Rob Maidment: > On 31 May 2016 at 17:21, Viktor Dukhovni <postfix-us...@dukhovni.org> wrote: > > > > The Dovecot SASL backend has access to the client's IP address, > > but I don't know whether it sees that early enough to supply Postfix > > with a client-dependent mechanism list, nor whether Dovecot has the > > feature you're looking for. > > The Cyrus backend also has access to the client's IP address - it > looks like it is possible to write a Cyrus plug-in that behaves > differently for different clients. However it seems Postfix does not > pass the client IP address through the SASL API so I think it is a > non-starter. From xsasl_cyrus_server.c (3.1.1):
Now would be a good time to update the SASL client code. Until two weeks ago, the Postfix SMTP server knew its own server IP address only for connections handled by postscreen and HaProxy, not for connections handled directly by the Postfix SMTP daemon. Wietse