Thans Brian,

But, could I have used "allowed_list1= check_client_access cidr:/etc/postfix/client.cidr,reject" ? Is this feasible?

I understand from Wietse's feedback that I couldn't use CIDR lookups in a smtpd_restriction_classes statement which is used in a hash table in smtpd_recipient_restrictions.

What are the alternatives except of course using a hash file with all IP addresses listed one by one?

Sorry for not having an in-depth knowledge of these issues - just tried to find my way through using as much documentation as I could.

Thanks,
Nick


On 7/2/2011 7:04 μμ, Brian Evans - Postfix List wrote:

    allowed_list1= cidr:/etc/postfix/client.cidr,reject
Do you see the HUGE difference between the two restriction classes?

You are missing check_client_access on the second one.

Since it is called from the recipient class, it implies an old,
compatibility interface of "check_recipient_access cidr:mumble" which
will NEVER match.

Just because a map is cidr does not force it to check client.


Reply via email to