On Wed, Sep 01, 2021 at 09:49:21PM -0400, Steve Dondley wrote:
> > I would have opted for "client" rather than "sender" checks, provided a
> > sufficiently stable/comprehensive range of source IP addresses for the
> > forwarding host were available.
>
> OK, took a quick look at the documentation on this but still left with
> questions. So would "client" be the same as HOST_A? So I would do:
Yes, the host IP address.
> xxx.xxx.xxx.xxx OK # IP of HOST_A forwarding email here
>
> And I would use "check_client_access" instead?
Yes. Note that trailing comments are not part of the Postfix
map syntax. Any comment must occupy its entire line.
You can use a CIDR map if you prefer, something like:
# This one's ours
192.0.2.1/32 OK
with:
check_client_access cidr:/some/file
buf if there's ever just one literal matching key:
check_client_access inline:{ { 192.0.2.1 = OK } }
--
Viktor.
