OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: .sub.domain matching problem in client_access

From: Wietse Venema (wietseporcupine.org)
Date: Tue Jul 13 2004 - 13:03:05 CDT


James Garrison:
> Wietse Venema wrote:
>
> > James Garrison:
> >
> >>>One question: If I read the access(5) man page
> >>>correctly, I only need parent_domain_matches_subdomains
> >>>if I want a domain _without_ a leading period to match
> >>>subdomains. Here's the relevant text from the postfix
> >>>website:
> >>
> >>On further consideration I think I see what you are saying.
> >>Is it true that parent_domain_matches_subdomains is
> >>either-or -- i.e. if it's turned on then domain.tld
> >>matches subdomains but .domain.tld doesn't, and toggling
> >>the flag reverses this behavior? Then is it also true
> >>that the default is currently ON for smtpd_access_maps?
> >
> >
> > http://www.postfix.org/postconf.5.html#parent_domain_matches_subdomains
> >
> > parent_domain_matches_subdomains (default: see postconf -d out-
> > put)
> > What Postfix features match subdomains of "domain.tld"
> > automatically, instead of requiring an explicit
> > ".domain.tld" pattern. This is planned backwards compati-
> > bility: eventually, all Postfix features are expected to
> > require explicit ".domain.tld" style patterns when you
> > really want to match subdomains.
> >
>
> I've read this section of the manpage many, many times, but,
> no disrespect intended, what part of it indicates to you that
> parent_domain_matches_subdomains is a toggle as opposed to
> additive?

What exactly is not clear of the following two words:

        instead of