> On Feb 5, 2017, at 1:25 PM, James <postfix_trac...@trackivity.com> wrote: > > I guess my basic question here is "does check_helo_access, or > check_helo_a_access, play nicely with cidr:table's when the helo/ehlo command > presents an address literal?"
Support for cidr tables in check_helo_a_access applies only to domain names not to address literals. So it works when the "domain name" is just a dotted IPv4 string, but not when it is enclosed in [] as an address literal. Thus, with check_helo_a_access, EHLO 127.0.0.1 will match a CIDR key of 127.0.0.0/8, but EHLO [127.0.0.1] will not. -- Viktor.