Turn off IMAP access for mail node?

[scalixuser]

I would like to set up two mail nodes; one with imap and SWA access; the other limited to SWA access. We do not want the second group to be able to automatically download email to their email client; just give them webmail access.
Is it possible to limit IMAP access to one of the mailnodes while allowing IMAP access for other mail nodes; or is the only way to block IMAP access blocking the right port through the firewall?
Otherwise, would it be possible to run two Scalix instances on one server?

[scalixuser]

Nobody?

[grahamk]

have you tried:

omoff -d0 IMAP

I'm not sure of any side effects of turning off the IMAP daemon.

omon IMAP

will turn it back on agian.

[Valerion]

I couldn't find a way to do this at all, reading the documentation. SWA needs IMAP to run, and you can't specify a per-user client allowed list (that was my other idea).

Maybe you can set up iptables to block connections from certain machines? Not quite what you want, but it may work.

[gren]

I'm afraid what you are asking for is certainly not easily achieved without enhancements to Scalix. SWA itself uses IMAP underneath.
You might be able to exploit the fact that SWA IMAP usage will typically be from a known IP address or set of addresses.
You might be able to do something with PAM to block authentication for a given mailnode unless the connecting IP address is from the SWA machine. That isn't really my area of expertise though.

Regards,
Gren.

[scalixuser]

We will try running two instances of Scalix with one in VMWare or may try Linux v-servers.