1 Topic by professormichel

  • professormichel
  • Member
  • Offline
  • Registered: 2015-01-22
  • Posts: 8

Topic: How can i disable the outlook SSL/TSL connection

==== Required information ====
- iRedMail version: lastest
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Linux/BSD distribution name and version: Linux Centos 6
- Related log if you're reporting an issue:
====

I need unable tne SSL and TSL connections on iredmail, i need only allow conect to ports 110 and 25, im having many problems with SSL AND TSL CONNECTIONS.

Please Help me, i have tested with my outlook 2013 to connect with only ports 110 and 25 but i can´t.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,094

Re: How can i disable the outlook SSL/TSL connection

Please show us how you configure your Outlook. Outlook 2013 should work with default iRedMail settings.

3 Reply by professormichel (edited by professormichel 2015-01-22 13:23:51)

  • professormichel
  • Member
  • Offline
  • Registered: 2015-01-22
  • Posts: 8

Re: How can i disable the outlook SSL/TSL connection

My friend, i need disable the tls and ssl smtp security, not for only outlook, where in iredmail may i disable the ssl and tls autentication?

to autenticate only port 110 (pop) and 25 (smtp) whitout ssl or tls?

4 Reply by professormichel

  • professormichel
  • Member
  • Offline
  • Registered: 2015-01-22
  • Posts: 8

Re: How can i disable the outlook SSL/TSL connection

I want connect to my iredmail server only by ports 25 and 110 whitout ssl or tls security, where i need edit to do that?

5 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,094

Re: How can i disable the outlook SSL/TSL connection

Everyone are trying to enforce secure connection through TLS/SSL, i'm curious why you want to disable them?

Anyway, to disable TLS in Postfix (SMTP service), comment out 'smtpd_tls_auth_only=yes' in /etc/postfix/main.cf.
To disable TLS in Dovecot (POP3/IMAP services), modify 'ssl = required' to 'ssl = yes'.

Restarting Postfix and dovecot services are required.

Again, it's strongly recommended to use secure connections.

6 Reply by professormichel

  • professormichel
  • Member
  • Offline
  • Registered: 2015-01-22
  • Posts: 8

Re: How can i disable the outlook SSL/TSL connection

Tks,

More one question, the port to smtp connection is 587 or 25 after that configs?

7 Reply by professormichel

  • professormichel
  • Member
  • Offline
  • Registered: 2015-01-22
  • Posts: 8

Re: How can i disable the outlook SSL/TSL connection

Only to kill your curiosity.. we need autenticate using the interspire mail marketing system, this system cannot autenticate to port 587 or another with protocol SSL or TLS activate in iredmail.

This integration has not possible but is very necessary in iredmail.

We need disable the SSL and TLS protocols and ports to use the iredmail with interspire mailmarketing system.

8 Reply by professormichel

  • professormichel
  • Member
  • Offline
  • Registered: 2015-01-22
  • Posts: 8

Re: How can i disable the outlook SSL/TSL connection

The port 110 and pop 3 protocol connected correctly.
The port 25 and smtp protocol cannot connected correctly.

I do it:

To disable TLS in Postfix (SMTP service), comment out 'smtpd_tls_auth_only=yes' in /etc/postfix/main.cf.
To disable TLS in Dovecot (POP3/IMAP services), modify 'ssl = required' to 'ssl = yes'.

9 Reply by professormichel

  • professormichel
  • Member
  • Offline
  • Registered: 2015-01-22
  • Posts: 8

Re: How can i disable the outlook SSL/TSL connection

may you send me your postfix >> main.cf and master.cf and your dovecot/dovecot.conf to unblock this in smtp protocol and port 25?

I having crazy with this...

10 Reply by professormichel

  • professormichel
  • Member
  • Offline
  • Registered: 2015-01-22
  • Posts: 8

Re: How can i disable the outlook SSL/TSL connection

My postfix >> master.cf is correct?

# ==========================================================================
# service type  private unpriv  chroot  wakeup  maxproc command + args
#               (yes)   (yes)   (yes)   (never) (100)
# ==========================================================================
smtp      inet  n       -       -       -       -       smtpd
#smtps     inet  n       -       n       -       -       smtpd
#smtp      inet  n       -       n       -       1       postscreen
smtpd     pass  -       -       n       -       -       smtpd
#dnsblog   unix  -       -       n       -       0       dnsblog
#tlsproxy  unix  -       -       n       -       0       tlsproxy
#submission inet n       -       n       -       -       smtpd
#  -o syslog_name=postfix/submission
#  -o smtpd_tls_security_level=encrypt
#  -o smtpd_sasl_auth_enable=yes
  -o smtpd_reject_unlisted_recipient=no
#  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
#  -o smtpd_helo_restrictions=$mua_helo_restrictions
#  -o smtpd_sender_restrictions=$mua_sender_restrictions
#  -o smtpd_recipient_restrictions=
#  -o smtpd_relay_restrictions=permit_sasl_authenticated,reject
#  -o milter_macro_daemon_name=ORIGINATING
smtps     inet  n       -       n       -       -       smtpd
#  -o syslog_name=postfix/smtps
-o smtpd_tls_wrappermode=yes
-o smtpd_sasl_auth_enable=yes
#  -o smtpd_reject_unlisted_recipient=no
#  -o smtpd_client_restrictions=$mua_client_restrictions
#  -o smtpd_helo_restrictions=$mua_helo_restrictions
#  -o smtpd_sender_restrictions=$mua_sender_restrictions
#  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
#  -o smtpd_recipient_restrictions=
#  -o smtpd_relay_restrictions=permit_sasl_authenticated,reject
#  -o milter_macro_daemon_name=ORIGINATING

11 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,094

Re: How can i disable the outlook SSL/TSL connection

There's no need to update /etc/postfix/master.cf.

With default iRedMail settings:

*) comment out 'smtpd_tls_auth_only=yes' in /etc/postfix/main.cf will allow you to use port 25 for smtp authentication without TLS.
*) with 'ssl = yes' in /etc/dovecot/dovecot.conf, allows you to use port 110 and 143 without TLS.

if it doesn't work for you, please paste related error log on your server in this topic, so that others can help troubleshoot. No log, no help, that's the fact of troubleshooting Linux issues.