Currently we're just supporting very primitive ingress / egress policies based solely on the country obtained from the respective IP address.
Nullnet should be able to use arbitrarily complex policy expressions to match network traffic based on multiple parameters that can be chained together via logical AND, OR, and parenthesis.
For this task we should reuse the library postfix-predicate-interpreter that was written for this exact purpose.
This task will also involve changing the current Nullnet configuration to support such policies both at a global and per-service level.
Currently we're just supporting very primitive ingress / egress policies based solely on the country obtained from the respective IP address.
Nullnet should be able to use arbitrarily complex policy expressions to match network traffic based on multiple parameters that can be chained together via logical
AND,OR, and parenthesis.For this task we should reuse the library
postfix-predicate-interpreterthat was written for this exact purpose.This task will also involve changing the current Nullnet configuration to support such policies both at a global and per-service level.