On Thu, 29 May 2003, Ron McKeating wrote:
> Hang on a minute, are you saying if an IP address is in DUL and one of
> the others it will get through.
What I'm saying is that if your entry is nothing more than:
deny dnslists = rbl-plus.mail-abuse.ja.net=127.1.0.13
then it'll deny only when the lookup is precisely 127.1.0.13
If you want to deny other combinations too, then you'll need to
enumerate them, or try something more clever. Thinks...
Would it be possible to have an ACL entry with two dnslists clauses in
it? - like
deny dnslists = ! rbl-plus.mail-abuse.ja.net=127.1.0.2
dnslists = rbl-plus.mail-abuse.ja.net
I'd have thought that would let through those who are listed solely
in the DUL, and blocked all other listed IPs (even those that are also
listed in the DUL). Or am I missing a beat?
> My understanding was that if I used
> 127.1.0.13 it would hit any ip addr that was in any of those lists.
That isn't what the documentation says, is it?
http://www.exim.org/exim-html-4.20/doc/html/spec_37.html#IX2185
<quote>
For example,
deny dnslists = rblplus.mail-abuse.org=127.0.0.2
rejects only those hosts that yield 127.0.0.2.
</>
> Confused :-(
Don't be afraid to read the documentation whenever the symptoms recur
;-}
Now, I have to correct my earlier remark:
> > I was
> > reading a mail on this list under a different thread only a short time
> > ago which discussed this, and I thought gave a usable recipe, no?
In fact, I had misremembered scan-reading the thread "dnslists acl
wishlist", and the recipe had involved a patch, rather than simple
configuration. I guess a simple enumeration is what you want, after
all.
