From: mouss (no email)
Date: Thu Nov 02 2006 - 17:02:23 EST
SATOH Kiyoshi wrote:
> Hi.
>
> I have the same idea, too.
> In order to use greylisting and DNSBL more safely.
> I wanted to do greylisting only for dynamic IP.
>
> Ex.1
> /etc/postfix/main.cf
> ---
> smtpd_restriction_classes =
> check_greylist
> check_greylist = check_policy_service inet:60000
> smtpd_recipient_restrictions =
> …
> check_client_access regexp:/etc/postfix/check_client_fqdn
> ---
> /etc/postfix/check_client_fqdn
> ---
> /^unknown$/ check_greylist
> /^[^\.]*[0-9][^0-9\.]+[0-9]/ check_greylist
>
> /^[^\.]*[0-9]{5}/ check_greylist
> /^([^\.]+\.)?[0-9][^\.]*\.[^\.]+\..+\.[a-z]/ check_greylist
> /^[^\.]*[0-9]\.[^\.]*[0-9]-[0-9]/ check_greylist
> /^[^\.]*[0-9]\.[^\.]*[0-9]\.[^\.]+\..+\./ check_greylist
> /^(dhcp|dialup|ppp|adsl)[^\.]*[0-9]/ check_greylist
>
you can add 'dynamic', 'pool'...
you can also include these when not at start (for instance
/\.dynamic\./), though some care is needed.
|
|
|