Re: Securing postfix to dovecot (SASL) auth

Hi,

Am 27.09.2017 um 01:07 schrieb Raymond Sellars:

Is it possible to secure the Dovecot SASL auth provider for postfix?

I'm using this configuration, which you've suggested.

Has anyone managed to implement a secure internal approach they can share? I'm wondering if Postfix with Cyrus against IMAP using STARTTLS is my best alternative.

My config is: On the dovecot server:

service auth { inet_listener{ address=192.0.0.1 port=10001 ssl=yes } }

On the postfix server in master.cf:

submission inet n - - - - smtpd ... -o smtpd_sasl_path=inet:192.0.0.1:10001 ...

And in main.cf:

### SASL via dovecot ### smtpd_sasl_auth_enable = yes smtpd_sasl_path = inet:192.0.0.1:10001 smtpd_sasl_type = dovecot

Thanks Raymond

Greetings Thomas