Cyrus with mac-restriction

[Patrick Boutilier]

On 06/16/2011 07:48 AM, Sebastian Hagedorn wrote:
>> Thanks for the reply. I need a specific system (mac address) only should
>> be able to use imap and pop service with the help of cyrus.
>
> That doesn't make it much clearer. You know that MAC addresses are only
> visible in a local subnet, right? Why don't you restrict access by IP
> address? I have a hard time imagining a reasonable scenario where what
> you ask for is necessary ... that's why I was asking what you're trying
> to achieve.
>
> To answer your original question, I don't think there is any mechanism
> that allows for restricting access based on MAC address. Certainly not
> within Cyrus, possibly using iptables or such.

Something like this should work.

iptables -I INPUT -p tcp -m mac ! --mac-source xx:xx:xx:xx:xx:xx -m 
multiport --dports 110,143 -j DROP


> --
> Sebastian Hagedorn - RZKR-R1 (Flachbau), Zi. 18, Robert-Koch-Str. 10
> Regionales Rechenzentrum (RRZK)
> Universität zu Köln / Cologne University - Tel. +49-221-478-5587
>
>
>
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/