I just recalled one thing that I'd like to have changed in the smtppolicy processing: that's lookup direction from general to specific keys. Imagine that you have this: [0.0.0.0]/0 filtering + rbl + [123.45.67.0]/24 rejectnet + [123.45.67.8]/32 rejectnet - filtering - With the current code, 123.45.67.8 will have 'filtering' and 'rbl' disabled. I suggest to descend from the most generic pattern to the specific address, applying all matching in order. So, "filtering + rbl +" will apply to any address unless there is more specific match containing "filtering -" or "rbl -". In example above, we would get for 123.45.67.7 "filtering + rbl + rejectnet +", and for 123.45.67.8 - "rbl +" So, attributes should be "inherited" from more general specs, unless exmlicitely negated in more specific spec. And the same for domains. Sorry, I feel that my explanation is not quite clear, but I hope you get the point... Eugene
This is a digitally signed message part