On 10/09/2013 10:00 AM, Administrator Beckspaced.com wrote:

> what should i do??
> 
> should i upgrade to the latest stable version 3.1.7?
> 
> but i'm also not sure if i should upgrade to the most recent version as
> people on the mailing list still report some issues ...
> 
> what would your advice be?

I would upgrade to 3.1.7 - but.

Given the problems people are reporting:

- make very sure you applied the migration 3_0_2-3_1_7

but more importantly - since I'm starting to suspect the problems
reported are mostly related to ssl/tls

- if you want to provide ssl/tls support consider using a proxying
front-end. Personally I prefer nginx but dovecot is also being used
succesfully.

mail {
        proxy      on;
        ssl        on;

        ssl_prefer_server_ciphers  on;
        ssl_protocols              TLSv1 SSLv3;
        ssl_ciphers                HIGH:!ADH:!MD5:@STRENGTH;
        ssl_session_cache          shared:TLSSL:16m;
        ssl_session_timeout        10m;
        ssl_certificate            /path/to/ssl.pem;
        ssl_certificate_key        /path/to/ssl.key;


        server {
                listen     995;
                protocol   pop3;
                server_name mail.domain.example;
        }

        server {
                listen     993;
                protocol   imap;
                server_name mail.domain.example;
        }
}

mail {
        proxy      on;
        starttls   on;

        ssl_prefer_server_ciphers  on;
        ssl_protocols              TLSv1 SSLv3;
        ssl_ciphers                HIGH:!ADH:!MD5:@STRENGTH;
        ssl_session_cache          shared:TLSSL:16m;
        ssl_session_timeout        10m;
        ssl_certificate            /path/to/ssl.pem;
        ssl_certificate_key        /path/to/ssl.key;

        server {
                listen     110;
                protocol   pop3;
                server_name mail.domain.example;
        }
        server {
                listen     143;
                protocol   imap;
                server_name mail.domain.example;
        }
}




-- 
________________________________________________________________
Paul J Stevens        pjstevns @ gmail, twitter, skype, linkedin

  * Premium Hosting Services and Web Application Consultancy *

           www.nfg.nl/i...@nfg.nl/+31.85.877.99.97
________________________________________________________________
_______________________________________________
DBmail mailing list
DBmail@dbmail.org
http://mailman.fastxs.nl/cgi-bin/mailman/listinfo/dbmail

Reply via email to