Security · Services & Applications
Configure Postfix TLS and authenticated submission on port 587
Add a dedicated submission service, require STARTTLS and SASL, integrate Dovecot authentication, constrain relaying and abuse, and test safe failure modes.