Some people have been requesting this forever. So finally this works: service tcpwrap { unix_listener login/tcpwrap { mode = 0666 } } login_access_sockets = tcpwrap There can also be more sockets listed, in case someone wants to build their own access checking service. -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 198 bytes Desc: This is a digitally signed message part URL: <http://dovecot.org/pipermail/dovecot/attachments/20100206/d5c9c805/attachment-0002.bin>