On 27/08/2009 02:27, Nathan M wrote:
1. Ideal scenario. A config option which tells TLS to only respond on
certain IPs. In our case if a connection attempts to initiate TLS on
any IP address except 10.0.0.2, it would respond with no TLS support.
This would be ideal as we could continue running just a single dovecot
instance.
You could use your local flavour of firewall (iptables, ipfw, pf,
whatever) with a rule to pass inbound TCP to 10.0.0.2:993 and then a
following rule to drop all other inbound TCP to port 993 ?
Regards,
Jase.