Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I set up a mail server on an Ubuntu 11.04 distribution using the dovecot-postfix package.

sudo apt-get install dovecot-postfix

For some reason, I can't seem to disable non-SSL access through dovcecot. I have made the following edits to the configuration file in an attempt to accomplish this.


protocols= imaps
disable_plaintext_auth = yes
ssl = required
ssl_cert_file = /etc/ssl/certs/dovecot.pem
ssl_key_file = /etc/ssl/private/dovecot.pem

A telnet connection to port 143, however, reveals that dovecot is still accepting non-ssl connections. Where have I gone wrong?

share|improve this question
up vote 5 down vote accepted

You should be able to establish TLS connections, which connect on Port 143 and start in plain text, even though SSL is "required". If you want to disable TLS (which is more advanced than SSL) you'll need to rewrite the software or block the port (there might also be a way to disable to port, though I can't remember).

share|improve this answer
TLS works. Securing the connection was my primary concern. – Jason George Oct 12 '11 at 20:29

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.