Securing POP3 IMAP mail server

[Curtis129]

Hey guys,
I want to start allowing my members to create their own email "username@warezthegfx.com".

But before i even attempt to make a move like this, i want to fully down pack my mail server, make sure it cant be easily targeted.

So i just wanted some help in what steps i should take to get the mail pretty secure.
Thanks for anyone who helps

Curtis129 Reviewed by Curtis129 on 27th Jul 2009. Securing POP3 IMAP mail server Hey guys, I want to start allowing my members to create their own email "username@warezthegfx.com". But before i even attempt to make a move like this, i want to fully down pack my mail server, make sure it cant be easily targeted. So i just wanted some help in what steps i should take to get the mail pretty secure. <3 Thanks for anyone who helps Rating: 5

[Viz0n]

Are you using Dovecot, Courier, or another service?

[Curtis129]

To be honest, i dont know.
Its just the IMAP POP3 mail servers that are from cPanel by default i think.
Squirrelmail is installed on the server by default with cPanel.

[JmZ]

cpanel probably uses dovecot (POP3/IMAP) and sendmail or postfix (SMTP).

[Crucify]

@Curtis
since ur on wrzhost, ur one and mine should be similar.

it uses dovecot for my DirectAdmin

[Curtis129]

Ok

So we know what we are dealing with, how do we secure it?

[Crucify]

enable SSL for ur IMAP & POP3. wrzhost has their own SSL certificate, u cud just ask them or u cud just signup for OpenSSL (free)

[Curtis129]

How does having a ssl certificate help secure the server from hacks?

[Curtis129]

Sorry for bumping, but http://www.dovecot.org/security.html

From what i can read, nothing "exploitable" has been found yet.. Just need to clarify if im using dovecot, and is it as safe as it appears?

[JmZ]

The only thing you can really do is use SSL and/or TLS on your connections.

So your SMTP port (sendmail) would not be SSL and would not require a valid user.
Your POP3/IMAP ports (dovecot) would be SSL/TLS and would require the login of a valid user.

All can be done in the config files and such, google for a tutorial there are plenty.