<![CDATA[Limit IMAP access]]>Hello! Is there any way to limit access to IMAP, to ensure that only limited IPs (from the office) can fetch the e-mail?

Any approach would be fine, really 😃

]]>https://forum.cloudron.io/topic/4972/limit-imap-accessRSS for NodeSun, 09 Aug 2026 06:51:56 GMTMon, 26 Apr 2021 11:57:03 GMT60<![CDATA[Reply to Limit IMAP access on Wed, 13 Oct 2021 17:25:14 GMT]]>@fbartels I do believe you.

]]>https://forum.cloudron.io/post/37690https://forum.cloudron.io/post/37690Wed, 13 Oct 2021 17:25:14 GMT<![CDATA[Reply to Limit IMAP access on Wed, 13 Oct 2021 15:18:45 GMT]]>@potemkin_ai believe it or not. My daytime job is building a "mail server" and I have not heard a single customer come up with such a requirement. Therefore I was curious of your intentions.

For us customers either put their system directly accessible to the internet, or if that is not desired make it only accessible over vpn. (with stuff like 2fa, or ssl client certificates for web access, but imap is quite backwards in that sense).

It also does not look like "client access rules" for Exchange Online cover imap connections: https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/client-access-rules/client-access-rules

]]>https://forum.cloudron.io/post/37679https://forum.cloudron.io/post/37679Wed, 13 Oct 2021 15:18:45 GMT<![CDATA[Reply to Limit IMAP access on Tue, 12 Oct 2021 14:28:33 GMT]]>@fbartels I'm not exactly afraid of something; but limiting the IPs allowed to collect mail from is a valid business requirement for a cloud office.

]]>https://forum.cloudron.io/post/37653https://forum.cloudron.io/post/37653Tue, 12 Oct 2021 14:28:33 GMT<![CDATA[Reply to Limit IMAP access on Tue, 12 Oct 2021 10:37:31 GMT]]>@potemkin_ai said in Limit IMAP access:

nginx, apache, ssh, etc?

But these are not imap/mail servers. For webservers it kind of makes sense, since most website do not require authentication and you may want to host something that is only available "internally". ssh I can understand as well, allow some users access from the internet, but others (that have elevated privileges) only from known location.

Personally this just feels like a strange feature to me (in regards to a mail server). If you are afraid of password security, then there is a push towards "modern authentication" in the industry in the last years, this then uses tokens for login instead of passwords and the way to retrieve the initial token for the client could be locked behind 2fa for example.

To be fair there seems to be a feature around this in Dovecot:
https://wiki.dovecot.org/PasswordDatabase/ExtraFields/AllowNets

]]>https://forum.cloudron.io/post/37647https://forum.cloudron.io/post/37647Tue, 12 Oct 2021 10:37:31 GMT<![CDATA[Reply to Limit IMAP access on Mon, 11 Oct 2021 20:34:49 GMT]]>@fbartels nginx, apache, ssh, etc?

]]>https://forum.cloudron.io/post/37624https://forum.cloudron.io/post/37624Mon, 11 Oct 2021 20:34:49 GMT<![CDATA[Reply to Limit IMAP access on Mon, 11 Oct 2021 20:33:42 GMT]]>@girish thank you!!

]]>https://forum.cloudron.io/post/37623https://forum.cloudron.io/post/37623Mon, 11 Oct 2021 20:33:42 GMT<![CDATA[Reply to Limit IMAP access on Mon, 11 Oct 2021 18:41:49 GMT]]>@potemkin_ai said in Limit IMAP access:

That't usually a thing in most of the modern servers, isn't it the case here?

Do you have an example for this claim?

]]>https://forum.cloudron.io/post/37620https://forum.cloudron.io/post/37620Mon, 11 Oct 2021 18:41:49 GMT<![CDATA[Reply to Limit IMAP access on Mon, 11 Oct 2021 17:36:44 GMT]]>@potemkin_ai that seems more doable. Will look into it.

]]>https://forum.cloudron.io/post/37614https://forum.cloudron.io/post/37614Mon, 11 Oct 2021 17:36:44 GMT<![CDATA[Reply to Limit IMAP access on Mon, 11 Oct 2021 17:21:43 GMT]]>@girish I'm not looking for a custom firewall rules, but an IMAP server level allowed IP range. That't usually a thing in most of the modern servers, isn't it the case here?

]]>https://forum.cloudron.io/post/37612https://forum.cloudron.io/post/37612Mon, 11 Oct 2021 17:21:43 GMT<![CDATA[Reply to Limit IMAP access on Thu, 07 Oct 2021 16:24:36 GMT]]>@potemkin_ai ah, i see. I think developing a firewall to block specific ports+IP will have to wait for a future release. Atleast, not in the coming one.

]]>https://forum.cloudron.io/post/37427https://forum.cloudron.io/post/37427Thu, 07 Oct 2021 16:24:36 GMT<![CDATA[Reply to Limit IMAP access on Thu, 07 Oct 2021 16:19:13 GMT]]>@girish yep, we discussed that 🙂
I can't, unfortunately, not all of the cloud providers have that covered...

]]>https://forum.cloudron.io/post/37425https://forum.cloudron.io/post/37425Thu, 07 Oct 2021 16:19:13 GMT<![CDATA[Reply to Limit IMAP access on Thu, 07 Oct 2021 15:53:56 GMT]]>@potemkin_ai Can you not block this currently in your cloud firewall? If you are hosting in the Cloud, pretty much all cloud providers have a way to block port 993 at IP level.

]]>https://forum.cloudron.io/post/37423https://forum.cloudron.io/post/37423Thu, 07 Oct 2021 15:53:56 GMT<![CDATA[Reply to Limit IMAP access on Thu, 07 Oct 2021 10:11:30 GMT]]>@girish any updates here?

]]>https://forum.cloudron.io/post/37406https://forum.cloudron.io/post/37406Thu, 07 Oct 2021 10:11:30 GMT<![CDATA[Reply to Limit IMAP access on Fri, 30 Apr 2021 13:23:11 GMT]]>@girish thank you, subscribed. Desperately looking forward for the mail access restriction in 6.3, wish you a nice smooth release! 😊

]]>https://forum.cloudron.io/post/30589https://forum.cloudron.io/post/30589Fri, 30 Apr 2021 13:23:11 GMT<![CDATA[Reply to Limit IMAP access on Wed, 28 Apr 2021 17:54:57 GMT]]>@potemkin_ai We will have a better idea later this week or early next week for sure. I will post an update in the 6.3 thread - https://forum.cloudron.io/topic/4723/what-s-coming-in-cloudron-6-3

]]>https://forum.cloudron.io/post/30513https://forum.cloudron.io/post/30513Wed, 28 Apr 2021 17:54:57 GMT<![CDATA[Reply to Limit IMAP access on Wed, 28 Apr 2021 16:22:12 GMT]]>@potemkin_ai There's another pit stop before 6.3. Please see this post for more details: https://forum.cloudron.io/topic/4721/cloudron-6-2-released/12

]]>https://forum.cloudron.io/post/30508https://forum.cloudron.io/post/30508Wed, 28 Apr 2021 16:22:12 GMT<![CDATA[Reply to Limit IMAP access on Wed, 28 Apr 2021 13:18:33 GMT]]>@girish got it, thank you! Any time estimate for 6.3?

]]>https://forum.cloudron.io/post/30498https://forum.cloudron.io/post/30498Wed, 28 Apr 2021 13:18:33 GMT<![CDATA[Reply to Limit IMAP access on Mon, 26 Apr 2021 19:29:09 GMT]]>@potemkin_ai We don't have a way to do this out of the box but I am looking into various security stuff for the coming release 6.3 and hope to have an answer soon. I will move this to feature requests.

]]>https://forum.cloudron.io/post/30401https://forum.cloudron.io/post/30401Mon, 26 Apr 2021 19:29:09 GMT