I was getting spam that has a simple DNS signature: all the sender
domains have A records that resolve to the same IP address. These
domains have different MX hosts, and therefore check_sender_mx_access
is ineffective.
I added check_xxx_a_access (xxx in client, reverse_client, helo,
sender, recipient). This looks up all IP address for the domain
name in xxx (both A and AAAA addresses if applicable) and runs the
addresses through a standard Postfix access table. This will be
released some time next week.
Wietse
