Re: limiting pop access to gmail servers ?



> We have enabled POP so that certain people can pop their mail from us, and use
> gmail as their mail client.
>
> However, we have no other POP users ... and I don't want POP open to the whole
> world ...
>
> BUT, I suspect there are a LOT of possible IPs that google will use to pop mail
> from us ...


While not a "strong" solution, out-of-the box, I'd suggest in 
/etc/hosts.allow (probably after the "paranoid" line to make inetd check 
fwd/reverse match)

ALL : PARANOID : RFC931 20 : deny

assuming you use qpopper (change as required)

qpopper : .google.com : allow
qpopper : x.x.x.0/255.255.255.0 : allow       (your directly-connected users)
qpopper : all : deny


RossW
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"