On Thu, 20 Oct 2005 10:44:51 +0100 Jeremy Harris <jgh@???> wrote:
> Phil Chambers wrote:
> >>>Is there a way of doing the opposite of defer_ok? I could use a "defer_fail"
> >>>option so that I could treat defer as a hard failure. I would then want to
> >>>check to see if a defer occurred.
> >>
> >># Technique for explicitly seeing defers; credit andrew@???
> >>sverify_callout:
> >> warn set acl_c8 = defer
> >> accept verify = sender/callout=60s,random
> >> set acl_c8 = accept
> >> warn set acl_c8 = deny
> >> deny
> >
> >
> > I must have mis-understood something. As I see it from what happens on my
> > server, unless defer_ok is present, if a verify defers the ACL defers (be it
> > accept or deny). Given that, the above example would not work. Am I mistaken?
>
> No- but what you can do is to run the above as a subroutine:
>
> acl_verify_sender:
> warn acl = sverify_callout
> accept condition = ${if eq {$acl_c8}{accept}}
> deny condition = ${if eq {$acl_c8}{deny}}
> accept acl = sverify_deferred
>
>
> Cheers,
> Jeremy
Ah, very neat! I have now re-worked my ACLs to use your technique. Its just a
question of testing it before replacing my service configuration - easier said
than done.
Thanks for your help.
Phil.
---------------------------------------
Phil Chambers (postmaster@???)
University of Exeter
