MBOX-Line: From lyndon at orthanc.ca  Sun Jun  1 13:30:26 2008
To: imap-protocol@u.washington.edu
From: Lyndon Nerenberg <lyndon@orthanc.ca>
Date: Fri Jun  8 12:34:42 2018
Subject: [Imap-protocol] Proxy IP forwarding
In-Reply-To: <1212348043.3904.521.camel@hurina>
References: <1212341451.3904.500.camel@hurina>
	<0i/azqanypELGcsgZG99yw.md5@lochnagar.oryx.com>
	<1212348043.3904.521.camel@hurina>
Message-ID: <7C806889-D186-4E0C-81B2-22D48929EBD4@orthanc.ca>


On 2008-Jun-1, at 12:20 , Timo Sirainen wrote:

> The idea would be that there's a frontend IMAP proxy that looks up the
> backend IMAP server based on the username, tells the backend server  
> the
> user's IP and then logs in using the provided user+password. Currently
> the IP isn't forwarded, so some IP-based user access checks don't  
> work.

Why can't you do the access checks at the front-end server? You're  
already going out-of-band to discover which back-end server to use.  
You're already passing the account name, so why not also pass the  
network address and do the access check there?

