[Dovecot] Selective TLS per local IP

Timo Sirainen
Tue, 17 Jul 2012 10:59:48 -0000

On 17.7.2012, at 1.35, Robert Blayzor wrote:

> So is there any way possible to turn off advertising of TLS on port or turn
it off/on per IP?
>
> Something like:

If those work, then yes. If they don't, then no. I'd think they would
work.

> ssl = yes
> ssl_cert = </etc/ssl/cert/default.pem
> ssl_key  = </etc/ssl/cert/default.pem
>
> local 10.1.1.1 {
>  protocol imap {
>     ssl_cert = </etc/ssl/cert/site1.pem
>     ssl_key  = </etc/ssl/cert/site1.pem
>   }
>   protocol pop3 {
>     ssl_cert = </etc/ssl/cert/site1.pem
>     ssl_key  = </etc/ssl/cert/site1.pem
>   }
> }
>
> local 10.1.1.2 {
>  ssl = no
> }
>
>
>
> *or*
>
> ssl = no
>
> local 10.1.1.1 {
>  ssl = yes
>  protocol imap {
>     ssl_cert = </etc/ssl/cert/site1.pem
>     ssl_key  = </etc/ssl/cert/site1.pem
>   }
>   protocol pop3 {
>     ssl_cert = </etc/ssl/cert/site1.pem
>     ssl_key  = </etc/ssl/cert/site1.pem
>   }
> }
>
>
> --
> Robert Blayzor
> INOC, LLC
> rblayzor at inoc.net
> http://www.inoc.net/~rblayzor/
>
>
>