Deny smtp connectios

Hello,

 

 

I have two smtp servers behind a virtual server (f.e: 10.0.0.1).

 

 

Im trying to restrict the incomming connection only to the smtp_relay list.

 

 

snap of the code i'm trying to use inorder to apply the rule above

 

 
 when CLIENT_ACCEPTED { 
    if { [matchclass [IP::client_addr] equals $::smtp_relay ] } { 
      drop 
    } 
 } 
 

 

 

The code above fails to do that.

 

Any idea?

 

 

Regards,

 

Nir