Oh!  Thanks, that looks perfect. 

I looked at that earlier, but I didn't get that one could put IP addresses in there too.

-Troy

yes there is a mechanism to do that

 

g_access_group group="kidgloves" access_smtp="10..*,192.*" access_imap="10.*,192.*" (etc)

 

And then make the users in question members of that group, I think that would work the way you want.

 

ChrisP.

 

 

 

I have a few users that seems to respond any phishing email that comes their way.

 

Is there a way to limit a user's login to a range of IP addresses?

 

g_hacker_poison would work, if it can ignore login from g_relay_allow_ip.

 

If not, I can throw together a rule for these users in fail2ban, I suppose. But the caveat there is that it may not be as quick as I would like.

 

-Troy