[Dovecot] Turn off IMAPS?
Hi
I've upgraded to 2.1.7 and finally decided to turn off imaps and pop3s because these days everyone uses tls over 143 anyway. But it's on and I can't figure out why.
I only have non-ssl versions specified: protocols = imap pop3
I've stopped and started and the ports are still open and netstat says dovecot is listening on them..
mail:~# netstat -tulnp | grep dove tcp 0 0 0.0.0.0:993 0.0.0.0:* LISTEN 29340/dovecot tcp 0 0 0.0.0.0:995 0.0.0.0:* LISTEN 29340/dovecot tcp 0 0 0.0.0.0:110 0.0.0.0:* LISTEN 29340/dovecot tcp 0 0 0.0.0.0:143 0.0.0.0:* LISTEN 29340/dovecot tcp6 0 0 :::993 :::* LISTEN 29340/dovecot tcp6 0 0 :::995 :::* LISTEN 29340/dovecot tcp6 0 0 :::110 :::* LISTEN 29340/dovecot tcp6 0 0 :::143 :::* LISTEN 29340/dovecot
Any ideas?
Thanks.
Simon
Here's my doveconf - n
# 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.0 ext3 auth_mechanisms = plain login auth_verbose = yes disable_plaintext_auth = no first_valid_uid = 109 last_valid_uid = 109 log_timestamp = "%Y-%m-%d %H:%M:%S " login_log_format_elements = user=<%u> method=%m rip=%r %c mail_location = maildir:/var/spool/mail/virtual/%d/%n mail_privileged_group = mailsystem maildir_very_dirty_syncs = yes passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { quota = maildir } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = mailsystem mode = 0660 user = postfix } unix_listener auth-master { group = mailsystem mode = 0660 user = mailsystem } user = mailsystem } ssl_ca =
Hi Simon,
Try to add this configuration. The "Port = 0" will disable the listener.
Greats, Sascha Kuehndel
service imap-login { inet_listener imap { #port = 143 } inet_listener imaps { port = 0 #ssl = yes } }
service pop3-login { inet_listener pop3 { #port = 110 } inet_listener pop3s { port = 0 #ssl = yes } }
Thanks everyone :) You'd think I could have found that on Google!
Simon
On 13 June 2013 16:56, InuSasha inu@inusasha.de wrote:
Hi Simon,
Try to add this configuration. The "Port = 0" will disable the listener.
Greats, Sascha Kuehndel
service imap-login { inet_listener imap { #port = 143 } inet_listener imaps { port = 0 #ssl = yes } }
service pop3-login { inet_listener pop3 { #port = 110 } inet_listener pop3s { port = 0 #ssl = yes } }
At 4PM +0200 on 13/06/13 you (Simon B) wrote:
I've upgraded to 2.1.7 and finally decided to turn off imaps and pop3s because these days everyone uses tls over 143 anyway. But it's on and I can't figure out why.
I only have non-ssl versions specified: protocols = imap pop3
Dovecot listens on imaps/pop3s by default, so you need to disable them explicitly like this:
service imap-login {
inet_listener imap {
# defaults
}
inet_listener imaps {
# disable the imaps service
port = 0
}
}
and the equivalent for pop3-login.
Ben
participants (4)
-
Ben Morrow
-
Benny Pedersen
-
InuSasha
-
Simon B