<!doctype html>
<html>
<head>
<meta charset="UTF-8">
</head>
<body>
<div>
Try setting
</div>
<div>
<br>
</div>
<div>
login_trusted_networks = lb-ip/32
</div>
<div>
<br>
</div>
<div>
See
<a href="https://doc.dovecot.org/settings/dovecot_core_settings/#login-trusted-networks">https://doc.dovecot.org/settings/dovecot_core_settings/#login-trusted-networks</a>
<br>
</div>
<div>
<br>
</div>
<div>
Aki
</div>
<blockquote type="cite">
<div>
On 10/02/2020 15:38 Bjoern Jacke <
<a href="mailto:lists2020@j3e.de">lists2020@j3e.de</a>> wrote:
</div>
<div>
<br>
</div>
<div>
<br>
</div>
<div>
Hi,
</div>
<div>
<br>
</div>
<div>
I would like to disable offering starttls to clients for certain dovecot
</div>
<div>
services.
</div>
<div>
<br>
</div>
<div>
Background is that I want to do let a load balancer do the TLS stuff
</div>
<div>
right on connect time and let dovecot only do plain imap without
</div>
<div>
offering starttls (because the clients do imaps actually). Getting rid
</div>
<div>
of the starttls feature offering works only if I set ssl = no globally
</div>
<div>
only. Setting it in the service imap-login section seems to be
</div>
<div>
impossible. If I set it globally to no though, I cannot use it in other
</div>
<div>
services where it is needed like in the manage-sieve, where clients
</div>
<div>
unfortunately only support starttls and no tls on connect.
</div>
<div>
<br>
</div>
<div>
Is there any way to configure dovecot to offer starttls for some
</div>
<div>
services and for some not or is this just not supported currently?
</div>
<div>
<br>
</div>
<div>
Thanks
</div>
<div>
Björn
</div>
</blockquote>
<div>
<br>
</div>
<div class="io-ox-signature">
<pre>---
Aki Tuomi</pre>
</div>
</body>
</html>