<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1400" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>I have dovecot running as a pop3s server on port
995</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>it works great with sendmail</FONT></DIV>
<DIV><FONT face=Arial size=2>and </FONT></DIV>
<DIV><FONT face=Arial size=2>I run nessus to check security issues</FONT></DIV>
<DIV><FONT face=Arial size=2>nessus reports this</FONT></DIV>
<DIV><FONT face=Arial size=2>The SSLv2 server offers 3 strong ciphers, but
also<BR>0 medium strength and 2 weak "export class" ciphers.<BR>The weak/medium
ciphers may be chosen by an export-grade<BR>or badly configured client software.
They only offer a <BR>limited protection against a brute force
attack</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>Solution: disable those ciphers and upgrade your
client<BR>software if necessary<BR></FONT></DIV>
<DIV><FONT face=Arial size=2>I have previously disabled weak ciphers in apache
</FONT></DIV>
<DIV><FONT face=Arial size=2>but cannot figure out how to disable the weak
ciphers in</FONT></DIV>
<DIV><FONT face=Arial size=2>dovecot</FONT></DIV>
<DIV><FONT face=Arial size=2>Any help would be appreciated</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>john</DIV></FONT></BODY></HTML>