On 3/5/2011 12:20 PM, Carlos Carvalho wrote:
Noel Jones ([email protected]) wrote on 5 March 2011 12:15:
>On 3/5/2011 12:07 PM, Carlos Carvalho wrote:
>> Noel Jones ([email protected]) wrote on 5 March 2011 11:23:
>> >On 3/5/2011 11:05 AM, Carlos Carvalho wrote:
>> >> I'm trying to limit the connection rate for internal (mynetworks)
>> >> clients, with some exceptions. I did
>> >>
>> >> smtpd_client_message_rate_limit = 2
>> >> smtpd_client_event_limit_exceptions = allowed1.my.domain
allowed2.my.domain !.my.domain
>> >>
>> >> It works for the allowed ones but not for !.my.domain; these are
still
>> >> limited. I tried !$mynetworks and !192.168.0.0/16 also to no avail.
>> >> What's wrong?
>> >
>> >
>> >Sounds as if what you want is
>> >
>> >smtpd_client_event_limit_exceptions =
>> > allowed1
>> > allowed2
>> > !192.168.0.0/16
>> > static:all
>> >
>> >
>> >ie. allow the two exceptions, don't match 192.168.x.x, allow
>> >anything else.
>>
>> Why the static:all at the end? The !192.168.0.0/16 is supposed to
>> allow external clients. Further, your suggestion has the effect of
>> allowing all clients, even the internal ones, which is equivalent to
>> not having any limit.
>
>
>If the solution I suggested doesn't do what you want, then you
>need to more clearly state your goals.
I tried to, right in the beginning:
>> >On 3/5/2011 11:05 AM, Carlos Carvalho wrote:
>> >> I'm trying to limit the connection rate for internal (mynetworks)
>> >> clients, with some exceptions.
>If you want to rate limit everything except a couple of
>internal clients, then just list those client IPs and nothing
>else.
It's the opposite: I want to limit only internal clients, with a few
exceptions among these (the allowed1, allowed2).
Then, assuming that your internal network is 192.168.x.x, what
I posted is correct.
No limit for allowed1
No limit for allowed2
(limit 192.168.0.0/16)
no limit for anyone else.
What seems to be the problem?
-- Noel Jones
