Re: AW: AW: [exim] tls-on-connect

Top Page
Delete this message
Reply to this message
Author: Wakko Warner
Date:  
To: Philip Hazel
CC: exim-users
Subject: Re: AW: AW: [exim] tls-on-connect
> > Old suggestion:
> > daemon_smtp_ports = smtp : ssmtp
> > tls-on-connect = ssmtp
> >
> > New suggestion:
> > daemon_smtp_ports = smtp
> > daemon_tls_smtp_ports = ssmtp
> >
> > I find the new one a little better, but would be happy with both anyway.
>
> daemon_smtp_ports defines the *default* ports that are used for
> interfaces defined by local_interfaces that do not specify their own
> port. If your suggestion is adopted, then there will also be pressure to
> modify local_interfaces to make it possible to specify tls-on-connect
> for ports that are defined there.
>
> That is why I prefer
>
> tls_on_connect = x : y
>
> because it would apply both to daemon_smtp_ports and to
> local_interfaces. And it would also apply to inetd connections.


Actually, that's why I suggested tls_interfaces. Slight variation on both.

For hosts with a single interface or want to listen globally, they could do:

tls_interfaces = *::x : *::y

I forgot exactly how interfaces worked, but I think this would be more
configurable than just specifying tls_on_connect.

For inetd, they could still use the command line switch.

Personally, since I don't cater to broken mail clients, I wouldn't have a
use for this option.

--
Lab tests show that use of micro$oft causes cancer in lab animals