On Tue, 23 Jun 2009, Jon wrote: >> You're trying to block an entire TLD. See the access(5) manual, >> especially the section on lookups from indexed files. You might want >> to try "it" as a lookup key instead of ".it", given the likely >> inclusion of smtpd_access_maps in your configuration's >> parent_domain_matches_subdomains. > > OK, read http://www.postfix.org/access.5.html > Am I correct at interpreting this to mean I need to put the desired > ".tld" in, for example, my "access_regexp" as a regular expression > because ".tld" is too short and won't match via an "access_hash" whereas > ".domain.tld" being longer, would?
No, as I said in my previous message, I suspect your parent_domain_matches_subdomains parameter contains smtpd_access_maps, as this is the default configuration. And as a result, if you want to match foo.tld and bar.tld, you need "tld" (and NOT ".tld") as the lookup key on the LHS of an indexed access(5) map. Remember to postmap(1) after editing the underlying flat files to update the table. Alternatively, as Noel suggests, just query for the TLD via regexp, especially since you already use it for something else. -- Sahil Tandon <sa...@tandon.net>
