proxmox-mirrors/pmg-docs
1
0
Fork 0
mirror of https://git.proxmox.com/git/pmg-docs synced 2025-07-27 11:10:29 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

pmgconfig.adoc: add TLS docu

Browse Source
This commit is contained in:
Dietmar Maurer 2018-01-05 11:34:01 +01:00
parent b335e06b7a
commit 20e879adfa
1 changed files with 27 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
pmgconfig.adoc
View File

@ -303,7 +303,11 @@ ifndef::manvolnum[]
image::images/screenshot/pmg-gui-mailproxy-networks.png[]
endif::manvolnum[]
TODO
You can add additional internal (trusted) IP networks or hosts.
All hosts in this list are allowed to relay.
NOTE: Hosts in the same subnet with Proxmox can relay by default and
it’s not needed to add them in this list.
TLS
@ -313,6 +317,28 @@ ifndef::manvolnum[]
image::images/screenshot/pmg-gui-mailproxy-tls.png[]
endif::manvolnum[]
Transport Layer Security (TLS) provides certificate-based
authentication and encrypted sessions. An encrypted session protects
the information that is transmitted with SMTP mail. When you activate
TLS, {pmg} automatically generates a new self signed
certificate for you (`/etc/pmg/pmg-tls.pem`).
{pmg} uses opportunistic TLS encryption. The SMTP transaction is
encrypted if the 'STARTTLS' ESMTP feature is supported by the remote
server. Otherwise, messages are sent in the clear.
Enable TLS logging::
To get additional information about SMTP TLS activity you can enable
TLS logging. That way information about TLS sessions and used
certificate’s is logged via syslog.
Add TLS received header::
Set this option to include information about the protocol and cipher
used as well as the client and issuer CommonName into the "Received:"
message header.
Those settings are saved to subsection 'mail' in `/etc/pmg/pmg.conf`,
using the following configuration keys: