Re: How Can I Block certain IP's Within Range of mynetworks?

7 msg	Invalid Sender Address syntax
2 msg	high availability
2 msg	BFD (Brute Force Detection) & Postfix
5 msg	relay domain and forwarding
2 msg	dk-milter - emal size issues
5 msg	Mail sent from local machine shows undisclosed-...
16 msg	Sorting incoming mails according to rules
5 msg	Correct use of smtpd_tls_security_level
1 msg	graph queue sizes
6 msg	large deferred queue ('too many connections')
3 msg	To see IP's

How Can I Block certain IP's Within Range of my...
\ Vadim Pushkin (15 Jun 2007)
. \ MrC (15 Jun 2007)
. . \ Vadim Pushkin (15 Jun 2007)
. \ Noel Jones (15 Jun 2007)
. . \ Vadim Pushkin (15 Jun 2007)

8 msg	Question about adding a special header to emails
3 msg	rcpt count mismatch and corrupt queue file ?
2 msg	too many connections
11 msg	Whitelist broken email servers?
4 msg	Write failed in network_biopair_interop with er...
2 msg	Pattern-matching in HELO
3 msg	header_checks du jour
3 msg	Good Resource for additional Spam Blocking

Subject:	Re: How Can I Block certain IP's Within Range of mynetworks?
Group:	Postfix-users
From:	Vadim Pushkin
Date:	15 Jun 2007

Thank you Noel.

.vp

>At 01:55 PM 6/15/2007, Vadim Pushkin wrote:
>>Hello All;
>>
>>My mynetworks looks like the following:
>>
>>mynetworks = 127.0.0.0/8, 192.168.1.0/24, 10.10.10.0/24, 10.10.20.0/24
>>
>>I have a machine, 192.168.1.100, which I would like to prevent from using
>>my gateway. How can I write an ACL to prevent this, or a NOT statement to
>>mynetworks?
>
>you can use !192.168.1.100 as a NOT statement to remove the machine from
>mynetworks. This would still allow that machine to send local mail, but
>not relay to outside. Note that exceptions must be listed first.
>mynetworks = !192.168.1.100 ... other entries...
>
>If you need to block all mail from that machine, use a blacklist.
>smtpd_client_restrictions =
> check_client_access cidr:client_blacklist
>
># client_blacklist
>192.168.1.100 REJECT
>
>--
>Noel Jones
>