On Thu, 20 Jul 2023, Grant Keller wrote:
I have the following config entries:
| gvk | unwhitelist_from | grant.kel...@sonic.com | 7421538 |
| gvk | whitelist_from | grant.kel...@sonic.com | 7526210 |
Still, a message from that address to the gvk user results in the
following rules being hit:
tests=ALL_TRUSTED,SCC_BODY_SINGLE_WORD,SONIC_BX_A2,SONIC_FRIEND,SPF_HELO_NONE,
T_SCC_BODY_TEXT_LINE,USER_IN_WELCOMELIST
Wild guess: it's processing them in order by the 4th column, so the
whitelist_from is the last seen and is the one whose effects remain.
Column headers would aid analysis.
Can you swap the numbers in the 4th column and see if that changes the
behavior?
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Back in 1969 the technology to fake a Moon landing didn't exist,
but the technology to actually land there did.
Today, it is the opposite. -- unknown
-----------------------------------------------------------------------
Today: the 54th anniversary of Apollo 11 landing on the Moon