controlling STARTTLS by IP address

[Aki Tuomi]

On 15.07.2016 00:52, Michael Fox wrote:
>> You could try
>>
>> remote x.x.x.x/y {
>>     ssl = no
>> }
>>
>> Aki
> Wow.  OK.  But I can find no documentation on how to use that.
>
> Would it be used inside service pop3-login, or at the top level?
>
> And, does it apply the first match found?  For example:
>
>    # Disable SSL for radio clients
>    remote 192.168.1.0/24 {
>        ssl = no
>    }
>    # Allow SSL for internal clients
>    remote 192.168.0.0/16 {
>        ssl = yes
>    }
>    # Require SSL for all others
>    remote 0.0.0.0/0 {
>        ssl = required
>    }
>
> Thanks,
> Michael

You can leave the last bit off. Not sure about the ordering, but you'll 
find out by testing? =)

Aki