Re: IMAP Proxy for enhance Security

[Justin Coffi <jcoffi () gmail com>]

You might want to take a look at Nginx. It does a pretty good job as an IMAP proxy.

Sent from my iPhone (but not while driving)

On Sep 12, 2010, at 22:32, G Farnham <gfarnham () gmail com> wrote:

> This page lists a bunch of imap servers (not all of them are proxies).
>
> http://www.imapwiki.org/ImapTest/ServerStatus
> G
>
> On Sat, Sep 11, 2010 at 5:40 PM, G Farnham <gfarnham () gmail com> wrote:
> > Does anyone have experience setting up an IMAP proxy for Security that they can share?
> >
> > The scenario is this:
> >
> > You have a mail server (e.g. Exchange) on your internal. Your users have smart phones that they want to be able to 
> > connect to imap from an IP.
> >
> > You want to put a proxy in DMZ add some security and proxy IMAP over TLS (port 993) to your mail server.
> >
> > By "add some security" this could be things like check if protocol meets RFC, connecting limiting, additional 
> > authentication, etc.
> >
> > Most of the imap proxy info I have found is about deploying proxies for performance or architectural reasons. Looks 
> > like the proxies just pass the connection through and don't add security.
> >
> > The ones I've come across are:
> >
> > Cyrus
> >
> > http://www.cyrusimap.org/
> >
> > ImapProxy
> >
> > http://imapproxy.org/
> >
> > Nginx
> >
> > http://wiki.nginx.org/Main
> >
> > Perdition
> >
> > http://horms.net/projects/perdition/
> >
> > Dovecot
> >
> > http://www.dovecot.org/
> >
> > All suggestions welcome.
> >
> > G
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
> how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
> purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
> set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------