1 Topic by GalionChris

  • GalionChris
  • Member
  • Offline
  • Registered: 2018-08-20
  • Posts: 2

Topic: How to force secure/encrypted SMTP connection to external server

I'm looking for an answer, and maybe I'm not asking it correctly...

The Objective: I want to force / only allow secure connections between my local iredmail server installation and an external hosted Office365 installation. BUT allow unsecured internal communication.

The scenario: I have a number of old copiers that scan to email. But they are old so they cannot connect directly to our hosted exchange because they cannot handle the modern security / certificates. BUT since most of the scans contain PHI, the connection between this local iRedMail server needs to be secure to our hosted email server. How can I allow internally unsecured SMTP / POP communication, but require it externally?



==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 0.9.8
- Linux/BSD distribution name and version: CentOS 7
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySql
- Web server (Apache or Nginx): Apache
- Manage mail accounts with iRedAdmin-Pro? No
====

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,094

Re: How to force secure/encrypted SMTP connection to external server

I didn't understand it clearly.

- Is your iRedMail server an internal server which talk to only Office365 but no any other servers?
- Your old copiers can only send email through insecure smtp connection, but does it support smtp auth? also can you specify a different smtp port number for them? for example, change the default port 25 to, e.g. 2525 in the copier setting?

3 Reply by GalionChris

  • GalionChris
  • Member
  • Offline
  • Registered: 2018-08-20
  • Posts: 2

Re: How to force secure/encrypted SMTP connection to external server

Yes, the iRedMail server is internal and Office365 / hosted exchange is external.
Our Office365 instance is the only mail server that I care about 2 way communication...
The old copiers can do smtp auth and can do a different port... it's tls and certificates they cannot handle.

4 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,094

Re: How to force secure/encrypted SMTP connection to external server

Try this: https://docs.iredmail.org/additional.smtp.port.html