On 2/7/2011 12:33 PM, Nikolaos Milas wrote: > Thans Brian, > > But, could I have used "allowed_list1= check_client_access > cidr:/etc/postfix/client.cidr,reject" ? Is this feasible? >
Yes > I understand from Wietse's feedback that I couldn't use CIDR lookups > in a smtpd_restriction_classes statement which is used in a hash table > in smtpd_recipient_restrictions. > > What are the alternatives except of course using a hash file with all > IP addresses listed one by one? > > Sorry for not having an in-depth knowledge of these issues - just > tried to find my way through using as much documentation as I could. > > Thanks, > Nick > > > On 7/2/2011 7:04 μμ, Brian Evans - Postfix List wrote: > >> allowed_list1= cidr:/etc/postfix/client.cidr,reject >> Do you see the HUGE difference between the two restriction classes? >> >> You are missing check_client_access on the second one. >> >> Since it is called from the recipient class, it implies an old, >> compatibility interface of "check_recipient_access cidr:mumble" which >> will NEVER match. >> >> Just because a map is cidr does not force it to check client. >> >>
