脆弱性スキャナーも文句いわない Postfix の SSL 設定

2016年３月１０日時点で、
sudo vi /etc/postfix/main.cf を実行して、下記の数行を追加して、

#20160310 時点

smtpd_tls_eecdh_grade = strong

tls_preempt_cipherlist = yes

smtpd_tls_loglevel = 1

smtp_tls_loglevel = 1

smtpd_use_tls = yes

smtp_use_tls = yes

smtpd_tls_security_level = may

lmtp_tls_mandatory_ciphers = high

smtp_tls_mandatory_ciphers = high

smtpd_tls_mandatory_ciphers = high

smtp_tls_security_level = may

smtpd_tls_mandatory_exclude_ciphers = MD5, DES, ADH, RC4, PSD, SRP, 3DES, AECDH, eNULL

smtpd_tls_exclude_ciphers = MD5, DES, ADH, RC4, PSD, SRP, 3DES, AECDH, eNULL

smtp_tls_mandatory_exclude_ciphers = MD5, DES, ADH, RC4, PSD, SRP, 3DES, AECDH, eNULL

smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3

smtpd_tls_protocols = !SSLv2, !SSLv3

smtp_tls_mandatory_protocols = !SSLv2, !SSLv3

smtp_tls_protocols = !SSLv2, !SSLv3

sudo /etc/init.d/postfix restart で再起動すれば、OKです。