Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I need to implement TLS tunneling in my Postfix so that when needed it can use TLS certification (when trying to send mails to the domain xxxx.xx, their servers will ask mine to establish a TLS session. In the documentation there seems to be two approaches: SMTP server and SMTP client.

What is the difference? And which one am I supposed to use?

share|improve this question
add comment

1 Answer

Postfix with TLS for SMTP Server is for when the mail client, or other mail server tries to send email to or through your postfix system, it will offer or require the use of TLS depending on how you configure it. Postfix with TLS for SMTP Client is when your postfix server wants to send email to another SMTP server.

Update 1

Given Postfix's client tls documentation if blah.com offers STARTTLS then and offers a correct ssl certificate, then configuring Opportunistic TLS with /etc/postfix/main.cf: smtp_tls_security_level = may will provide the support required.

share|improve this answer
    
Ok, but I make an SMTP connection to my Postfix server, and then I use this connection to send an mail to 'blah.com'. Then blah.com requires a TLS session to accept that mail. Then my Postfix server is a server for me, but a client for the server at blah.com. –  Yihad Jul 10 '12 at 16:03
    
Correct. These are two distinct cases. –  adaptr Jul 10 '12 at 17:23
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.