Since I didn't find this in other posts, would it be possible to change the default firewall settings to: - disable/remove webmin (port 10000) as not everyone is using it anyway - add IMAP, POP3-SSL and IMAP-SSL settings, to be consistent with having the POP3 rule
It's one of the first things I do after a new install, but still, would it not make sense to apply these as part of the installation process? In my opinion it makes the whole installation more out-of-the-box.