Configure TLS in Postfix and Dovecot

From version 2.3 onwards Postfix supports multiple accounts for sending mail. This can be useful in private or SOHO environments, when mailaccounts from different ISPs are used on the same postfix server.

date: 08/21/2008

This HowTo describes the setup of a Gentoo based spam and virus filtering mailgateway. This server is meant to run in front of the servers keeping the mail accounts i.e. Zarafa, Lotus Notes or Microsoft Exchange.
The MTA is postfix which will listen on port 25 for inbound mail. Recieved mails are forwarded to amavisd-new on port 10024. Amavisd-new filters the mail for virii and spam before passing it back to Postfix on port 10025 for final delivery.
In this Setup ClamAV is used for virusscans, if a virus is found the mail is discarded or optional quarantined, if no virus is found the mail first runs through dspam and afterwards through Spamassassin for antispam. dspam gets better detection rates than SpamAssassin's Bayes filter, it writes it's headers which will then be scored by SpamAssassin together with some other tests.

We don't want to do cleartext authentication against a POP3 or IMAP server and fetch the e-mail unencrypted.

Fetchmail will be configured for ssl to encrypt the communication to the corresponding server.