[SOLVED] Inbound external mail, STARTTLS offered?

[batfastad]

Hi everyone

Been using Zimbra for a while now, but been checking it out for a few years. Happy with it so far but we're only a small installation of 14 accounts.

Since Zimbra seems to support SSL/TLS on all aspects of its services I thought I'd start looking to see if there was a way to ensure security on the inbound mail channel, port 25.
I thought there might be some sort of protocol like SMTPS but it appears that Postfix supports the STARTTLS command.

Is this supported in Zimbra by default?

I realise this isn't e-mail encryption in the PGP sense, but it would be cool to know there's an encrypted channel there if an external MTA asks for it.

For example an external MTA is configured to offer TLS to the receiving SMTP server, eg: Zimbra.
Does Zimbra accept incoming STARTTLS requests?

Cheers, B

[lytledd]

Originally Posted by batfastad

Is this supported in Zimbra by default?

Yes,

I use it on my home Zimbra server.

Doug

[batfastad]

Awesome

So Zimbra just accepts those connections without any fuss?
I don't need to do any extra configuration or anything?

Cheers, B

[lytledd]

Originally Posted by batfastad

I don't need to do any extra configuration or anything?

If you can do a:

telnet yoursever.com 25
ehlo yourserver.com

And get a response that has

250-STARTTLS

Then you're good to go.

Doug

[batfastad]

Yep I see that in the telnet reply.
Good stuff!

Cheers for the info

B