| Main Archive Page > Month Archives > postfix-users archives |
Re: permit_dnswl_client logging
From: Noel Jones <njones_at_nospam>Date: Mon Feb 27 2012 - 12:39:58 GMT
To: postfix-users@postfix.org
On 2/27/2012 2:15 AM, Stan Hoeppner wrote:
> On 2/27/2012 1:12 AM, Stan Hoeppner wrote:
>> On 2/26/2012 4:50 PM, /dev/rob0 wrote:
>>
>>> A "warn_if_permit" similar to "warn_if_reject" might make more sense
>>> and be more generic. I agree with your reasoning that the feature
>>> would be useful.
>>>
>>> "warn_if_reject" negates the following restriction, and likewise
>>> should "warn_if_permit". To actually use it as Stan describes, it
>>> would be:
>>>
>>> smtpd_mumble_restrictions = [ ... ]
>>> warn_if_permit permit_dnswl_client list.dnswl.org
>>> permit_dnswl_client list.dnswl.org
>>> [ ... ]
>>
>> I should have thought of that. Much better idea.
>
> And I should have thought more about this before replying. Would this
> disable the permit action? We certainly don't want to disable the
> permit action.
No, of course not. You perform the restriction twice; the warn_if_
is log-only, the second is live. You can do this now with
warn_if_reject reject_rbl_client list.dnswl.org to log the hit.
>
> I think I prefer Wietse's implementation idea.
>
Yes, very useful general solution. I would use it.
-- Noel Jones