2 # Pipelining the early part of the SMTP conversation, starttls
8 keep_environment = PATH
10 host_lookup_order = bydns
11 spool_directory = DIR/spool
14 log_file_path = DIR/spool/log/SERVER%slog
16 log_file_path = DIR/spool/log/%slog
20 gecos_name = CALLER_NAME
22 chunking_advertise_hosts = OPT
23 tls_advertise_hosts = *
24 tls_certificate = DIR/aux-fixed/cert1
26 .ifdef _HAVE_TLS_CA_CACHE
27 tls_verify_certificates = system,cache
34 # Avoid ECDHE key-exchange so that we can wireshark-decode (not TLS1.3)
36 tls_require_ciphers = NORMAL:-KX-ALL:+RSA
38 tls_require_ciphers = DEFAULT:!kECDHE
41 pipelining_connect_advertise_hosts = CONTROL
42 log_selector = +received_recipients +millisec +pipelining
45 acl_smtp_rcpt = accept
52 condition = ${if eq {SERVER}{server}}
57 route_data = 127.0.0.1::PORT_D
66 hosts_try_fastopen = CONNECTCOND
67 hosts_pipe_connect = CONTROL
69 tls_try_verify_hosts =