Hi guys,

Im running a mail server and im hoping to get some insights on security. Its a cyrus ldap setup. There is no tls enabled but the firewall blocks access to mail directly. Instead a webmail client uses the mail server, both are on the same machine. The webmail site is accessed using https, ie ssl.
The setup sounds secure to me. What do you guys think?

CProgrammer

Is it fully patched and updated? Also, I don't think relying on the firewall is necessarily a good idea - I'd enable TLS just because I'm paranoid.

How long is your SSL key and did you self certify?