On Fri, Oct 11, 2024 at 07:10:54PM -0400, Wietse Venema via Postfix-users wrote:

> Otherwise, this would take a Postfix restriction class:
> 
> main.cf:
>     restriction_classes = allow_certain_subnets

That should of course be:

    smtpd_restriction_classes = allow_certain_subnets

>     # Uses an inline CIDR table.
>     allow_certain_subnets = check_client_access cidr:{
>       {192.168.0.0/24 permit}
>       {10.0.0.0/8 permit}
>       # Replace 'reject' with 'discard' after you
>       # verify that the configuration works as intended
>       {0.0.0.0/0 reject}}
> 
>     # Uses an inline hash table.
>     smtpd_recipient_restrictions = 
>       check_recipient_access inline:{
>           {u...@example.com allow_certain_subnets}}
>       permit_mynetworks 
>       reject_unauth_destination
>       ...DNSBLs, etc...
> 
> But this is not a nice user interface.
> 
> Typed from memory. Typos are possible.

Looks correct otherwise to me.

-- 
    Viktor.
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to