Hello John,

> 1) run 2 instances of imapd
> 2) proxy server http://www.vergenet.net/linux/perdition/
> 3) Patching to pass source IP address to courier-authdaemon...
>
>> There have been patches posted to this list several times in the past
>> which pass the source IP address to courier-authdaemon, and therefore
>> allow the auth module to apply the authorisation policy you require.
>> This may be more acceptable, if you don't mind moving away from the
>> standard courier source tree.
>>
> If the 3 options I prefer the idea of a patch if I am able to get my head
> around how to convert an existing patch to allow me to add a source_ip
> column to my MySQL postfix_users table.
>
> I don't expect you to do the digging for me, but if you are able to track 
> it
> down then I would appreciate a link. I have spent the last hour searching
> through the mail archives and although I can find another post from you 
> that
> refers to a patch I can't for the life of me find the previous patches
> submitted.
>
> Any chance of this functionality being incorporated into the official 
> source
> tree anytime soon?  Although only a handful of people may have raised this
> requirement on this mailing list I can't help but feel it would be useful 
> to
> many implementations.  I appreciate that the information passed to
> authdaemon is no doubt kept to a mininimum to reduce the risk of 
> introducing
> security holes, but I do think this would be a useful patch to the 
> official
> source tree.  Whilst I accept that access controls that incorporate IP
> address rules may be relatively weak and open to spoofing, I do think that
> the ability to use source IP address in conjunction with userid/password 
> for
> finer grain access control would be a valuable feature.
>
I would also be happy to be able to use such a feature as described in 3. I 
have splitted the servers to different hosts to get the things done (is 
something like version 1 but much less work if you have vmware server 
running)

But how ever courier and postfix are great.

Marco 


-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
_______________________________________________
Courier-imap mailing list
Courier-imap@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-imap

Reply via email to