Cyrus with mac-restriction

Patrick Boutilier boutilpj at
Thu Jun 16 06:56:20 EDT 2011

On 06/16/2011 07:48 AM, Sebastian Hagedorn wrote:
>> Thanks for the reply. I need a specific system (mac address) only should
>> be able to use imap and pop service with the help of cyrus.
> That doesn't make it much clearer. You know that MAC addresses are only
> visible in a local subnet, right? Why don't you restrict access by IP
> address? I have a hard time imagining a reasonable scenario where what
> you ask for is necessary ... that's why I was asking what you're trying
> to achieve.
> To answer your original question, I don't think there is any mechanism
> that allows for restricting access based on MAC address. Certainly not
> within Cyrus, possibly using iptables or such.

Something like this should work.

iptables -I INPUT -p tcp -m mac ! --mac-source xx:xx:xx:xx:xx:xx -m 
multiport --dports 110,143 -j DROP

> --
> Sebastian Hagedorn - RZKR-R1 (Flachbau), Zi. 18, Robert-Koch-Str. 10
> Regionales Rechenzentrum (RRZK)
> Universität zu Köln / Cologne University - Tel. +49-221-478-5587
> ----
> Cyrus Home Page:
> List Archives/Info:

More information about the Info-cyrus mailing list