From c86c97065357b1cca9601246cec74aa364a635f5 Mon Sep 17 00:00:00 2001 From: Jeremy Harris Date: Tue, 29 Nov 2022 11:59:21 +0000 Subject: [PATCH] Docs: update note on host_reject_connection --- doc/doc-docbook/spec.xfpt | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/doc/doc-docbook/spec.xfpt b/doc/doc-docbook/spec.xfpt index e7228c1ab..5b3436f74 100644 --- a/doc/doc-docbook/spec.xfpt +++ b/doc/doc-docbook/spec.xfpt @@ -16189,9 +16189,12 @@ case. That is why the default tries a DNS lookup first. .cindex "host" "rejecting connections from" If this option is set, incoming SMTP calls from the hosts listed are rejected as soon as the connection is made. -This option is obsolete, and retained only for backward compatibility, because +This option is mostly obsolete, retained for backward compatibility because nowadays the ACL specified by &%acl_smtp_connect%& can also reject incoming -connections immediately. +connections immediately +.new +(except for tls-on-connect connections). +.wen The ability to give an immediate rejection (either by this option or using an ACL) is provided for use in unusual cases. Many hosts will just try again, -- 2.30.2