Comments on: Qualys + QMail TLS = ?

By: Avinesh

Avinesh — Wed, 02 Aug 2006 17:18:01 +0000

However, if you ARE using IMAP or POP3 over SSL with TLS, I would recommend updating the aforementioned files to use the strong TLS cipher set mentioned in the blog post.

By: Avinesh

Avinesh — Wed, 02 Aug 2006 16:34:36 +0000

Sorry for the long delay.

1. The key is to edit /etc/courier-imap/imapd-ssl.
2. Look for the following two lines:
IMAPDSSLSTART=YES
IMAPDSTARTTLS=YES
3. Change those lines to read NO.
4. Edit /etc/courier-imap/pop3d-ssl in the same manner.
5. Restart the courier-imap daemon: service courier-imap restart
6. Voila, fixed

By: Ian

Ian — Wed, 26 Apr 2006 17:58:19 +0000

Thanks for posting this. I managed to reduce some of the level 3 warning on my Qualys check after this.

How did you get rid of any port 993/995′s warnings?