Re: [Dovecot] Dovecot for POP3S proxying
Dovecot is installed but actually I just use auth module (for postfix authentication).
In your dovecot.conf example, I don't see the "proxy" command ?
Could you give me a few more details on the "proxy" command usage (ExtraFields/Proxy is not clear for me)?
Regards
-----Message d'origine----- From: David Jonas Sent: Thursday, May 03, 2012 8:04 PM To: Gilles Albusac Subject: Re: [Dovecot] Dovecot for POP3S proxying
On Thu May 3 05:14:40 2012, Gilles Albusac wrote:
Dovecot is already installed in my architecture and I just would like to know how to configure Dovecot for POP3S proxying with authentication.
For security reasons I prefer to install as little as possible binary (see vulnerability 2011 - remote exploit - STUNNEL).
If you already have dovecot running in proxy mode it's easy to add pop3s. If not, see http://wiki2.dovecot.org/PasswordDatabase/ExtraFields/Proxy
See http://wiki2.dovecot.org/Services search the page for pop3s. A simple example:
ssl = yes ssl_cert =
service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } }
Of course there is a lot more SSL tuning that can be done: http://wiki2.dovecot.org/SSL/DovecotConfiguration
-----Message d'origine----- From: David Jonas Sent: Wednesday, May 02, 2012 10:29 PM To: Gilles Albusac Cc: dovecot@dovecot.org Subject: Re: [Dovecot] Dovecot for POP3S proxying
On Wed May 2 06:41:00 2012, Gilles Albusac wrote:
I would like to configure Dovecot for POP3S proxying all users from the Internet to the internal Exchange Mail Server.
Unless I'm missing something with your request, you don't need dovecot. Any ssl proxy can do that for you, such as stunnel (http://www.stunnel.org/). We use the hardware ssl termination on our load balancers for pop3s, imaps, and smtps.
On 4.5.2012, at 9.33, Gilles Albusac wrote:
Dovecot is installed but actually I just use auth module (for postfix authentication).
In your dovecot.conf example, I don't see the "proxy" command ?
The proxying is enabled by having the passdb lookup return a "proxy" extra field. What passdb are you planning on using?
LDAP passdb lookup
Message du 04/05/12 17:42 De : "Timo Sirainen" A : "Gilles Albusac" Copie à : "Dovecot Mailing List" Objet : Re: [Dovecot] Dovecot for POP3S proxying
On 4.5.2012, at 9.33, Gilles Albusac wrote:
Dovecot is installed but actually I just use auth module (for postfix authentication).
In your dovecot.conf example, I don't see the "proxy" command ?
The proxying is enabled by having the passdb lookup return a "proxy" extra field. What passdb are you planning on using?
So, what you need is to first make authentication with LDAP work, and then add the proxying fields:
pass_attrs =
=proxy=y, =host=exchange-ip, ..any other fields required for auth..
On 5.5.2012, at 11.51, Gilles ALBUSAC wrote:
LDAP passdb lookup
Message du 04/05/12 17:42 De : "Timo Sirainen" A : "Gilles Albusac" Copie à : "Dovecot Mailing List" Objet : Re: [Dovecot] Dovecot for POP3S proxying
On 4.5.2012, at 9.33, Gilles Albusac wrote:
Dovecot is installed but actually I just use auth module (for postfix authentication).
In your dovecot.conf example, I don't see the "proxy" command ?
The proxying is enabled by having the passdb lookup return a "proxy" extra field. What passdb are you planning on using?
It works. Thanks a lot.
Regards
-----Message d'origine----- From: Timo Sirainen Sent: Sunday, May 06, 2012 5:46 AM To: Gilles ALBUSAC Cc: Dovecot Mailing List Subject: Re: [Dovecot] Dovecot for POP3S proxying
So, what you need is to first make authentication with LDAP work, and then add the proxying fields:
pass_attrs =
=proxy=y, =host=exchange-ip, ..any other fields required for auth..
On 5.5.2012, at 11.51, Gilles ALBUSAC wrote:
LDAP passdb lookup
Message du 04/05/12 17:42 De : "Timo Sirainen" A : "Gilles Albusac" Copie à : "Dovecot Mailing List" Objet : Re: [Dovecot] Dovecot for POP3S proxying
On 4.5.2012, at 9.33, Gilles Albusac wrote:
Dovecot is installed but actually I just use auth module (for postfix authentication).
In your dovecot.conf example, I don't see the "proxy" command ?
The proxying is enabled by having the passdb lookup return a "proxy" extra field. What passdb are you planning on using?
participants (3)
-
Gilles Albusac
-
Gilles ALBUSAC
-
Timo Sirainen