-----Original Message----- From: dovecot-bounces+rventura=h-st.com@dovecot.org [mailto:dovecot-bounces+rventura=h-st.com@dovecot.org] On Behalf Of Simone Caruso Sent: Tuesday, January 11, 2011 12:18 PM To: dovecot@dovecot.org Subject: Re: [Dovecot] Denying authentication

             What I would like to know is if there is any way that 

I could deny access for users trying to access email via cellphones or email clients outside the company. I can close everything since there are a few users that need to get emails from outside the company via cell phone of email clients.

             I was thinking if there was a way to lets say create 

a group in AD named: "remote-email" that will allow connection and authentication from any network, any user not in that group will only be able to authenticate if the source is 192.168.xx.xx/24.

Is this possible?

Read this: http://wiki1.dovecot.org/PasswordDatabase/ExtraFields/AllowNets

-- Simone Caruso IT Consultant p.iva: 03045250838

Yeah, but again. There are certain users that will need to access their email from outside our local networks. This would work for half of what I would like to accomplish, the other half: "allow authentication for remote users as long as they belong to certain LDAP group" or something similar is what I am more interested on.

Any thoughts?

Thanks

On Tue, Jan 11, 2011 at 01:10:54PM -0600, Romer Ventura wrote:

-----Original Message----- From: dovecot-bounces+rventura=h-st.com@dovecot.org [mailto:dovecot-bounces+rventura=h-st.com@dovecot.org] On Behalf Of Simone Caruso Sent: Tuesday, January 11, 2011 12:18 PM To: dovecot@dovecot.org Subject: Re: [Dovecot] Denying authentication

...

             What I would like to know is if there is any way that 

I could deny access for users trying to access email via cellphones or email clients outside the company. I can close everything since there are a few users that need to get emails from outside the company via cell phone of email clients.

             I was thinking if there was a way to lets say create 

a group in AD named: "remote-email" that will allow connection and authentication from any network, any user not in that group will only be able to authenticate if the source is 192.168.xx.xx/24.

Is this possible?

Read this: http://wiki1.dovecot.org/PasswordDatabase/ExtraFields/AllowNets

-- Simone Caruso IT Consultant p.iva: 03045250838

Yeah, but again. There are certain users that will need to access their email from outside our local networks. This would work for half of what I would like to accomplish, the other half: "allow authentication for remote users as long as they belong to certain LDAP group" or something similar is what I am more interested on.

You can give any extra field on a per user basis.

Also read here: http://wiki1.dovecot.org/PasswordDatabase/ExtraFields

Dennis