[Ach] Feedback to applied-crypto-hardening.pdf - Mail Servers - Dovecot+Postfix

Torge Riedel torgeriedel at gmx.de
Fri Dec 22 13:43:33 CET 2017

Hi list,

continuing my feedback with SSH / OpenSSH:

# cat /etc/os-release
VERSION="16.04.3 LTS (Xenial Xerus)"
PRETTY_NAME="Ubuntu 16.04.3 LTS"

# dovecot --version
2.2.31 (65cde28)

# postconf -d | grep mail_version
mail_version = 3.1.0

The guide is working for me, I disabled compression for dovecot.

Maybe there are some improvements, I am refering here to https://thomas-leister.de/mailserver-debian-stretch/ (in German) where I followed a good guide for setting up a mail server.

I am using the following settings with success from the Thomas' guide:

smtp_tls_security_level = dane
smtp_dns_support_level = dnssec


More information about the Ach mailing list