https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6508

--- Comment #2 from Daryl C. W. O'Shea <[email protected]> 2010-11-04 
18:00:30 UTC ---
(In reply to comment #0)
> Now, there is one caveat with using a Patricia trie for lookups:
> it finds the tightest match on listed CIDR networks - unlike our
> present sequential search, which returns the first match in the
> order of declared networks. For all practical purposes on valid
> data this makes no difference. The difference pops up on overlapping
> conflicting networks.

In my experience this has been an important feature.  I know of a number of
people that have setups like this:

trusted_networks 10.20.30.0/24
internal_networks 10.20.30.0/24 !10.20.30.2/31

Where the /24 covers their MXes and the /31 covers their MSAs.  I suppose that
msa_networks solves this particular problem (I think) but I don't know what the
uptake of msa_networks has been like... lots of people got things working long
before I came up with msa_networks.

I think I'd lean towards only using Net::Patricia if there are no "!" entires,
or optionally.

Daryl

-- 
Configure bugmail: 
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to