I have Postfix and Courier IMAP with mail users authenticated against MySQL 
tables using Cyrus SASL libraries.  Authentication goes via the courier 
authdaemond against a MySQL postfix_users table containing virtual 
user/password/mailbox combinations.  I set this up years ago following what 
appears to be a well used tutorial found in many places including:
http://www.phparchitecture.com/howto_show.php?id=2

Everything works fine and has done for years but I am now struggling with a 
new security requirement.

The mail server sits on a public IP address outside the office network.

I would like to set up *some* user ids/passwords to *only* be able to 
connect from a given static IP address.

Specifically, the office internet gateway is on a single static IP address 
and so I would like any mail user ids/passwords in use within the office 
walls to only work within the office walls i.e. from the single static IP 
address.

There will still be other user ids and passwords that will be able to 
connect from any IP address i.e. to allow remote access to potentially the 
same mailbox, but these user ids will only be known to those users requiring 
remote access.

i.e. All I really want to be able to do is add a client ip address field to 
the postfix_users MySQL table that if completed will only allow that user 
id/password to connect from the stated client ip address.

Current postfix_users table structure found here:
http://www.marlow.dk/site.php/tech/postfix

I am sure I can't be the first person with this requirement but I have 
searched everywhere for a possible implementation and can't find anything so 
will be really grateful if anyone out there can tell me how.  Thanks 



-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
_______________________________________________
Courier-imap mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-imap

Reply via email to