OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: .sub.domain matching problem in client_access

From: Wietse Venema (wietseporcupine.org)
Date: Tue Jul 13 2004 - 13:34:10 CDT

avatar2004-06.plus.kew.com:
> > > -----Original Message-----
> > > avatar2004-06.plus.kew.com:
> > > http://www.postfix.org/postconf.5.html#parent_domain_matches_s
> > ubdomains
> > >
> > > parent_domain_matches_subdomains (default: see postconf -d out-
> > > put)
> > > What Postfix features match subdomains of "domain.tld"
> > > automatically, instead of requiring an explicit
> > > ".domain.tld" pattern. This is planned backwards compati-
> > > bility: eventually, all Postfix features are expected to
> > > require explicit ".domain.tld" style patterns when you
> > > really want to match subdomains.
> > >
> > > Either stupid or subtle question: Does ".domain.tld" match "domain.tld"
> > > itself, or does Postfix require two records for both the domain and its
> > > subdomains to matched?
> >
> > What exactly is not clear of the following:
> >
> > instead of
>
> The entire definition, including "instead of", clearly defines the subdomain
> behavior. It does not as clearly define the parent domain behavior.

As documented, this feature controls whether or not kew.com
automatically matches SUBDOMAINS of kew.com.

As documented, this feature controls whether or not you have to
specify .kew.com in order to match SUBDOMAINS of kew.com.

As documented, you can match SUBDOMAINS of kew.com with the pattern
kew.com, INSTEAD OF having to specify an explicit .kew.com pattern.

This feature DOES NOT control whether or not .kew.com matches the
PARENT DOMAIN kew.com. There is no such claim in the documentation,
and any inferences on this issue are unwarranted.

In general, Postfix documentation describes what a feature does.
The documentation DOES NOT describe all the things that the software
does not do, since that is a potentially unlimited amount of things.

> You might add a variation on the following to the paragraph, if the sentence
> is correct:
>
> An explicit ".domain.tld" pattern always matches the parent domain
> ("domain.tld").

This is not at all how the feature works.

        Wietse