New subject: Required SSL with exceptions

9 Dec 2014


      On 12/08/14 23:50, SATOH Fumiyasu wrote:
...
Hi,
At Mon, 08 Dec 2014 16:01:43 -0600,
List wrote:
...
Essentially we would like to host IMAP with SSL enforced for any connections coming from anywhere except the subnet where our other mail servers reside.  The idea is to not install a local instance of dovecot on the webmail/carddav/caldav servers to reduce the number of instances that need to be managed.  Is it possible to have two imap listeners, where ssl is enforced on one port, and not on another?
Use login_trusted_networks parameter.
What is the syntax for login_trusted_networks?  The docs and WIKI do not show it.

Re: Required SSL with exceptions

dovecot＠outputservices.com

Pascal Volk

Space separated list of trusted network ranges. Connections from these

IPs are allowed to override their IP addresses and ports (for logging and

for authentication checks). disable_plaintext_auth is also ignored for

these networks. Typically you'd specify your IMAP proxy servers here.

tags

participants (2)