Hello,
As our internal (main) mail server only accepts mail from two mail
gateways and users submit their mail through submission port (587), I am
planning to explicitly allow accepting mail on port 25 ONLY by our mail
gateway servers (and the mail server itself). So, in main.cf:
smtpd_client_restrictions = check_client_access
cidr:/etc/postfix/gwservers.cidr,reject
where /etc/postfix/gwservers.cidr:
(True IPs have been masked with 'x's since they are public.)
2001:648:2011:xxxx::xxx OK
195.251.xxx.xxx OK
195.251.xxx.xx OK
127.0.0.1 OK
My question is: Is it acceptable in a cidr table to add IPv6 loopback
address (::1) too? Should I add it? (SMTP is listening on all
interfaces.) In documentation for cidr tables I read that '...an IPv6
network address is a sequence of three to eight hexadecimal octet pairs
separated by ":"' which makes it a bit unclear whether IPv6 loopback
address is acceptable.
Thanks,
Nick
