I also am using a webmail server called roundcube. It has a plugin named dovecot_ident to send the http header x-originating-ip as the original ip address that connected to the web server, when connecting to the imap and smtp server.
Is it possible to add this feature to the imap and smtp server in hmailserver?
I'd expect it to work like this:
1. Modify in the hmailserver administrator or hmail.ini file to allow a list of ip addresses and ip address/subnet
2. When one of them is trying to connect, check the x-originating-ip value and use it for logging, autoban, etc, instead of the connecting ip address
The dovecot imap server has this feature. I'd also like it if we could run hmailserver behind a proxy server like haproxy.
Apache has this feature through a module called remoteip. You then set these values:
Code: Select all
RemoteIPHeader X-Forwarded-For
# replace IP with the remote server you trust
RemoteIPInternalProxy 192.168.0.1/32 192.168.1.0/24
And all the logs as well as any ip address restriction or allowing features will then check the http header specified, instead of the connecting ip address if it is coming from the proxy server ip address specified.
, eg:
