Hi Chris,

I copied new surgemail binary but I don't see ssl_require_login option 
per vdomain. I also tried to search withouth sucess.
Or I just add that property in surgemail.ini and reload?

What about g_ssl_require_login
Do I clear that setting and add ssl_require_login for each vdomain 
except for one which I will migrate?
And this parameter is per vdomain or per IP?

Can you just clarify so I don't do mistake or wrong assumptions.

Regards,
Darko Bazulj

On 12/16/2013 8:40 PM, surgemail-support wrote:
> HEre is a binary, use the new domain level setting ssl_require_login
> instead to do what you want.
> http://netwinsite.com/ftp/misc/v1.zip
>      ChrisP.
>
>     Hi,
>     I'm on windows 2008 R2 SP1 x64.
>     Regards,
>     Darko Bazulj
>     On 12/16/2013 2:22 AM, surgemail-support wrote:
>
>         Ahh I understand your issue now. No sorry it doesn't have such a
>         setting. Yes we can add one, what platform are you on.
>         ChrisP.
>         Hi,
>         g_ssl_require_login - check source IP and I don't know from where
>         all client will connect or from which ISP.
>         I tried to exclude local surgemail IP on list but I got error as
>         expected because source address is checked.
>         After pass POP3 statement I get error
>         pass PASSWORD
>         -ERR SSL required for ip (213.191.158.158)
>         quit
>         +OK closing connection
>         This is why I've idea to put domain on dedicated IP and somehow to
>         disable g_ssl_require_login check on that IP during transition
>         phase.
>         If this feature doesn't exist is it possible to implement it?
>         Regards,
>         Darko Bazulj
>         On 12/15/2013 8:15 PM, surgemail-support wrote:
>         Just extend this setting (using numbers and wild cards... e.g.
>         to add
>         10.1.2.* )
>         g_ssl_require_login *,!127.0.0.1,!10.1.2.*
>         ChrisP.
>         Hi,
>         I have several IPs on machine.
>         Only SSL access is enabled for client access.
>         g_ssl_require_login *,!127.0.0.1
>         g_ssl_allow "*"
>         g_ssl_allow_imap "*"
>         g_ssl_require_web "TRUE"
>         g_ssl_try_out "*"
>         g_ssl_disable_sslv2 "TRUE"
>         g_ssl_sha1_sign "TRUE"
>         I have to move client with ~2000 users.
>         For his domain I will setup dedicated IP.
>         Can I somehow exclude that local IP from forcing/checking for SSL?
>         I can't control source IPs from where they will be accessing this
>         mail system.
>         We need this for transition phase.
>         Maybe I'm missing some option like
>         g_ssl_exclude_local_ip
>         Regards,
>         Darko Bazulj
>