Re: Forcing Encrypted Session

Sabahattin Gucukoglu <[email protected]>
Newsgroups gmane.mail.xmail.general
Message-ID <[email protected]>
On 16 Apr 2010, at 21:58, Eric Thompson wrote:
> I've built a new server, and installed xmail 1.27.  I will need to allow connections from abroad, and I want to encrypt the sessions, authentication and mail.  I've been testing, and while TLS will work for me if I set the client (seamonkey mail client on a remote server) to use it, xmail also seems to be cheerfully allowing me to connect without TLS.  I've read through and tried so many tab-file settings, my eyes are falling out.  I don't know what I'm missing.  From the readme, I understood that the following entry, with empty string, would not allow connecting without some type of encryption.  ???
> "SmtpNoTLSAuths"	""

That's true for SMTP.  Setting that string empty just means that no authentication to SMTP is allowed unencrypted.  But as of now, there's no way to do similarly with POP3.  If your SMTP server accepts mail for your domain, of course it cannot refuse unencrypted SMTP or insist on authentication, else you won't get very much mail. :-)

A quick fix for now is to just disable POP3 service but leave on POP3S (using the command line -P-); then, make your client use port 993, and do SSL immediately on connect.

Cheers,
Sabahattin
_______________________________________________
xmail mailing list
[email protected]
http://xmailserver.org/mailman/listinfo/xmail
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.