Re: controlling STARTTLS by IP address

[Aki Tuomi]

On 15.07.2016 00:52, Michael Fox wrote:
You could try

remote x.x.x.x/y {
    ssl = no
}

Aki
Wow.  OK.  But I can find no documentation on how to use that.

Would it be used inside service pop3-login, or at the top level?

And, does it apply the first match found?  For example:

   # Disable SSL for radio clients
   remote 192.168.1.0/24 {
       ssl = no
   }
   # Allow SSL for internal clients
   remote 192.168.0.0/16 {
       ssl = yes
   }
   # Require SSL for all others
   remote 0.0.0.0/0 {
       ssl = required
   }

Thanks,
Michael

You can leave the last bit off. Not sure about the ordering, but you'll 
find out by testing? =)

Aki