diff --git a/install/tpl/postfix_2-5.conf.master b/install/tpl/postfix_2-5.conf.master
index 132c80822e488b6b123e88002f1092e7dbd5b633..8f96430e52ecc0df28b280f6a826a0fe4b3e1a1a 100644
--- a/install/tpl/postfix_2-5.conf.master
+++ b/install/tpl/postfix_2-5.conf.master
@@ -11,3 +11,4 @@
 #{stress_adaptive} smtpd_soft_error_limit = ${stress?2}${stress:5}
 #{stress_adaptive} smtpd_timeout = ${stress?10}${stress:60}s
 
+smtpd_forbidden_commands = CONNECT,GET,POST,USER,PASS
diff --git a/install/tpl/postfix_3-0.conf.master b/install/tpl/postfix_3-0.conf.master
index aa205679ad7818e0a19621a8f930e5838250d161..ce4fc920ed0c6fccd0b5fcc034d27a1f84490ed1 100644
--- a/install/tpl/postfix_3-0.conf.master
+++ b/install/tpl/postfix_3-0.conf.master
@@ -11,3 +11,6 @@
 #{stress_adaptive} smtpd_soft_error_limit = ${stress?{2}:{5}}
 #{stress_adaptive} smtpd_timeout = ${stress?{10}:{60}}s
 
+# validate DANE
+smtp_dns_support_level = dnssec
+smtp_tls_security_level = dane