[RCU] Plugin to allow/block login based on IP country
Howdy, Is there any plugin to allow/deny login of the users, based on the source IP country information? Thank you, ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users
Re: [RCU] Plugin to allow/block login based on IP country
On 2021-08-21 02:36, Jorge Bastos wrote: Howdy, Is there any plugin to allow/deny login of the users, based on the source IP country information? What if someone needs to access their mail while they travel to a certain country? If there are people who you think should not log in, simply don't give those people accounts. ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users
Re: [RCU] Plugin to allow/block login based on IP country
Kax: It's not your place or mine to judge others operating methods, it's their network. Jorge: AFAIK, no, there is no plugin that works today, however there used to be a dnsbl module for apache, I've not used it in 10 years, since iptables is more resource happy, I think apache's mod_security used to have the capability once don't know if it still does. Be nice of there was was a working fast dnsbl plugin for apache though, use a countries based bl zone, would certainly remove about 15K entries CN from my iptables, however the servers are not affected by that at all... how kernel and netfilter guys/gals got it so right - when cisco flops out after mere hundreds of rules, however mikrotiks dont have that problem and thats the way we've been going in recent years On 22/08/2021 12:26, Kaz Kylheku wrote: On 2021-08-21 02:36, Jorge Bastos wrote: Howdy, Is there any plugin to allow/deny login of the users, based on the source IP country information? What if someone needs to access their mail while they travel to a certain country? If there are people who you think should not log in, simply don't give those people accounts. -- Regards, Noel Butler This Email, including attachments, may contain legally privileged information, therefore at all times remains confidential and subject to copyright protected under international law. You may not disseminate this message without the authors express written authority to do so. If you are not the intended recipient, please notify the sender then delete all copies of this message including attachments immediately. Confidentiality, copyright, and legal privilege are not waived or lost by reason of the mistaken delivery of this message.___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users
Re: [RCU] Plugin to allow/block login based on IP country
It's mine, thank you very much. On 2021-08-21 19:57, Noel Butler wrote: > Kax: > > It's not your place or mine to judge others operating methods, it's their > network. ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users
Re: [RCU] Plugin to allow/block login based on IP country
On 2021-08-21 11:36, Jorge Bastos wrote: Is there any plugin to allow/deny login of the users, based on the source IP country information? this should not be handled in roundcube, more better is iptables or dovecot allow_nets or weekforce policy server i self only WELCOME_LIST ips that is allowed, so for me there is not 15K deny list of abusing ips to keep in iptables low iptables foot print, and still no more abusers left here ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users
Re: [RCU] Plugin to allow/block login based on IP country
On 22/08/2021 17:21, Kaz Kylheku wrote: It's mine, thank you very much. On 2021-08-21 19:57, Noel Butler wrote: Kax: It's not your place or mine to judge others operating methods, it's their network. Really? then you admit ghosting on this list? Because OP is Jorge, so its his network not yours, he can run it how he sees fit -- Regards, Noel Butler This Email, including attachments, may contain legally privileged information, therefore at all times remains confidential and subject to copyright protected under international law. You may not disseminate this message without the authors express written authority to do so. If you are not the intended recipient, please notify the sender then delete all copies of this message including attachments immediately. Confidentiality, copyright, and legal privilege are not waived or lost by reason of the mistaken delivery of this message.___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users
Re: [RCU] Plugin to allow/block login based on IP country
On 2021-08-22 03:47, Noel Butler wrote: > On 22/08/2021 17:21, Kaz Kylheku wrote: > > It's mine, thank you very much. > > On 2021-08-21 19:57, Noel Butler wrote: > > Kax: > > It's not your place or mine to judge others operating methods, it's their > network. Really? then you admit ghosting on this list? Because OP is Jorge, so its his network not yours, he can run it how he sees fit Well, we have not confirmed whose network it is, but it can be assumed Jorge has charge of some aspects of it. He does not "see fit", unfortunately. The requirement that user should be able to get to an application login screen, but then be denied login based on country, is not sound. Jorge may be misunderstanding what the actual boss of the network really wants, like keeping out penetration attempts from certain problem countries. If you're not going to let users log in based on their IP address, then you might as well not allow their TCP./IP connection at all, which is handled at the firewall level, not in the webmail application. This can be a reasonable thing. If you have users traveling to those places, they know ahead of time, and arm them with a tested VPN configuration. ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users
Re: [RCU] Plugin to allow/block login based on IP country
On 23/08/2021 04:14, Kaz Kylheku wrote: It's not your place or mine to judge others operating methods, it's their network. Really? then you admit ghosting on this list? Because OP is Jorge, so its his network not yours, he can run it how he sees fit Well, we have not confirmed whose network it is, but it can be assumed Jorge has charge of some aspects of it. He doesnt have to confirm any damn thing. He does not "see fit", unfortunately. The requirement that user should be able to get to an application login screen, but then be denied login based on country, is not sound. If you're not going to let users log in based on their IP address, then you might as well not allow their TCP./IP connection at all, which is handled at the firewall level, not in the webmail application. Are you serious? or are you just trolling the list? you really cant be that stupid can you. blocking by IP's by DNSBL or by firewalls has been going on for decades, wake up and smell the coffee, some networks outright block IPs of certain countries who are known to be a safe haven for scriddies. Anyway why is it when someone asks about a plugin to do something, idiots like you generate noise to the lists crapping on about how bad that is dont do it blah blah F'n blah. perhaps you are part of the problem he's trying to solve.___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users
