Enforcing TLS/SSL on mail service?

LightPeak · Post by **LightPeak** » Thu Sep 04, 2014 10:37 am

As the topic says, how do I enforce TLS/SSL for all email traffic with a signed certificate?
I do not wish emails to be sent through plaintext.

LightPeak · Post by **LightPeak** » Fri Sep 05, 2014 1:59 pm

Any idea, anyone?

iMatt · Post by **iMatt** » Fri Sep 12, 2014 9:13 am

Hi,

I am a new user of VestaCP and have a few ideas that may help you.

Option 1, open only SSL ports in your firewall (465 for SMTP, 993 for IMAP and 995 POP).
Option 2, update configuration files :

/etc/dovecot/conf.d/10-auth.conf
disable_plaintext_auth = yes

/etc/dovecot/conf.d/10-master.conf
here I guess you can remove inet_listener imap {} and inet_listener pop3 {}

I didn't try it :)

For the SMTP configuration, you may want to look at in the directory /etc/exim4

Vesta Control Panel - Forum