Noel Jones ([email protected]) wrote on 5 March 2011 12:30: >On 3/5/2011 12:20 PM, Carlos Carvalho wrote: >> Noel Jones ([email protected]) wrote on 5 March 2011 12:15: >> >On 3/5/2011 12:07 PM, Carlos Carvalho wrote: >> >> Noel Jones ([email protected]) wrote on 5 March 2011 11:23: >> >> >On 3/5/2011 11:05 AM, Carlos Carvalho wrote: >> >> >> I'm trying to limit the connection rate for internal >> (mynetworks) >> >> >> clients, with some exceptions. I did >> >> >> >> >> >> smtpd_client_message_rate_limit = 2 >> >> >> smtpd_client_event_limit_exceptions = allowed1.my.domain >> allowed2.my.domain !.my.domain >> >> >> >> >> >> It works for the allowed ones but not for !.my.domain; these >> are still >> >> >> limited. I tried !$mynetworks and !192.168.0.0/16 also to no >> avail. >> >> >> What's wrong? >> >> > >> >> > >> >> >Sounds as if what you want is >> >> > >> >> >smtpd_client_event_limit_exceptions = >> >> > allowed1 >> >> > allowed2 >> >> > !192.168.0.0/16 >> >> > static:all >> >> > >> >> > >> >> >ie. allow the two exceptions, don't match 192.168.x.x, allow >> >> >anything else. >> >> >> >> Why the static:all at the end? The !192.168.0.0/16 is supposed to >> >> allow external clients. Further, your suggestion has the effect of >> >> allowing all clients, even the internal ones, which is equivalent to >> >> not having any limit. >> > >> > >> >If the solution I suggested doesn't do what you want, then you >> >need to more clearly state your goals. >> >> I tried to, right in the beginning: >> >> >> >On 3/5/2011 11:05 AM, Carlos Carvalho wrote: >> >> >> I'm trying to limit the connection rate for internal >> (mynetworks) >> >> >> clients, with some exceptions. >> >> >If you want to rate limit everything except a couple of >> >internal clients, then just list those client IPs and nothing >> >else. >> >> It's the opposite: I want to limit only internal clients, with a few >> exceptions among these (the allowed1, allowed2). > > >Then, assuming that your internal network is 192.168.x.x, what >I posted is correct. > >No limit for allowed1 >No limit for allowed2 >(limit 192.168.0.0/16) >no limit for anyone else. > >What seems to be the problem?
Ops, my fault :-( I had put !.my.domain instead of !192.168.0.0/16 in the last edition of main.cf. It's working fine now, thanks a lot. >BTW, better to match the allowed clients by IP rather than >hostname. It does seem to be necessary for the limited ones... The allowed ones are fine, putting the full allowed.my.domain in the exception list.
