Re: [Exim] ACLs and CIDR Address Formats

Kezdőlap
Üzenet törlése
Válasz az üzenetre
Szerző: Philip Hazel
Dátum:  
Címzett: Jeff Breitner
CC: exim-users
Tárgy: Re: [Exim] ACLs and CIDR Address Formats
On Thu, 15 Aug 2002, Jeff Breitner wrote:

> With Exim 3, I was able to specify addresses as cidr blocks
> (10.1.1.0/24, 10.1.0.0/16) in various host deny lists. It appears that
> the host check within the ACLs wants to lookup hostnames despite my
> attempts to have it check against blocks.


CIDR blocks are available in Exim 4. The way host lists work has not
been changed.

> begin acl
>
> check_recipient:
>
>   deny    hosts = partial-lsearch;/etc/exim/blocked-hosts
>   deny    hosts = lsearch;/etc/exim/blocked-ip


Those will search using the host name. If you want to search using the
IP address, use net-lsearch. If you want to search using CIDR blocks as
keys, use (e.g.) net24-lsearch. See section 10.9 (last two bullets).

--
Philip Hazel            University of Cambridge Computing Service,
ph10@???      Cambridge, England. Phone: +44 1223 334714.