I copied new surgemail binary but I don't see ssl_require_login option
per vdomain. I also tried to search withouth sucess.
Do I clear that setting and add ssl_require_login for each vdomain except
for one which I will migrate?
Can you just clarify so I don't do mistake or wrong assumptions.
HEre is a binary, use the new domain level setting ssl_require_login
instead to do what you want.
http://netwinsite.com/ftp/misc/v1.zip
ChrisP.
Hi,
I'm on windows 2008 R2 SP1 x64.
Regards,
Darko Bazulj
On 12/16/2013 2:22 AM, surgemail-support wrote:
Ahh I understand your issue now. No sorry it doesn't have such a
setting. Yes we can add one, what platform are you on.
ChrisP.
Hi,
g_ssl_require_login - check source IP and I don't know from where
all client will connect or from which ISP.
I tried to exclude local surgemail IP on list but I got error as
expected because source address is checked.
After pass POP3 statement I get error
pass PASSWORD
-ERR SSL required for ip (213.191.158.158)
quit
+OK closing connection
This is why I've idea to put domain on dedicated IP and somehow to
disable g_ssl_require_login check on that IP during transition
phase.
If this feature doesn't exist is it possible to implement it?
Regards,
Darko Bazulj
On 12/15/2013 8:15 PM, surgemail-support wrote:
Just extend this setting (using numbers and wild cards... e.g.
to add
10.1.2.* )
g_ssl_require_login *,!127.0.0.1,!10.1.2.*
ChrisP.
Hi,
I have several IPs on machine.
Only SSL access is enabled for client access.
g_ssl_require_login *,!127.0.0.1
g_ssl_allow "*"
g_ssl_allow_imap "*"
g_ssl_require_web "TRUE"
g_ssl_try_out "*"
g_ssl_disable_sslv2 "TRUE"
g_ssl_sha1_sign "TRUE"
I have to move client with ~2000 users.
For his domain I will setup dedicated IP.
Can I somehow exclude that local IP from forcing/checking for SSL?
I can't control source IPs from where they will be accessing this
mail system.
We need this for transition phase.
Maybe I'm missing some option like
g_ssl_exclude_local_ip
Regards,
Darko Bazulj
