###--------------------------------------------------------------------------
### Listen for incoming connections.
###--------------------------------------------------------------------------
### Listen for incoming connections.
SECTION(global, tls)m4_dnl
tls_certificate = CONF_sysconf_dir/server.cert
tls_privatekey = CONF_sysconf_dir/server.key
tls_advertise_hosts = *
SECTION(global, tls)m4_dnl
tls_certificate = CONF_sysconf_dir/server.cert
tls_privatekey = CONF_sysconf_dir/server.key
tls_advertise_hosts = *
tls_require_ciphers = ${if or {{={$received_port}{CONF_submission_port}} \
{match_ip {$sender_host_address}{+trusted}}} \
{CONF_good_ciphers} \
tls_require_ciphers = ${if or {{={$received_port}{CONF_submission_port}} \
{match_ip {$sender_host_address}{+trusted}}} \
{CONF_good_ciphers} \
add_header = :after_received:X-Distorted-Warning: \
RCLNTLSNDR \
Apparently local sender, but received from remote \
add_header = :after_received:X-Distorted-Warning: \
RCLNTLSNDR \
Apparently local sender, but received from remote \