Re: Refuse IMAP without encryption

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, 23 Apr 2013, Paul van der Vlis wrote:

> Hello,
>
> Is it possible to refuse IMAP-access without encryption like TLS or SSL?
> I think this would be a good idea for security.
>
> And I would like to make an exception for localhost for the webmail. The
> webmail (Sogo) can do TLS or SSL, but normally I don't do that for
> localhost.
>
> I am using Cyrus 2.4.16 from Debian 7 (Wheezy).

You can create a second service entry for imapd in cyrus.conf.  Have it 
listen on localhost and on a different port, such as 1143.  In imapd.conf, 
set:

   <service_name>_allowplaintext: 1

Where <service_name> is the name of the localhost service in cyrus.conf. 
For example:

   localimap cmd="/usr/local/cyrus/bin/imapd" listen="localhost:1143" proto="tcp4" prefork=10 maxchild=100

Then in imapd.conf:

   localimap_allowplaintext: 1


 	Andy
----
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus




[Index of Archives]     [Cyrus SASL]     [Squirrel Mail]     [Asterisk PBX]     [Video For Linux]     [Photo]     [Yosemite News]     [gtk]     [KDE]     [Gimp on Windows]     [Steve's Art]

  Powered by Linux