limit user access to certain IP addresses?
Michael Menge
michael.menge at zdv.uni-tuebingen.de
Mon Aug 18 08:52:55 EDT 2008
Hi,
I tried this some thime ago with pam, but without a success.
SASL does not pass the ip-addres to PAM so you can't use pam_access,
nor can you change/configure the PAM service name to run an other
instance of cyrus using an other pam configuration.
You may have success by running too instances of cyrus, one listening
on 127.0.0.1 and one on your normal IP und using different
sasl_options in your imapd.conf configurations
Quoting Tomasz Chmielewski <mangoo at wpkg.org>:
> It it possible to limit POP3/IMAP access for chosen users only to
> certain IP addresses?
>
> For example, I'd like to allow some users only access from 127.0.0.1
> (or, Squirrelmail running on the same address as Cyrus); those users
> shouldn't have public access to POP3/IMAP from the whole Internet.
>
> At the same time, though, I would like to allow access for some other
> users via POP3/IMAP as well.
>
>
> Is it somehow possible with Cyrus? If it is, it would be great if it
> could be used to limit access to SMTP as well. As SMTP is different than
> what Cyrus does, this would perhaps suggest some additional PAM library?
>
> Any ideas?
>
>
> --
> Tomasz Chmielewski
> http://wpkg.org
> ----
> Cyrus Home Page: http://cyrusimap.web.cmu.edu/
> Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
>
--------------------------------------------------------------------------------
M.Menge Tel.: (49) 7071/29-70316
Universitaet Tuebingen Fax.: (49) 7071/29-5912
Zentrum fuer Datenverarbeitung mail:
michael.menge at zdv.uni-tuebingen.de
Waechterstrasse 76
72074 Tuebingen
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5339 bytes
Desc: S/MIME krytographische Unterschrift
Url : http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20080818/466ad5b5/attachment.bin
More information about the Info-cyrus
mailing list