Re: Unable to get Dovecot 2.4 to allow unencrypted connection

I have reviewed my tests and found something not right in routing 
causing some confusion.  I am now able to see IMAP with nmap in clear 
text.  Thank you all for your input.

David

On 4/23/26 11:40 AM, David Koski via dovecot wrote:
> Looks like attachments don't work here so here is the config text:
>
> # 2.4.1-4 (7d8c0e5759): /etc/dovecot/dovecot.conf
> # Pigeonhole version 2.4.1-4 (0a86619f)
> # OS: Linux 6.12.69+deb13-amd64 x86_64 Debian 13.4
> # Hostname: B914839.online-server.cloud
> # 4 default setting changes since version 2.4.0
> dovecot_config_version = 2.4.0
> auth_allow_cleartext = yes
> auth_debug = yes
> auth_mechanisms = plain login gssapi cram-md5
> auth_verbose = yes
> debug_log_path = /var/log/dovecot/debug.log
> default_vsz_limit = 512M
> dovecot_storage_version = 2.4.0
> fts_autoindex = yes
> fts_autoindex_max_recent_msgs = 999
> fts_search_add_missing = yes
> import_environment {
>   CORE_ERROR = %{env:CORE_ERROR}
>   CORE_OUTOFMEM = %{env:CORE_OUTOFMEM}
>   DEBUG = 1
>   LISTEN_FDS = %{env:LISTEN_FDS}
>   LISTEN_PID = %{env:LISTEN_PID}
>   MALLOC_MMAP_THRESHOLD_ = 131072
>   NOTIFY_SOCKET = %{env:NOTIFY_SOCKET}
>   PATH = %{env:PATH}
>   TZ = %{env:TZ}
> }
> info_log_path = /var/log/dovecot/info.log
> lda_mailbox_autocreate = yes
> lda_mailbox_autosubscribe = yes
> log_debug = category=auth
> log_path = /var/log/dovecot/dovecot.log
> mail_driver = maildir
> mail_plugins {
>   quota = yes
> }
> mailbox_directory_name_legacy = no
> protocols {
>   imap = yes
>   lmtp = yes
>   sieve = yes
> }
> quota_exceeded_message = User %{user} has exceeded the storage volume. 
> / User %{user} has exhausted allowed storage space.
> sieve_plugins {
>   sieve_imapsieve = yes
>   sieve_extprograms = yes
> }
> sql_driver = mysql
> namespace inbox {
>   inbox = yes
>   separator = .
>   mailbox Drafts {
>     auto = subscribe
>     special_use = "\\Drafts"
>   }
>   mailbox Outbox {
>     special_use = "\\Drafts"
>   }
>   mailbox Junk {
>     auto = subscribe
>     special_use = "\\Junk"
>   }
>   mailbox "Junk Email" {
>     special_use = "\\Junk"
>   }
>   mailbox Trash {
>     auto = subscribe
>     special_use = "\\Trash"
>   }
>   mailbox "Deleted Items" {
>     auto = no
>     special_use = "\\Trash"
>   }
>   mailbox Archives {
>     auto = no
>     special_use = "\\Archive"
>   }
>   mailbox Sent {
>     auto = subscribe
>     special_use = "\\Sent"
>   }
>   mailbox "Sent Items" {
>     auto = no
>     special_use = "\\Sent"
>   }
>   mailbox "Sent Messages" {
>     auto = no
>     special_use = "\\Sent"
>   }
> }
> service imap-login {
>   executable = imap-login -R rawlogs
>   inet_listener imap {
>   }
>   inet_listener imaps {
>   }
> }
> service pop3-login {
>   inet_listener pop3 {
>   }
>   inet_listener pop3s {
>   }
> }
> service submission-login {
>   inet_listener submission {
>   }
>   inet_listener submissions {
>   }
> }
> service lmtp {
>   unix_listener /var/spool/postfix/private/dovecot-lmtp {
>     group = postfix
>     mode = 0600
>     user = postfix
>   }
> }
> service imap {
> }
> service pop3 {
> }
> service submission {
> }
> service auth {
>   unix_listener auth-userdb {
>     group = postfix
>   }
>   unix_listener /var/spool/postfix/private/auth {
>     group = postfix
>     mode = 0660
>     user = postfix
>   }
> }
> service auth-worker {
> }
> service dict {
>   unix_listener dict {
>   }
> }
> ssl_server {
>   cert_file = /etc/letsencrypt/live/mail.sutinen.com/fullchain.pem
>   key_file = /etc/letsencrypt/live/mail.sutinen.com/privkey.pem
> }
> protocol lda {
>   mail_plugins {
>     sieve = yes
>     quota = yes
>   }
> }
> protocol imap {
>   mail_plugins {
>     imap_sieve = yes
>   }
>   rawlog_dir = %{home}/rawlog
> }
> protocol lmtp {
>   mail_plugins {
>     quota = yes
>     sieve = yes
>     notify = yes
>     push_notification = yes
>   }
>   postmaster_address = [email protected]
> }
> service managesieve-login {
>   inet_listener sieve {
>     port = 4190
>   }
>   inet_listener sieve_deprecated {
>     port = 2000
>   }
> }
> service managesieve {
> }
> sieve_script personal {
>   active_path = /var/vmail/sieve/%{user | domain }/%{user | username 
> }/active-script.sieve
>   driver = file
>   path = /var/vmail/sieve/%{user | domain }/%{user | username }/scripts
>   type = personal
> }
> sieve_script spam-global {
>   path = /var/vmail/sieve/global/spam-global.sieve
>   type = before
> }
> mailbox Spam {
>   sieve_script spam {
>     cause = copy
>     path = /var/vmail/sieve/global/learn-spam.sieve
>     type = before
>   }
> }
> imapsieve_from Spam {
>   sieve_script ham {
>     cause = copy
>     path = /var/vmail/sieve/global/learn-ham.sieve
>     type = before
>   }
> }
> mysql /var/run/mysqld/mysqld.sock {
>   dbname = vmail
>   password = # hidden, use -P to show it
>   user = vmail
> }
> passdb sql {
>   driver = sql
>   query = CALL password_query('%{user}', '%{password}')
> }
> userdb sql {
>   driver = sql
>   query = CALL user_query_dovecot('%{user | username}', '%{user | 
> domain}')
> }
> _______________________________________________
> dovecot mailing list -- [email protected]
> To unsubscribe send an email to [email protected]

_______________________________________________
dovecot mailing list -- [email protected]
To unsubscribe send an email to [email protected]