On 31/10/10 20:51 -0400, Chris Pepper wrote:
>       Alternatively, is there a way to make sure Cyrus requires STARTTLS on
>143? I was blocking external access to it to make sure users always use
>encryption to connect, but port 143 with STARTTLS required would be an
>acceptable alternative.

You can set 'allowplaintext: 0' to disallow plaintext logins over port 143.
That would require clients to perform a STARTTLS, or negotiate a SASL
security layer which meets your 'sasl_minimum_layer:' setting.

-- 
Dan White
----
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/

Reply via email to