My Postfix mail server is set up with opportunistic TLS. Is there a way to get some statistics on how many incoming and outgoing emails actually use TLS? It would be nice to know which of the domains that my mails server talks to support and don't support TLS as well.
-
I want to congratulate for the question. This is particularly helpful (and was what I was looking for) in determining when to switch off old TLS protocols. I wouldn't be surprised to discover that a number of domain I exchange mail with don't support the most recent TLS version or still want to communicate in plain text– usr-local-ΕΨΗΕΛΩΝDec 17, 2020 at 14:49
Add a comment
|
2 Answers
While smtpd_tls_loglevel
enables logging of TLS information, it alone doesn't give readable statistics. The default Postfix logfile analyzer pflogsumm
doesn't include any TLS statistics, but saftsumm --tls-stats
(tool from Log-Saftpresse logfile analyzer) may provide just what you need.
-
Thanks, it looks promising, but I can't get it to install:
cpanm saftsumm
tells me! Finding saftsumm () on mirror http://www.cpan.org failed.
– EM0Oct 18, 2017 at 13:09 -
Try
perl -MCPAN -e 'install Log::Saftpresse'
assaftsumm
is part of Saftpresse module. Oct 18, 2017 at 13:33 -
-
1
-
OK, so I tried it, and it does show some nice stats, but nothing related to TLS/SSL. (Yes, I'm using the
--tls-stats
option.)– EM0Oct 23, 2017 at 13:18
The loglevel smtpd_tls_loglevel
is 0 by default, setting it to 1 should log basic TLS information.