> On Nov 30, 2017, at 6:50 PM, Nikolaos Milas <nmi...@noa.gr> wrote: > > smtpd_recipient_restrictions = > check_client_access hash:/etc/postfix/localhost > check_recipient_access hash:/etc/postfix/protected_destinations > permit_sasl_authenticated > reject_unverified_recipient > reject_unauth_destination > > and /etc/postfix/localhost: > > 194.177.195.166 OK > 127.0.0.1 OK > [::1] OK > [2001:648:2011:15::166] OK > > ...I wouldn't expect that smtp from localhost would be denied. > > What am I doing wrong?
http://www.postfix.org/access.5.html net:work:addr:ess net:work:addr net:work net Matches the specified IPv6 host address or subnetwork. An IPv6 host address is a sequence of three to eight hexadecimal octet pairs separated by ":". Subnetworks are matched by repeatedly truncating the last ":octetpair" from the remote IPv6 host address string until a match is found in the access table, or until further truncation is not possible. NOTE 1: the truncation and comparison are done with the string representation of the IPv6 host address. Thus, not all the ":" subnetworks will be tried. NOTE 2: The access map lookup key must be in canonical form: do not specify unnecessary null characters, and do not enclose net- work address information with "[]" characters. NOTE 3: use the cidr lookup table type to specify network/net- mask patterns. See cidr_table(5) for details. IPv6 support is available in Postfix 2.2 and later. -- Viktor.
