Mail and SSL
The mail stuff is done. Horray!
- POP3 supports SSL/TLS on the POP3S port, 995
- IMAP supports SSL/TLS on the IMAPS port, 993
- SMTP supports SSL/TLS as an option on the SUBMISSION port, 587. If your ISP is blocking port 25, you can use port 587 to send mail, if you’re authenticated (SMTP with username/password).
- SMTP also supports a fulltime wrapped port on port 465 (some older apps will want this).
- SMTP lastly will still honor STARTTLS on the standard SMTP port.
- SMTP AUTH is working after the upgrades. I still need to provide a password change tool. Until I do so, poke me directly.
SSL should “just work” as long as you use the name mail.gigo.com. We’re using a paid-for certificate that should have root trusts. I tested Thunderbird and Mail.App (apple), and they worked. I also got pine working (with these instructions).
For those who are curious, the new combination of software on the server is now: OpenSSL, Dovecot POP3/IMAP, Postfix (with Dovecot SMTP AUTH), Squirrelmail, and Apache with SSL. Filtering is provided by both Dovecot LDA + libsieve, and via procmail, depending on user preferences.