OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: access file not working as expected

From: Noel Jones (njonesmegan.vbhcs.org)
Date: Wed Oct 10 2007 - 13:09:41 CDT


At 12:47 PM 10/10/2007, Victor Duchovni wrote:
>On Wed, Oct 10, 2007 at 12:38:23PM -0500, Noel Jones wrote:
>
> > Now that I look at your file a little more closely, it appears you're
> > using CIDR notation, which is only valid for cidr: type files. A
> > check_sender_access map will never match an IP in a cidr table.
>
>Nor in a CIDR table, since "sender" is an email address, not a client
>host.
>
>--
> Viktor.

Yes, we agree. Maybe we should spell this out for the OP.

CIDR type entries (1.2.3.4/netmask) are only useful in a cidr: table.
CIDR entries cannot be used in hash tables.

Only check_client_access deals with client IP addresses.
A check_sender_access table will never match an IP address regardless
of table type.

check_client_access = check the connecting client IP or verified
hostname. Recorded in the topmost Received: header.
check_helo_access = name given by the client in the HELO or EHLO
command. Recorded in the topmost Received: header.
check_sender_access = sender MAIL FROM address given by the
client. Also usually recorded in the Return-Path: header.
check_recipient_access = recipient RCPT TO address given by the
client. No relation to any header.

--
Noel Jones