On 8/8/06, <b class="gmail_sendername">Johannes Berg</b> <<a href="mailto:johannes@sipsolutions.net">johannes@sipsolutions.net</a>> wrote:<div><span class="gmail_quote"></span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Kresimir Tonkovic wrote:<br>> Correct me if I'm wrong, by default POP3 and POP3+SSL both work at the<br>> same port, 110. I want to let local users connect by plain POP3 and<br>> external users to use POP3+SSL. I don't see how I can set this up
<br>> using iptables and tcpwrappers. Can you please provide more details?<br>Ah, so you don't want to use pop3s but pop3+starttls. Just tell dovecot<br>to deny any password when used over insecure connections. local<br>
connections are considered secure.<br><br>johannes<br></blockquote></div><br>I'm sorry, I'm new to dovecot, it seems my terminology is all wrong :-)<br><br>I assumed pop3s is pop3+ssl is pop3 over ssl.<br><br>In my config file (just an excerpt):
<br><br>protocols = pop3 pop3s<br>pop3_listen = <a href="http://192.168.0.1">192.168.0.1</a><br>pop3s_listen = <a href="http://elag.hr">elag.hr</a><br><br clear="all"><a href="http://elag.hr">elag.hr</a> is my domain name. It resolves to the current external IP address.
<br><br>So when I connect from outside, my email client asks me to verify a ssl certificate. This enforced me to believe pop3s is pop3 over ssl, or as I called it above pop3+ssl.<br><br>If I'm wrong, what is pop3+starttls?
<br>-- <br>kresho