OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Am I really using a CIDR map?

From: Robert Lopez (rlopezcnmgmail.com)
Date: Tue Apr 06 2010 - 13:35:02 CDT


On Tue, Apr 6, 2010 at 12:23 PM, Wietse Venema <wietseporcupine.org> wrote:
> Robert Lopez:
> Now that you mention the documentation:
>
>> SYNOPSIS
>>        postmap -q "string" cidr:/etc/postfix/filename
>>
>>        postmap -q - cidr:/etc/postfix/filename <inputfile
>>
>> DESCRIPTION
> ...
>>        To test lookup tables, use the  "postmap  -q"  command  as
>>        described in the SYNOPSIS above.
>
> It takes some perseverance to find that text.

That is another point that has me confused.
I have been testing to make certain changes I have made to the access file
were really there with postmap -q.

With the movement of IP addresses and CIDR blocks out of the access
file and into a "cidr-ip" file postmap -q would find them in the
cidr-ip.db file.
If I remove the .db ile (As Noel points out not necessary) then I get
an error because postmap seems to only look in database files:

$ postmap -q 222.254.228.0/24 cidr-ip
postmap: fatal: open database cidr-ip.db: No such file or directory

As I originally posted: "An strace of "postmap -q <any-pattern>
cidr-ip" shows it is the cidr-ip.db file that is being read." by
postmap.

>
>        Wietse
>

--
Robert Lopez
Unix Systems Administrator
Central New Mexico Community College (CNM)
525 Buena Vista SE
Albuquerque, New Mexico 87106