Re: DNS and access maps

2008-10-16 Thread Wietse Venema
Jon Ribbens: > On Thu, Oct 16, 2008 at 10:45:53AM -0400, Wietse Venema wrote: > > DESCRIPTION > >This document describes access control on remote SMTP client > > informa- > >tion: host names, network addresses, and envelope sender or > > recipient > >addresses; it i

Re: DNS and access maps

2008-10-16 Thread Jon Ribbens
On Thu, Oct 16, 2008 at 05:16:59PM +0200, mouss wrote: > >> You can exclude this by yourself: if I use a pcre (or regexp) map, would > >> postfix try all possible strings that matchall the regular expressions, > >> do a DNS lookup until it finds a match??? > > > > That argument doesn't follow. Thi

Re: DNS and access maps

2008-10-16 Thread mouss
Jon Ribbens a écrit : > On Thu, Oct 16, 2008 at 04:39:58PM +0200, mouss wrote: >>> (a) Match an IP address whose reverse DNS matches 'domain.tld'. >> This can't be trusted. nobody can use this for access control. > > Indeed. > >>> (c) Match an IP address which is listed as one of the results

Re: DNS and access maps

2008-10-16 Thread Jon Ribbens
On Thu, Oct 16, 2008 at 10:45:53AM -0400, Wietse Venema wrote: > DESCRIPTION >This document describes access control on remote SMTP client informa- >tion: host names, network addresses, and envelope sender or recipient >addresses; it is implemented by the Postfix

Re: DNS and access maps

2008-10-16 Thread Jon Ribbens
On Thu, Oct 16, 2008 at 04:39:58PM +0200, mouss wrote: > > (a) Match an IP address whose reverse DNS matches 'domain.tld'. > > This can't be trusted. nobody can use this for access control. Indeed. > > (c) Match an IP address which is listed as one of the results for an > > A-record lo

Re: DNS and access maps

2008-10-16 Thread Wietse Venema
Jon Ribbens: > In access(5), the documentation says (in regard to HOST NAME/ADDRESS > PATTERNS): > > domain.tld > Matches domain.tld. > > However it fails to indicate what this actually *means*. This seems to > be a bit of a documentation failure. Which one of the following is it? DES

Re: DNS and access maps

2008-10-16 Thread mouss
Jon Ribbens a écrit : > In access(5), the documentation says (in regard to HOST NAME/ADDRESS > PATTERNS): > > domain.tld > Matches domain.tld. > > However it fails to indicate what this actually *means*. This seems to > be a bit of a documentation failure. Which one of the following is

Re: DNS and access maps

2008-10-16 Thread Ralf Hildebrandt
* Jon Ribbens <[EMAIL PROTECTED]>: > In access(5), the documentation says (in regard to HOST NAME/ADDRESS > PATTERNS): > > domain.tld > Matches domain.tld. > > However it fails to indicate what this actually *means*. This seems to > be a bit of a documentation failure. Which one of the

DNS and access maps

2008-10-16 Thread Jon Ribbens
In access(5), the documentation says (in regard to HOST NAME/ADDRESS PATTERNS): domain.tld Matches domain.tld. However it fails to indicate what this actually *means*. This seems to be a bit of a documentation failure. Which one of the following is it? (a) Match an IP address whose