Results 1 to 3 of 3

Thread: Cipher Filtering for SMTP and SMTPS

  1. #1
    Join Date
    Aug 2012
    Posts
    6
    Rep Power
    3

    Default Cipher Filtering for SMTP and SMTPS

    I'm trying to restrict ALL Zimbra communications from using any ciphers other than RC4 (please don't ask why, not my idea).

    I was able to make it happen via Cipher suites - Zimbra :: Wiki, however the described method does not restrict ciphers for SMTP or SMTPS. Does anyone know where the cipher suites can be defined and/or limited for SMTP and STMPS?

  2. #2
    Join Date
    Mar 2012
    Posts
    4
    Rep Power
    3

    Default

    Sounds like you need to do this at Postfix configuration level: Postfix Configuration Parameters
    Be careful: when changing configuration files directly, your changes are overriden when Zimbra is upgraded.
    VMware Employee

  3. #3
    Join Date
    Aug 2012
    Posts
    6
    Rep Power
    3

    Default

    Quote Originally Posted by StephaneP View Post
    Sounds like you need to do this at Postfix configuration level: Postfix Configuration Parameters
    Be careful: when changing configuration files directly, your changes are overriden when Zimbra is upgraded.
    Thanks StephaneP. I am trying to convince my client that simply blocking SMTP at the firewall and having all communications go over 443 is a much cleaner way of avoiding automated vulnerability scanners' reports of vulnerable ciphers, as our SSL entry point has been locked down. He mentioned that iPads and iPhones are using SMTP, is it possible those clients are just not set up for SSL?

Similar Threads

  1. SSL Anonymous Cipher Suites Supported
    By PastorOfMuppets in forum Administrators
    Replies: 2
    Last Post: 06-10-2013, 10:14 AM
  2. Replies: 1
    Last Post: 03-13-2012, 01:37 PM
  3. Replies: 0
    Last Post: 03-12-2012, 01:51 PM
  4. [SOLVED] Fix Zimbra SSL weak cipher
    By shan in forum Administrators
    Replies: 5
    Last Post: 06-12-2010, 11:15 AM
  5. transport table equivalent for SMTPS (SSL SMTP)
    By tedh in forum Installation
    Replies: 1
    Last Post: 04-20-2009, 11:46 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •