{"id":922,"date":"2021-07-23T12:41:20","date_gmt":"2021-07-23T12:41:20","guid":{"rendered":"https:\/\/ssdsunucum.com\/blog\/mailserver-configuration\/"},"modified":"2021-07-23T12:41:20","modified_gmt":"2021-07-23T12:41:20","slug":"mailserver-configuration","status":"publish","type":"post","link":"https:\/\/ssdsunucum.com\/blog\/mailserver-configuration\/","title":{"rendered":"Mailserver Configuration"},"content":{"rendered":"<\/p>\n<div class=\"col-md-9\">\n<div class=\"flex-column flex-md-row article-header\">\n<div id=\"versioned-article-header\">\n<p class=\"valid-version-info\"><em>Valid for versions 94 through the latest version<\/em><\/p>\n<\/div>\n<div id=\"version-select-group\" aria-label=\"select versions\">\n<h4>Version:<\/h4>\n<h4>82<\/h4>\n<h4>86<\/h4>\n<h4>94<\/h4>\n<\/div><\/div>\n<hr>\n<h2 id=\"overview\">Overview<\/h2>\n<p>This interface allows you to configure the POP3 and IMAP protocols that the Dovecot mail servers use. You can access these settings when you run the Dovecot mail server.<\/p>\n<div class=\"callout callout-warning\">\n<div class=\"callout-heading\">Important:<\/div>\n<div class=\"callout-content\">\n<p>Email authentication requires a valid cPanel &#038; WHM license. If your license expires, mail delivery will continue to function. However, your mail client will <strong>not<\/strong> authenticate with the cPanel &#038; WHM server. You must renew your cPanel &#038; WHM license to reenable this service.<\/p>\n<\/p><\/div>\n<\/div>\n<h2 id=\"mailserver-configuration-settings\">Mailserver Configuration settings<\/h2>\n<p>Select the desired value for each setting. To save your changes, click <em>Save Changes<\/em>. To use a default configuration, click <em>Use Default Values<\/em>. To undo any changes, click <em>Reset Form<\/em>.<\/p>\n<h4 id=\"protocols-enabled\">Protocols Enabled<\/h4>\n<p>This allows you to select your desired protocols. To enable or disable a protocol, select the corresponding checkbox.<\/p>\n<div class=\"callout callout-info\">\n<div class=\"callout-heading\">Note:<\/div>\n<div class=\"callout-content\">\n<ul>\n<li>\n<p>You cannot disable Local Mail Transport Protocol (LMTP).<\/p>\n<\/li>\n<li>\n<p>If you do not select a setting, the system will operate in authentication-only mode.<\/p>\n<\/li>\n<li>\n<p>cPanel\u2019s <em>Webmail<\/em> feature requires that you enable the Internet Message Access Protocol (IMAP) protocol.<\/p>\n<\/li>\n<\/ul><\/div>\n<\/div>\n<p>This setting defaults to <em>IMAP<\/em>, <em>LMTP<\/em>, and <em>POP3<\/em>.<\/p>\n<h4 id=\"ipv6-enabled\">IPv6 Enabled<\/h4>\n<p>This allows you to enable Dovecot to listen for any IPv6 connection requests.<\/p>\n<p>This setting defaults to <em>enabled<\/em>.<\/p>\n<h4 id=\"allow-plaintext-authentication-from-remote-clients\">Allow Plaintext Authentication (from remote clients)_<\/h4>\n<p>This allows a remote mail client to authenticate without encryption.<\/p>\n<ul>\n<li>\n<p><em>Yes<\/em> \u2014 Do not enforce encryption.<\/p>\n<\/li>\n<li>\n<p><em>No<\/em> \u2014 Enforce encryption for connections that do not come from the local server.<\/p>\n<div class=\"callout callout-info\">\n<div class=\"callout-heading\">Note:<\/div>\n<div class=\"callout-content\">\n<p>Use this setting to enforce encryption for remote webmail logins. We recommend using this setting instead of disabling IMAP.<\/p>\n<\/p><\/div>\n<\/div>\n<\/li>\n<\/ul>\n<p>This setting defaults to <em>yes<\/em>.<\/p>\n<h4 id=\"ssl-cipher-list\">SSL Cipher List<\/h4>\n<p>A standard-format list of SSL ciphers. Dovecot uses this to connect to your server with the POP3 protocol. For more information, read OpenSSL\u2019s ciphers documentation.<\/p>\n<p>This setting defaults to a PCI-compliant SSL cipher.<\/p>\n<h4 id=\"ssl-minimum-protocol\">SSL Minimum Protocol<\/h4>\n<p>The list of SSL protocols that the mail server uses:<\/p>\n<ul>\n<li>\n<p>SSLv3<\/p>\n<\/li>\n<li>\n<p>TLSv1<\/p>\n<\/li>\n<li>\n<p>TLSv1.1<\/p>\n<\/li>\n<li>\n<p>TLSv1.2<\/p>\n<\/li>\n<\/ul>\n<div class=\"callout callout-warning\">\n<div class=\"callout-heading\">Important:<\/div>\n<div class=\"callout-content\">\n<p>cPanel &#038; WHM supports Transport Layer Security (TLS) protocol version 1.2 and Transport Layer Security (TLS) protocol version 1.3:<\/p>\n<ul>\n<li>cPanel &#038; WHM only supports TLSv1.2 or newer. The system enables TLSv1.2 by default.<\/li>\n<li>Not all clients will support TLSv1.3, which requires OpenSSL 1.1.1 or higher.<\/li>\n<\/ul><\/div>\n<\/div>\n<p>This setting defaults to <em>TLSv1.2<\/em>.<\/p>\n<h4 id=\"maximum-number-of-mail-processes\">Maximum Number of Mail Processes<\/h4>\n<p>The maximum number of mail processes that may run at one time.<\/p>\n<p>This setting defaults to <em>512<\/em>.<\/p>\n<h4 id=\"process-memory-limit-for-mail-mb\">Process Memory Limit for Mail (MB)<\/h4>\n<p>The maximum memory use of the IMAP and POP3 processes, in megabytes.<\/p>\n<div class=\"callout callout-info\">\n<div class=\"callout-heading\">Note:<\/div>\n<div class=\"callout-content\">\n<p>A high limit will not affect your server\u2019s performance. That is because the IMAP and POP3 processes mostly read memory-mapped files.<\/p>\n<\/p><\/div>\n<\/div>\n<p>This setting defaults to <em>512<\/em>.<\/p>\n<h4 id=\"idle-hibernate-timeout-seconds\">Idle Hibernate Timeout (Seconds)<\/h4>\n<p>The number of seconds to delay before moving users to the IMAP hibernate process. This setting will help save system memory.<\/p>\n<div class=\"callout callout-info\">\n<div class=\"callout-heading\">Note:<\/div>\n<div class=\"callout-content\">\n<p>A value of <code>0<\/code> disables this setting.<\/p>\n<\/p><\/div>\n<\/div>\n<p>This setting defaults to <em>30<\/em>.<\/p>\n<h4 id=\"maximum-imap-connections-per-ip-address\">Maximum IMAP Connections Per IP Address<\/h4>\n<p>The number of simultaneous IMAP connections that a single IP address can make at one time.<\/p>\n<div class=\"callout callout-info\">\n<div class=\"callout-heading\">Note:<\/div>\n<div class=\"callout-content\">\n<p>The system only applies this setting if you enabled an IMAP protocol.<\/p>\n<\/p><\/div>\n<\/div>\n<p>This setting defaults to <em>20<\/em>.<\/p>\n<h4 id=\"interval-between-imap-idle-ok-still-here-messages\">Interval between IMAP IDLE \u201cOK Still here\u201d messages<\/h4>\n<p>The number of minutes between <em>IMAP IDLE \u201cOK Still here\u201d<\/em> messages.<\/p>\n<div class=\"callout callout-info\">\n<div class=\"callout-heading\">Note:<\/div>\n<div class=\"callout-content\">\n<p>You can increase this value to help increase the battery life of some mobile clients.<\/p>\n<\/p><\/div>\n<\/div>\n<p>This setting defaults to <em>24<\/em>.<\/p>\n<h4 id=\"maximum-pop3-connections-per-ip-address\">Maximum POP3 Connections per IP Address<\/h4>\n<p>The number of simultaneous POP3 connections that a single IP address can make at one time.<\/p>\n<div class=\"callout callout-info\">\n<div class=\"callout-heading\">Note:<\/div>\n<div class=\"callout-content\">\n<p>The system only applies this setting if you enabled the POP3 protocol.<\/p>\n<\/p><\/div>\n<\/div>\n<p>This setting defaults to <em>3<\/em>.<\/p>\n<h4 id=\"number-of-spare-authentication-processes\">Number of Spare Authentication Processes<\/h4>\n<p>The total number of spare authentication processes the system runs. Dovecot uses the processes to listen for new connections.<\/p>\n<p>This setting defaults to <em>2<\/em>.<\/p>\n<h4 id=\"maximum-number-of-authentication-processes\">Maximum Number of Authentication Processes<\/h4>\n<p>The maximum number of authentication daemons the system allows to run at one time. Consider the needs of your mail server before you enter a value that is <strong>not<\/strong> the default value.<\/p>\n<div class=\"callout callout-info\">\n<div class=\"callout-heading\">Note:<\/div>\n<div class=\"callout-content\">\n<ul>\n<li>\n<p>If you set this to a high value, it may degrade your server\u2019s performance. A high number of these daemons can consume large amounts of system resources.<\/p>\n<\/li>\n<li>\n<p>If you set this to a low value, it may degrade your server\u2019s performance. This is because there are a lack of daemons to authenticate each session.<\/p>\n<\/li>\n<\/ul><\/div>\n<\/div>\n<p>This setting defaults to <em>50<\/em>.<\/p>\n<h4 id=\"process-memory-limit-for-authentication-mb\">Process Memory Limit for Authentication (MB)<\/h4>\n<p>The total amount of memory that the IMAP and POP3 authentication processes can use, in megabytes.<\/p>\n<p>This setting defaults to <em>128<\/em>.<\/p>\n<h4 id=\"size-of-authentication-cache-mb\">Size of Authentication Cache (MB)<\/h4>\n<p>The total amount of memory that the cache file can use, in megabytes. This file caches validated logins. This allows the mail server to retrieve mail multiple times before it must check login credentials again.<\/p>\n<div class=\"callout callout-info\">\n<div class=\"callout-heading\">Note:<\/div>\n<div class=\"callout-content\">\n<p>This value cannot exceed four characters. This includes the required <code>M<\/code> character (for example, <code>100M<\/code>).<\/p>\n<\/p><\/div>\n<\/div>\n<p>This setting defaults to <em>1M<\/em>.<\/p>\n<h4 id=\"time-to-cache-successful-logins\">Time to Cache Successful Logins<\/h4>\n<p>The amount of time, in seconds, that the cache file stores successful login records.<\/p>\n<div class=\"callout callout-info\">\n<div class=\"callout-heading\">Note:<\/div>\n<div class=\"callout-content\">\n<p>When you reduce this value, it can increase the load of the authentication server. However, a lower value can help to prevent issues when updating passwords.<\/p>\n<\/p><\/div>\n<\/div>\n<p>This setting defaults to <em>3600<\/em>.<\/p>\n<h4 id=\"time-to-cache-failed-logins\">Time to Cache Failed Logins<\/h4>\n<p>The amount of time, in seconds, that the cache file stores a failed login attempt\u2019s record.<\/p>\n<div class=\"callout callout-info\">\n<div class=\"callout-heading\">Note:<\/div>\n<div class=\"callout-content\">\n<p>When you reduce this value, it can increase the load of the authentication server. However, a lower value can help to prevent issues when updating passwords.<\/p>\n<\/p><\/div>\n<\/div>\n<p>This setting defaults to <em>3600<\/em>.<\/p>\n<h4 id=\"use-new-authentication-process-for-each-connection\">Use New Authentication Process for Each Connection<\/h4>\n<p>Whether to use a new login processes for each new POP3 or IMAP connection. Enable this to improve Dovecot\u2019s authentication security.<\/p>\n<div class=\"callout callout-warning\">\n<div class=\"callout-heading\">Important:<\/div>\n<div class=\"callout-content\">\n<p>Use caution if you select the <em>Yes<\/em> setting. This can significantly reduce the performance of a heavily-loaded server.<\/p>\n<\/p><\/div>\n<\/div>\n<p>This setting defaults to <em>No<\/em>.<\/p>\n<h4 id=\"process-memory-limit-config-mb\">Process Memory Limit: config (MB)<\/h4>\n<p>The maximum memory Dovecot\u2019s internal <code>config<\/code> service uses, in megabytes. Each SSL\/TLS certificate that Dovecot tracks require additional memory. Increase this value for servers with many domains. This will help to ensure that Dovecot runs correctly.<\/p>\n<div class=\"callout callout-info\">\n<div class=\"callout-heading\">Note:<\/div>\n<div class=\"callout-content\">\n<ul>\n<li>We recommend that you set this value to at least <code>512<\/code>.<\/li>\n<li>This value cannot be lower than <code>128<\/code>.<\/li>\n<\/ul><\/div>\n<\/div>\n<p>This setting defaults to <em>2048<\/em>.<\/p>\n<h4 id=\"idle-check-interval\">Idle Check Interval<\/h4>\n<p>The amount of time, in seconds, between updates to idle IMAP connections.<\/p>\n<div class=\"callout callout-info\">\n<div class=\"callout-heading\">Note:<\/div>\n<div class=\"callout-content\">\n<ul>\n<li>\n<p>We recommend that you use the default setting (<code>30<\/code> seconds).<\/p>\n<\/li>\n<li>\n<p>Lowering this value causes idle clients to see new messages faster. However, a lower value may also slightly increase your server load.<\/p>\n<\/li>\n<\/ul><\/div>\n<\/div>\n<p>This setting defaults to <em>30<\/em>.<\/p>\n<h4 id=\"include-trash-in-quota\">Include Trash in Quota<\/h4>\n<p>Whether the system counts mail in the <em>Trash<\/em> folder against a user\u2019s quota.<\/p>\n<div class=\"callout callout-info\">\n<div class=\"callout-heading\">Note:<\/div>\n<div class=\"callout-content\">\n<p>When you adjust this setting, the system does not update existing quotas. You <strong>must<\/strong> run the following command as the <code>root<\/code> user to recalculate existing quotas:<\/p>\n<div class=\"highlight\">\n<pre style=\"color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4\"><code class=\"language-BASH\" data-lang=\"BASH\">\/usr\/local\/cpanel\/scripts\/generate_maildirsize --allaccounts --confirm<\/code><\/pre>\n<\/div><\/div>\n<\/div>\n<p>This setting defaults to <em>disabled<\/em>.<\/p>\n<h4 id=\"compress-messages\">Compress Messages<\/h4>\n<p>This allows the system to compress recently created and delivered messages. This can help you to manage your server\u2019s disk space. You can access the compressed messages via Dovecot\u2019s mdbox format.<\/p>\n<div class=\"callout callout-info\">\n<div class=\"callout-heading\">Note:<\/div>\n<div class=\"callout-content\">\n<p>The system will only compress messages after you enable this setting. It does <strong>not<\/strong> compress existing messages.<\/p>\n<\/p><\/div>\n<\/div>\n<p>This setting defaults to <em>disabled<\/em>.<\/p>\n<h4 id=\"compression-level\">Compression Level<\/h4>\n<p>The compression level at which to save messages. The system uses this setting when you enable the <em>Compress Messages<\/em> setting. Enter an integer between <code>0<\/code> and <code>9<\/code>, where <code>0<\/code> is the default compression level and <code>9<\/code> is the highest compression level. For more information, read zlib.net\u2019s Compression documentation.<\/p>\n<p>This setting defaults to <em>6<\/em>.<\/p>\n<h4 id=\"auto-expunge-trash\">Auto Expunge Trash<\/h4>\n<p>This allows the system to delete messages in the <em>Trash<\/em> folder after a certain number of days. The number of days is the value that you define in the <em>Trash Expire Time<\/em> setting.<\/p>\n<div class=\"callout callout-info\">\n<div class=\"callout-heading\">Note:<\/div>\n<div class=\"callout-content\">\n<p>This setting only deletes messages in the <em>Trash<\/em> folder after you enable it. For example, if you enable this setting on April 1st, the system won\u2019t delete any messages older than April 1st.<\/p>\n<\/p><\/div>\n<\/div>\n<p>This setting defaults to <em>disabled<\/em>.<\/p>\n<h4 id=\"trash-expire-time\">Trash Expire Time<\/h4>\n<p>The total number of days that the mail server stores messages in the <em>Trash<\/em> folder. The system will delete any messages that exceed this value.<\/p>\n<div class=\"callout callout-info\">\n<div class=\"callout-heading\">Note:<\/div>\n<div class=\"callout-content\">\n<p>This setting requires that you enable the <em>Auto Expunge Trash<\/em> setting.<\/p>\n<\/p><\/div>\n<\/div>\n<p>This setting defaults to <em>30<\/em>.<\/p>\n<h4 id=\"mdbox-rotation-size-mb\">MDBOX rotation size (MB)<\/h4>\n<p>The maximum size of an mdbox mailbox file, in megabytes, before the system rotates it.<\/p>\n<div class=\"callout callout-info\">\n<div class=\"callout-heading\">Note:<\/div>\n<div class=\"callout-content\">\n<p>The value that you enter cannot exceed four characters. This includes the required <code>M<\/code> character (for example, <code>100M<\/code>).<\/p>\n<\/p><\/div>\n<\/div>\n<p>This setting defaults to <em>10M<\/em>.<\/p>\n<h4 id=\"mdbox-rotation-interval-weeks-or-days\">MDBOX rotation interval (Weeks or Days)<\/h4>\n<p>The total time, in weeks or days, that an mdbox mailbox file may exist before the system rotates it. Enter a value that consists of a positive integer and the letter <code>w<\/code> for weeks or the letter <code>d<\/code> for days. For example, <code>2w<\/code> represents a two week rotation interval.<\/p>\n<div class=\"callout callout-info\">\n<div class=\"callout-heading\">Note:<\/div>\n<div class=\"callout-content\">\n<ul>\n<li>\n<p>A <code>0<\/code> value disables the time-based rotation of the mdbox mailbox files.<\/p>\n<\/li>\n<li>\n<p>The value that you enter cannot exceed nine characters. This includes the required <code>w<\/code> (weeks) or <code>d<\/code> (days) character.<\/p>\n<\/li>\n<\/ul><\/div>\n<\/div>\n<p>This setting defaults to <em>0<\/em>.<\/p>\n<h4 id=\"disk-quota-delivery-failure-response\">Disk Quota Delivery Failure Response<\/h4>\n<p>How Dovecot responds when there is a system or mailbox disk quota preventing message delivery:<\/p>\n<ul>\n<li>\n<p><em>Reject the message permanently.<\/em> \u2014 Reject the message and return it to the sender.<\/p>\n<\/li>\n<li>\n<p><em>Defer delivery temporarily.<\/em> \u2014 This setting allows a user to reduce their disk use to receive a message. For example, they can free disk space or increase disk quota before the system attempts to deliver the message again.<\/p>\n<\/li>\n<\/ul>\n<p>This setting defaults to <em>Reject the message permanently<\/em>.<\/p>\n<h4 id=\"minimum-available-lmtp-processes\">Minimum Available LMTP Processes<\/h4>\n<p>The minimum number of processes that the system attempts to reserve in order to accept more client connections. A <code>0<\/code> value only starts the LMTP server as needed. A <code>0<\/code> value for this setting also helps the system conserve memory.<\/p>\n<p>This setting defaults to <em>0<\/em>.<\/p>\n<h4 id=\"lmtp-process-limit\">LMTP Process Limit<\/h4>\n<p>The total number of LMTP server processes the system allows.<\/p>\n<p>This setting defaults to <em>500<\/em>.<\/p>\n<h4 id=\"lmtp-user-concurrency-limit\">LMTP User Concurrency Limit<\/h4>\n<p>This limits the total number of concurrent LMTP deliveries per user.<\/p>\n<div class=\"callout callout-info\">\n<div class=\"callout-heading\">Note:<\/div>\n<div class=\"callout-content\">\n<p>A value of <code>0<\/code> disables the per-user limit.<\/p>\n<\/p><\/div>\n<\/div>\n<p>This setting defaults to <em>4<\/em>.<\/p>\n<h2 id=\"add-dovecot-settings\">Add Dovecot settings<\/h2>\n<p>You can add custom settings to configure the Dovecot mail server.<\/p>\n<div class=\"callout callout-warning\">\n<div class=\"callout-heading\">Important:<\/div>\n<div class=\"callout-content\">\n        When a new release of Dovecot is available, you may need to recreate any customized configuration files based on the new default configuration files.\n    <\/div>\n<\/div>\n<h4 id=\"the-dovecot-conf-file\">The dovecot.conf file<\/h4>\n<p>The system uses the <code>\/etc\/dovecot\/dovecot.conf<\/code> file to initialize the Dovecot service with the settings you define. It also applies any of your custom settings globally. You can configure these custom settings in WHM\u2019s <em>Mailsever Configuration<\/em> interface (<em>WHM &gt;&gt; Home &gt;&gt; Service Configuration &gt;&gt; Mailsever Configuration<\/em>). By default, this file uses the template in the <code>\/var\/cpanel\/templates\/dovecot2.3\/main.default<\/code> file.<\/p>\n<div class=\"callout callout-warning\">\n<div class=\"callout-heading\">Important:<\/div>\n<div class=\"callout-content\">\n<p>Using this custom template applies any changes to <strong>all<\/strong> of your server\u2019s accounts.<\/p>\n<\/p><\/div>\n<\/div>\n<p>To create a custom template for this file, perform the following steps:<\/p>\n<ol>\n<li>\n<p>Copy the <code>\/var\/cpanel\/templates\/dovecot2.3\/main.default<\/code> file to the <code>\/var\/cpanel\/templates\/dovecot2.3\/main.local<\/code> file. This ensures that the system will <strong>not<\/strong> overwrite your changes when Dovecot updates during the cPanel &#038; WHM update (<code>upcp<\/code>) process.<\/p>\n<\/li>\n<li>\n<p>Open the <code>\/var\/cpanel\/templates\/dovecot2.3\/main.local<\/code> file with a text editor.<\/p>\n<\/li>\n<li>\n<p>Edit the file to reflect your desired settings. For example:\n<\/p>\n<div class=\"highlight\">\n<pre style=\"color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4\"><code class=\"language-BASH\" data-lang=\"BASH\">login_trusted_networks: <span style=\"color:#ae81ff\">192<\/span>.168.1.0\/24<\/code><\/pre>\n<\/div>\n<\/li>\n<li>\n<p>Save your changes to the file.<\/p>\n<\/li>\n<li>\n<p>Rebuild the Dovecot mail server with the <code>\/usr\/local\/cpanel\/scripts\/builddovecotconf<\/code> script. This applies the new configuration settings from the <code>\/var\/cpanel\/templates\/dovecot2.3\/main.local<\/code> file.<\/p>\n<\/li>\n<li>\n<p>Restart the Dovecot mail server with the <code>\/usr\/local\/cpanel\/scripts\/restartsrv_dovecot<\/code> script.<\/p>\n<\/li>\n<\/ol>\n<div class=\"callout callout-info\">\n<div class=\"callout-heading\">Note:<\/div>\n<div class=\"callout-content\">\n<p>The <code>maildir_very_dirty_syncs<\/code> setting may prevent users from viewing new mail notifications in subscribed folders. This setting defaults to <code>yes<\/code>. To change this setting to <code>no<\/code>, follow the instructions above to create a custom template.<\/p>\n<\/p><\/div>\n<\/div>\n<h4 id=\"the-sni-conf-file\">The sni.conf file<\/h4>\n<p>The system uses the <code>\/etc\/dovecot\/sni.conf<\/code> file to define the SSL-capable domains that Dovecot service uses. This file only applies these changes to the defined domains. It does not make any global changes.<\/p>\n<p>To create a custom template for this file, perform the following steps:<\/p>\n<ol>\n<li>\n<p>Copy the <code>\/var\/cpanel\/templates\/dovecotSNI\/main.default<\/code> to the <code>\/var\/cpanel\/templates\/dovecotSNI\/main.local<\/code> file. This ensures that the system will not overwrite your changes when cPanel &#038; WHM updates.<\/p>\n<\/li>\n<li>\n<p>Open the <code>\/var\/cpanel\/templates\/dovecotSNI\/main.local<\/code> file with a text editor.<\/p>\n<\/li>\n<li>\n<p>Add the following text to the end of the file:\n<\/p>\n<div class=\"highlight\">\n<div style=\"color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4\">\n<table style=\"border-spacing:0;padding:0;margin:0;border:0;width:auto;overflow:auto;display:block;\">\n<tr>\n<td style=\"vertical-align:top;padding:0;margin:0;border:0;\">\n<pre style=\"color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4\"><code class=\"language-GO\" data-lang=\"GO\"><span style=\"margin-right:0.4em;padding:0 0.4em 0 0.4em;color:#7f7f7f\">1\n<\/span><span style=\"margin-right:0.4em;padding:0 0.4em 0 0.4em;color:#7f7f7f\">2\n<\/span><span style=\"margin-right:0.4em;padding:0 0.4em 0 0.4em;color:#7f7f7f\">3\n<\/span><span style=\"margin-right:0.4em;padding:0 0.4em 0 0.4em;color:#7f7f7f\">4\n<\/span><\/code><\/pre>\n<\/td>\n<td style=\"vertical-align:top;padding:0;margin:0;border:0;;width:100%\">\n<pre style=\"color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4\"><code class=\"language-GO\" data-lang=\"GO\"><span style=\"color:#a6e22e\">local_name<\/span> <span style=\"color:#e6db74\">\"\"<\/span> {\n  <span style=\"color:#a6e22e\">ssl_cert<\/span> = &lt;\n  <span style=\"color:#a6e22e\">ssl_key<\/span> = &lt;\n}<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n<\/li>\n<li>\n<p>In the <code>local_name<\/code> field, enter the new domain\u2019s name. For example:\n<\/p>\n<div class=\"highlight\">\n<pre style=\"color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4\"><code class=\"language-BASH\" data-lang=\"BASH\">local_name <span style=\"color:#e6db74\">\"example.com\"<\/span> <span style=\"color:#f92672\">{<\/span><\/code><\/pre>\n<\/div>\n<\/li>\n<li>\n<p>In the <code>ssl_cert<\/code> field, enter the full path of the new domain\u2019s SSL certificate file. For example:\n<\/p>\n<div class=\"highlight\">\n<pre style=\"color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4\"><code class=\"language-BASH\" data-lang=\"BASH\">ssl_cert <span style=\"color:#f92672\">=<\/span> &lt;\/path\/to\/ssl_crt_file\/example.com.crt<\/code><\/pre>\n<\/div>\n<\/li>\n<li>\n<p>In the <code>ssl_key<\/code> field, add the full path of the new domain\u2019s SSL certificate\u2019s private key file. For example:\n<\/p>\n<div class=\"highlight\">\n<pre style=\"color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4\"><code class=\"language-BASH\" data-lang=\"BASH\">ssl_key <span style=\"color:#f92672\">=<\/span> &lt;\/path\/to\/ssl_privatekey_file\/example.com.key<\/code><\/pre>\n<\/div>\n<\/li>\n<li>\n<p>Save your changes to the file.<\/p>\n<\/li>\n<li>\n<p>Rebuild the Dovecot mail server with the <code>\/usr\/local\/cpanel\/scripts\/builddovecotconf<\/code> script. This applies the new configuration settings from the <code>\/var\/cpanel\/templates\/dovecotSNI\/main.local<\/code> file.<\/p>\n<\/li>\n<li>\n<p>Restart the Dovecot mail server with the <code>\/usr\/local\/cpanel\/scripts\/restartsrv_dovecot<\/code> script.<\/p>\n<\/li>\n<\/ol>\n<h4 id=\"the-ssl-conf-file\">The ssl.conf file<\/h4>\n<p>The system uses the <code>\/etc\/dovecot\/ssl.conf<\/code> file to store SSL settings that the Dovecot uses. It also applies any of your custom settings globally. You can configure most these custom settings in WHM\u2019s <em>Mailsever Configuration<\/em> interface (<em>WHM &gt;&gt; Home &gt;&gt; Service Configuration &gt;&gt; Mailsever Configuration<\/em>). By default, this file uses the template in the <code>\/var\/cpanel\/templates\/dovecotSSL\/main.default<\/code> file.<\/p>\n<div class=\"callout callout-warning\">\n<div class=\"callout-heading\">Important:<\/div>\n<div class=\"callout-content\">\n<p>Using this custom template applies any changes to <strong>all<\/strong> of your server\u2019s accounts.<\/p>\n<\/p><\/div>\n<\/div>\n<p>To create a custom template for this file, perform the following steps:<\/p>\n<ol>\n<li>\n<p>Copy the <code>\/var\/cpanel\/templates\/dovecotSSL\/main.default<\/code> file to the <code>\/var\/cpanel\/templates\/dovecotSSL\/main.local<\/code> file. This ensures that the system will <strong>not<\/strong> overwrite your changes when Dovecot updates during the cPanel &#038; WHM update (<code>upcp<\/code>) process.<\/p>\n<\/li>\n<li>\n<p>Open the <code>\/var\/cpanel\/templates\/dovecotSSL\/main.local<\/code> file with a text editor.<\/p>\n<\/li>\n<li>\n<p>Edit the file to reflect your desired settings. For example:\n<\/p>\n<div class=\"highlight\">\n<pre style=\"color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4\"><code class=\"language-BASH\" data-lang=\"BASH\">ssl_prefer_server_ciphers <span style=\"color:#f92672\">=<\/span> no<\/code><\/pre>\n<\/div>\n<\/li>\n<li>\n<p>Save your changes to the file.<\/p>\n<\/li>\n<li>\n<p>Rebuild the Dovecot mail server with the <code>\/usr\/local\/cpanel\/scripts\/builddovecotconf<\/code> script. This applies the new configuration settings from the <code>\/var\/cpanel\/templates\/dovecotSSL\/main.local<\/code> file.<\/p>\n<\/li>\n<li>\n<p>Restart the Dovecot mail server with the <code>\/usr\/local\/cpanel\/scripts\/restartsrv_dovecot<\/code> script.<\/p>\n<\/li>\n<\/ol><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Valid for versions 94 through the latest version Version: 82 86 94 Overview This interface allows you to configure the POP3 and IMAP protocols that the Dovecot mail servers use. You can access these settings when you run the Dovecot mail server. Important: Email authentication requires a valid cPanel &#038; WHM license. If your license &hellip;<\/p>\n","protected":false},"author":1,"featured_media":923,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts\/922"}],"collection":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/comments?post=922"}],"version-history":[{"count":0,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts\/922\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/media\/923"}],"wp:attachment":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/media?parent=922"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/categories?post=922"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/tags?post=922"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}