OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: A Question About "check_client_access"

From: Rich Shepard (rshepardappl-ecosys.com)
Date: Wed Oct 12 2005 - 15:16:20 CDT


On Wed, 12 Oct 2005, mouss wrote:

> so you mean you have
> a.b REJECT
> in your file, and you say below that only "REJECT" is used. no other action.

   This is correct.

> now, do you have lines starting with space?

   No. They all begin at the left margin.

> I trust you to know what is an IP block. I was looking for the other stuff
> (spaces, '#', commas, ... etc).
> for instance
> ---------------------
> 1.2 REJECT
> 3.4 REJECT
> ---------------------
> is incorrect (see the space before 3.4).

Here are a couple of entries with the actual numbers removed:

aa.bb 550 Rejected IP address.

xxx.yyy.zz 550 Rejected IP address.

   I use [Tab] to space the smtp result code and the following message.

> As suggested by Rob, use postmap -q to check that the IP really match an
> entry in your hash. (the IP need not be present in the hash, but it should
> match one of your blocks if it is supposed to be blocked).

   The specific address does not match the hash, but the first two bytes do
match.

Thanks,

Rich

--
Dr. Richard B. Shepard, President | Author of "Quantifying Environmental
Applied Ecosystem Services, Inc. (TM) | Impact Assessments Using Fuzzy Logic"
<http://www.appl-ecosys.com> Voice: 503-667-4517 Fax: 503-667-8863