Block WAN email access for certain users

saxenak02 · 05-18-2013, 02:38 PM

Hi All,

We want to use a Mail server but have one weird requirement: we want to block employees from accessing emails from internet or on their mobiles (they should only be able to check/access emails within LAN). But admin staff should be able to access emails from internet,mobile and LAN.

Please let me know if its possible using Linux Mail solutions and if yes which one we should go for.

Regards and thanks in advance.

Kuldeep

kcleveland · 05-20-2013, 07:55 AM

The easiest way to do this would probably be to setup a separate http proxy at the edge and write some rules to check for and then block email-related requests from employees (products like bluecoat, zscaler, etc do this). I'm sure a real iptables guru could probably do it with iptables alone...

cbtshare · 05-20-2013, 01:18 PM

a simple solution would be to use TCP wrappers..so depending on your MDA, you would
(HOST_DENY)
DOVECOT: ALL EXCEPT LOCAL

saxenak02 · 05-21-2013, 04:40 AM

Thanks for the suggestions.
Am looking into IP tables as the moment.
http://www.cyberciti.biz/tips/block-...-iptables.html

I found this link and playing with different settings at the moment. I believe it should work by making 2 rule for one user 1 in INPUT chain and other in OUTPUT chain. (Please let me know if am wrong).

http://www.cyberciti.biz/tips/block-...-iptables.html

Thanks for all the support.. Will keep you all posted.