovecot

    Postfix: Disabling certain versions of SSL works like this in Postfix: In your /etc/postfix/main.cf add or modify the following config parameter like so: smtpd_tls_protocols=!SSLv2,!SSLv3 If you are using mandatory TLS you’ll want to set this instead: smtpd_tls_mandatory_protocols=!SSLv2,!SSLv3 These should be fairly self-explanatory, but for further detail read the Postfix configuration parameters documentation. Do not forget […]

  • October 15, 2014 · Article

    Test your SSL setup

    Qualys offers a great tool that will check your server for SSL config issues, such as weak ciphers and outdated protocol versions.