Mailbox connects to MTA using TLS or STARTTLS

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
Post Reply
yeak
Posts: 29
Joined: Fri Jun 17, 2016 6:05 am
Location: Malaysia
ZCS/ZD Version: Zimbra 10
Contact:

Mailbox connects to MTA using TLS or STARTTLS

Post by yeak »

I am wondering how to make Zimbra Mailboxd to connect to Zimbra MTA using TLS (465). Currently this zimbraSmtpHostname is set to localhost:25, if it is standalone server. In Multiserver, it points to one of the MTA or LB. I haven't thought of TLS until the security compliance is asking it. Anyone knows or is there workaround?

Ha... I think I answer it myself: stunnel

Example.

Code: Select all

[smtp-tls-wrapper]
client = yes
accept = 127.0.0.1:11125
connect = mail.zimbra.lab:25
protocol = smtp

Code: Select all

 zmprov ms `zmhostname` zimbraSmtpHostname 127.0.0.1 zimbraSmtpPort 11125
Can't use 465 as Zimbra has designated it for submission use. Stick to 25 with STARTTLS.
Post Reply