Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I want my users to stop accessing user accounts like IMAP, SMTP and POP without SSL. I can easily disable non-SSL access, but then everything would break. Is there a way to automatically redirect them? With HTTP it's easy, but with this...? I mean, if the client is configured without SSL, it's not just going to accept SSL, so a simple port redirect isn't going to cut it.

share|improve this question

1 Answer 1

There's no way (that I know of) to redirect these protocols like it's possible with HTTP.

However, you could set up the TLS enabled servers to the standard TLS ports and also add support for STARTSSL/STARTTLS in non-TLS ports. With STARTTLS many clients might already use secured channel to communicate.

Then little by little start migrate your users to TLS enabled services and announce date when non-TLS services stop working.

share|improve this answer
    
Migrating that way is possible of course, but the problem is the storm of calls from people who don't know how to change to SSL... Something automatic would be nice, but like you, I don't see a way. –  Halfgaar Feb 18 '11 at 8:08

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.