acl: add trusted_relay_hosts_ip list

For trusted hosts for which no reverse host lookup should be made.

2 files changed, 3 insertions, 0 deletions

diff --git a/conf.d/000_local.conf.example b/conf.d/000_local.conf.example
index edb41fa..7726655 100644
--- a/conf.d/000_local.conf.example
+++ b/conf.d/000_local.conf.example
@@ -18,6 +18,7 @@ primary_hostname =
 domainlist local_domains = @
 domainlist relay_to_domains =
 hostlist   relay_from_hosts = localhost
+hostlist   trusted_relay_hosts_ip =
 hostlist   trusted_relay_hosts =
 # (We rely upon hostname resolution working for localhost, because the default
 # uncommented configuration needs to work in IPv4-only environments.)
diff --git a/conf.d/020_acl.conf b/conf.d/020_acl.conf
index 04a5e0a..6d3addf 100644
--- a/conf.d/020_acl.conf
+++ b/conf.d/020_acl.conf
@@ -96,6 +96,8 @@ acl_mta_mail:
   require  acl           = acl_check_mail_introduction
            message       = Courtesy protocol violation: $acl_m_msg
 
+  accept   hosts         = +trusted_relay_hosts_ip
+
   require  verify        = reverse_host_lookup/defer_ok
            message       = HELO/EHLO mismatch.