[prev in list] [next in list] [prev in thread] [next in thread] 

List:       squirrelmail-plugins
Subject:    Re: [SM-PLUGINS] How limit access only from certain domains
From:       Paul Lesniewski <paul () squirrelmail ! org>
Date:       2009-02-11 4:39:12
Message-ID: 58191e420902102039j7824a2a2tc8c1e7e867297f17 () mail ! gmail ! com
[Download RAW message or body]

On Tue, Feb 10, 2009 at 5:50 PM, Frantisek Hanzlik <franta@hanzlici.cz> wrote:
> Paul Lesniewski wrote:
> > On Tue, Feb 10, 2009 at 4:19 PM, Frantisek Hanzlik<franta@hanzlici.cz>  wrote:
> > > Hi all,
> > > 
> > > I want restrict access to SM only from some domains and/or IP address
> > > blocks. Also I want disable access from IP's without record in reverse
> > > DNS (IP's which isn't resolvable to domain names).
> > > 
> > > I look on "lockout" plugin, but I'm not sure when I was understand its
> > > function and configuration, namely how set "lockout_table.php" (which
> > > probably may do what I need).
> > 
> > The lockout plugin is not meant to block SM access based on IP address
> > unless those IP addresses have been used to abuse the login page.  I
> > think what you want is this instead:
> > 
> > http://squirrelmail.org/plugin_view.php?id=259
> > 
> 
> > > May please anyone answer this:
> > > - How is possible access SM eg. only from domains ".org", ".com" and
> > > ".edu" AND from IP block 5.6.7.8/16, AND together with disable access
> > > from 2.3.4.64/27 or 1.2.3.4/24, AND disable acces from not resolvable
> > > IP's ?
> > > 
> > > - Is possible configure access to SM on per-user basis, eg. user1 and
> > > user2 has restriction set 1, user3 has restriction set 2, and rest of
> > > users has restriction set 3 ?
> > 
> > Look into the "service levels" functionality of the Login Manger plugin
> > 
> > > - if this requirements isn't solvable by lockout plugin, is there other
> > > way how satisfy them, eg. with other plugin or on HTTP server level?
> > > 
> > > I have squirrelmail-1.4.17 and apache-2.2.10.
> --
> 
> Paul,
> first, thank for quick answer.
> 
> I download vlogin "Login Manager" plugin, but I must find some time for
> install and understand him - it seems as big hammer, maybe even too big
> to my needs. And these needs I can reduce (e.g. block IP addresses on
> firewall, although it cannot be per-user, is may be sufficient).
> 
> Then what be enough for me would be:
> - disable access from IP's without reverse DNS record, for all users
> - for some users allow access only from one set of domains, eg .edu
> and .org
> - for rest of them allow access from any domain.
> 
> Then is it solvable yet with lockout plugin?

I already told you what that plugin is designed for.  I gave you a
link to a more appropriate plugin, although you will probably want to
enhance it for your requirements (please share with the
community/author when you are done).

> But as I wrote first,
> probably I did not understand how configure "lockout_table.php", partly
> due my bad English knowledge. Maybe some example would be welcomed.
> Or is lockout plugin totally unappropriate for this?
> His other features (access lock after several unsuccessful logins etc)
> are too useful for me

------------------------------------------------------------------------------
Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM)
software. With Adobe AIR, Ajax developers can use existing skills and code to
build responsive, highly engaging applications that combine the power of local
resources and data with the reach of the web. Download the Adobe AIR SDK and
Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com
-----
squirrelmail-plugins mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-plugins@lists.sourceforge.net
List archives: http://news.gmane.org/gmane.mail.squirrelmail.plugins
List info (subscribe/unsubscribe/change options): \
https://lists.sourceforge.net/lists/listinfo/squirrelmail-plugins


[prev in list] [next in list] [prev in thread] [next in thread]