On Sun, Apr 13, 2025 at 08:12:26PM -0400, Greg Klanderman via Postfix-users 
wrote:

> Am I not able to match on the client FQDN in postscreen_access_list?
> I.e. using a hash: table?

This has little to do with hash tables, but as documented in
https://www.postfix.org/postconf.5.html#postscreen_access_list the only
supported lookup key is the full IP address, table lookups happen prior
to any DNS resolution.

> I was hoping I could kill .ip.linodeusercontent.com and other such
> garbage very early/quickly and just switched to using postscreen to
> implement that..

If you know the associated CIDR blocks, you can use a CIDR table.

> Is the only option to turn off smtpd_delay_reject and use
> smtpd_client_restrictions?

That's an option, or just accept the fact that rejects will happen
at RCPT TO, and you'll get better logging of the client HELO, sender
and recipient address for any rejected messages.

-- 
    Viktor.
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to