[Dovecot] Disable unsecure POP3 at all (Dovecot 2.1)

Reindl Harald h.reindl at thelounge.net
Mon Oct 28 12:47:53 EET 2013


Am 28.10.2013 11:34, schrieb Андрей Кумыков:
> Is it possible to disable unsecure POP3 protocol at all in Dovecot 2.1?
> There was "protocols" option in 1.x version, and there was separate pop3 and pop3s modules

110/143 are not unsecure because the way to go these
days should be http://en.wikipedia.org/wiki/STARTTLS

http://wiki2.dovecot.org/SSL

disable_plaintext_auth=yes
ssl=required

> There is no "pop3s" in configuration files in 2.1

says who?

# provided services
protocols                      = imap pop3

# configure imap-proxy
service imap-login {
  inet_listener imap {
    address                    = **.**.**.**
    port                       = 143
  }
  inet_listener imaps {
    address                    = **.**.**.**
    port                       = 993
  }
  vsz_limit                    = 512M
  service_count                = 0
  process_min_avail            = 1
  process_limit                = 15
  client_limit                 = 300
}

# configure pop3-proxy
service pop3-login {
  inet_listener pop3 {
    address                    = **.**.**.**
    port                       = 110
  }
  inet_listener pop3s {
    address                    = **.**.**.**
    port                       = 995
  }
  vsz_limit                    = 512M
  service_count                = 0
  process_min_avail            = 1
  process_limit                = 15
  client_limit                 = 100
}

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 263 bytes
Desc: OpenPGP digital signature
URL: <http://dovecot.org/pipermail/dovecot/attachments/20131028/bc57a0d4/attachment.bin>


More information about the dovecot mailing list