Re: "Local whitelist" for the next restriction possible?

Michael Tokarev:
> For quite some time now I'm thinking about a
> sort of "local whitelist" for a given reject_mumble
> restriction. Ie, sometimes, a rule catches a good
> amount of spam but catches some legitimate hosts
> at the same time. So, I want to do something like:
>
> reject_rbl_client bl.example.com but not if
> client is a.b.c.d or c.d.e.f.

Assuming this is hostname based:

/etc/postfix/main.cf:
check_client_access regexp:/etc/postfix/bl.example.com

/etc/postfix/bl.example.com
/^a\.b\.c\.d$/ DUNNO
/^c\.d\.e\.f$/ DUNNO
/[a-z]/ reject_rbl_client bl.example.com

But it would be more robust if there were more control over the
order of hostname or network address lookup (or to introduce
check_client_address_access and check_client_hostname_access).

Of course, the proper solution for conditional processing is to
have a language with explicit conditional operators and expression
grouping.

Wietse