> > deny !hosts = +local_net : +secondary_mx
> > !verify = sender/callout=30s
>
> > How would you write that as a require (NOTE, I do want to check other acls
> > so an accept/endpass wasn't an option)
>
> You can't. The implication of "deny if *all* conditions are met" is
> "continue if *some* conditions are met". However, require will
> continue only if *all* of its conditions are met.
Thats exactly what I was thinking and why I had to change it to deny.
Personally, I don't like the require verb.
