That is not much different than whitelisting, right? I still have to maintain a list of permitted networks, do I not?

On Oct 27, 2009, at 1:24 PM, Victor Duchovni wrote:

On Tue, Oct 27, 2009 at 01:14:05PM -0400, Dennis Putnam wrote:

Thanks or the reply. That sucks. Is there a way around this, short of
turning that off or whitelisting?

Don't use "reject_unknown_client" uncondionally. Use it selectively
in a

        check_client_access cidr:/etc/postfix/client_access.cidr

rule that subjects "high-value" CIDR blocks (lots of junk with no
reverse mappings in a block, with some legit clients "mixed-in"
whose PTRs are valid), for example:

        192.0.2.0/24    reject_unknown_client

--
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majord...@postfix.org?body=unsubscribe%20postfix-users>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.




Dennis Putnam
Sr. IT Systems Administrator
AIM Systems, Inc.
11675 Rainwater Dr., Suite 200
Alpharetta, GA  30009
Phone: 678-240-4112
Main Phone: 678-297-0700
FAX: 678-297-2666 or 770-576-1000
The information contained in this e-mail and any attachments is strictly confidential. If you are not the intended recipient, any use, dissemination, distribution, or duplication of any part of this e-mail or any attachment is prohibited. If you are not the intended recipient, please notify the sender by return e-mail and delete all copies, including the attachments.



Reply via email to