<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
allow_nets with `local,127.0.0.1/32` defined, should do the trick - this assumes you don’t have any webmail running on the same host, since that would still allow authentication.
<div class=""><br class="">
</div>
<div class=""><a href="https://doc.dovecot.org/configuration_manual/authentication/allow_nets/" class="">https://doc.dovecot.org/configuration_manual/authentication/allow_nets/</a> </div>
<div class=""><br class="">
</div>
<div class="">I use allow_nets to “suspend” user logins, but allow LMTP to continue to function for example.<br class="">
<div><br class="">
<blockquote type="cite" class="">
<div class="">On 1 Jun 2022, at 13:40, <a href="mailto:lutz.niederer@gmx.net" class="">
lutz.niederer@gmx.net</a> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div class="">Hi,<br class="">
<br class="">
we have a very simple user-/passdb (like passwd) to authenticate virtual IMAP users.<br class="">
We also use this for Postfix authentication. Nothing special.<br class="">
<br class="">
But, we need to exclude some of the users from IMAP login.<br class="">
This means, some users should be allowed to send mail via Postfix (submission) and therefore<br class="">
authenticate via SASL against dovecot successfully, but they should not be allowed to login<br class="">
to their IMAP mail box.<br class="">
<br class="">
How could this be done?<br class="">
<br class="">
Thanks!<br class="">
-lutzn<br class="">
<br class="">
<br class="">
</div>
</div>
</blockquote>
</div>
<br class="">
</div>
</body>
</html>