Resolved Port 25 SMTP Nessus Scan Report

[Greg Sims]

We did a Nessus Scan of our server this evening. We have a couple of issues associated with port 25/tcp (smtp):

• 51192 - SSL Certificate Cannot Be Trusted
  
• 57582 - SSL Self-Signed Certificate

We have a wildcard certificate for the primary domain loaded onto the server. It is used two places in the panel:

• Tools & Settings => Security => SSL Certificates
• <primary domain> => SSL Certificates

What do I need to change to eliminate the Nessus Scan issues on port 25?

We are also seeing the following issues on port 443/tcp (https):

• 42873 - SSL Medium Strength Cipher Suites Supported
  
• 94437 - SSL 64-bit Block Size Cipher Suites Supported (SWEET32)

I'm not sure if this is a related problem.

Thank you, Greg

 

[UFHH01]

Hi Greg Sims,

What do I need to change to eliminate the Nessus Scan issues on port 25?

I recommend to upgrade to Plesk Onyx, where securing your mail - server can be done over the Plesk Control Panel ( => Securing Plesk and Mail Server ).


For postfix you might consider to modify:

smtpd_tls_CAfile = /LOCATION/OF/YOUR/CURRENT/WILDCARD_CA_PEM
smtpd_tls_key_file = /LOCATION/OF/YOUR/CURRENT/WILDCARD_KEY_PEM
smtpd_tls_cert_file = /LOCATION/OF/YOUR/CURRENT/WILDCARD_CERT_PEM

For qmail, pls. follow the Plesk 12 documentation at: => Installing an SSL Certificate for Qmail

For dovecot, pls consider to modify your dovecot.conf ( /etc/dovecot ):

ssl_cert = </LOCATION/OF/YOUR/CURRENT/WILDCARD_CERT_PEM
ssl_key = </LOCATION/OF/YOUR/CURRENT/WILDCARD_KEY_PEM
ssl_ca = </LOCATION/OF/YOUR/CURRENT/WILDCARD_CA_PEM

For Courier-IMAP, pls. follow the Plesk 12 documentation at: => Installing an SSL Certificate for Qmail

 

[IgorG]

I recommend to upgrade to [/SIZE]Plesk Onyx, where securing your mail - server can be done over the Plesk Control Panel ( => Securing Plesk and Mail Server ).

Just add a picture

 

[Greg Sims]

It is not possible for our to move to Plesk Onyx do to issues with mailman including PPPM-5476. Thank you for the Postfix configuration info UFHH01. Greg