Whitelist IP ranges

maxileith

Hello there,

is it possible to whitelist certain IP ranges? I want to only allow to connect to my Mailserver from certain countries. The whitelist should apply for everything user related. So connecting to HTTP, SMTP, IMAP, Sieve or POP with mailcow as a user.

Of course the mailserver should still be able to send and receive mails from / to any Mailserver on the planet.

esackbauer

I would suggest you do that with a proper firewall which was designed for such use cases in front of mailcow, but not with mailcow itself.
I locked myself already out of my mailcow, because I forgot to enable the country I was visiting…
And now imagine your users doing travel…

Since that time I do no more country blocking. I use abuseipdb.com as described here:
https://community.mailcow.email/d/4527-massive-bruteforce-attacke-seit-wochen/141