On 9/9/2016 6:47 AM, Allen Coates wrote:
> 
> I was thinking along the lines of using
> reject_unknown_reverse_client_hostname
> <http://www.postfix.org/postconf.5.html#reject_unknown_reverse_client_hostname>
> for IPv4, and the stronger reject_unknown_client_hostname
> <http://www.postfix.org/postconf.5.html#reject_unknown_client_hostname> 
> for IPv6
> 
> I suppose I could put an "accept all IPv4 addresses" statement at the
> end of an access list, and let IPv6 fall through to further tests.

Easy enough... Inside one of your smtpd_*_restrictions sections:

  ...
  reject_unknown_reverse_client_hostname
  check_client_access cidr:/etc/postfix/ipv6_client_check.cidr
  ...

# ipv6_client_check.cidr:
::some:exception:network  DUNNO
# last line wildcard:
::/0  reject_unknown_client_hostname




  -- Noel Jones

Reply via email to