On freebsd, blacklistd could filter sasl connections. https://man.netbsd.org/NetBSD-9.2/blacklistd.8
I'd prefer not to add special support for FreeBSD-specific software.