Linode Forum
https://forum.linode.com/

POP/SMTP/SpamAssassin how to on CentOS...
https://forum.linode.com/viewtopic.php?f=11&t=4219		 Page 2 of 2
Author:  sblantipodi [ Wed May 20, 2009 2:18 pm ]
Post subject: 
reading my dovecot.conf/main.cf,
do you think that this is a secure configuration?

do you think that my VPS can be attaked to serve spam?
I'm really afraid about that, can I do more to improve my security?

I closed all the unused port, configured iptables with enforcing security...

thanks
Author:  sblantipodi [ Wed May 20, 2009 7:15 pm ]
Post subject: 
I have one more question if possible...
Why thunderbird make me check email using SSL,
but I can't use "encrypted connection" option?
If I enable this option in thunderbird I've got, APOP not enable message.
Author:  sblantipodi [ Thu May 21, 2009 6:35 am ]
Post subject: 
sblantipodi wrote:
I have one more question if possible...
Why thunderbird make me check email using SSL,
but I can't use "encrypted connection" option?
If I enable this option in thunderbird I've got, APOP not enable message.


I read tons of guide but I haven't solved this problem yet.
:( :cry:

/var/log/maillog
told this when the error occur:
May 21 13:53:55 li62-51 dovecot: pop3-login: Disconnected: rip=::ffff:[my_client_ip], lip=::ffff:[my_vps_ip], TLS
Author:  sblantipodi [ Thu May 21, 2009 6:08 pm ]
Post subject: 
this is the complete maillog
when trying to send email from phone:

May 21 18:04:23 li62-51 dovecot: auth(default): new auth connection: pid=4319
May 21 18:04:25 li62-51 dovecot: pop3-login: SSL_accept() failed: error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure [::ffff:151.81.4.71]
May 21 18:04:25 li62-51 dovecot: pop3-login: Disconnected: rip=::ffff:my_client_ip, lip=::ffff:my_server_ip, TLS handshake
Author:  sblantipodi [ Fri May 22, 2009 7:32 am ]
Post subject: 
I solved by add a comment on
smtpd_tls_auth_only = yes
in the main.cf file...

Do you think that this is terrible for security?
Author:  mwalling [ Fri May 22, 2009 9:19 am ]
Post subject: 
Did you bother to read the documentation for that parameter?
Author:  sblantipodi [ Fri May 22, 2009 9:24 am ]
Post subject: 
mwalling wrote:
Did you bother to read the documentation for that parameter?


I know what this parameter means,
I'm only asking if commenting this parameter may create some security issue.
Author:  sblantipodi [ Sat May 23, 2009 7:29 pm ]
Post subject: 
sblantipodi wrote:
I know what this parameter means,
I'm only asking if commenting this parameter may create some security issue.


bump.
Page 2 of 2 All times are UTC-04:00
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/