Forum: NGINX nginx mail starttls ip based

Hello,

 I'm new in nginx world. I would like to configure a single nginx server
to proxy imap/pop servers with starttls option.

I would like that the "starttls" could be "on" on a list of known safe 
IPs
and "only" on other IPs. Using the same listen port and protocol.

Could you tell me how to achieve this?
Maybe, is there a way to set the starttls in auth phase?

For instance, let suppose  I have configured this:

  server {
    listen     110;
    protocol   pop3;
    starttls   on;
    proxy      on;
  }

  server {
    listen     110;
    protocol   pop3;
    starttls    only;
    proxy       on;
  }

I would select first or second server block using Client-IP header.
Is it possible?

Thanks a lot.
Best Regards
Marco

Hello!

On Tue, Dec 11, 2012 at 10:14:05AM +0000, Marco wrote:

>
>     listen     110;
>     protocol   pop3;
>     starttls    only;
>     proxy       on;
>   }
>
> I would select first or second server block using Client-IP header.
> Is it possible?

No.  Either use "starttls only" for all clients, or configure
different servers on different ip addresses/ports.

--
Maxim Dounin
http://nginx.com/support.html