Re: Re[2]: how to block connections at TCP level?

[ On Tuesday, February 10, 2004 at 09:40:57 (+0300), Igor Lidin wrote: ]
> Subject: Re[2]: how to block connections at TCP level?
>
> Yes, surely. But when restriction is applyed at "recipient check"
> stage, the session is already established, and some bytes of traffic
> was sent and received. Even when restriction triggers at "client
> check" stage, postfix sends something like "554 service not available"
> and eats bytes of traffic.

Which is of course exactly my point. You cannot achieve what you seem
to wish with any application level policy controls. You must use a
packet filter at the IP level.

--
Greg A. Woods

+1 416 218-0098 VE3TCP RoboHack <woods@robohack.ca>
Planix, Inc. <woods@planix.com> Secrets of the Weird <woods@weird.com>