Re: [Dovecot] Dovecot's as ip/user based login filter?

On Mon, 2006-04-10 at 11:44 +0300, Sysadmin wrote:

Hello.

I'm facing a problem, I need to give access to internal mailserer for some people only, but can't figure out how to do it. Opening the 993 port for whole word gives access to everyone who have account.

Can Dovecot act as login filter or etc for that purpose. Or does anybody have idea how to do it?

Dovecot 1.0beta4 and newer support "allow_nets" field userdb. So with SQL you'd do eg.:

select uid, gid, home, allow_nets from users where username = '%u'

where allow_nets contains something like: 192.168.0.0/24,10.0.0.0/8

Or the same is possible with passwd-file, etc.