nixCraft

ravis007 · #1 (**permalink**) 10-30-2009, 04:52 PM

Hi,
Is it possible in Linux to restrict POP3 or IMAP for particular users.
I need a confirmation on this, that it is possible or not in Linux.
Please reply
Thanks in advance

nixcraft · #2 (**permalink**) 10-30-2009, 05:19 PM

Yes, with the help of PAM or server itself it is possible to take or give access to certain services.

ravis007 · #3 (**permalink**) 10-30-2009, 05:58 PM

Thanks for your reply
Can you tell me how this could be done with PAM.
Will you please give configuration guide for "restricting particular users for POP3 or IMAP".
Please help....

nixcraft · #4 (**permalink**) 10-31-2009, 06:59 PM

Create a file called /etc/deny.mailusers and add user to block:

Code:

vivek
sam
ram

Cd to /etc/pam.d/ and find out your pop3/imap server file and add the following line

Code:

auth required /lib/security/pam_listfile.so onerr=fail item=user sense=deny file=/etc/deny.mailusers

And you are done. See the following example which explains the same for OpenSSH SSHD server:

Linux PAM configuration that allows or deny login via the sshd server

ravis007 · #5 (**permalink**) 11-02-2009, 10:44 AM

Thanks for your reply.
I have done as you have told.

I have created a file /etc/deny.mailusers and added users test, xyz in it to block.
Also I have edited /etc/pam.d/pop3 and added a line given by you as :

auth required /lib/security/pam_listfile.so onerr=succeed item=user sense=deny file=/etc/deny.mailusers

But after doing this,

When I try to configure POP3 account of "test" user in my outlook, then it is working fine instead of giving errors.

As per the requirement, it has to give error while configuring POP3 account of blocked users test, xyz.

Am I right in doing above all procedure, if not then please guide me to correct it.

Waiting for your reply.
Thank You

nixcraft · #6 (**permalink**) 11-02-2009, 02:09 PM

User can configure it but not able to download any emails. Have you tried to download anything? Do you see any error or warning in /var/log/messages, /var/log/secure and /var/log/maillog while downloading email for blocked user accounts?

ravis007 · #7 (**permalink**) 11-02-2009, 03:59 PM

It is not working.
I am able to configure the pop3 account of the blocked users and can download the mails also.

Configuration is working, is ok but at least it has to give error while downloading the mails.

The logs files are not giving the valid information related to this.
I am confused, what to do now.

Please help...

ravis007 · #8 (**permalink**) 11-03-2009, 12:11 PM

I have also configured pop3 & imap daemons as /usr/sbin/ipop3d & /usr/sbin/imapd.

Now I have created the same files /etc/pam.d/pop3 with the required content
and /etc/deny.mailusers containing the users to block.

Is there any more configuration is needed or this is sufficient.

If all above is OK, then it has to work.

Please suggest....

ritesh.yeole@gmail.com · #9 (**permalink**) 11-15-2009, 03:40 PM

Hi Ravi,

try the following:
create /etc/imap.deny and /etc/pop.deny user
copy the user name to respective file to block the port for this user.
And add the following in dovecot.conf file as

Code:

passdb passwd-file {
  args = /etc/dovecot/deny.%Ls <- dovecot path
  deny = yes
}

this will definitely solve your problem.

ravis007 · #10 (**permalink**) 11-19-2009, 03:11 PM

Yes
I solved this.
Now I can restrict users for pop3 or imap in linux using dovecot.
Thank you so much for your help.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
List Services Linux Running	raj	Getting started tutorials	8	10-04-2009 07:07 AM
Linux / UNIX pop3 and imap Protocols	varunkant	Linux software	1	07-07-2008 03:49 PM
dovecot: pop3-login: pop3-login: error while loading shared libraries: libsepol.so.1	raj	Mail Servers	1	11-15-2007 10:43 AM
How to restrict devices usage for users in Solaris?	kitty@sad	Solaris/OpenSolaris	3	05-21-2007 02:05 PM
how to restrict lan users so that they cannot send	bhagi123	Linux software	2	11-21-2006 11:38 AM

nixCraft

Linux Restrict POP3 or IMAP Services To Particular Users Only

[Solved] Linux Restrict POP3 or IMAP Services To Particular Users Only

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Similar Threads