Disable IMAP?

[Jeff75]

I do not want to run IMAP due to security reasons. I disabled it in "/etc/inetd.conf" and for some reason WHM/cPanel keeps trying to start it. It is not listed in my service manager list in WHM and I could not find anywhere to disable it.

Can somebody please tell me what I need to do to completely disable it?

cPanel.net Support Ticket Number:

[kcdworks]

Remember that if you disable IMAP, both HORDE and SquirrelMail will cease to function.

cPanel.net Support Ticket Number:

[Jeff75]

Do you know where the config file is for HORDE and SquirrelMail so I can change it to check the mail via POP instead of IMAP? Running IMAP makes the server a lot less secure and I'd like to keep it disabled.

cPanel.net Support Ticket Number:

[paint]

i don't know why you would want to disable imap and i don;t think you want webmail programs thru cpanel to check by pop becuase that means the e-mail will be deleted every time u check it from someone elses computer.

cPanel.net Support Ticket Number:

[kcdworks]

Originally posted by Jeff75
Running IMAP makes the server a lot less secure and I'd like to keep it disabled.

And what do you base that on?

cPanel.net Support Ticket Number:

[SupermanInNY]

Interesting that I'm meeting this subject just now,.. but nevertheless:

Using IMAP, you can easily use the client to browse the entire domain, comfortably look around, traverse up and down the entire tree,. read the email yours and of course everyone else within the same domain. Look further,.. see those passwd files you are so good at cracking using JtR software. Now... with the domain's owner password enjoy the luxury of doing whatever you feel like doing in that domain.

Aside from that,. I personally don't have anything to base it on. Do I need to?

The funny/sad thing is,.. it is much safer to give a user an FTP account than an email account.

[chirpy]

To stop cPanel restarting it, try removing the file:
/etc/chkserv.d/cpimap