<br><br><div><span class="gmail_quote">On 12/14/05, <b class="gmail_sendername">Magnus Holmgren</b> <<a href="mailto:holmgren@lysator.liu.se">holmgren@lysator.liu.se</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
ankush grover wrote:<br>> hey friends,<br>><br>> I am trying to secure my mail server on FC3.I have enabled TLS support<br>> in postfix(version postfix-2.1.5) and want to use ssl settings for<br>> dovecot(0.99.13
).<br>> ...<br>> If i do telnet localhost 993 or 995 I don't see any "Ok Dovecot Ready"<br>> message.If I enable pop3 and imap in dovecot.conf and then I telnet<br>> localhost 110 or 143 I can see "Ok Dovecot Ready" message.
<br><br>That's normal. Dovecot is waiting for the SSL handshake to complete<br>before it will send "Ok Dovecot Ready" (over the encrypted line). Use<br><br> openssl s_client -connect yourhost:995<br><br>to test.
</blockquote><div><br>
it is working fine as I get the Ok Dovecot Ready Message.<br>
</div><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Some clients can also connect to port 110 or 143 and issue the<br>STARTTLS/STLS command to initiate encryption. If you only have such
<br>clients (unlikely), then you don't need pop3s and imaps in the protocols<br>line. At any rate, you can pretty safely allow pop3 and imap; dovecot<br>will not allow any plaintext authentication until the connection is<br>
encrypted. Caveat: Some clients, most notably Mozilla Thunderbird, will<br>send IMAP passwords in clear anyway, instead of checking if it's OK.<br>(The IMAP LOGIN command takes the username and the password in the same<br>
command. You should issue the CAPABILITY command, which shows that LOGIN<br>is disabled while STARTTLS is available.)</blockquote><div><br>
My clients are outlook express,incredimail,squirrelmail,microsoft outlook, evolution and kmail.<br>
<br>
I hope none of these clients passes imap passwords in clear text.<br>
<br>
Thanks for your guidance.<br>
<br>
Thanks & Regards<br>
<br>
Ankush<br>
<br>
</div><br></div><br>