'\" t .\" Title: mta-sts-daemon .\" Author: [see the "AUTHOR(S)" section] .\" Generator: Asciidoctor 2.0.17 .\" Date: 2022-10-15 .\" Manual: mta-sts-daemon .\" Source: postfix-mta-sts-resolver .\" Language: English .\" .TH "MTA\-STS\-DAEMON" "1" "2022-10-15" "postfix\-mta\-sts\-resolver" "mta\-sts\-daemon" .ie \n(.g .ds Aq \(aq .el .ds Aq ' .ss \n[.ss] 0 .nh .ad l .de URL \fI\\$2\fP <\\$1>\\$3 .. .als MTO URL .if \n[.g] \{\ . mso www.tmac . am URL . ad l . . . am MTO . ad l . . . LINKSTYLE blue R < > .\} .SH "NAME" mta-sts-daemon \- provide MTA\-STS policy to Postfix as policy map .SH "SYNOPSIS" .sp \fBmta\-sts\-daemon\fP [\fIOPTION\fP]... .SH "DESCRIPTION" .sp This daemon opens a socket where Postfix can query and retrieve the MTA\-STS policy for a domain. The configuration file is described in \fBmta\-sts\-daemon.yml\fP(5). .sp MTA\-STS, specified in RFC 8461 [0], is a security standard for email servers. When a site configures MTA\-STS, other mail servers can require the successful authentication of that site when forwarding mail there. .SH "OPTIONS" .sp \fB\-h, \-\-help\fP .RS 4 show a help message and exit .RE .sp \fB\-v, \-\-verbosity\fP \fIVERBOSITY\fP .RS 4 set log verbosity level: \fIdebug\fP, \fIinfo\fP (default), \fIwarn\fP, \fIerror\fP, or \fIfatal\fP. .RE .sp \fB\-c, \-\-config\fP \fIFILE\fP .RS 4 config file location (default: \fI/etc/mta\-sts\-daemon.yml\fP) .RE .sp \fB\-l, \-\-logfile\fP \fIFILE\fP .RS 4 log file location (default: \fInone\fP) .RE .sp \fB\-\-disable\-uvloop\fP .RS 4 do not use uvloop even if it is available (default: enabled if available) .RE .SH "EXAMPLES" .sp Configure Postfix in \fI/etc/postfix/main.cf\fP: .sp .if n .RS 4 .nf .fam C smtp_tls_policy_maps = socketmap:inet:127.0.0.1:8461:postfix smtp_tls_CApath = /etc/ssl/certs/ .fam .fi .if n .RE .sp Reload Postfix. Then verify it works: .sp \fB/usr/sbin/postmap \-q dismail.de socketmap:inet:127.0.0.1:8461:postfix\fP .SH "SEE ALSO" .sp \fBmta\-sts\-query\fP(1), \fBmta\-sts\-daemon.yml\fP(5) .SH "NOTES" .sp 0. .RS 4 \fBSMTP MTA Strict Transport Security (MTA\-STS)\fP: \c .URL "https://tools.ietf.org/html/rfc8461" "" "" .RE