The last rule then checks to see whether
that network address is that of the new network, the one that should have no valid hosts on
it yet. If it is, the connection is deferred by returning $#t. Note that when the returned character
is t, other letters can follow it, and they will be ignored.
In addition to your rules, there are default rules present that can make your job easier. The
default rules perform access database lookups for entries in that database that begin with
the special prefix:
Srv_Features:
The connecting host??™s name, as taken from the $&{client_name} macro, is looked up first.
The connecting host??™s address, as taken from the $&{client_addr} macro, is looked up
second. If neither of those is found, the bare prefix is looked up. The earlier example, then,
if implemented in the access database, would look like this:
Srv_Features:127.0.0.1 e
Srv_Features: E
The character letters that are returned as values by the access database are the same as
those returned by your own rules, as shown in the table. Multiple letters can be returned,
where each must be separated from the others by a space:
Srv_Features:127.0.0.1 e b
The srv_feature access database decisions can be combined with access database decisions
made by other rule sets to create more complex decisions. For example:
Try_TLS:broken-host.domain NO
Srv_Features:your.
Pages:
1221
1222
1223
1224
1225
1226
1227
1228
1229
1230
1231
1232
1233
1234
1235
1236
1237
1238
1239
1240
1241
1242
1243
1244
1245