[Ach] Feedback to applied-crypto-hardening.pdf - Mail Servers - Dovecot+Postfix

[Torge Riedel]

Hi list,

continuing my feedback with SSH / OpenSSH:

# cat /etc/os-release
NAME="Ubuntu"
VERSION="16.04.3 LTS (Xenial Xerus)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 16.04.3 LTS"

# dovecot --version
2.2.31 (65cde28)

# postconf -d | grep mail_version
mail_version = 3.1.0

The guide is working for me, I disabled compression for dovecot.

Maybe there are some improvements, I am refering here to https://thomas-leister.de/mailserver-debian-stretch/ (in German) where I followed a good guide for setting up a mail server.

I am using the following settings with success from the Thomas' guide:

smtp_tls_security_level = dane
smtp_dns_support_level = dnssec

Regards
Torge