Hostname-based filtering in Zimbra/tomcat?

[Lebha]

Hi,

Has anyone tried to implement hostname-based filtering in Zimbra? My goal is to allow connections to Zimbra http/https/imap/imaps only from certain domains.

I know this task is better suited to a firewall, but unfortunately our firewall only allows IP address-based access lists.

[uxbod]

Interesting one Perhaps one way would be to use a reverse proxy, and the proxy validates the connecting session. IPtables could be used on your ZCS to only allow connections from the proxy IP.

Out of interest why do you want to do this ? domains could be easily spoofed anyway.

[Lebha]

Out of interest why do you want to do this ? domains could be easily spoofed anyway.

Actually, I wouldn't like to do this at all. Sometimes you just have to do what you're told to do. But we decided to use the firewall after all, so my question is no longer pressing.

I didn't find a way to configure Zimbra's tomcat to filter imap/imaps connections, so I did some research on proxy servers, and was about to try Delegate. I'm still interested in knowing if someone is filtering Zimbra imap connections with a reverse proxy.