On Fri, 30 May 2003, Philip Hazel wrote:
> > deny dnslists = ! rbl-plus.mail-abuse.ja.net=127.1.0.2
> > dnslists = rbl-plus.mail-abuse.ja.net
>
> I think the answer has probably already been posted,
Indeed; correcting the issue[1] which was germane to this particular
query, the correct answer (due to Wakko Warner) was something like:
deny message = This IP is in rbl-plus for reason(s) other than DUL
! dnslists = rbl-plus.mail-abuse.ja.net=127.1.0.2
dnslists = rbl-plus.mail-abuse.ja.net
which saves having to enumerate 14 values, as had previously been
mooted. And, as -bh reveals, the DNS lookup is only done once, and
the result re-used.
> but, for the record:
>
> You can always repeat any condition in an ACL. They are processed in
> order, and this provides an "and" facility.
Right enough. However: in this case, the key issue, as I see it, was
about negation, which you haven't actually covered in your examples -
useful as those examples are in general terms ;-))
All's well that ends well.
cheers
[1] In fact, presenting my original incorrect ACL in the configuration
file didn't seem to produce any positive indication of error from
exim; the test just shambled along and produced a meaningless answer.
I'm not really complaining, but I might as well just paste a sample of
what happened:
>>> check dnslists = ! rbl-plus.mail-abuse.ja.net=127.1.0.2
>>> DNS list check: ! rbl-plus.mail-abuse.ja.net=127.1.0.2
>>> new DNS lookup for 1.215.114.211.! rbl-plus.mail-abuse.ja.net
>>> DNS lookup for 1.215.114.211.! rbl-plus.mail-abuse.ja.net failed
>>> => that means 211.114.215.1 is not listed at ! rbl-plus.mail-abuse.ja.net
>>> deny: condition test failed
