centos:mail_c7:postfix3_5

Unterschiede

Hier werden die Unterschiede zwischen zwei Versionen angezeigt.

Link zu dieser Vergleichsansicht

Beide Seiten der vorigen Revision Vorhergehende Überarbeitung
Nächste Überarbeitung		 Vorhergehende Überarbeitung
Nächste ÜberarbeitungBeide Seiten der Revision
centos:mail_c7:postfix3_5 [14.02.2019 21:52. ] – [TLS-Verkehrsstatistik] djangocentos:mail_c7:postfix3_5 [15.02.2019 10:19. ] – [ausgehender TLS-Verkehr] django
Zeile 3619: Zeile 3619:
  167813 TLSv1.2</code>  167813 TLSv1.2</code>
  
 +   # egrep "TLS connection established from.*with cipher" /var/log/maillog | awk '{printf("%s %s %s %s\n", $12, $13, $14, $15)}' \
 +           | sort | uniq -c | sort -nr
 +<code>   8038 TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384
 +   3981 TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384
 +    705 TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384
 +    614 TLSv1 with cipher DHE-RSA-AES256-SHA
 +    440 TLSv1.2 with cipher ECDHE-ECDSA-AES256-SHA384
 +    265 TLSv1 with cipher ECDHE-RSA-AES256-SHA
 +     75 TLSv1 with cipher ECDHE-ECDSA-AES256-SHA
 +     62 TLSv1.2 with cipher AES256-GCM-SHA384
 +     41 TLSv1.2 with cipher DHE-RSA-AES256-SHA256
 +     40 TLSv1.2 with cipher ECDHE-RSA-AES256-SHA
 +     39 TLSv1.1 with cipher ECDHE-RSA-AES256-SHA
 +     25 TLSv1.1 with cipher ECDHE-ECDSA-AES256-SHA
 +     21 TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384
 +     20 TLSv1.2 with cipher AES256-SHA256
 +     20 TLSv1.2 with cipher AES256-SHA
 +     20 TLSv1.2 with cipher AES128-GCM-SHA256
 +     19 TLSv1.2 with cipher AES128-SHA256
 +     19 TLSv1.2 with cipher AES128-SHA
 +     16 TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256
 +     16 TLSv1.2 with cipher ECDHE-RSA-AES128-SHA
 +     16 TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256
 +     16 TLSv1.2 with cipher DHE-RSA-CAMELLIA256-SHA
 +     16 TLSv1.2 with cipher DHE-RSA-CAMELLIA128-SHA
 +     16 TLSv1.2 with cipher DHE-RSA-AES256-SHA
 +     16 TLSv1.2 with cipher DHE-RSA-AES128-SHA256
 +     16 TLSv1.2 with cipher DHE-RSA-AES128-SHA
 +     16 TLSv1.2 with cipher DHE-RSA-AES128-GCM-SHA256
 +     15 TLSv1.1 with cipher AES256-SHA
 +     14 TLSv1 with cipher AES256-SHA
 +     14 TLSv1 with cipher AES128-SHA
 +     12 TLSv1.2 with cipher CAMELLIA256-SHA
 +     11 TLSv1.2 with cipher ECDHE-ECDSA-AES256-SHA
 +     11 TLSv1.2 with cipher CAMELLIA128-SHA
 +     11 TLSv1.1 with cipher AES128-SHA
 +     10 TLSv1 with cipher ECDHE-RSA-AES128-SHA
 +     10 TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA
 +     10 TLSv1 with cipher DHE-RSA-CAMELLIA128-SHA
 +     10 TLSv1 with cipher DHE-RSA-AES128-SHA
 +     10 TLSv1 with cipher CAMELLIA256-SHA
 +     10 TLSv1 with cipher CAMELLIA128-SHA
 +      8 TLSv1.2 with cipher ECDHE-ECDSA-AES128-SHA256
 +      8 TLSv1.2 with cipher ECDHE-ECDSA-AES128-SHA
 +      8 TLSv1.2 with cipher ECDHE-ECDSA-AES128-GCM-SHA256
 +      7 TLSv1.1 with cipher ECDHE-RSA-AES128-SHA
 +      7 TLSv1.1 with cipher DHE-RSA-CAMELLIA256-SHA
 +      7 TLSv1.1 with cipher DHE-RSA-CAMELLIA128-SHA
 +      7 TLSv1.1 with cipher DHE-RSA-AES256-SHA
 +      7 TLSv1.1 with cipher DHE-RSA-AES128-SHA
 +      7 TLSv1.1 with cipher CAMELLIA256-SHA
 +      7 TLSv1.1 with cipher CAMELLIA128-SHA
 +      6 TLSv1 with cipher ECDHE-ECDSA-AES128-SHA
 +      5 TLSv1.1 with cipher ECDHE-ECDSA-AES128-SHA</code>
 === ausgehender TLS-Verkehr === === ausgehender TLS-Verkehr ===
 +Wollen wir wissen wieviele TLS gesichete Verbindungen unser Mailserver zu anderen aufbaut können wir dies wie folgt abrufen
    # grep 'TLS connection established to' /var/log/maillog | sed -e 's/^.*\]:25\: //' -e 's/ with cipher.*//' | sort | uniq -c    # grep 'TLS connection established to' /var/log/maillog | sed -e 's/^.*\]:25\: //' -e 's/ with cipher.*//' | sort | uniq -c
  
-<code>  69741 TLSv1 +<code>  324664 TLSv1.2</code> 
-   3323 TLSv1.1 + 
- 396939 TLSv1.2</code>+Wollen wir wissen welche Cipher bei den unterschiedlichen Protokollen verwendet wurden, fragen wir dies mit folgendem Befehl ab: 
 +   # egrep "TLS connection established to.*with cipher" /var/log/maillog | awk '{printf("%s %s %s %s\n", $12, $13, $14, $15)}' \  
 +             | sort | uniq -c | sort -nr 
 +<code> 181337 TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 
 + 140867 TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 
 +   1337 TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 
 +    679 TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 
 +    423 TLSv1.2 with cipher DHE-RSA-AES256-SHA256 
 +     21 TLSv1.2 with cipher AES256-GCM-SHA384</code>
  
 === graphische Übersicht des TLS-Clientverkehrs === === graphische Übersicht des TLS-Clientverkehrs ===
  • centos/mail_c7/postfix3_5.txt
  • Zuletzt geändert: 25.05.2020 10:25.
  • von django