Re: Problem matching IPv6 link-local in cidr-map

2010-11-08 Thread Wietse Venema
Bastian Blank: > On Mon, Nov 08, 2010 at 05:21:57PM -0500, Wietse Venema wrote: > > There is code all over Postfix that sanity checks the syntax of > > domains and address literals, and that code just cannot ever accept > > datalink suffix junk. > > There is no junk in it. > > > That means having

Re: Problem matching IPv6 link-local in cidr-map

2010-11-08 Thread Bastian Blank
On Mon, Nov 08, 2010 at 05:21:57PM -0500, Wietse Venema wrote: > There is code all over Postfix that sanity checks the syntax of > domains and address literals, and that code just cannot ever accept > datalink suffix junk. There is no junk in it. > That means having to strip off the junk where it

Re: Problem matching IPv6 link-local in cidr-map

2010-11-08 Thread Victor Duchovni
On Mon, Nov 08, 2010 at 05:21:57PM -0500, Wietse Venema wrote: > There is code all over Postfix that sanity checks the syntax of > domains and address literals, and that code just cannot ever accept > datalink suffix junk. > > That means having to strip off the junk where it gets into Postfix, >

Re: Problem matching IPv6 link-local in cidr-map

2010-11-08 Thread Wietse Venema
Bastian Blank: > On Mon, Nov 08, 2010 at 03:13:45PM -0500, Wietse Venema wrote: > > Postfix CIDR support uses standard system library routines such as > > inet_pton(). I am reluctant to re-invent Postfix-specific versions. > > Maybe there is some other library that does not barf on this? > > The

Re: Problem matching IPv6 link-local in cidr-map

2010-11-08 Thread Bastian Blank
On Mon, Nov 08, 2010 at 03:13:45PM -0500, Wietse Venema wrote: > Postfix CIDR support uses standard system library routines such as > inet_pton(). I am reluctant to re-invent Postfix-specific versions. > Maybe there is some other library that does not barf on this? The only parts of the glibc usi

Re: Problem matching IPv6 link-local in cidr-map

2010-11-08 Thread Bernhard Schmidt
On 08.11.2010 21:13, Wietse Venema wrote: Hi Wietse, Nov 8 17:15:46 lxmhs17 postfix/smtpd[15061]: NOQUEUE: reject: RCPT from unknown[fe80::250:56ff:fea9:2c72%vlan6]: 550 5.7.1 Client host rejected: cannot find your reverse hostname, [fe80::250:56ff:fea9:2c72%vlan6]; from=<> to= proto=ESMTP h

Re: Problem matching IPv6 link-local in cidr-map

2010-11-08 Thread Wietse Venema
Bernhard Schmidt: > Nov 8 17:15:46 lxmhs17 postfix/smtpd[15061]: NOQUEUE: reject: RCPT from > unknown[fe80::250:56ff:fea9:2c72%vlan6]: 550 5.7.1 Client host rejected: > cannot find your reverse hostname, [fe80::250:56ff:fea9:2c72%vlan6]; > from=<> to= proto=ESMTP > helo= How do these systems find

Problem matching IPv6 link-local in cidr-map

2010-11-08 Thread Bernhard Schmidt
Hi, postfix 2.7.1 on SLES 10.3 i586 (probably not important, but who knows). We run a production mailserver with reject_unknown_client_hostname enabled (for a few years now). To deal with the unavoidable misconfigurations we have a very large whitelist which was created automatically from yea