postfix wildcard for subdomains

Question

I have a hash:/exclude.file in main.cf which checks for ips/domains to exclude them from rbl checks.
The exclude.file contains something like:
foo.com PERMIT
xx.yy.zz.ff PERMIT
but it does not catch foo.com's subdomains. It only works for IPs. I need something like:
*.foo.com PERMIT
Any way to use wildcards in there?

Answer 1

I'm guessing that you are using the check_client_access directive in smtpd_client_restrictions or maybe smtpd_recipient_restrictions.

The correct usage would be:

smtpd_client_restrictions =
    ... maybe permit_mynetworks, permit_sasl_authenticated etc...
    reject_unauth_destination,
    ... more checks ...
    check_client_access hash:/path/to/file,
    ... RBL etc...

It is important to reject_unaith_destination before checking client access, because if the check_client_access lookup returns PERMIT, you will be an open relay.

Then, so enable wildcard lookups on hostnames, use:

.domain.tld  PERMIT