OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: access table reject action

From: mouss (mlist.onlyfree.fr)
Date: Thu Apr 26 2007 - 15:34:41 CDT


Ed Sawicki wrote:
> I have an access table with over 600,000 entries.
> All the entries have identical reject actions
> with the same long text. The table is over 81 MB
> and takes a long time to build.
>
> Is there any way to achieve the same result without
> having to duplicate the same long text string
> 600,000 times?

one way to do this is via restriction classes:

smtpd_restrictions_classes = verbose_reject

verbose_reject =
    check_client_access pcre:/etc/postfix/my_reject

my_reject:
/./ REJECT blah blah blah

my_access_list:
foo dom_me_do

now, why would anyone wants a long reject message is another issues. be
concise.
>
> Note that I don't want to use a DNS blocklist for
> this.
>