the problem is that with Victor's PCRE:

 smtpd_data_restrictions =
       check_client_access pcre:/etc/postfix/add_header.pcre
   add_header.pcre:
       # Client name, not an IPv4/IPv6 address:
       /[^\d.:]/               DUNNO
       # Otherwise:
       /^(.*)$/        PREPEND X-Send-IP: ${1}



 i get this headers:



X-Sender-IP: localhost
Received: from mta01.montecarlo (localhost [127.0.0.1])
        by mta01.montecarlo (Postfix) with ESMTP id 505E01680CB

X-Sender-IP: unknown
Received: from mta-relay (unknown [192.168.79.22])
        by mta01.montecarlo (Postfix) with ESMTP

what i need to get is not localhots is the ip 127.0.0.1
and in the secon case what i need to get in 192.168.79.22


2008/11/6 mouss <[EMAIL PROTECTED]>

> Iker Perez de Albeniz wrote:
>
>> an other quiestion.. abaut this postfix..
>>
>
> if it's another question, better start another thread. or at least, trim
> the old conversation.
>
>
>> why sometimes i get an IP an other a client name???
>>
>
> if you mean in access checks, postfix will generally lookup both. first the
> hostname, then the IP. This should be ok for most purpuses. to only check
> IPs, use a cidr map.
>
> and if you use a cidr map, do not postmap it.
>
>
> is ther any way to force
>> postfix to resolve allways the names to get te ips?
>>
>
> there is no point to resolve the name. The IP is known before the name is!
> (the name is obtained by resolving the IP). you want cidr.
>
> for example in
>> uceprotect DNSBls system they give you that script:
>>
>>
> 1- if this is a "real" mail server, don't use uceprotect. it is unsafe.
>
> 2- read about reject_rbl_client and its friends.
>
> 3- to download uceprotect lists, use rsync instead of wget:
>
> rsync --times -azv \
>  rsync-mirrors.uceprotect.net::RBLDNSD-ALL/dnsbl-2.uceprotect.net \
>  .
>
>
> 4- the files need to be converted to a format usable by postfix. something
> like:
>
> awk '{print $1 "  REJECT listed in uceprotect blah blah"}' $file >
> uceprotect.tmp && mv uceprotect.tmp uceprotect.cidr
>
>
>
>

Reply via email to