Using smtp_tls_security_level or smtp_tls_policy_maps I can make Postfix deliver outgoing mail via STARTTLS. However, the log file doesn't seem to tell me whether the mail was sent using TLS.
Jul 9 13:54:07 outgoing.example.com postfix/smtp[1337]: ABCDEF123: to=<[email protected]>, orig_to=<[email protected]>, relay=mx.example.org[192.0.2.25]:25, delay=1.4, delays=0.01/0/0.34/1, dsn=2.6.0, status=sent (250 2.6.0 Yum yum munch munch)
Is there a way to log per outgoing mail whether it was delivered using plain SMTP or STARTTLS?
Change default configuration:
smtp_tls_loglevel for outgoing connections
smtpd_tls_loglevel for incoming connections
By default Postfix won't log any information about the connection when sending mail (although the recipient may still be able to learn such TLS information from a
Received
header) but you can increase thesmtp_tls_loglevel
from the default0
to1
or higher.