specific whitelisting - ReadList.com

2 msg	postfix + gmail + multiusers
2 msg	strange question regarding lmtp
3 msg	Updated amavisd-new; can't send/receive mail
8 msg	RPM 'n stuff
7 msg	DSN setup
4 msg	Local Users on Virtual Domains?
5 msg	postfix + courier + active directory 2003
12 msg	Fail to test postfix
2 msg	Global groups
7 msg	About creating database
3 msg	Misunderstanding of transport map format VS mas...
2 msg	Problems Backscatter
5 msg	question about receive_override_options

specific whitelisting
\ Pieter Geens (13 Jun 2007)
. \ Victor Duchovni (13 Jun 2007)
. . \ Pieter Geens (13 Jun 2007)
. . . \ Victor Duchovni (13 Jun 2007)

3 msg	Real unknown host ???
2 msg	Another question about logs...
4 msg	fallback_relay not getting used
3 msg	Maildir
6 msg	Outgoing Mail Copy
1 msg	Close to getting SASL and SMTP AUTH on OS X wor...

Subject:	specific whitelisting
Group:	Postfix-users
From:	Pieter Geens
Date:	13 Jun 2007

Hi

I want to whitelist certain domains for the
reject_unknown_reverse_client_hostname restriction, but still checking
the following restrictions in this restriction class
(check_policy_service, reject_rbl_client,...)
I suppose the first one is incorrect, but the 2nd would work. Can
someone verify this, or is there a better way to do it? What about
performance? are regexp maps faster than pcre?

Regards
Pieter

smtpd_recipient_restrictions =
...
permit_mynetworks,
permit_sasl_authenticated,
reject_unauth_destination,
check_client_access hash:/etc/postfix/checks/whitelist
reject_unknown_reverse_client_hostname,
check_policy_service inet:127.0.0.1:10031,
check_client_access pcre:/etc/postfix/checks/client_restrictions.pcre,
reject_rbl_client rbldnsd-virbl.dnsbl.bit.nl.dnsbl,
reject_rbl_client sbl.spamhaus.org.dnsbl,
...
permit

cat /etc/postfix/checks/whitelist
xxx.xxx.xxx.xxx DUNNO # whitelisted ip 1
xxx.xxx.xxx.xxy DUNNO # whitelisted ip 2

smtpd_recipient_restrictions =
...
permit_mynetworks,
permit_sasl_authenticated,
reject_unauth_destination,
check_client_access
pcre:/etc/postfix/checks/reject_unknown_reverse_client_hostname,
check_policy_service inet:127.0.0.1:10031,
check_client_access pcre:/etc/postfix/checks/client_restrictions.pcre,
reject_rbl_client rbldnsd-virbl.dnsbl.bit.nl.dnsbl,
...
permit

cat /etc/postfix/checks/reject_unknown_reverse_client_hostname
/xxx\.xxx\.xxx\.xxx/ DUNNO # whitelisted ip 1
/xxx\.xxx\.xxx\.xxy/ DUNNO # whitelisted ip 2
/.*/ reject_unknown_reverse_client_hostname