Henrik K wrote:
>> why link that to trusted_networks?

>
> Obviously the whole IP path must be trusted (excluding the last one). You
> can use hostnames as well. But then you have to have trust path right, to
> trust later hostnames.
>


maybe I misunderstood your "could even work ...".

>>> And perhaps it could support basic wildcards instead of regexps.

>> That's probably the best option.
>>
>> That said, it is not very satisfactory. mixing perl regexps and
>> "globbing" comes as a surprise to pcre users...

>
> Isn't the sender part globbed already?
>


yes it is. I was about that!