1MTA-STS-DAEMON(1) mta-sts-daemon MTA-STS-DAEMON(1)
2
3
4
6 mta-sts-daemon - provide MTA-STS policy to Postfix as policy map
7
9 mta-sts-daemon [OPTION]...
10
12 This daemon opens a socket where Postfix can query and retrieve the
13 MTA-STS policy for a domain. The configuration file is described in
14 mta-sts-daemon.yml(5).
15
16 MTA-STS, specified in RFC 8461 [0], is a security standard for email
17 servers. When a site configures MTA-STS, other mail servers can require
18 the successful authentication of that site when forwarding mail there.
19
21 -h, --help
22 show a help message and exit
23
24 -v, --verbosity VERBOSITY
25 set log verbosity level: debug, info (default), warn, error, or
26 fatal.
27
28 -c, --config FILE
29 config file location (default: /etc/mta-sts-daemon.yml)
30
31 -l, --logfile FILE
32 log file location (default: none)
33
34 --disable-uvloop
35 do not use uvloop even if it is available (default: enabled if
36 available)
37
39 Configure Postfix in /etc/postfix/main.cf:
40
41 smtp_tls_policy_maps = socketmap:inet:127.0.0.1:8461:postfix
42 smtp_tls_CApath = /etc/ssl/certs/
43
44 Reload Postfix. Then verify it works:
45
46 /usr/sbin/postmap -q dismail.de socketmap:inet:127.0.0.1:8461:postfix
47
49 mta-sts-query(1), mta-sts-daemon.yml(5)
50
52 0.
53 SMTP MTA Strict Transport Security (MTA-STS):
54 https://tools.ietf.org/html/rfc8461
55
56
57
58postfix-mta-sts-resolver 2021-01-27 MTA-STS-DAEMON(1)