1. Home
  2. Knowledge Base
  3. Settings
  4. Global Settings g_access settings
  1. Home
  2. Knowledge Base
  3. Accounts
  4. Global Settings g_access settings

Global Settings g_access settings

These settings control access to smtp/pop/imap/surgeweb, if you want to control the features available in the self admin screens, then see this page instead

g_access_group - Access groups

Access rules defining groups of IP addresses with certain POP, IMAP and SMTP privileges. When a user is authenticated access is checked against group membership defined in the "mailaccess" field in the authentication database. See accounts for more information.

eg. this could allow you to charge webmail users for pop access privileges:
g_access_group group=paid_user access_pop=* access_imap=* access_smtp=* 
g_access_group group=free_user access_pop=webmail.svr.ip access_imap=webmail.svr.ip access_smtp=webmail.svr.ip 

with "Access type" set to "free_user" on accounts page or equivalently in nwauth authentication database:
marijn@mydomain.com:{ssha}tVANQo...:created="1060034937" mailaccess="free_user" ...

To prevent webmail access for some users you would do this:

g_access_group_default "normal"
g_access_group group="normal" access_pop="*" access_imap=*" access_smtp="*"
g_access_group group="nowebmail" access_pop="*,!webmail.ip" access_imap="*,!webmail.ip" access_smtp="*"

And put the users you want to limit in a group called 'nowebmail' e.g.

lookup fred@domain
+OK fred@domaing config 0 mailaccess="nowebmail"

Syntax: g_access_group group=string access_pop=string access_imap=string access_smtp=string access_incoming=string

g_access_group_default - Access group defaults

Access group defaults for users with no access groups set. (must be used in conjunction with g_access_group)

Syntax: g_access_group_default string

g_access_surgeweb - Apply g_access_group rules to surgeweb sessions based on client's address

This setting has no further documentation currently available

Syntax: g_access_surgeweb bool

g_access_webonly - Users in this group can only use web not imap or pop

This setting has no further documentation currently available

Syntax: g_access_webonly string

Was this article helpful?

Related Articles