OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: A Question About "check_client_access"

From: mouss (usebsdfree.fr)
Date: Wed Oct 12 2005 - 15:28:53 CDT


Rich Shepard a écrit :

> On Wed, 12 Oct 2005, mouss wrote:
>
>> so you mean you have
>> a.b REJECT
>> in your file, and you say below that only "REJECT" is used. no other
>> action.
>
>
> This is correct.
>
>> now, do you have lines starting with space?
>
>
> No. They all begin at the left margin.
>
>> I trust you to know what is an IP block. I was looking for the other
>> stuff (spaces, '#', commas, ... etc).
>> for instance
>> ---------------------
>> 1.2 REJECT
>> 3.4 REJECT
>> ---------------------
>> is incorrect (see the space before 3.4).
>
>
> Here are a couple of entries with the actual numbers removed:
>
> aa.bb 550 Rejected IP address.
>
> xxx.yyy.zz 550 Rejected IP address.
>
> I use [Tab] to space the smtp result code and the following message.
>
>> As suggested by Rob, use postmap -q to check that the IP really match an
>> entry in your hash. (the IP need not be present in the hash, but it
>> should
>> match one of your blocks if it is supposed to be blocked).
>
>
> The specific address does not match the hash, but the first two
> bytes do
> match.
>
then you should look at your other checks. unless you post your
smtpd_mumble_restrictions, it's hard to tell.