D Hill wrote:
[snip]
In Postfix:
reject_unknown_reverse_client_hostname
Reject the request when the client IP address has no address->name
mapping.
reject_unknown_client_hostname
Reject the request when 1) the client IP address->name mapping fails,
2) the name->address mapping fails, or 3) the name->address mapping
does not match the client IP address.
reject_unknown_client_hostname would be what you are calling confirmed
reverse. If I were to use that, support would start getting phone
calls and customers would start getting upset.
He is about check_client_access.
recent postfix also have check_reverse_client_hostname_access which acts
on PTR (unconfirmed rDNS), but is intended for blocking, not whitelisting.
