On 2/7/2011 10:15 AM, Nikolaos Milas wrote:
> Hi,
>
> I am using this piece of code to restrict access to some mail aliases
> (only clients from the allowed IP addresses are permitted to send
> email to the protected email addresses):
>
>    smtpd_restriction_classes = allowed_list1
>    allowed_list1 = check_client_access
> hash:/etc/postfix/client_acc,reject

>    allowed_list1= cidr:/etc/postfix/client.cidr,reject

Do you see the HUGE difference between the two restriction classes?

You are missing check_client_access on the second one.

Since it is called from the recipient class, it implies an old,
compatibility interface of "check_recipient_access cidr:mumble" which
will NEVER match.

Just because a map is cidr does not force it to check client.

Brian

Reply via email to