Disable auth on port 25

[CrazyByte]

Hi
I have a issue when enable
"Require clients to connect with SSL or issue the STARTTLS command before they are allowed to authenticate with the server. "
if I understand this option disable plain text login on port 25, but after enabled, but is possible anyway to login on port 25 in plain text.

Is possible to disable completely login on port 25?

 

[cPanelAnthony]

Hello! You could close port 25 in your firewall, but please keep in mind that most MTAs will receive over port 25 even if you don't send using it; so it is recommended you don't block the port completely if you need to send email from the server.

Why do you need port 25 locked down exactly?

 

[CrazyByte]

I want keep open the port 25 but not users to login without tls or ssl.
I new in cpanel but in other server for security reason the port 25 is open for delivery but not for user login.
in exim is possible to do but editing exim.conf but is a temporary solution.

 

[cPanelAnthony]

I'm not sure of a way to lock down this port in a way this specific, but perhaps other users here can chime in.

 

[HostNoc]

HI

The option you are looking for is found under the Security tab in WHM >> Exim Configuration Manager >> Basic Editor:

Require clients to connect with SSL or issue the STARTTLS command before they are allowed to authenticate with the server

But this option will significantly decrease the security of the server by allowing the plaintext transmission of authentication credentials.

Regards
HostNoc

 

[cPanelAnthony]

HI

The option you are looking for is found under the Security tab in WHM >> Exim Configuration Manager >> Basic Editor:

Require clients to connect with SSL or issue the STARTTLS command before they are allowed to authenticate with the server

But this option will significantly decrease the security of the server by allowing the plaintext transmission of authentication credentials.

Regards
HostNoc

Thanks! I misread the request as wanting port 25 logins of any kind disabled!