Hi,

On 04/27/2015 10:44 PM, Michael Orlitzky wrote:
On 04/27/2015 06:55 PM, Alex Regan wrote:
Hi,

I assume that means you use it in header_checks?

It's still a client check; I have

    smtpd_recipient_restrictions =
      ...
      check_client_access pcre:$maps/generic_rdns.pcre,

If you're using a version of postfix later than 2.6, you should be using
check_reverse_client_hostname_access instead of check_client_access,
according to the fqrdns file itself

Unless there's some other reason/benefit I'm not seeing?


check_client_access uses the verified name, which is more conservative.
I wasn't convinced this was a good idea, so I played it safe.

So check_client_access is performing an additional DNS query on the hostname to check if it matches the IP?

Doesn't this all serve the same purpose as RDNS_DYNAMIC already included
with spamassassin?

It does, but RDNS_DYNAMIC matches fewer patterns.

Are you concerned about duplicate points for effectively the same rule?

Thanks,
Alex

Reply via email to