Can nginx be an mail proxy for a backend server that does not accept cleartext logins?
Posted
by
84104
on Server Fault
See other posts from Server Fault
or by 84104
Published on 2012-05-08T20:29:14Z
Indexed on
2012/06/05
10:42 UTC
Read the original article
Hit count: 221
nginx
|reverse-proxy
Can Nginx be an mail proxy for a backend server that does not accept cleartext logins?
Preferably I'd like to know what directive to include so that it will invoke STARTTLS
/STLS
, but communication via IMAPS
or POP3S
is sufficient.
relevant(?) section of nginx.conf
mail {
auth_http localhost:80/mailproxy/auth.php;
proxy on;
ssl_prefer_server_ciphers on;
ssl_protocols TLSv1 SSLv3;
ssl_ciphers HIGH:!ADH:!MD5:@STRENGTH;
ssl_session_cache shared:TLSSL:16m;
ssl_session_timeout 10m;
ssl_certificate /etc/ssl/private/hostname.crt;
ssl_certificate_key /etc/ssl/private/hostname.key;
imap_capabilities "IMAP4rev1" "UIDPLUS";
server {
protocol imap;
listen 143;
starttls on;
}
server {
protocol imap;
listen 993;
ssl on;
}
pop3_capabilities "TOP" "USER";
server {
protocol pop3;
listen 110;
starttls on;
pop3_auth plain;
}
server {
protocol pop3;
listen 995;
ssl on;
pop3_auth plain;
}
}
© Server Fault or respective owner