==== Required information ====
- iRedMail version (check /etc/iredmail-release): v0.9.8
- Linux/BSD distribution name and version: CentOS Linux release 7.4.1708 (Core)
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): Active Directory
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? No , v0.9 (MySQL)
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====
Our domain users can login with SOGO and testing mail with gmail successfully, I want to test Amavisd blacklist feature, so I did :

python wblist_admin.py --account user1@mydomain --add --blacklist my@gmail.com

When my@gmail.com send emails to user1@mydomain , they move to Junk folder, I want they must be rejected with "error code something ..." or discard, what should I do ?
This is mail log when add blacklist:

This is mail log when remove blacklist:

Can you give me document about how to use amavisd , clamv , SpamAssassin integrate with iRedmail ?

==== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.8 OPENLDAP EDITION
- Linux/BSD distribution name and version: FreeBSD 11.1 x64
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): LDAP
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

So far I've had a great experience using iredmail & migrating from my old host to my new.
There was a snag where I had to downgrade py-ldap to get the admin panel working but otherwise things have gone well.

Right now my mail is flowing & webmail is working perfectly. The rub is when I try to connect to dovecot with a remote client. I am getting unknown user authentication messages. For demonstration I've included the sanitized debug logs of dovecot for a successful roundcube auth session & an unsuccessful remote IMAP auth session.

Successful RoundCube Login:
Apr 12 00:13:16 imap-login: Info: Login: user=<testuser@example.org>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=62044, secured, session=<wxkc0J9p4Kp/AAAB>
Apr 12 00:13:16 imap(testuser@example.org)<62044><wxkc0J9p4Kp/AAAB>: Info: Logged out in=758 out=6431 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0

Unsuccessful Remote IMAp Client Login:
Apr 12 00:13:52 auth: Debug: auth client connected (pid=65023)
Apr 12 00:13:53 auth: Debug: client in: AUTH    1       PLAIN   service=imap    secured=tls     session=ry5U0p9pO2NHC/l3        lip=10.7.***.***   rip=71.11.***.***       lport=993       rport=25403  ssl_cipher=ECDHE-RSA-AES256-GCM-SHA384  ssl_cipher_bits=256     ssl_pfs=ECDH    ssl_protocol=TLSv1.2    resp=<hidden>
Apr 12 00:13:53 auth: Debug: ldap(testuser@example.org,71.11.***.***,<ry5U0p9pO2NHC/l3>): bind search: base=o=domains,dc=example,dc=org filter=(&(objectClass=mailUser)(accountStatus=active)(!(domainStatus=disabled))(enabledService=mail)(enabledService=imaptls)(|(mail=testuser@example.org)(&(enabledService=shadowaddress)(shadowAddress=testuser@example.org))))
Apr 12 00:13:53 auth: Debug: ldap(testuser@example.org,71.11.***.***,<ry5U0p9pO2NHC/l3>): no fields returned by the server
Apr 12 00:13:53 auth: Info: ldap(testuser@example.org,71.11.***.***,<ry5U0p9pO2NHC/l3>): unknown user (given password: ********* [confirmed correct])
Apr 12 00:13:55 auth: Debug: client passdb out: FAIL    1       user=testuser@example.org
Apr 12 00:13:55 imap-login: Info: Disconnected (auth failed, 1 attempts in 2 secs): user=<testuser@example.org>, method=PLAIN, rip=71.11.***.***, lip=10.7.***.***, TLS: read(size=519) failed: Connection reset by peer, session=<ry5U0p9pO2NHC/l3>

Any pointers would be much appreciated as this is bugging the hell out of me. I can confirm 100% that the auth username & password are connect. (I've actually tied other web apps to the ldap instance and am successfully authenticating against the LDAP server with this username & password the AUTH issue is ONLY with dovecot/IMAP and only from remote hosts.)

==== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.7
- Linux/BSD distribution name and version: Debian 8
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx):Apache2
- Manage mail accounts with iRedAdmin-Pro?No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

I can log into roundcube from LAN side without problem.  It always connects via HTTPS.  But when I try to connect from internet I get Invalid Request. No data was saved.  I have set force_https to false in the config file but same result.

==== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.8
- Linux/BSD distribution name and version: ubuntu 16.04
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): mysql
- Web server (Apache or Nginx): nginx
- Manage mail accounts with iRedAdmin-Pro? yes
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

hi,

one of our customers is on barracuda blacklist.
When he authenticates on out mailserver, iredmail blocks the connection because the ip is blacklisted at barracuda.
why is that when they authenticate via username/pass ?

==== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.8
- Linux/BSD distribution name and version: OpenBSD 6.3
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): LDAP
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

After choosing LDAP (openldap, not ldapd) as a backend, why does mariadb install at all? I do not have the time to investigate this right now, but following comes to mind:

- Probably some settings are getting stored in the mariadb database. If that is the case, does mariadb install even when choosing postgres as a backend? If not, can we somehow force installation of postgres instead of mariadb for storing data?

Also, on a vanilla OpenBSD system, daemons started are both ldapd and openldap. Can ldapd be stopped if not in use?

Hello. One of the trusted senders cannot deliver the email. In logs:

Apr 11 15:05:16 mail postfix/smtpd[31332]: NOQUEUE: reject: RCPT from ns5.ediweb.eu[80.235.72.35]: 554 5.7.1 <ns5.ediweb.eu>: Helo command rejected: Go away, bad guy.; from=<do_not_reply@factorplat.ru> to=<buh@mycompany.ru> proto=ESMTP helo=<ns5.ediweb.eu>
Apr 11 15:05:16 mail postfix/smtpd[31332]: disconnect from ns5.ediweb.eu[80.235.72.35]

I added the file: /etc/postfix/whitelist inside which:
@ediweb.eu ok
@factorplat.ru ok

Then I executed the command:
postmap /etc/postfix/whitelist

and added a new line in: /etc/postfix/main.cf

smtpd_sender_restrictions = check_sender_access hash:/etc/postfix/whitelist

and excuted:
postfix reload

But it didn't work, the letters are still blocked?!

iRedMail version: 0.9.7, Debian, MySQL backend, Apache,  iRedMail Opensource,

Hi the ssl works now the only issue is described in the note down below, my only question is, is there a workaround for this?

NOTE: Some certificates can only be used on web servers using the Common Name specified during enrollment. For example, a certificate for the domain domain.com will receive a warning if accessing a site named www.domain.com or secure.domain.com, because www.domain.com and secure.domain.com are different from domain.com.

==== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.8
- Linux/BSD distribution name and version: Ubuntu 16.04
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):  PGSQL
- Web server (Apache or Nginx): Apache
- Manage mail accounts with iRedAdmin-Pro? Yes
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

I've succesfully upgraded everything to 0.9.8 except the last part for amavist maddr.email_raw

Here's the error I got when running: \i /tmp/amavisd.pgsql

psql:/tmp/amavisd.pgsql:2: ERROR:  relation "msgs" does not exist
psql:/tmp/amavisd.pgsql:3: ERROR:  relation "msgs" does not exist
psql:/tmp/amavisd.pgsql:4: ERROR:  relation "msgs" does not exist
psql:/tmp/amavisd.pgsql:6: ERROR:  relation "msgs" does not exist
psql:/tmp/amavisd.pgsql:7: ERROR:  relation "msgs" does not exist
psql:/tmp/amavisd.pgsql:8: ERROR:  relation "msgs" does not exist
psql:/tmp/amavisd.pgsql:11: ERROR:  relation "maddr" does not exist
psql:/tmp/amavisd.pgsql:14: ERROR:  relation "maddr" does not exist
psql:/tmp/amavisd.pgsql:15: ERROR:  relation "maddr" does not exist
psql:/tmp/amavisd.pgsql:16: ERROR:  relation "maddr" does not exist
CREATE FUNCTION
psql:/tmp/amavisd.pgsql:36: ERROR:  relation "maddr" does not exist

Any idea  what might cause this ?

Thanks

EDIT: I think there is an error in the doc. It says:

psql -U amavisd -d vmail

Shouldn't that be this instead ?:

psql -U amavisd -d amavisd

EDIT2: Running it on the right DB generated no error. The Top Sender and Top Receiver is still not working (see attached image).

==== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.4
- Linux/BSD distribution name and version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Web server (Apache or Nginx):
- Manage mail accounts with iRedAdmin-Pro?
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

It's possible to create a list of domains/email addresses or even by ip/ip class that would be use to mark emails as spam that comes from this sources?

==== Required information ====
- iRedMail version (check /etc/iredmail-release):  0.9.4
- Linux/BSD distribution name and version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Web server (Apache or Nginx):
- Manage mail accounts with iRedAdmin-Pro?
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

It's possible that new emails arrived to inbox to be copied to .Archive folder?

==== Required information ====
- iRedMail version (check /etc/iredmail-release):
- Linux/BSD distribution name and version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Web server (Apache or Nginx):
- Manage mail accounts with iRedAdmin-Pro?
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====Hi!
I have been using an IredMail server for some time. The server and everything is working well. I am a little proud that I have managed to install and configure this server. What I am anxious about is that I haven't secured everything as it should be.

I see in the logfile that I receive everyday, there is people trying to get in to my server. Most of them come from HongKong or China some from USA.

Is there a way to blacklist eg. 180.97.?.? which is  using different ip everyday?

Regards
Ulferik

==== Required information ====
- iRedMail version (check /etc/iredmail-release):
- Linux/BSD distribution name and version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Web server (Apache or Nginx):
- Manage mail accounts with iRedAdmin-Pro?
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
======== Required information ====
- iRedMail version (check /etc/iredmail-release):  0.9.7
- Linux/BSD distribution name and version:  Debian 8
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):  LDAP
- Web server (Apache or Nginx): Apache
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====
Hi. Does throttling work when sending mail in one domain? E.g. from mail1@domain.com to mail2@domain.com.
When I send mail to the "outside" throttling works well, but for local domain ignores rules..

In throttle table I have the like following:

id: 1
account: @.
kind: outbound
priority: 0
period: 3600
msg_size: 1024
max_msgs: 0
max_quota: 0

id: 2
account: mail1@domain.com
kind: outbound
priority: 100
period: 3600
msg_size: 10240
max_msgs: -1
max_quota: -1

...

Is there a way to restrict message size for local mails?

==== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.8
- Linux/BSD distribution name and version: OpenBSD 6.3
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): LDAP
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

On the following page, open ports are listed:
https://docs.iredmail.org/network.ports.html

Missing in the list is
Host:Port             Used by
*:20000                Sogo
localhost:11211    memcache
localhost:10027    Amavisd-new
localhost:24243    Dovecot
localhost:24         MySQL
localhost:7790      mlmmj
localhost:10025    postfix master

They need to be added to the documentation, maybe?

==== Required information ====
- iRedMail version (check /etc/iredmail-release):
- Linux/BSD distribution name and version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Web server (Apache or Nginx):
- Manage mail accounts with iRedAdmin-Pro?
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.

After doing the upgrade to iRedMail 0.9.8 and iRedAdminPro 2.9, I can no longer access the iRedAdminPro web site. All I get is:

internal server error

I installed the mlmmj mail list manager and I see in in the log file: /var/log/uwsgi-iredadmin.log

 File "/usr/local/www/iRedAdmin-Pro-SQL-2.9.0/libs/mlmmj/__init__.py", line 12, in <module>
    api_headers = {settings.MLMMJADMIN_API_AUTH_HEADER: settings.mlmmjadmin_api_auth_token}
AttributeError: 'module' object has no attribute 'mlmmjadmin_api_auth_token'

This is from my mlmmj/settings.py conf file:

backend_api = 'bk_none'
backend_cli = 'bk_iredmail_sql'

# A list of API AUTH tokens (secret strings) used for authentication.
# It's strong recommended to use a long string as auth token, program will log
# first 8 characters to help you identity the client.

api_auth_tokens = ['@PC^z********************efMN5ur']

# Load extra config file.
#from custom_settings import *                                                                                                 

# database access
iredmail_sql_db_type = 'mysql'
iredmail_sql_db_server = '127.0.0.1'
iredmail_sql_db_port = 3306
iredmail_sql_db_name = 'vmail'
iredmail_sql_db_user = 'vmailadmin'
iredmail_sql_db_password = '******************************'

# directories
MLMMJ_SPOOL_DIR = '/var/vmail/mlmmj'
MLMMJ_ARCHIVE_DIR = '/var/vmail/mlmmj-archive'
MLMMJ_DEFAULT_PROFILE_SETTINGS.update({'smtp_port': 10027})
MLMMJ_SKEL_DIR = '/usr/local/share/mlmmj/text.skel'

Mail delivery to users via IMAP works find and Roundcube Webmail interface is also working. It is just iRedAdmin-Pro web interface.

I can't find anything else in the log files.

Any ideas?

==== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.8
- Linux/BSD distribution name and version: centos 7.4
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): mysql (mariadb 10.2.14)
- Web server (Apache or Nginx): apache
- Manage mail accounts with iRedAdmin-Pro? no
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

have you come up with an easy way (if it's even possible) to add cram-md5 password support to dovecot (running v2.3.1)? everything i've read involves changing dovecot config and then having to reset user passwords.

it appears you have postfix using sasl to dovecot, correct?

==== Required information ====
- iRedMail version (check /etc/iredmail-release):  0.98
- Linux/BSD distribution name and version: ubuntu 16.04.4
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): mariaDB
- Web server (Apache or Nginx): nginx
- Manage mail accounts with iRedAdmin-Pro?: nope
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

I successfully installed iredmail on a clean spunup server (digital ocean droplet) using sogo as my UI. I can both send and receive emails perfectly. I have another droplet used for my wordpress sites and on one of those sites I have a contact form (used for a contact us page) via contact form 7 plugin. I have the plugin set to send it's emails to an email address on my iredmail server, but when I send the data from the contact from it never reaches my inbox.

I took a look at the logs and I noticed I'm getting a "Helo command rejected: need fully-qualified hostname" and the "FROM" is from www-data@(name of my server)

is there a way to make iredmail accept all mail coming from that server so it can handle them normally (inbox or junk). basically a way to bypass iredmail settings/restrictions just for emails coming that server?

iRedMail 0.9.8
OS: FreeBSD 11.1 (Not in jail)
RAM: Tons - 8GB+
Web server: Nginx
Database: MySQL
Error: 'Unable to connect to managesieve server' when clicking 'Filters' in Roundcube settings

----

Hello,

I'm experiencing issues with Roundcube connecting to the Managesieve plugin on a fresh iRedAdmin solution. When logging into Roundcube, going into settings then clicking 'Filters' I get a 'Unable to connect to managesieve server' error.

This happens on a completely fresh iRedMail 0.9.8 install (+MySQL & Nginx installed by iRedMail installer), installed onto a fresh FreeBSD 11.1 installation (not in a jail). No non-default packages have been installed other than iRedMail. This is also occuring with the default SSL certs provided by iRedMail, I've also changed all the certs out to my own SSL certs but the same issue occurs.

I was wondering if this might be an issue with the machine I was running it on, so I've spun up a FreeBSD 11.1 virtual server on a seperate machine. Installed iRedAdmin and again the same error occurs with default settings (again using MySQL and Nginx)

Sieve is listening on port 4190. I've checked Managesieve's config at /usr/local/www/roundcube/plugins/managesieve/config.inc.php and it is configured to communicate with port 4190 rather than the older port 2000 that older versions used.

It shouldn't make a difference, but I've also tested this with a firewall on and off. Same issue in both scenarios.

I've made sure there is enough RAM for everything to work with - both installs I've tried have had a minimum of 4GB available to them. The problem still continues after disabling and uninstalling Amavisd, ClamAV and SpamAssasin.

What's interesting, is I have a very similar setup (FreeBSD 11.1 with 512MB of RAM, Amavisd, ClamAV and SpamAssasin disabled) which has been running for about a year or two without any issues. The only difference between these setups is the old (working) server is running Apache, but the new server is Nginx, although I don't think that will be causing this issue.The version of iRedAdmin running on the working server is iRedMail 0.9.6.

This issue also seems to cause POP and IMAP connections to not work with SSL. If I disable the need for SSL - POP, IMAP and the Filters section in Roundcube start working again.

As this is happening on two seperate installs without any modifications from myself. Could this be a bug?

==== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.8
- Linux/BSD distribution name and version: Debian 9
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro?
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

I have a machine with Debian 8 + Apache + iRedMail 0.9.7 and everything works fine.

Today I set up a new machine with Debian 9 + Nginx + iRedMail 0.9.8 to see if I can migrate to the new configuration. Everything seems to be fine except that I receive error cronjob emails in the postmaster box. In detail:

Cron <root@mail2> python /opt/iredapd/tools/cleanup_db.py >/dev/null

Traceback (most recent call last):
  File "/opt/iredapd/tools/cleanup_db.py", line 34, in <module>
    total_before = sql_count_id(conn_iredapd, 'throttle_tracking')
  File "/opt/iredapd/tools/../tools/__init__.py", line 80, in sql_count_id
    qr = conn.select(table,
AttributeError: 'NoneType' object has no attribute 'select'

Cron <root@mail2> python /opt/iredapd/tools/spf_to_greylist_whitelists.py >/dev/null

Traceback (most recent call last):
  File "/opt/iredapd/tools/spf_to_greylist_whitelists.py", line 91, in <module>
    qr = conn.select('greylisting_whitelist_domains', what='domain')
AttributeError: 'NoneType' object has no attribute 'select'

How can I solve the problem?

==== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.7
- Linux/BSD distribution name and version: FreeBSD 11.1
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Apache
- Manage mail accounts with iRedAdmin-Pro? Yes
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

I have an iredmail 0.9.7 running apache22 yet. If I only do the mysql database upgrade procedures from 0.9.7 to 0.9.8 and do a mysqldump of the databases ... Can I do a clean installation of iredmail 0.9.8 and import the database did I backup?

==== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.8 MariaDB Ed
- Linux/BSD distribution name and version: CentOS-release-7-4.1708.el7.centos.x86_64
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? No
====

Hi everyone,

First off, awesome to be here and it's an amazing tool!

I have a rather unique requirement (I think) and I have read through hundreds of posts and How-To's but I cannot find the answer I am looking for, so I am creating this post to get some assistance hopefully.

I have installed iRedMail successfully and everything is working as it should when using RoundCube which I can send and receive email from without problems. Now, I work at a company that develops their own Java application, and runs on Apache Tomcat web service.

We use settings inside of these apps to send out reports and the likes from our application, the following fields are available:

Secure - None, SSL or TLS
SMTP Host - mx.oi-notify.com (The iRedMail server I have installed)
Email Address - noreply@oi-notify.com
Port - 25 (is this correct?)
Password - unique password

The iRedMail server has been configured on a hosted server in the cloud that I have full access to manage, which only has a public IP address. The applications that I have mentioned is also on various hosted servers in the cloud, so nothing is on the same domain environment with only publicly available IP addresses on all these servers.

I have found details on the forums and other places which I have tried implementing but with no success. I keep getting an error message that:

NOQUEUE: reject: RCPT from unknown[app_server_ip]: 454 4.7.1 <leunis@domain_name.co.za>: Relay access denied;

Can someone point me in the right direction to get this sorted out please? main.cf file below where I am at now (I might have already enabled or disabled stuff that I shouldn't have)...

# --------------------
# location of the Postfix queue. Default is /var/spool/postfix.
queue_directory = /var/spool/postfix

# location of all postXXX commands. Default is /usr/sbin.
command_directory = /usr/sbin
Daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
mail_owner = postfix
sendmail_path = /usr/sbin/sendmail.postfix
newaliases_path = /usr/bin/newaliases.postfix
mailq_path = /usr/bin/mailq.postfix
setgid_group = postdrop

debugger_command =
    PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
    ddd $daemon_directory/$process_name $process_id & sleep 5

debug_peer_level = 2

# --------------------
# CUSTOM SETTINGS

unknown_local_recipient_reject_code = 550

# Do not notify local user.
biff = no

# Disable the rewriting of "site!user" into "user@site".
swap_bangpath = no

# Disable the rewriting of the form "user%domain" to "user@domain".
allow_percent_hack = no

# Allow recipient address start with '-'.
allow_min_user = no

# Disable the SMTP VRFY command. This stops some techniques used to
# harvest email addresses.
disable_vrfy_command = yes

# Enable both IPv4 and/or IPv6: ipv4, ipv6, all.
inet_protocols = ipv4

# Enable all network interfaces.
inet_interfaces = all

smtpd_tls_key_file = /etc/pki/tls/private/iRedMail.key
smtpd_tls_cert_file = /etc/pki/tls/certs/iRedMail.crt
smtpd_tls_CAfile = /etc/pki/tls/certs/iRedMail.crt
smtpd_tls_CApath = /etc/pki/tls/certs

# Disable SSLv2, SSLv3
smtpd_tls_protocols = !SSLv2 !SSLv3
smtpd_tls_mandatory_protocols = !SSLv2 !SSLv3