• Hi, Pleskians! We are running a UX testing of our upcoming product intended for server management and monitoring.
    We would like to invite you to have a call with us and have some fun checking our prototype. The agenda is pretty simple - we bring new design and some scenarios that you need to walk through and succeed. We will be watching and taking insights for further development of the design.
    If you would like to participate, please use this link to book a meeting. We will sent the link to the clickable prototype at the meeting.
  • Our UX team believes in the in the power of direct feedback and would like to invite you to participate in interviews, tests, and surveys.
    To stay in the loop and never miss an opportunity to share your thoughts, please subscribe to our UX research program. If you were previously part of the Plesk UX research program, please re-subscribe to continue receiving our invitations.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.

Question "Block email submissions except from one IP."

maverik23

New Pleskian
Server operating system version
ubuntu 20.04
Plesk version and microupdate number
18.0.59
Hello, I'm facing the following issue.
I need all the email accounts on the server to only allow login if they are from a specific IP address, except for 3 accounts that can login from any IP.

How can I achieve this?
I tried modifying the blacklists.db but couldn't succeed.
 
You could use the Plesk Firewall extension for it, e.g. deny all traffic for ports 993, 995, 110, 143 but for your one IP address. You can add more rules allowing specific IP addresses to pass (by changing the order of the rules, e.g. first allow what you want to allow, then block all that's left).
 
Ok, I'm still trying with the configurations
Now I have the following configuration in main.cf


Code:
smtpd_client_restrictions =
    check_client_access hash:/etc/postfix/client_access

smtpd_recipient_restrictions =
    permit_mynetworks,
    permit_sasl_authenticated,
    reject_unauth_destination

smtpd_sasl_authenticated_header = yes

and in client_access
Code:


I ask because I am not an expert in servers and there are things I don't understand.
I don't know if that configuration does what I need or not.
 
Back
Top