I think it is just an issue of inverse sensitivity or possibly 
surgemail needing a restart.

I just tested the online webmail blocking instructions. (first setting 
as per as per follwoing page) and they worked fine for me:
      http://netwinsite.com/surgemail/help/global.htm
ie:
1) Add suitable nowebmail group eg:

    g_access_group group="nowebmail" access_pop="*" 
access_imap="*,!127.0.0.1" access_smtp="*" access_incoming="*"
2) add domain setting access_group_default "nowebmail"

Webmail logins blocked for whole domain. Although I did have to 
restart surgemail after changing the access_group_default setting for 
it to take effect

Let us know if that resolves it for you thanks.

Marijn




On Friday 24/03/2017 at 10:54 am, surgemailHIDDEN@etwinsite.com wrote:
> Whoops.  I blocked the IP by accident. Getting a lot of spammers out 
> of the 198.1.65-127 nets.
>
> That doesn't work.  I think it just turns off the button.  If someone 
> logs inHIDDEN@omain, they can still get in.
>
> Would I have to set the access on a per user basis after the accounts 
> have been created?  I could create a noweb group and apply it to a 
> couple dozen users, but I was hoping it was right in the domain-level 
> config.
>
> - SteveP
>
> On 3/23/2017 10:13 AM, Jim Lohiser wrote:
>>
>> SteveP,
>>
>> Assuming you want all of the other user permissions to be the same, 
>> copy your settings from g_user_access_default to the 
>> user_access_default setting under that domain and then modify that 
>> setting to disable webmail.  A basic example is below.
>>
>> g_user_access_default "all"
>>
>> Under that domain
>>
>> user_access_default "all,!webmail"
>>
>> Jim Lohiser
>> N2Net
>>
>> -----Original Message-----
>> From: Steve Perrault [mailtoHIDDEN@psp101.net]
>> Sent: Thursday, March 23, 2017 10:06 AM
>> To: surgemailHIDDEN@etwinsite.com
>> Subject: [SurgeMail List] Disabling webmail/surgeweb for one virtual 
>> domain
>>
>> A company wants all their email to be used via office mail clients and
>> requested denying webmail access for their staff.
>> How can I cleanly deny webmail services for a specific domain
>> (cleanly=without having to set special access settings for each of
>> dozens of users)
>>
>> - SteveP
>>
>>
>
>