[Web-cyradm] how to implement only secure connections from external IPs

[lkolchin]

Hello All,

My current configuration enables to all IPs to connect through IMAP using PLAIN/SSL/TLS.

I want my users which having external IPs to be able to connect through IMAP using only TLS/SSL (so there is only secure connection for external IPs).

All my local network IPs are real (i.e. can be accessed from the internet).

 

Anyone have any ideas how to implement only secure connections from external IPs?

 

My current cyrus.conf below:

 

# UNIX sockets start with a slash and are put into /var/lib/imap/socket
SERVICES {
  imap          cmd="imapd" listen="212.70.41.18:imap" prefork=0
  imaplocal     cmd="imapd -C /etc/imapd-local.conf" listen="127.0.0.1:imap" prefork=0
  imaps         cmd="imapd -s" listen="212.70.41.18:imaps" prefork=0
  imapslocal    cmd="imapd -C /etc/imapd-local.conf" listen="127.0.0.1:imaps" prefork=0
  pop3          cmd="pop3d" listen="pop3" prefork=0
  pop3s         cmd="pop3d -s" listen="pop3s" prefork=0
  sieve         cmd="timsieved" listen="212.70.41.18:sieve" prefork=0

 

  # at least one LMTP is required for delivery
#  lmtp         cmd="lmtpd" listen="lmtp" prefork=0
  lmtpunix      cmd="lmtpd" listen="/var/lib/imap/socket/lmtp" prefork=0

 

  # this is only necessary if using notifications
#  notify       cmd="notifyd" listen="/var/lib/imap/socket/notify" proto="udp" prefork=1
}

 

Leon

_______________________________________________
This mailing list is hosted and supported
by bit-heads GmbH | http://www.bit-heads.ch

_______________________________________________
Web-cyradm mailing list
Web-cyradm@web-cyradm.org
http://www.web-cyradm.org/mailman/listinfo/web-cyradm