Noel Jones:
> On 11/10/2017 10:33 AM, li...@mbchandler.net wrote:
> > I have postscreen setup according to the how-to. I use the following
> > configuration for the access list. As I understand it, I can only
> > add IP addresses or ranges to this list. Is it possible to whitelist
> > the domain name in the from address?
> >
> >
> > postscreen_access_list = permit_mynetworks,
> > ??????? cidr:/etc/postfix/postscreen_access.cidr
>
>
> It is not possible to whitelist by names in postscreen. Postscreen
> operates at a very early stage where the only information available
> is the client IP.
Confirmed. By design, postscreen will do DNS lookups only from a
small number of DNSBL or DNSWL domains. Those servers are set up
to provide quick responses.
Making postscreen dependent on DNS lookups from random DNS servers
would disastrously limit the amount of traffic that postscreen can
handle.
Wietse
