noel jones ubdarhmeganvbhcsorg cedric knight greennet wrote hi id like reject connections certain spam sources residential ip blocks heavily infected dorf botnet sources quite welldefined reverse dns client example inserting access table ttnetnettr 554 much spam network dynamic163datacomcn 554 much spam network kdnyadsl 554 much spam network resrrcom 554 much spam network theory block lot parent_domain_matches_subdomains includes smtpd_access_maps domains dont need prefixed problem case forward dns doesnt exist isnt always available doesnt match client ip address shown logs postfixsmtpd6278 warning smtpd_peer_init 8823072217 hostname dsl8823018649ttnetnettr verification failed name service known postfix looks verified client hostnames access table entries either completely useless less useful hoped domains often include many different diverse ip ranges would difficult find add access table way look reverse_name table instead limiting verified hostnames postfix 215 debian stable thanks cedric knight postfix doesnt check_reverse_client_access lookup unverified hostnames cant used safely whitelisting use write policy server rejects clients based reverse hostname believe policyd ability along many others httpwwwpostfixorgsmtpd_policy_readmehtml httpwwwpostfixorgaddonhtmlpolicy httppolicydsourceforgenet patch source code add new lookup type particular mod looks fairly easy noel jones tue 05 aug 2008 202338 0600 access table unverified hostnames