>I just finally added the joker match to my subscriber_networks regexp,
>but it seems to be matching all IP addresses as well...
>do I need to use a .+ instead of .* on one side to keep it from matching the
>actual IP ?
>(I guess check_client_access checks against revdns AND/OR source IP adddr
>and not just revdns)

yes, PTR hostname or IP address.  see "man 5 access"

>check_client_access
>pcre:/mxsync/etc/postfix/pcre/subscriber_networks.regexp,
>
>
>/(.*[0-9]{1,3}[\.\-][0-9]{1,3}[\.\-][0-9]{1,3}[\.\-][0-9]{1,3}.*)/ REJECT
>ACL subscriber_network, PTT = (joker) http://mx.nwfl.net/?a=sn&m=$1

To exclude IPs, you need to have an expression for ".domain.TLD" at the end:

/(.*[0-9]{1,3}[\.\-][0-9]{1,3}[\.\-][0-9]{1,3}[\.\-][0-9]{1,3}.*\..*\..*)/ 
REJECT ACL subscriber_network, PTR = $1, see  http://mx.nwfl.net/?a=sn&m=$1

Also, I think the reserved word "unknown" works as PTR hostname, placed at 
the top of the file:

unknown DUNNO

Len


Reply via email to