If you want to check your servers for various other attacks with a shell script: https://testssl.sh/ https://testssl.sh/ Also, I'm not seeing any guides on fi

If you want to check your servers for various other attacks with a shell script: https://testssl.sh/ https://testssl.sh/ Also, I'm not seeing any guides on fixes for Dovecot yet. If you built from source or the defaults aren't working, you can use the following: ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL Something more secure (blocks other vulnerabilities): ssl_cipher_list = ALL:!ADH:!LOW:!SSLv2:!SSLv3:!EXP:!aNULL:!RC4:+HIGH:+MEDIUM The second one also covers SSlv3. You can read more on why to disable this at: http://disablessl3.com/ http://disablessl3.com/ Also, you may need to update your Exim configs as well: tls_require_ciphers = AES128+EECDH:AES128+EDH openssl_options = +no_sslv2 +no_sslv3 If there's anything else I'm missing, let me know.