6

How do I configure the Dovecot message delivery agent to only allow imap connections from localhost?

Caleb
  • 11,583
  • 4
  • 35
  • 49
linus1412
  • 355
  • 1
  • 3
  • 6

2 Answers2

9

The listen = addr:port config is deprecated in newer versions of dovecot. The new way of doing things is with service { inet_listener imap { address = ... } }.

On my system it's in /etc/dovecot/conf.d/10-master.conf:

service imap-login {
  inet_listener imap {
    address = 127.0.0.1
  }
}
mgalgs
  • 345
  • 2
  • 9
  • It's strange, this is supposed to be the new way to configure but my server just ignores the 'address' restriction in 10-master.conf, while another answer from year-2011 using simplistic dovecot.conf finally resolved my need... – Van Jone Sep 10 '19 at 15:04
6

It's probably easiest to just listen only on localhost:

protocol imap {
    listen = 127.0.0.1:143
    ssl_listen = 127.0.0.1:993
}
Cakemox
  • 24,141
  • 6
  • 41
  • 67