Eric Shubert wrote:
Martin Waschbuesch wrote:
I have installed a SSL certificate and got it working for apache,
courier and qmail. Now, is it possible to enforce use of encryption
for IMAP, POP3 and SMTP for everyone not on localhost - e.g. it would
be silly to have horde/imp (installed on same server) to use STMP or
IMAP over ssl, but everyone not working on webmail should have to.
For IMAP and POP3, simply stop the services. For SMTP, it's not that
simple, and I don't know off hand.
You can also block the ports in the firewall. You obviously cannot do
this with SMTP, but it will force your users to use secure connections
for the other protocols.
There is curently not a way to enforce TLS/SSL on SMTP (port 25) at this
time that I know of - I have not read this particular patch in depth. I
think one of the patches in the next version will allow you to enforce
TLS for authenticated SMTP transactions, but you will obviously not want
to enforce TLS/SSL on port 25 for all traffic.
Not that I'm aware of. While spamdyke does TLS and authentication, it
doesn't appear to have an option to require TLS when authenticating.
I've just posted a request for this feature on the spamdyke list.
We'll see what Sam (the author) has to say about it.
There may be some other way I'm not aware of. Jake would probably know
for sure.
In the next version one of the patches can be set to not advertise the
AUTH command unless a TLS/SSL session is established first. This will
force encrypted passwords for relaying.
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
