Errata overview
Errata ID 183
Date 2015-05-07
Source package univention-mail-postfix
Fixed in version 9.0.0-25.248.201505071223
Description
Improve Postfix configuration:
* Allow Postfix to receive client mails on submission port 587.
* Exclude RC4 Cipher Suites from all TLS security levels (RFC7465).
  Adds UCR variables mail/postfix/tls/client/exclude_ciphers and
  mail/postfix/smtpd/tls/exclude_ciphers and sets them by default to
  "RC4, aNULL". Thanks to Lutz Willek.
* Allow to set TLS/SSL settings for server and client. During update,
  the default values will be kept. Fresh installations will disable SSLv2
  and SSLv3 (except for incoming mails in opportunistic TLS mode).
  Adds UCR variables
    mail/postfix/smtpd/tls/mandatory_protocols
    mail/postfix/smtpd/tls/protocols
    mail/postfix/tls/client/mandatory_protocols
    mail/postfix/tls/client/protocols
  Thanks to Lutz Willek.
Additional notes
UCS Bug number #30043
#38043
#38044