Disable STARTTLS and use TLS instead

2016-10-12 13:23:59 +02:00
parent 249a8a8eae
commit deab70fe64
5 changed files with 6 additions and 5 deletions
--- a/core/config/dovecot/dovecot.master
+++ b/core/config/dovecot/dovecot.master
@@ -1,8 +1,9 @@
 listen = "*, [::]"

 service imap-login {
+  # disable starttls
  inet_listener imap {
-
+	port = 0
  }

  inet_listener imaps {
--- a/core/config/dovecot/dovecot.ssl
+++ b/core/config/dovecot/dovecot.ssl
@@ -1,4 +1,4 @@
-ssl = yes
+ssl = required
 disable_plaintext_auth = no
 ssl_cert = </etc/ssl/server/email.crt
 ssl_key = </etc/ssl/server/email.key
--- a/core/config/postfix/postfix.master.cf.append
+++ b/core/config/postfix/postfix.master.cf.append
@@ -6,6 +6,7 @@ dovecot   unix  -       n       n       -       -       pipe
 submission      inet    n       -       n       -       -       smtpd
 -o smtpd_etrn_restrictions=reject
 -o smtpd_tls_security_level=may
+ -o smtpd_tls_wrappermode=yes
 -o smtpd_sasl_type=dovecot
 -o smtpd_sasl_path=private/auth
 -o smtpd_sasl_auth_enable=yes