topic Re: TLS in General Topics

TLS

scanlab.rgr — Thu, 26 Aug 2010 09:37:15 GMT

We have a rule on our PAN which allows tcp/25 app. SMTP to our MTA.

The MTA allows also TLS which establishes an encrypted connection on the same port.

Is therefore another PAN application necessary?

Thanks,

Rainer

mharding — Thu, 26 Aug 2010 13:03:03 GMT

I would set the service to port 25, and then observe what applications are being used.

I imagine that it will be the smtp and ssl apps.

scanlab.rgr — Thu, 26 Aug 2010 14:58:45 GMT

I set the service to port 25 and the only logged application is SMTP.

In the MTA Logs I see the encrypted connection: “Delivery connection successfully accepted TLS protocol”.

So maybe TLS is implemented in the SMTP application…

mharding — Thu, 26 Aug 2010 15:30:24 GMT

I would just lock the app down the smtp and the service to application-default.