Package: postgrey Version: 1.34-1.1 Severity: normal Tags: ipv6 Hello,
according to man page --lookup-by-subnet is default. It should strip the last 8 bits from IP addresses. This isn't true querying IPv6 addresses. Greylisting with IPv6 client addresses works: $ nc ::1 10023 request=smtpd_access_policy protocol_state=RCPT protocol_name=SMTP helo_name=example.com queue_id=0 [email protected] [email protected] client_address=2001:db8::1 client_name= reverse_client_name= instance= action=DEFER_IF_PERMIT Greylisted, see http://postgrey.schweikert.ch/help/example.com.html $ nc ::1 10023 request=smtpd_access_policy protocol_state=RCPT protocol_name=SMTP helo_name=example.com queue_id=0 [email protected] [email protected] client_address=2001:db8::1 client_name= reverse_client_name= instance= action=PREPEND X-Greylist: delayed 327 seconds by postgrey-1.34 at example.com; <TIME> But a query with client address 2001:db8::2 still fails: $ nc ::1 10023 request=smtpd_access_policy protocol_state=RCPT protocol_name=SMTP helo_name=example.com queue_id=0 [email protected] [email protected] client_address=2001:db8::2 client_name= reverse_client_name= instance= action=DEFER_IF_PERMIT Greylisted, see http://postgrey.schweikert.ch/help/example.com.html If lookup-by-subnet works right the answer should be: action=DUNNO Since stripping the last 8 bits is no sensible default on IPv6 addresses documentation should state loopup-by-subnet won't work with IPv6 client addresses. -- cat /etc/default/postgrey | grep -v -e "#" -e "^$": POSTGREY_OPTS="--inet=10023" -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
