Thanks for your discussions and sharing, i decided to use Dominique's suggestion with some comment: https://bitbucket.org/zhb/iredmail/comm … 4189e94df0
AND ((mailbox.enable%Ls%Lc=1 AND '%r'<>'127.0.0.1') OR (mailbox.enablewebmail=1 AND '%r'='127.0.0.1' AND '%Ls%Lc'='imapsecured'))Comment:
# (mailbox.enable%Ls%Lc=1 AND '%r'<>'127.0.0.1') means accessing mailbox via
# IMAP or IMAP over TLS on non-localhost (127.0.0.1)
#
# (mailbox.enablewebmail=1 AND '%Ls%Lc'='imapsecured' AND '%r' IN ('127.0.0.1'))
# means accessing webmail hosted on '127.0.0.1' via IMAP over TLS. If you
# want to allow remote access from webmail hosted on other servers, please
# extend the list and reload/restart Dovecot service.
#
# WARNING: It's not recommended to access mailbox from webmail with insecure
# IMAP protocol.