3

My Postfix mail server is set up with opportunistic TLS. Is there a way to get some statistics on how many incoming and outgoing emails actually use TLS? It would be nice to know which of the domains that my mails server talks to support and don't support TLS as well.

5

While smtpd_tls_loglevel enables logging of TLS information, it alone doesn't give readable statistics. The default Postfix logfile analyzer pflogsumm doesn't include any TLS statistics, but saftsumm --tls-stats (tool from Log-Saftpresse logfile analyzer) may provide just what you need.

  • Thanks, it looks promising, but I can't get it to install: cpanm saftsumm tells me ! Finding saftsumm () on mirror http://www.cpan.org failed. – EM0 Oct 18 '17 at 13:09
  • Try perl -MCPAN -e 'install Log::Saftpresse' as saftsumm is part of Saftpresse module. – Esa Jokinen Oct 18 '17 at 13:33
  • Also cpanm -i Log::Saftpresse, if you prefer cpanm. – Esa Jokinen Oct 18 '17 at 13:35
  • 1
    Thank you, that worked! Now to wait for some logs to analyze... – EM0 Oct 18 '17 at 14:12
  • OK, so I tried it, and it does show some nice stats, but nothing related to TLS/SSL. (Yes, I'm using the --tls-stats option.) – EM0 Oct 23 '17 at 13:18
2

The loglevel smtpd_tls_loglevel is 0 by default, setting it to 1 should log basic TLS information.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.