Tommi Lätti wrote:
> Lorna Sanchez M. wrote:
>
>> Hi!
>>
>> Thanks a lot!
>> Just one question more: does your implementation uses secure imap
>> (imaps) and secure pop (pop3s) implemented with stunnel? I ask because
>> I found this:
>>
>> http://www.dbmail.org/dokuwiki/doku.php?id=stunnel
>> "You can use STunnel to provide an SSL encrypted connection to the
>> DBmail POP3 and IMAP servers. ......This breaks pop-before-smtp
>> functionality. All SSL connections will show up as 127.0.0.1 in your
>> dbmail_pbsp table. DBMail does not yet support STARTTLS."
>
>
> That's of course true... you can then use sasl auth on the smtp side to
> authenticate the clients (over postfix tls) for relaying.
>
And remember to use the rimap sasl mechanism (man 8 saslauthd).
Actually you don't need saslauthd at all, sasl2 has sql support (for
mysql at least.) I posted my config on this to the wiki just yesterday
in case anyone wants to avoid using an extra daemon or whatnot.
Candice Quates