Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm installing a Plesk machine and it seems Plesk doesn't really have a way of forcing users to use TLS/SSL for authentication. Therefore, I'm hacking it in:

  • Included mod_tls settings in proftpd.conf and set TLSRequired to on.
  • Closed normal POP3 and IMAP ports with iptables, except for localhost for the webmail.
  • Closed port 8880 for unencrypted panel access (although I have to find a way to make the default hosting page work that way...)

But, there doesn't seem to be a way to force Qmail to use TLS/SSL for authentication. Obviously, I can't close port 25 and force use of port 465, because then mail delivery will break.

I've tried all sorts of environment variables I could find in /etc/xinitd.d/smtp_psa, but nothing works.

Postfix has a smtpd_tls_auth_only option, but I can't seem to find it for Qmail, nor where to set it in the plesk-installed version.

System:Ubuntu 10.04.2 LTS
Plesk: 10.2

share|improve this question
up vote 0 down vote accepted

I didn't know I could just run Plesk's autoinstaller (/opt/psa/admin/bin/autoinstaller) and replace Qmail with Postfix. With postfix, I simply enabled smtpd_tls_auth_only and it's done.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.