Security Basics mailing list archives

IMAP Proxy for Security


From: G Farnham <gfarnham () gmail com>
Date: Sat, 11 Sep 2010 17:44:58 -0700

Does anyone have experience setting up an IMAP proxy for Security that
they can share?
The scenario is this:
You have a mail server (e.g. Exchange) on your internal.  Your users
have smart phones that they want to be able to connect to imap from an
IP.
You want to put a proxy in DMZ add some security and proxy IMAP over
TLS (port 993) to your mail server.
By "add some security" this could be things like check if protocol
meets RFC, connecting limiting, additional authentication, etc.
Most of the imap proxy info I have found is about deploying proxies
for performance or architectural reasons.  Looks like the proxies just
pass the connection through and don't add security.

The ones I've come across are:
Cyrus  http://www.cyrusimap.org/
ImapProxy  http://imapproxy.org/
Nginx  http://wiki.nginx.org/Main
Perdition  http://horms.net/projects/perdition/
Dovecot  http://www.dovecot.org/

All suggestions welcome.

G

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


Current thread: