52 lines
2.6 KiB
HTML
52 lines
2.6 KiB
HTML
<html>
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
|
<title>Allow insecure POP3/IMAP/SMTP connections without STARTTLS</title>
|
|
<link rel="stylesheet" type="text/css" href="./css/markdown.css" />
|
|
</head>
|
|
<body>
|
|
|
|
<div id="navigation">
|
|
<a href="http://www.iredmail.org" target="_blank">iRedMail web site</a>
|
|
|
|
// <a href="./index.html">Document Index</a>
|
|
</div><h1 id="allow-insecure-pop3imapsmtp-connections-without-starttls">Allow insecure POP3/IMAP/SMTP connections without STARTTLS</h1>
|
|
<p>With default iRedMail setting, all clients are forced to use POP3/IMAP/SMTP
|
|
services over STARTTLS for secure connections. If your mail clients
|
|
try to access mailbox via protocol POP3/IMAP without TLS support, you will
|
|
get error message like below:</p>
|
|
<pre><code>Plaintext authentication disallowed on non-secure (SSL/TLS) connections
|
|
</code></pre>
|
|
|
|
<h2 id="allow-insecure-pop3imap-connections">Allow insecure POP3/IMAP connections</h2>
|
|
<p>If you want to enable POP3/IMAP services without STARTTLS for some reason
|
|
(again, not recommended), please update below two parameters in Dovecot config
|
|
file <code>/etc/dovecot/dovecot.conf</code> and restart Dovecot service:</p>
|
|
<ul>
|
|
<li>on Linux and OpenBSD, it's <code>/etc/dovecot/dovecot.conf</code></li>
|
|
<li>on FreeBSD, it's <code>/usr/local/etc/dovecot/dovecot.conf</code></li>
|
|
</ul>
|
|
<pre><code>disable_plaintext_auth=no
|
|
ssl=yes
|
|
</code></pre>
|
|
|
|
<p>Again, it's strongly recommended to use only POP3S/IMAPS for better security.</p>
|
|
<p>Default and recommended setting configured by iRedMail is:</p>
|
|
<pre><code>disable_plaintext_auth=yes
|
|
ssl=required
|
|
</code></pre>
|
|
|
|
<h2 id="allow-insecure-smtp-connection">Allow insecure SMTP connection</h2>
|
|
<p>Please comment out below line in Postfix config file <code>/etc/postfix/main.cf</code>
|
|
and reload or restart Postfix service:</p>
|
|
<pre><code>smtpd_tls_auth_only=yes
|
|
</code></pre><p style="text-align: center; color: grey;">Document published under a <a href="http://creativecommons.org/licenses/by-nd/3.0/us/" target="_blank">CC BY-ND 3.0</a> license. If you found something wrong, please do <a href="http://www.iredmail.org/contact.html">contact us</a> to fix it.<script>
|
|
(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
|
|
(i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
|
|
m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
|
|
})(window,document,'script','//www.google-analytics.com/analytics.js','ga');
|
|
|
|
ga('create', 'UA-3293801-21', 'auto');
|
|
ga('send', 'pageview');
|
|
</script>
|
|
</body></html> |