Suggestions: SSL - Githubissues

bdraco / addon_securityadvisor

Old Security Advisor for cPanel 11.40 (upstream repo) -- Use CPANELINC/addon_securityadvisor

Other

16 stars 56 forks source link

Suggestions: SSL #19

Open Jamyn opened 11 years ago

Jamyn commented 11 years ago

Just documenting suggestions submitted by others so we don't lose them.

ERROR: WHM/cPanel/Webmail/webdav not configured to require SSL
ERROR: POP/IMAP/SMTP not configured to require SSL prior to authentication
ERROR: FTP enabled and does not REQUIRE ssl

Jamyn commented 11 years ago

We can require SSL for POP3/IMAP as well, but it breaks webmail unless we make changes to the product to account for it.. so I'm holding off on that for now.

Link: /scripts2/mailserversetup Location: WHM: Service Configuration: Mailserver Configuration Config: cpanel.config: mailserver=dovecot /etc/dovecot.conf disable_plaintext_auth = yes

Config: cpanel.config: mailserver=courier /usr/lib/courier-imap/etc/* ${SERVICE_NAME}_TLS_REQUIRED=1