# Imap proxy

**URL:** <https://www.ruby-forum.com/t/imap-proxy/237908>\
**Category:** NGINX\
**Created:** [December 5, 2013, 4:51pm UTC](https://www.ruby-forum.com/t/imap-proxy/237908 "2013-12-05T16:51:39Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![musicdenotation](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/m/ea666f/32.png) [@musicdenotation](https://www.ruby-forum.com/u/musicdenotation)\
**Post date:** [December 5, 2013, 4:51pm UTC](https://www.ruby-forum.com/t/imap-proxy/237908/1 "2013-12-05T16:51:39Z")

</div>

Hello Everyone,  
Is mail imap proxy supports SSL or STARTTLS for connections to backend  
server ?

Slava.

Posted at Nginx Forum:

> **[Imap proxy](https://forum.nginx.org/read.php?2,245255,245255#msg-245255)**
>
> Hello Everyone, Is mail imap proxy supports SSL or STARTTLS for connections to backend server ? Slava.

---

<div class="post-metadata">

**Author:** ![volga629](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/v/94ad74/32.png) [@volga629](https://www.ruby-forum.com/u/volga629)\
**Post date:** [December 5, 2013, 5:18pm UTC](https://www.ruby-forum.com/t/imap-proxy/237908/2 "2013-12-05T17:18:31Z")

</div>

Hello!

On Thu, Dec 05, 2013 at 10:51:04AM -0500, volga629 wrote:

> Hello Everyone,  
> Is mail imap proxy supports SSL or STARTTLS for connections to backend  
> server ?

No. SSL/STARTTLS is only supported for client connections. Backend  
network is assumed to be non-hostile.

–  
Maxim D.  
[http://nginx.org/en/donation.html](http://nginx.org/en/donation.html)

---

<div class="post-metadata">

**Author:** ![volga629](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/v/94ad74/32.png) [@volga629](https://www.ruby-forum.com/u/volga629)\
**Post date:** [December 5, 2013, 6:03pm UTC](https://www.ruby-forum.com/t/imap-proxy/237908/3 "2013-12-05T18:03:30Z")

</div>

Hello Maxim,  
Thank you for answer.  
When user connect to proxy with SSL on backend it get destibuted in  
clear  
text ? If final server is DR server which another part of the world,  
there  
a lot of places to sniff traffic for plain 143. Is no really big sense  
to  
use proxy for services located on same physical server.

Posted at Nginx Forum:

> **[Re: Imap proxy](https://forum.nginx.org/read.php?2,245255,245257#msg-245257)**
>
> Hello Everyone, Is mail imap proxy supports SSL or STARTTLS for connections to backend server ? Slava.

---

<div class="post-metadata">

**Author:** ![volga629](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/v/94ad74/32.png) [@volga629](https://www.ruby-forum.com/u/volga629)\
**Post date:** [December 6, 2013, 12:49am UTC](https://www.ruby-forum.com/t/imap-proxy/237908/4 "2013-12-06T00:49:36Z")

</div>

Hello!

On Thu, Dec 05, 2013 at 12:02:44PM -0500, volga629 wrote:

> Hello Maxim,  
> Thank you for answer.  
> When user connect to proxy with SSL on backend it get destibuted in clear  
> text ? If final server is DR server which another part of the world, there  
> a lot of places to sniff traffic for plain 143. Is no really big sense to  
> use proxy for services located on same physical server.

The imap proxy is to route clients to different backend servers in  
a big farm, typically sitting on the same non-hostile network with  
the proxy.

If for some reason you are using backends in another part of the  
world over a public internet and want traffic to be encrypted, you  
may use a VPN or a secure tunnel for this.

–  
Maxim D.  
[http://nginx.org/en/donation.html](http://nginx.org/en/donation.html)

---

<div class="post-metadata">

**Author:** ![volga629](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/v/94ad74/32.png) [@volga629](https://www.ruby-forum.com/u/volga629)\
**Post date:** [December 11, 2013, 7:13pm UTC](https://www.ruby-forum.com/t/imap-proxy/237908/5 "2013-12-11T19:13:01Z")

</div>

Hello Maxim,  
Usually is normal setup of EOip tunnels though transport ipsec  
(transparent  
lan). And from security prospective the most bigger threat is coming  
from  
inside. Outside intrusion possible, but it match more complicated.  
I confirm that plain 143 proxy working good. I just wonder about this  
message.

2013/12/05 00:05:40 [error] 20003#0: \*1 auth http server 127.0.0.1:80  
did  
not send server or port while in http auth state, client: 10.12.130.102,  
server: 0.0.0.0:993, login: “testuser1”

Posted at Nginx Forum:

> **[Re: Imap proxy](https://forum.nginx.org/read.php?2,245255,245442#msg-245442)**
>
> Hello Everyone, Is mail imap proxy supports SSL or STARTTLS for connections to backend server ? Slava.

---

<div class="post-metadata">

**Author:** ![volga629](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/v/94ad74/32.png) [@volga629](https://www.ruby-forum.com/u/volga629)\
**Post date:** [December 11, 2013, 9:30pm UTC](https://www.ruby-forum.com/t/imap-proxy/237908/6 "2013-12-11T21:30:52Z")

</div>

Hello!

On Wed, Dec 11, 2013 at 01:12:26PM -0500, volga629 wrote:

> Hello Maxim,  
> Usually is normal setup of EOip tunnels though transport ipsec (transparent  
> lan). And from security prospective the most bigger threat is coming from  
> inside. Outside intrusion possible, but it match more complicated.  
> I confirm that plain 143 proxy working good. I just wonder about this  
> message.
> 
> 2013/12/05 00:05:40 [error] 20003#0: \*1 auth http server 127.0.0.1:80 did  
> not send server or port while in http auth state, client: 10.12.130.102,  
> server: 0.0.0.0:993, login: “testuser1”

The message means that auth script failed to properly respond to  
auth\_http request, see here for details:

[http://nginx.org/en/docs/mail/ngx\_mail\_auth\_http\_module.html#protocol](http://nginx.org/en/docs/mail/ngx_mail_auth_http_module.html#protocol)

–  
Maxim D.  
[http://nginx.org/](http://nginx.org/)
