Henrik K wrote:
>> why link that to trusted_networks?

> Obviously the whole IP path must be trusted (excluding the last one). You
> can use hostnames as well. But then you have to have trust path right, to
> trust later hostnames.

maybe I misunderstood your "could even work ...".

>>> And perhaps it could support basic wildcards instead of regexps.

>> That's probably the best option.
>> That said, it is not very satisfactory. mixing perl regexps and
>> "globbing" comes as a surprise to pcre users...

> Isn't the sender part globbed already?

yes it is. I was about that!