☰

发送的电子邮件未加密

tag-icon • tag-icon postfix smtp tls
发送的电子邮件未加密

我使用 postfix 发送电子邮件。我已设置 mysql 来管理域、帐户和别名。我设置了 3 个域。一个域是主域，当向 gmail 帐户发送电子邮件时，一切正常。ssl 证书仅适用于主域。

当我使用任何虚拟域向 Gmail 帐户发送电子邮件时，它们都会被标记为垃圾邮件。Gmail 给出的原因是电子邮件未加密。它识别出发送邮件的邮件服务器是主服务器。Postfix 配置为仅使用 tls。

为什么来自虚拟域的邮件没有以加密形式发送？

如果有帮助的话我可以提供任何其他信息。

这是电子邮件的标题，已配置 DMARC 和 SPF。

Delivered-To: [email protected]
Received: by 10.79.120.143 with SMTP id d15csp334618ivg;
        Wed, 13 Apr 2016 18:56:09 -0700 (PDT)
X-Received: by 10.55.80.131 with SMTP id e125mr15507566qkb.62.1460598969001;
        Wed, 13 Apr 2016 18:56:09 -0700 (PDT)
Return-Path: <[email protected]>
Received: from primary.com (primary.com. [45.##.##.##])
        by mx.google.com with ESMTP id 123si7618120qkk.31.2016.04.13.18.56.08
        for <[email protected]>;
        Wed, 13 Apr 2016 18:56:08 -0700 (PDT)
Received-SPF: neutral (google.com: 45.##.##.## is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=45.##.##.##;
Authentication-Results: mx.google.com;
       spf=neutral (google.com: 45.##.##.## is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from primary.com (localhost [127.0.0.1])
    by primary.com (Postfix) with ESMTPSA id 72B42140776
    for <[email protected]>; Wed, 13 Apr 2016 21:56:07 -0400 (EDT)
Mime-Version: 1.0
Date: Thu, 14 Apr 2016 01:56:07 +0000
Content-Type: multipart/alternative;
 boundary="----=_Part_822_880614403.1460598967"
Message-ID: <[email protected]>
X-Mailer: AfterLogic webmail client
From: "XXXXXX" <[email protected]>
Subject: test
To: [email protected]
X-Priority: 3 (Normal)

mxtoolbox 警告

smtp    primary.com     Reverse DNS is not a valid Hostname      More Info
dns     virtual.me  SOA Serial Number Format is Invalid      More Info
dns     virtual.me  SOA Expire Value out of recommended range    More Info

答案1

您需要为您的 Postfix 服务器设置一个有效的 SSL 证书和私钥，在 main.cfg 文件中应包含如下行

smtpd_tls_cert_file=/etc/pki/tls/certname.crt smtpd_tls_key_file=/etc/pki/tls/certname.key smtpd_tls_CAfile=/etc/pki/tls/ca.bundle smtpd_tls_protocols=SSLv3，TLSv1，！SSLv2 smtp_tls_protocols=SSLv3，TLSv1，！SSLv2 smtpd_tls_cipherlist = 全部：！ADH：RC4 + RSA：+HIGH：+MEDIUM：-LOW：-SSLv2：-EXP：-eNULL smtp_tls_cipherlist = 全部：！ADH：RC4 + RSA：+HIGH：+MEDIUM：-LOW：-SSLv2：-EXP：-eNULL

smtp_tls_CAfile=/etc/ssl/certs/ca.bundle

相关内容