diff --git a/doc/doc-docbook/spec.xfpt b/doc/doc-docbook/spec.xfpt
index 9b8c92bbd6..56a8ef1932 100644
--- a/doc/doc-docbook/spec.xfpt
+++ b/doc/doc-docbook/spec.xfpt
@@ -15847,6 +15847,20 @@ means that DNSSEC will not work with Exim on that platform either, unless Exim
 is linked against an alternative DNS client library.
 
 
+.new
+.option dnslist_valid_addresses main "host list&!!" &`127.0.0.0/8`&
+.cindex "dnslists ACL condition" "valid addresses"
+This option specifies IP addresses that are acceptable in dnslist responses.
+
+Responses containing address records that do not match this list will be logged
+as an error and ignored. This helps identify list domains that have been taken
+over by a domain-parking registrar.
+
+The variable &$dnslist_domain$& contains the name of the overall domain that
+matched (for example, &`spamhaus.example`&).
+.wen
+
+
 .option drop_cr main boolean false
 This is an obsolete option that is now a no-op. It used to affect the way Exim
 handled CR and LF characters in incoming messages. What happens now is
@@ -32445,6 +32459,12 @@ connection (assuming long-enough TTL).
 Exim does not share information between multiple incoming
 connections (but your local name server cache should be active).
 
+.new
+DNS list responses are filtered using the &%dnslist_valid_addresses%& host list
+before use to protect against list domains that have been taken over by a
+domain-parking registrar and no longer return values in the 127.0.0.0/8 range.
+.wen
+
 There are a number of DNS lists to choose from, some commercial, some free,
 or free for small deployments.  An overview can be found at
 &url(https://en.wikipedia.org/wiki/Comparison_of_DNS_blacklists).
diff --git a/src/src/dnsbl.c b/src/src/dnsbl.c
index ad36e8ecbc..f15a74374e 100644
--- a/src/src/dnsbl.c
+++ b/src/src/dnsbl.c
@@ -203,6 +203,8 @@ if (cb->rc == DNS_SUCCEED)
   {
   dns_address * da = NULL;
   uschar *addlist = cb->rhs->address;
+  uschar *orig_dnslist_domain = NULL;
+  int filter_rc = FAIL;
 
   /* For A and AAAA records, there may be multiple addresses from multiple
   records. For A6 records (currently not expected to be used) there may be
@@ -214,6 +216,76 @@ if (cb->rc == DNS_SUCCEED)
   HDEBUG(D_dnsbl) debug_printf("DNS lookup for %s succeeded (yielding %s)\n",
     query, addlist);
 
+  /* Make dnslist_domain available to dnslist_valid_addresses expansion. */
+  orig_dnslist_domain = dnslist_domain;
+  dnslist_domain = domain_txt;
+
+  for (da = cb->rhs; da; da = da->next)
+    {
+    switch (verify_check_this_host(&dnslist_valid_addresses, NULL, US"", da->address, NULL))
+      {
+      case OK:
+        da->dnsbl_invalid = FALSE;
+
+        if (filter_rc != DEFER)
+          filter_rc = OK;
+        break;
+
+      case FAIL:
+        da->dnsbl_invalid = TRUE;
+        addlist = NULL;
+
+        log_write(0, LOG_MAIN,
+          "DNS list lookup for %s at %s returned %s;"
+          " invalid address discarded",
+          keydomain, domain, da->address);
+        break;
+
+      case DEFER:
+        log_write(0, LOG_MAIN,
+          "DNS list lookup for %s at %s returned %s;"
+          " unable to verify, returned DEFER",
+          keydomain, domain, da->address);
+
+        filter_rc = DEFER;
+        break;
+      }
+    }
+
+  dnslist_domain = orig_dnslist_domain;
+
+  if (filter_rc == FAIL)
+    {
+    HDEBUG(D_dnsbl)
+      {
+        debug_printf("=> all addresses are invalid\n");
+        debug_printf("=> that means %s is not listed at %s\n",
+          keydomain, domain);
+      }
+    }
+
+  if (filter_rc != OK) return filter_rc;
+
+  /* Need to recreate addlist without filtered addresses. */
+  if (addlist == NULL)
+    {
+    for (da = cb->rhs; da; da = da->next)
+      {
+      if (da->dnsbl_invalid)
+        continue;
+
+      if (addlist == NULL)
+        addlist = da->address;
+      else
+        addlist = string_sprintf("%s, %s", addlist, da->address);
+      }
+
+    HDEBUG(D_dnsbl)
+      {
+        debug_printf("=> updated address list: %s\n", addlist);
+      }
+    }
+
   /* Address list check; this can be either for equality, or via a bitmask.
   In the latter case, all the bits must match. */
 
@@ -225,6 +297,9 @@ if (cb->rc == DNS_SUCCEED)
       const uschar *ptr = iplist;
       uschar *res;
 
+      if (da->dnsbl_invalid)
+        continue;
+
       /* Handle exact matching */
 
       if (!bitmask)
@@ -249,14 +324,7 @@ if (cb->rc == DNS_SUCCEED)
         We change this only for IPv4 addresses in the list. */
 
         if (host_aton(da->address, address) == 1)
-	  if ((address[0] & 0xff000000) != 0x7f000000)    /* 127.0.0.0/8 */
-	    log_write(0, LOG_MAIN,
-	      "DNS list lookup for %s at %s returned %s;"
-	      " not in 127.0/8 and discarded",
-	      keydomain, domain, da->address);
-
-	  else
-	    mask = address[0];
+          mask = address[0];
 
         /* Scan the returned addresses, skipping any that are IPv6 */
 
@@ -311,33 +379,6 @@ if (cb->rc == DNS_SUCCEED)
       }
     }
 
-  /* No address list check; discard any illegal returns and give up if
-  none remain. */
-
-  else
-    {
-    BOOL ok = FALSE;
-    for (da = cb->rhs; da; da = da->next)
-      {
-      int address[4];
-
-      if (  host_aton(da->address, address) == 1		/* ipv4 */
-	 && (address[0] & 0xff000000) == 0x7f000000	/* 127.0.0.0/8 */
-	 )
-	ok = TRUE;
-      else
-	log_write(0, LOG_MAIN,
-	    "DNS list lookup for %s at %s returned %s;"
-	    " not in 127.0/8 and discarded",
-	    keydomain, domain, da->address);
-      }
-    if (!ok)
-      {
-      yield = FAIL;
-      goto out;
-      }
-    }
-
   /* Either there was no IP list, or the record matched, implying that the
   domain is on the list. We now want to find a corresponding TXT record. If an
   alternate domain is specified for the TXT record, call this function
diff --git a/src/src/globals.c b/src/src/globals.c
index c45e8a9308..e8e791dea5 100644
--- a/src/src/globals.c
+++ b/src/src/globals.c
@@ -895,6 +895,7 @@ int     dns_use_edns0          = -1; /* <0 = not coerced */
 uschar *dnslist_domain         = NULL;
 uschar *dnslist_matched        = NULL;
 uschar *dnslist_text           = NULL;
+const uschar *dnslist_valid_addresses = US"127.0.0.0/8";
 uschar *dnslist_value          = NULL;
 tree_node *domainlist_anchor   = NULL;
 int     domainlist_count       = 0;
diff --git a/src/src/globals.h b/src/src/globals.h
index ed7cffb76c..2f4a9dc109 100644
--- a/src/src/globals.h
+++ b/src/src/globals.h
@@ -560,6 +560,7 @@ extern int     dns_use_edns0;          /* Coerce EDNS0 support on/off in resolve
 extern uschar *dnslist_domain;         /* DNS (black) list domain */
 extern uschar *dnslist_matched;        /* DNS (black) list matched key */
 extern uschar *dnslist_text;           /* DNS (black) list text message */
+extern const uschar *dnslist_valid_addresses; /* DNS list IP addresses that are considered valid (127.0.0.0/8) */
 extern uschar *dnslist_value;          /* DNS (black) list IP address */
 extern tree_node *domainlist_anchor;   /* Tree of defined domain lists */
 extern int     domainlist_count;       /* Number defined */
diff --git a/src/src/readconf.c b/src/src/readconf.c
index e8e310bebf..e8741e1f56 100644
--- a/src/src/readconf.c
+++ b/src/src/readconf.c
@@ -140,6 +140,7 @@ static optionlist optionlist_config[] = {
   { "dns_retry",                opt_int,         {&dns_retry} },
   { "dns_trust_aa",             opt_stringptr,   {&dns_trust_aa} },
   { "dns_use_edns0",            opt_int,         {&dns_use_edns0} },
+  { "dnslist_valid_addresses",  opt_stringptr,   {&dnslist_valid_addresses} },
  /* This option is now a no-op, retained for compatibility */
   { "drop_cr",                  opt_bool,        {&drop_cr} },
 /*********************************************************/
diff --git a/src/src/structs.h b/src/src/structs.h
index 9bfc8826b1..6782173e7c 100644
--- a/src/src/structs.h
+++ b/src/src/structs.h
@@ -796,6 +796,7 @@ address. */
 
 typedef struct dns_address {
   struct dns_address *next;
+  BOOL    dnsbl_invalid;
   uschar  address[1];
 } dns_address;
 
diff --git a/test/confs/0139 b/test/confs/0139
index 0c195c1f2c..012cf64791 100644
--- a/test/confs/0139
+++ b/test/confs/0139
@@ -8,6 +8,16 @@
 domainlist local_domains = exim.test.ex
 trusted_users = CALLER
 
+.ifdef DNSBL_127_255
+# Split into two /9s so that it's visible in the debug output
+dnslist_valid_addresses = ${if eq{$dnslist_domain}{rbl.test.ex}{!127.255.255.0/24 : 127.0.0.0/9 : 127.128.0.0/9}{127.0.0.0/8}}
+.endif
+
+.ifdef DNSBL_DEFER
+# Expansion failure
+dnslist_valid_addresses = ${if eq{intentional_expansion_failure
+.endif
+
 acl_smtp_helo = check_helo
 acl_smtp_rcpt = check_recipient
 acl_smtp_mail = check_mail
diff --git a/test/dnszones-src/db.test.ex b/test/dnszones-src/db.test.ex
index 8eeff20a20..69dde036ab 100644
--- a/test/dnszones-src/db.test.ex
+++ b/test/dnszones-src/db.test.ex
@@ -212,6 +212,15 @@ TTL=2 14.12.11.V4NET.rbl A 127.0.0.2
 105.13.13.V4NET.rbl    A   255.255.255.255
                        A   255.255.255.254
 
+; Configuration to consider 127.255.255.0/24 as invalid
+
+106.13.13.V4NET.rbl    A   127.255.255.255
+
+; Exact match along with invalid return value
+
+107.13.13.V4NET.rbl    A   127.0.0.1
+107.13.13.V4NET.rbl    A   128.0.0.0
+
 ; -------- Testing MX records --------
 
 mxcased      MX  5  ten-99.TEST.EX.
diff --git a/test/log/0509 b/test/log/0509
index f69f828e80..55398977a9 100644
--- a/test/log/0509
+++ b/test/log/0509
@@ -1,4 +1,4 @@
 1999-03-02 09:44:33 rbl.test.ex/<;1.2.3.4;V4NET.11.12.13
-1999-03-02 09:44:33 DNS list lookup for ten-1 at test.ex returned V4NET.0.0.1; not in 127.0/8 and discarded
+1999-03-02 09:44:33 DNS list lookup for ten-1 at test.ex returned V4NET.0.0.1; invalid address discarded
 1999-03-02 09:44:33 test.ex/a.b.c.d::ten-1::localhost
 1999-03-02 09:44:33 U=CALLER rejected connection in "connect" ACL
diff --git a/test/scripts/0000-Basic/0139 b/test/scripts/0000-Basic/0139
index 5a3473aa54..99b91d9337 100644
--- a/test/scripts/0000-Basic/0139
+++ b/test/scripts/0000-Basic/0139
@@ -65,4 +65,24 @@ exim -bh V4NET.13.13.105
 vrfy a@b
 quit
 ****
+exim -bh V4NET.13.13.106
+vrfy a@b
+quit
+****
+exim -DDNSBL_127_255 -bh V4NET.13.13.2
+vrfy a@b
+quit
+****
+exim -DDNSBL_127_255 -bh V4NET.13.13.106
+vrfy a@b
+quit
+****
+exim -DDNSBL_DEFER -bh V4NET.13.13.2
+vrfy a@b
+quit
+****
+exim -bh V4NET.13.13.107
+vrfy a@b
+quit
+****
 no_msglog_check
diff --git a/test/stderr/0139 b/test/stderr/0139
index eb73157706..946fda29ef 100644
--- a/test/stderr/0139
+++ b/test/stderr/0139
@@ -7,7 +7,7 @@
 >>> host in helo_try_verify_hosts? no (option unset)
 >>> host in helo_accept_junk_hosts? no (option unset)
 >>> using ACL "check_mail"
->>> processing "warn" (TESTSUITE/test-config 37)
+>>> processing "warn" (TESTSUITE/test-config 47)
 >>> check dnslists = rbl4.test.ex&0.0.0.6
 >>> dnslists check: rbl4.test.ex&0.0.0.6
 >>> new DNS lookup for 14.12.11.V4NET.rbl4.test.ex
@@ -15,50 +15,52 @@
 >>> DNS lookup for 14.12.11.V4NET.rbl4.test.ex failed
 >>> => that means V4NET.11.12.14 is not listed at rbl4.test.ex
 >>> warn: condition test failed in ACL "check_mail"
->>> processing "warn" (TESTSUITE/test-config 38)
+>>> processing "warn" (TESTSUITE/test-config 48)
 >>> check dnslists = rbl4.test.ex&127.0.0.3
 >>> dnslists check: rbl4.test.ex&127.0.0.3
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 14.12.11.V4NET.rbl4.test.ex failed
 >>> => that means V4NET.11.12.14 is not listed at rbl4.test.ex
 >>> warn: condition test failed in ACL "check_mail"
->>> processing "warn" (TESTSUITE/test-config 39)
+>>> processing "warn" (TESTSUITE/test-config 49)
 >>> check dnslists = rbl4.test.ex!&0.0.0.7
 >>> dnslists check: rbl4.test.ex!&0.0.0.7
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 14.12.11.V4NET.rbl4.test.ex failed
 >>> => that means V4NET.11.12.14 is not listed at rbl4.test.ex
 >>> warn: condition test failed in ACL "check_mail"
->>> processing "warn" (TESTSUITE/test-config 41)
+>>> processing "warn" (TESTSUITE/test-config 51)
 >>> check dnslists = rbl5.test.ex,rbl4.test.ex=127.0.0.128
 >>> dnslists check: rbl5.test.ex,rbl4.test.ex=127.0.0.128
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 14.12.11.V4NET.rbl4.test.ex failed
 >>> => that means V4NET.11.12.14 is not listed at rbl4.test.ex
 >>> warn: condition test failed in ACL "check_mail"
->>> processing "accept" (TESTSUITE/test-config 43)
+>>> processing "accept" (TESTSUITE/test-config 53)
 >>> accept: condition test succeeded in ACL "check_mail"
 >>> end of ACL "check_mail": ACCEPT
 >>> using ACL "check_recipient"
->>> processing "warn" (TESTSUITE/test-config 47)
+>>> processing "warn" (TESTSUITE/test-config 57)
 >>>   message: X-Warn: host is listed in $dnslist_domain but not =127.0.0.3${if def:dnslist_text{\n  $dnslist_text}}
 >>> check dnslists = rbl3.test.ex!=127.0.0.3
 >>> dnslists check: rbl3.test.ex!=127.0.0.3
 >>> new DNS lookup for 14.12.11.V4NET.rbl3.test.ex
 >>> dnslists: wrote cache entry, ttl=3600
 >>> DNS lookup for 14.12.11.V4NET.rbl3.test.ex succeeded (yielding 127.0.0.2)
+>>> 127.0.0.2 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
 >>> => that means V4NET.11.12.14 is listed at rbl3.test.ex
 >>> warn: condition test succeeded in ACL "check_recipient"
->>> processing "deny" (TESTSUITE/test-config 50)
+>>> processing "deny" (TESTSUITE/test-config 60)
 >>>   message: host is listed in $dnslist_domain with value 127.0.0.3${if def:dnslist_text{\n$dnslist_text}}
 >>> check dnslists = rbl3.test.ex=127.0.0.3
 >>> dnslists check: rbl3.test.ex=127.0.0.3
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 14.12.11.V4NET.rbl3.test.ex succeeded (yielding 127.0.0.2)
+>>> 127.0.0.2 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
 >>> => but we are not accepting this block class because
 >>> => there was no match for =127.0.0.3
 >>> deny: condition test failed in ACL "check_recipient"
->>> processing "require" (TESTSUITE/test-config 52)
+>>> processing "require" (TESTSUITE/test-config 62)
 >>> check verify = sender
 >>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
 >>> routing postmaster@exim.test.ex
@@ -73,7 +75,7 @@
 >>> routed by localuser router
 >>> ----------- end verify ------------
 >>> require: condition test succeeded in ACL "check_recipient"
->>> processing "deny" (TESTSUITE/test-config 53)
+>>> processing "deny" (TESTSUITE/test-config 63)
 >>>   message: unrouteable address
 >>> check !verify = recipient
 >>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
@@ -85,35 +87,37 @@
 >>> routed by localuser router
 >>> ----------- end verify ------------
 >>> deny: condition test failed in ACL "check_recipient"
->>> processing "accept" (TESTSUITE/test-config 55)
+>>> processing "accept" (TESTSUITE/test-config 65)
 >>> check domains = +local_domains
 >>> exim.test.ex in "exim.test.ex"? yes (matched "exim.test.ex")
 >>> exim.test.ex in "+local_domains"? yes (matched "+local_domains")
 >>> accept: condition test succeeded in ACL "check_recipient"
 >>> end of ACL "check_recipient": ACCEPT
 >>> using ACL "check_recipient"
->>> processing "warn" (TESTSUITE/test-config 47)
+>>> processing "warn" (TESTSUITE/test-config 57)
 >>>   message: X-Warn: host is listed in $dnslist_domain but not =127.0.0.3${if def:dnslist_text{\n  $dnslist_text}}
 >>> check dnslists = rbl3.test.ex!=127.0.0.3
 >>> dnslists check: rbl3.test.ex!=127.0.0.3
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 14.12.11.V4NET.rbl3.test.ex succeeded (yielding 127.0.0.2)
+>>> 127.0.0.2 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
 >>> => that means V4NET.11.12.14 is listed at rbl3.test.ex
 >>> warn: condition test succeeded in ACL "check_recipient"
->>> processing "deny" (TESTSUITE/test-config 50)
+>>> processing "deny" (TESTSUITE/test-config 60)
 >>>   message: host is listed in $dnslist_domain with value 127.0.0.3${if def:dnslist_text{\n$dnslist_text}}
 >>> check dnslists = rbl3.test.ex=127.0.0.3
 >>> dnslists check: rbl3.test.ex=127.0.0.3
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 14.12.11.V4NET.rbl3.test.ex succeeded (yielding 127.0.0.2)
+>>> 127.0.0.2 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
 >>> => but we are not accepting this block class because
 >>> => there was no match for =127.0.0.3
 >>> deny: condition test failed in ACL "check_recipient"
->>> processing "require" (TESTSUITE/test-config 52)
+>>> processing "require" (TESTSUITE/test-config 62)
 >>> check verify = sender
 >>> using cached sender verify result
 >>> require: condition test succeeded in ACL "check_recipient"
->>> processing "deny" (TESTSUITE/test-config 53)
+>>> processing "deny" (TESTSUITE/test-config 63)
 >>>   message: unrouteable address
 >>> check !verify = recipient
 >>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
@@ -122,7 +126,7 @@
 >>> routed by system_aliases router
 >>> ----------- end verify ------------
 >>> deny: condition test failed in ACL "check_recipient"
->>> processing "accept" (TESTSUITE/test-config 55)
+>>> processing "accept" (TESTSUITE/test-config 65)
 >>> check domains = +local_domains
 >>> exim.test.ex in "exim.test.ex"? yes (matched "exim.test.ex")
 >>> exim.test.ex in "+local_domains"? yes (matched "+local_domains")
@@ -139,7 +143,7 @@ LOG: 10HmaY-0005vi-00 <= postmaster@exim.test.ex H=[V4NET.11.12.14] P=smtp S=sss
 >>> host in helo_try_verify_hosts? no (option unset)
 >>> host in helo_accept_junk_hosts? no (option unset)
 >>> using ACL "check_mail"
->>> processing "warn" (TESTSUITE/test-config 37)
+>>> processing "warn" (TESTSUITE/test-config 47)
 >>> check dnslists = rbl4.test.ex&0.0.0.6
 >>> dnslists check: rbl4.test.ex&0.0.0.6
 >>> new DNS lookup for 15.12.11.V4NET.rbl4.test.ex
@@ -147,47 +151,49 @@ LOG: 10HmaY-0005vi-00 <= postmaster@exim.test.ex H=[V4NET.11.12.14] P=smtp S=sss
 >>> DNS lookup for 15.12.11.V4NET.rbl4.test.ex failed
 >>> => that means V4NET.11.12.15 is not listed at rbl4.test.ex
 >>> warn: condition test failed in ACL "check_mail"
->>> processing "warn" (TESTSUITE/test-config 38)
+>>> processing "warn" (TESTSUITE/test-config 48)
 >>> check dnslists = rbl4.test.ex&127.0.0.3
 >>> dnslists check: rbl4.test.ex&127.0.0.3
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 15.12.11.V4NET.rbl4.test.ex failed
 >>> => that means V4NET.11.12.15 is not listed at rbl4.test.ex
 >>> warn: condition test failed in ACL "check_mail"
->>> processing "warn" (TESTSUITE/test-config 39)
+>>> processing "warn" (TESTSUITE/test-config 49)
 >>> check dnslists = rbl4.test.ex!&0.0.0.7
 >>> dnslists check: rbl4.test.ex!&0.0.0.7
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 15.12.11.V4NET.rbl4.test.ex failed
 >>> => that means V4NET.11.12.15 is not listed at rbl4.test.ex
 >>> warn: condition test failed in ACL "check_mail"
->>> processing "warn" (TESTSUITE/test-config 41)
+>>> processing "warn" (TESTSUITE/test-config 51)
 >>> check dnslists = rbl5.test.ex,rbl4.test.ex=127.0.0.128
 >>> dnslists check: rbl5.test.ex,rbl4.test.ex=127.0.0.128
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 15.12.11.V4NET.rbl4.test.ex failed
 >>> => that means V4NET.11.12.15 is not listed at rbl4.test.ex
 >>> warn: condition test failed in ACL "check_mail"
->>> processing "accept" (TESTSUITE/test-config 43)
+>>> processing "accept" (TESTSUITE/test-config 53)
 >>> accept: condition test succeeded in ACL "check_mail"
 >>> end of ACL "check_mail": ACCEPT
 >>> using ACL "check_recipient"
->>> processing "warn" (TESTSUITE/test-config 47)
+>>> processing "warn" (TESTSUITE/test-config 57)
 >>>   message: X-Warn: host is listed in $dnslist_domain but not =127.0.0.3${if def:dnslist_text{\n  $dnslist_text}}
 >>> check dnslists = rbl3.test.ex!=127.0.0.3
 >>> dnslists check: rbl3.test.ex!=127.0.0.3
 >>> new DNS lookup for 15.12.11.V4NET.rbl3.test.ex
 >>> dnslists: wrote cache entry, ttl=3600
 >>> DNS lookup for 15.12.11.V4NET.rbl3.test.ex succeeded (yielding 127.0.0.3)
+>>> 127.0.0.3 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
 >>> => but we are not accepting this block class because
 >>> => there was an exclude match for =127.0.0.3
 >>> warn: condition test failed in ACL "check_recipient"
->>> processing "deny" (TESTSUITE/test-config 50)
+>>> processing "deny" (TESTSUITE/test-config 60)
 >>>   message: host is listed in $dnslist_domain with value 127.0.0.3${if def:dnslist_text{\n$dnslist_text}}
 >>> check dnslists = rbl3.test.ex=127.0.0.3
 >>> dnslists check: rbl3.test.ex=127.0.0.3
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 15.12.11.V4NET.rbl3.test.ex succeeded (yielding 127.0.0.3)
+>>> 127.0.0.3 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
 >>> => that means V4NET.11.12.15 is listed at rbl3.test.ex
 >>> deny: condition test succeeded in ACL "check_recipient"
 >>> end of ACL "check_recipient": DENY
@@ -201,40 +207,44 @@ LOG: H=[V4NET.11.12.15] F=<postmaster@exim.test.ex> rejected RCPT <userx@exim.te
 >>> host in helo_try_verify_hosts? no (option unset)
 >>> host in helo_accept_junk_hosts? no (option unset)
 >>> using ACL "check_mail"
->>> processing "warn" (TESTSUITE/test-config 37)
+>>> processing "warn" (TESTSUITE/test-config 47)
 >>> check dnslists = rbl4.test.ex&0.0.0.6
 >>> dnslists check: rbl4.test.ex&0.0.0.6
 >>> new DNS lookup for 20.12.11.V4NET.rbl4.test.ex
 >>> dnslists: wrote cache entry, ttl=3600
 >>> DNS lookup for 20.12.11.V4NET.rbl4.test.ex succeeded (yielding 127.0.0.6)
+>>> 127.0.0.6 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
 >>> => that means V4NET.11.12.20 is listed at rbl4.test.ex
 >>> warn: condition test succeeded in ACL "check_mail"
->>> processing "warn" (TESTSUITE/test-config 38)
+>>> processing "warn" (TESTSUITE/test-config 48)
 >>> check dnslists = rbl4.test.ex&127.0.0.3
 >>> dnslists check: rbl4.test.ex&127.0.0.3
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 20.12.11.V4NET.rbl4.test.ex succeeded (yielding 127.0.0.6)
+>>> 127.0.0.6 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
 >>> => but we are not accepting this block class because
 >>> => there was no match for &127.0.0.3
 >>> warn: condition test failed in ACL "check_mail"
->>> processing "warn" (TESTSUITE/test-config 39)
+>>> processing "warn" (TESTSUITE/test-config 49)
 >>> check dnslists = rbl4.test.ex!&0.0.0.7
 >>> dnslists check: rbl4.test.ex!&0.0.0.7
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 20.12.11.V4NET.rbl4.test.ex succeeded (yielding 127.0.0.6)
+>>> 127.0.0.6 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
 >>> => that means V4NET.11.12.20 is listed at rbl4.test.ex
 >>> check add_header = DNSlist: $dnslist_domain $dnslist_text $dnslist_matched
 >>>                  = DNSlist: rbl4.test.ex  V4NET.11.12.20
 >>> warn: condition test succeeded in ACL "check_mail"
->>> processing "warn" (TESTSUITE/test-config 41)
+>>> processing "warn" (TESTSUITE/test-config 51)
 >>> check dnslists = rbl5.test.ex,rbl4.test.ex=127.0.0.128
 >>> dnslists check: rbl5.test.ex,rbl4.test.ex=127.0.0.128
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 20.12.11.V4NET.rbl4.test.ex succeeded (yielding 127.0.0.6)
+>>> 127.0.0.6 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
 >>> => but we are not accepting this block class because
 >>> => there was no match for =127.0.0.128
 >>> warn: condition test failed in ACL "check_mail"
->>> processing "accept" (TESTSUITE/test-config 43)
+>>> processing "accept" (TESTSUITE/test-config 53)
 >>> accept: condition test succeeded in ACL "check_mail"
 >>> end of ACL "check_mail": ACCEPT
 >>> host in hosts_connection_nolog? no (option unset)
@@ -246,38 +256,42 @@ LOG: H=[V4NET.11.12.15] F=<postmaster@exim.test.ex> rejected RCPT <userx@exim.te
 >>> host in helo_try_verify_hosts? no (option unset)
 >>> host in helo_accept_junk_hosts? no (option unset)
 >>> using ACL "check_mail"
->>> processing "warn" (TESTSUITE/test-config 37)
+>>> processing "warn" (TESTSUITE/test-config 47)
 >>> check dnslists = rbl4.test.ex&0.0.0.6
 >>> dnslists check: rbl4.test.ex&0.0.0.6
 >>> new DNS lookup for 21.12.11.V4NET.rbl4.test.ex
 >>> dnslists: wrote cache entry, ttl=3600
 >>> DNS lookup for 21.12.11.V4NET.rbl4.test.ex succeeded (yielding 127.0.0.7)
+>>> 127.0.0.7 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
 >>> => that means V4NET.11.12.21 is listed at rbl4.test.ex
 >>> warn: condition test succeeded in ACL "check_mail"
->>> processing "warn" (TESTSUITE/test-config 38)
+>>> processing "warn" (TESTSUITE/test-config 48)
 >>> check dnslists = rbl4.test.ex&127.0.0.3
 >>> dnslists check: rbl4.test.ex&127.0.0.3
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 21.12.11.V4NET.rbl4.test.ex succeeded (yielding 127.0.0.7)
+>>> 127.0.0.7 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
 >>> => that means V4NET.11.12.21 is listed at rbl4.test.ex
 >>> warn: condition test succeeded in ACL "check_mail"
->>> processing "warn" (TESTSUITE/test-config 39)
+>>> processing "warn" (TESTSUITE/test-config 49)
 >>> check dnslists = rbl4.test.ex!&0.0.0.7
 >>> dnslists check: rbl4.test.ex!&0.0.0.7
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 21.12.11.V4NET.rbl4.test.ex succeeded (yielding 127.0.0.7)
+>>> 127.0.0.7 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
 >>> => but we are not accepting this block class because
 >>> => there was an exclude match for &0.0.0.7
 >>> warn: condition test failed in ACL "check_mail"
->>> processing "warn" (TESTSUITE/test-config 41)
+>>> processing "warn" (TESTSUITE/test-config 51)
 >>> check dnslists = rbl5.test.ex,rbl4.test.ex=127.0.0.128
 >>> dnslists check: rbl5.test.ex,rbl4.test.ex=127.0.0.128
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 21.12.11.V4NET.rbl4.test.ex succeeded (yielding 127.0.0.7)
+>>> 127.0.0.7 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
 >>> => but we are not accepting this block class because
 >>> => there was no match for =127.0.0.128
 >>> warn: condition test failed in ACL "check_mail"
->>> processing "accept" (TESTSUITE/test-config 43)
+>>> processing "accept" (TESTSUITE/test-config 53)
 >>> accept: condition test succeeded in ACL "check_mail"
 >>> end of ACL "check_mail": ACCEPT
 >>> host in hosts_connection_nolog? no (option unset)
@@ -290,7 +304,7 @@ LOG: H=[V4NET.11.12.15] F=<postmaster@exim.test.ex> rejected RCPT <userx@exim.te
 >>> host in helo_accept_junk_hosts? no (option unset)
 >>> a.b in helo_lookup_domains? no (end of list)
 >>> using ACL "check_helo"
->>> processing "warn" (TESTSUITE/test-config 21)
+>>> processing "warn" (TESTSUITE/test-config 31)
 >>> check dnslists = rbl2.test.ex!=127.0.0.3 : rbl3.test.ex=127.0.0.3
 >>> dnslists check: rbl2.test.ex!=127.0.0.3
 >>> new DNS lookup for 15.12.11.V4NET.rbl2.test.ex
@@ -301,9 +315,10 @@ LOG: H=[V4NET.11.12.15] F=<postmaster@exim.test.ex> rejected RCPT <userx@exim.te
 >>> new DNS lookup for 15.12.11.V4NET.rbl3.test.ex
 >>> dnslists: wrote cache entry, ttl=3600
 >>> DNS lookup for 15.12.11.V4NET.rbl3.test.ex succeeded (yielding 127.0.0.3)
+>>> 127.0.0.3 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
 >>> => that means V4NET.11.12.15 is listed at rbl3.test.ex
 >>> warn: condition test succeeded in ACL "check_helo"
->>> processing "accept" (TESTSUITE/test-config 22)
+>>> processing "accept" (TESTSUITE/test-config 32)
 >>> accept: condition test succeeded in ACL "check_helo"
 >>> end of ACL "check_helo": ACCEPT
 >>> host in hosts_connection_nolog? no (option unset)
@@ -316,74 +331,92 @@ LOG: H=[V4NET.11.12.15] F=<postmaster@exim.test.ex> rejected RCPT <userx@exim.te
 >>> host in helo_accept_junk_hosts? no (option unset)
 >>> host in smtp_accept_max_nonmail_hosts? yes (matched "*")
 >>> using ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 25)
+>>> processing "warn" (TESTSUITE/test-config 35)
 >>> check dnslists = rbl.test.ex=127.0.0.1
 >>> dnslists check: rbl.test.ex=127.0.0.1
 >>> new DNS lookup for 2.13.13.V4NET.rbl.test.ex
 >>> dnslists: wrote cache entry, ttl=3600
 >>> DNS lookup for 2.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 127.0.0.2)
+>>> 127.0.0.1 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> 127.0.0.2 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
 >>> => that means V4NET.13.13.2 is listed at rbl.test.ex
 >>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 26)
+>>> processing "warn" (TESTSUITE/test-config 36)
 >>> check dnslists = rbl.test.ex!=127.0.0.1
 >>> dnslists check: rbl.test.ex!=127.0.0.1
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 2.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 127.0.0.2)
+>>> 127.0.0.1 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> 127.0.0.2 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
 >>> => but we are not accepting this block class because
 >>> => there was an exclude match for =127.0.0.1
 >>> warn: condition test failed in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 27)
+>>> processing "warn" (TESTSUITE/test-config 37)
 >>> check dnslists = rbl.test.ex!=127.0.0.3
 >>> dnslists check: rbl.test.ex!=127.0.0.3
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 2.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 127.0.0.2)
+>>> 127.0.0.1 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> 127.0.0.2 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
 >>> => that means V4NET.13.13.2 is listed at rbl.test.ex
 >>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 28)
+>>> processing "warn" (TESTSUITE/test-config 38)
 >>> check dnslists = rbl.test.ex==127.0.0.1
 >>> dnslists check: rbl.test.ex==127.0.0.1
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 2.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 127.0.0.2)
+>>> 127.0.0.1 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> 127.0.0.2 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
 >>> => but we are not accepting this block class because
 >>> => there was an IP address that did not match for ==127.0.0.1
 >>> warn: condition test failed in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 29)
+>>> processing "warn" (TESTSUITE/test-config 39)
 >>> check dnslists = rbl.test.ex==127.0.0.1,127.0.0.2
 >>> dnslists check: rbl.test.ex==127.0.0.1,127.0.0.2
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 2.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 127.0.0.2)
+>>> 127.0.0.1 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> 127.0.0.2 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
 >>> => that means V4NET.13.13.2 is listed at rbl.test.ex
 >>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 30)
+>>> processing "warn" (TESTSUITE/test-config 40)
 >>> check dnslists = rbl.test.ex!==127.0.0.1
 >>> dnslists check: rbl.test.ex!==127.0.0.1
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 2.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 127.0.0.2)
+>>> 127.0.0.1 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> 127.0.0.2 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
 >>> => that means V4NET.13.13.2 is listed at rbl.test.ex
 >>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 31)
+>>> processing "warn" (TESTSUITE/test-config 41)
 >>> check dnslists = rbl.test.ex!==127.0.0.3
 >>> dnslists check: rbl.test.ex!==127.0.0.3
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 2.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 127.0.0.2)
+>>> 127.0.0.1 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> 127.0.0.2 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
 >>> => that means V4NET.13.13.2 is listed at rbl.test.ex
 >>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 32)
+>>> processing "warn" (TESTSUITE/test-config 42)
 >>> check dnslists = rbl.test.ex!==127.0.0.1,127.0.0.2
 >>> dnslists check: rbl.test.ex!==127.0.0.1,127.0.0.2
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 2.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 127.0.0.2)
+>>> 127.0.0.1 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> 127.0.0.2 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
 >>> => but we are not accepting this block class because
 >>> => there were no IP addresses that did not match for ==127.0.0.1,127.0.0.2
 >>> warn: condition test failed in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 33)
+>>> processing "warn" (TESTSUITE/test-config 43)
 >>> check dnslists = rbl.test.ex
 >>> dnslists check: rbl.test.ex
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 2.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 127.0.0.2)
+>>> 127.0.0.1 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> 127.0.0.2 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
 >>> => that means V4NET.13.13.2 is listed at rbl.test.ex
 >>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "accept" (TESTSUITE/test-config 34)
+>>> processing "accept" (TESTSUITE/test-config 44)
 >>> accept: condition test succeeded in ACL "check_vrfy"
 >>> end of ACL "check_vrfy": ACCEPT
 >>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
@@ -403,74 +436,98 @@ LOG: VRFY failed for a@b H=[V4NET.13.13.2]
 >>> host in helo_accept_junk_hosts? no (option unset)
 >>> host in smtp_accept_max_nonmail_hosts? yes (matched "*")
 >>> using ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 25)
+>>> processing "warn" (TESTSUITE/test-config 35)
 >>> check dnslists = rbl.test.ex=127.0.0.1
 >>> dnslists check: rbl.test.ex=127.0.0.1
 >>> new DNS lookup for 100.13.13.V4NET.rbl.test.ex
 >>> dnslists: wrote cache entry, ttl=3600
 >>> DNS lookup for 100.13.13.V4NET.rbl.test.ex succeeded (yielding 0.0.0.0)
->>> => but we are not accepting this block class because
->>> => there was no match for =127.0.0.1
+>>> 0.0.0.0 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.100 at rbl.test.ex returned 0.0.0.0; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.100 is not listed at rbl.test.ex
 >>> warn: condition test failed in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 26)
+>>> processing "warn" (TESTSUITE/test-config 36)
 >>> check dnslists = rbl.test.ex!=127.0.0.1
 >>> dnslists check: rbl.test.ex!=127.0.0.1
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 100.13.13.V4NET.rbl.test.ex succeeded (yielding 0.0.0.0)
->>> => that means V4NET.13.13.100 is listed at rbl.test.ex
->>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 27)
+>>> 0.0.0.0 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.100 at rbl.test.ex returned 0.0.0.0; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.100 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 37)
 >>> check dnslists = rbl.test.ex!=127.0.0.3
 >>> dnslists check: rbl.test.ex!=127.0.0.3
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 100.13.13.V4NET.rbl.test.ex succeeded (yielding 0.0.0.0)
->>> => that means V4NET.13.13.100 is listed at rbl.test.ex
->>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 28)
+>>> 0.0.0.0 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.100 at rbl.test.ex returned 0.0.0.0; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.100 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 38)
 >>> check dnslists = rbl.test.ex==127.0.0.1
 >>> dnslists check: rbl.test.ex==127.0.0.1
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 100.13.13.V4NET.rbl.test.ex succeeded (yielding 0.0.0.0)
->>> => but we are not accepting this block class because
->>> => there was an IP address that did not match for ==127.0.0.1
+>>> 0.0.0.0 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.100 at rbl.test.ex returned 0.0.0.0; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.100 is not listed at rbl.test.ex
 >>> warn: condition test failed in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 29)
+>>> processing "warn" (TESTSUITE/test-config 39)
 >>> check dnslists = rbl.test.ex==127.0.0.1,127.0.0.2
 >>> dnslists check: rbl.test.ex==127.0.0.1,127.0.0.2
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 100.13.13.V4NET.rbl.test.ex succeeded (yielding 0.0.0.0)
->>> => but we are not accepting this block class because
->>> => there was an IP address that did not match for ==127.0.0.1,127.0.0.2
+>>> 0.0.0.0 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.100 at rbl.test.ex returned 0.0.0.0; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.100 is not listed at rbl.test.ex
 >>> warn: condition test failed in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 30)
+>>> processing "warn" (TESTSUITE/test-config 40)
 >>> check dnslists = rbl.test.ex!==127.0.0.1
 >>> dnslists check: rbl.test.ex!==127.0.0.1
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 100.13.13.V4NET.rbl.test.ex succeeded (yielding 0.0.0.0)
->>> => that means V4NET.13.13.100 is listed at rbl.test.ex
->>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 31)
+>>> 0.0.0.0 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.100 at rbl.test.ex returned 0.0.0.0; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.100 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 41)
 >>> check dnslists = rbl.test.ex!==127.0.0.3
 >>> dnslists check: rbl.test.ex!==127.0.0.3
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 100.13.13.V4NET.rbl.test.ex succeeded (yielding 0.0.0.0)
->>> => that means V4NET.13.13.100 is listed at rbl.test.ex
->>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 32)
+>>> 0.0.0.0 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.100 at rbl.test.ex returned 0.0.0.0; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.100 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 42)
 >>> check dnslists = rbl.test.ex!==127.0.0.1,127.0.0.2
 >>> dnslists check: rbl.test.ex!==127.0.0.1,127.0.0.2
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 100.13.13.V4NET.rbl.test.ex succeeded (yielding 0.0.0.0)
->>> => that means V4NET.13.13.100 is listed at rbl.test.ex
->>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 33)
+>>> 0.0.0.0 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.100 at rbl.test.ex returned 0.0.0.0; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.100 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 43)
 >>> check dnslists = rbl.test.ex
 >>> dnslists check: rbl.test.ex
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 100.13.13.V4NET.rbl.test.ex succeeded (yielding 0.0.0.0)
-LOG: DNS list lookup for V4NET.13.13.100 at rbl.test.ex returned 0.0.0.0; not in 127.0/8 and discarded
+>>> 0.0.0.0 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.100 at rbl.test.ex returned 0.0.0.0; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.100 is not listed at rbl.test.ex
 >>> warn: condition test failed in ACL "check_vrfy"
->>> processing "accept" (TESTSUITE/test-config 34)
+>>> processing "accept" (TESTSUITE/test-config 44)
 >>> accept: condition test succeeded in ACL "check_vrfy"
 >>> end of ACL "check_vrfy": ACCEPT
 >>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
@@ -490,74 +547,98 @@ LOG: VRFY failed for a@b H=[V4NET.13.13.100]
 >>> host in helo_accept_junk_hosts? no (option unset)
 >>> host in smtp_accept_max_nonmail_hosts? yes (matched "*")
 >>> using ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 25)
+>>> processing "warn" (TESTSUITE/test-config 35)
 >>> check dnslists = rbl.test.ex=127.0.0.1
 >>> dnslists check: rbl.test.ex=127.0.0.1
 >>> new DNS lookup for 101.13.13.V4NET.rbl.test.ex
 >>> dnslists: wrote cache entry, ttl=3600
 >>> DNS lookup for 101.13.13.V4NET.rbl.test.ex succeeded (yielding 126.255.255.255)
->>> => but we are not accepting this block class because
->>> => there was no match for =127.0.0.1
+>>> 126.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.101 at rbl.test.ex returned 126.255.255.255; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.101 is not listed at rbl.test.ex
 >>> warn: condition test failed in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 26)
+>>> processing "warn" (TESTSUITE/test-config 36)
 >>> check dnslists = rbl.test.ex!=127.0.0.1
 >>> dnslists check: rbl.test.ex!=127.0.0.1
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 101.13.13.V4NET.rbl.test.ex succeeded (yielding 126.255.255.255)
->>> => that means V4NET.13.13.101 is listed at rbl.test.ex
->>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 27)
+>>> 126.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.101 at rbl.test.ex returned 126.255.255.255; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.101 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 37)
 >>> check dnslists = rbl.test.ex!=127.0.0.3
 >>> dnslists check: rbl.test.ex!=127.0.0.3
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 101.13.13.V4NET.rbl.test.ex succeeded (yielding 126.255.255.255)
->>> => that means V4NET.13.13.101 is listed at rbl.test.ex
->>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 28)
+>>> 126.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.101 at rbl.test.ex returned 126.255.255.255; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.101 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 38)
 >>> check dnslists = rbl.test.ex==127.0.0.1
 >>> dnslists check: rbl.test.ex==127.0.0.1
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 101.13.13.V4NET.rbl.test.ex succeeded (yielding 126.255.255.255)
->>> => but we are not accepting this block class because
->>> => there was an IP address that did not match for ==127.0.0.1
+>>> 126.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.101 at rbl.test.ex returned 126.255.255.255; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.101 is not listed at rbl.test.ex
 >>> warn: condition test failed in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 29)
+>>> processing "warn" (TESTSUITE/test-config 39)
 >>> check dnslists = rbl.test.ex==127.0.0.1,127.0.0.2
 >>> dnslists check: rbl.test.ex==127.0.0.1,127.0.0.2
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 101.13.13.V4NET.rbl.test.ex succeeded (yielding 126.255.255.255)
->>> => but we are not accepting this block class because
->>> => there was an IP address that did not match for ==127.0.0.1,127.0.0.2
+>>> 126.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.101 at rbl.test.ex returned 126.255.255.255; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.101 is not listed at rbl.test.ex
 >>> warn: condition test failed in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 30)
+>>> processing "warn" (TESTSUITE/test-config 40)
 >>> check dnslists = rbl.test.ex!==127.0.0.1
 >>> dnslists check: rbl.test.ex!==127.0.0.1
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 101.13.13.V4NET.rbl.test.ex succeeded (yielding 126.255.255.255)
->>> => that means V4NET.13.13.101 is listed at rbl.test.ex
->>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 31)
+>>> 126.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.101 at rbl.test.ex returned 126.255.255.255; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.101 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 41)
 >>> check dnslists = rbl.test.ex!==127.0.0.3
 >>> dnslists check: rbl.test.ex!==127.0.0.3
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 101.13.13.V4NET.rbl.test.ex succeeded (yielding 126.255.255.255)
->>> => that means V4NET.13.13.101 is listed at rbl.test.ex
->>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 32)
+>>> 126.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.101 at rbl.test.ex returned 126.255.255.255; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.101 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 42)
 >>> check dnslists = rbl.test.ex!==127.0.0.1,127.0.0.2
 >>> dnslists check: rbl.test.ex!==127.0.0.1,127.0.0.2
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 101.13.13.V4NET.rbl.test.ex succeeded (yielding 126.255.255.255)
->>> => that means V4NET.13.13.101 is listed at rbl.test.ex
->>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 33)
+>>> 126.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.101 at rbl.test.ex returned 126.255.255.255; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.101 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 43)
 >>> check dnslists = rbl.test.ex
 >>> dnslists check: rbl.test.ex
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 101.13.13.V4NET.rbl.test.ex succeeded (yielding 126.255.255.255)
-LOG: DNS list lookup for V4NET.13.13.101 at rbl.test.ex returned 126.255.255.255; not in 127.0/8 and discarded
+>>> 126.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.101 at rbl.test.ex returned 126.255.255.255; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.101 is not listed at rbl.test.ex
 >>> warn: condition test failed in ACL "check_vrfy"
->>> processing "accept" (TESTSUITE/test-config 34)
+>>> processing "accept" (TESTSUITE/test-config 44)
 >>> accept: condition test succeeded in ACL "check_vrfy"
 >>> end of ACL "check_vrfy": ACCEPT
 >>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
@@ -577,74 +658,98 @@ LOG: VRFY failed for a@b H=[V4NET.13.13.101]
 >>> host in helo_accept_junk_hosts? no (option unset)
 >>> host in smtp_accept_max_nonmail_hosts? yes (matched "*")
 >>> using ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 25)
+>>> processing "warn" (TESTSUITE/test-config 35)
 >>> check dnslists = rbl.test.ex=127.0.0.1
 >>> dnslists check: rbl.test.ex=127.0.0.1
 >>> new DNS lookup for 102.13.13.V4NET.rbl.test.ex
 >>> dnslists: wrote cache entry, ttl=3600
 >>> DNS lookup for 102.13.13.V4NET.rbl.test.ex succeeded (yielding 128.0.0.0)
->>> => but we are not accepting this block class because
->>> => there was no match for =127.0.0.1
+>>> 128.0.0.0 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.102 at rbl.test.ex returned 128.0.0.0; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.102 is not listed at rbl.test.ex
 >>> warn: condition test failed in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 26)
+>>> processing "warn" (TESTSUITE/test-config 36)
 >>> check dnslists = rbl.test.ex!=127.0.0.1
 >>> dnslists check: rbl.test.ex!=127.0.0.1
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 102.13.13.V4NET.rbl.test.ex succeeded (yielding 128.0.0.0)
->>> => that means V4NET.13.13.102 is listed at rbl.test.ex
->>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 27)
+>>> 128.0.0.0 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.102 at rbl.test.ex returned 128.0.0.0; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.102 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 37)
 >>> check dnslists = rbl.test.ex!=127.0.0.3
 >>> dnslists check: rbl.test.ex!=127.0.0.3
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 102.13.13.V4NET.rbl.test.ex succeeded (yielding 128.0.0.0)
->>> => that means V4NET.13.13.102 is listed at rbl.test.ex
->>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 28)
+>>> 128.0.0.0 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.102 at rbl.test.ex returned 128.0.0.0; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.102 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 38)
 >>> check dnslists = rbl.test.ex==127.0.0.1
 >>> dnslists check: rbl.test.ex==127.0.0.1
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 102.13.13.V4NET.rbl.test.ex succeeded (yielding 128.0.0.0)
->>> => but we are not accepting this block class because
->>> => there was an IP address that did not match for ==127.0.0.1
+>>> 128.0.0.0 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.102 at rbl.test.ex returned 128.0.0.0; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.102 is not listed at rbl.test.ex
 >>> warn: condition test failed in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 29)
+>>> processing "warn" (TESTSUITE/test-config 39)
 >>> check dnslists = rbl.test.ex==127.0.0.1,127.0.0.2
 >>> dnslists check: rbl.test.ex==127.0.0.1,127.0.0.2
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 102.13.13.V4NET.rbl.test.ex succeeded (yielding 128.0.0.0)
->>> => but we are not accepting this block class because
->>> => there was an IP address that did not match for ==127.0.0.1,127.0.0.2
+>>> 128.0.0.0 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.102 at rbl.test.ex returned 128.0.0.0; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.102 is not listed at rbl.test.ex
 >>> warn: condition test failed in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 30)
+>>> processing "warn" (TESTSUITE/test-config 40)
 >>> check dnslists = rbl.test.ex!==127.0.0.1
 >>> dnslists check: rbl.test.ex!==127.0.0.1
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 102.13.13.V4NET.rbl.test.ex succeeded (yielding 128.0.0.0)
->>> => that means V4NET.13.13.102 is listed at rbl.test.ex
->>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 31)
+>>> 128.0.0.0 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.102 at rbl.test.ex returned 128.0.0.0; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.102 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 41)
 >>> check dnslists = rbl.test.ex!==127.0.0.3
 >>> dnslists check: rbl.test.ex!==127.0.0.3
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 102.13.13.V4NET.rbl.test.ex succeeded (yielding 128.0.0.0)
->>> => that means V4NET.13.13.102 is listed at rbl.test.ex
->>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 32)
+>>> 128.0.0.0 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.102 at rbl.test.ex returned 128.0.0.0; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.102 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 42)
 >>> check dnslists = rbl.test.ex!==127.0.0.1,127.0.0.2
 >>> dnslists check: rbl.test.ex!==127.0.0.1,127.0.0.2
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 102.13.13.V4NET.rbl.test.ex succeeded (yielding 128.0.0.0)
->>> => that means V4NET.13.13.102 is listed at rbl.test.ex
->>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 33)
+>>> 128.0.0.0 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.102 at rbl.test.ex returned 128.0.0.0; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.102 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 43)
 >>> check dnslists = rbl.test.ex
 >>> dnslists check: rbl.test.ex
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 102.13.13.V4NET.rbl.test.ex succeeded (yielding 128.0.0.0)
-LOG: DNS list lookup for V4NET.13.13.102 at rbl.test.ex returned 128.0.0.0; not in 127.0/8 and discarded
+>>> 128.0.0.0 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.102 at rbl.test.ex returned 128.0.0.0; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.102 is not listed at rbl.test.ex
 >>> warn: condition test failed in ACL "check_vrfy"
->>> processing "accept" (TESTSUITE/test-config 34)
+>>> processing "accept" (TESTSUITE/test-config 44)
 >>> accept: condition test succeeded in ACL "check_vrfy"
 >>> end of ACL "check_vrfy": ACCEPT
 >>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
@@ -664,74 +769,98 @@ LOG: VRFY failed for a@b H=[V4NET.13.13.102]
 >>> host in helo_accept_junk_hosts? no (option unset)
 >>> host in smtp_accept_max_nonmail_hosts? yes (matched "*")
 >>> using ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 25)
+>>> processing "warn" (TESTSUITE/test-config 35)
 >>> check dnslists = rbl.test.ex=127.0.0.1
 >>> dnslists check: rbl.test.ex=127.0.0.1
 >>> new DNS lookup for 103.13.13.V4NET.rbl.test.ex
 >>> dnslists: wrote cache entry, ttl=3600
 >>> DNS lookup for 103.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255)
->>> => but we are not accepting this block class because
->>> => there was no match for =127.0.0.1
+>>> 255.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.103 at rbl.test.ex returned 255.255.255.255; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.103 is not listed at rbl.test.ex
 >>> warn: condition test failed in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 26)
+>>> processing "warn" (TESTSUITE/test-config 36)
 >>> check dnslists = rbl.test.ex!=127.0.0.1
 >>> dnslists check: rbl.test.ex!=127.0.0.1
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 103.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255)
->>> => that means V4NET.13.13.103 is listed at rbl.test.ex
->>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 27)
+>>> 255.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.103 at rbl.test.ex returned 255.255.255.255; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.103 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 37)
 >>> check dnslists = rbl.test.ex!=127.0.0.3
 >>> dnslists check: rbl.test.ex!=127.0.0.3
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 103.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255)
->>> => that means V4NET.13.13.103 is listed at rbl.test.ex
->>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 28)
+>>> 255.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.103 at rbl.test.ex returned 255.255.255.255; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.103 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 38)
 >>> check dnslists = rbl.test.ex==127.0.0.1
 >>> dnslists check: rbl.test.ex==127.0.0.1
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 103.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255)
->>> => but we are not accepting this block class because
->>> => there was an IP address that did not match for ==127.0.0.1
+>>> 255.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.103 at rbl.test.ex returned 255.255.255.255; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.103 is not listed at rbl.test.ex
 >>> warn: condition test failed in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 29)
+>>> processing "warn" (TESTSUITE/test-config 39)
 >>> check dnslists = rbl.test.ex==127.0.0.1,127.0.0.2
 >>> dnslists check: rbl.test.ex==127.0.0.1,127.0.0.2
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 103.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255)
->>> => but we are not accepting this block class because
->>> => there was an IP address that did not match for ==127.0.0.1,127.0.0.2
+>>> 255.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.103 at rbl.test.ex returned 255.255.255.255; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.103 is not listed at rbl.test.ex
 >>> warn: condition test failed in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 30)
+>>> processing "warn" (TESTSUITE/test-config 40)
 >>> check dnslists = rbl.test.ex!==127.0.0.1
 >>> dnslists check: rbl.test.ex!==127.0.0.1
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 103.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255)
->>> => that means V4NET.13.13.103 is listed at rbl.test.ex
->>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 31)
+>>> 255.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.103 at rbl.test.ex returned 255.255.255.255; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.103 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 41)
 >>> check dnslists = rbl.test.ex!==127.0.0.3
 >>> dnslists check: rbl.test.ex!==127.0.0.3
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 103.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255)
->>> => that means V4NET.13.13.103 is listed at rbl.test.ex
->>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 32)
+>>> 255.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.103 at rbl.test.ex returned 255.255.255.255; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.103 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 42)
 >>> check dnslists = rbl.test.ex!==127.0.0.1,127.0.0.2
 >>> dnslists check: rbl.test.ex!==127.0.0.1,127.0.0.2
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 103.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255)
->>> => that means V4NET.13.13.103 is listed at rbl.test.ex
->>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 33)
+>>> 255.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.103 at rbl.test.ex returned 255.255.255.255; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.103 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 43)
 >>> check dnslists = rbl.test.ex
 >>> dnslists check: rbl.test.ex
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 103.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255)
-LOG: DNS list lookup for V4NET.13.13.103 at rbl.test.ex returned 255.255.255.255; not in 127.0/8 and discarded
+>>> 255.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.103 at rbl.test.ex returned 255.255.255.255; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.103 is not listed at rbl.test.ex
 >>> warn: condition test failed in ACL "check_vrfy"
->>> processing "accept" (TESTSUITE/test-config 34)
+>>> processing "accept" (TESTSUITE/test-config 44)
 >>> accept: condition test succeeded in ACL "check_vrfy"
 >>> end of ACL "check_vrfy": ACCEPT
 >>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
@@ -751,75 +880,110 @@ LOG: VRFY failed for a@b H=[V4NET.13.13.103]
 >>> host in helo_accept_junk_hosts? no (option unset)
 >>> host in smtp_accept_max_nonmail_hosts? yes (matched "*")
 >>> using ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 25)
+>>> processing "warn" (TESTSUITE/test-config 35)
 >>> check dnslists = rbl.test.ex=127.0.0.1
 >>> dnslists check: rbl.test.ex=127.0.0.1
 >>> new DNS lookup for 104.13.13.V4NET.rbl.test.ex
 >>> dnslists: wrote cache entry, ttl=3600
 >>> DNS lookup for 104.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255, 127.0.0.0)
+>>> 255.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.104 at rbl.test.ex returned 255.255.255.255; invalid address discarded
+>>> 127.0.0.0 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> => updated address list: 127.0.0.0
 >>> => but we are not accepting this block class because
 >>> => there was no match for =127.0.0.1
 >>> warn: condition test failed in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 26)
+>>> processing "warn" (TESTSUITE/test-config 36)
 >>> check dnslists = rbl.test.ex!=127.0.0.1
 >>> dnslists check: rbl.test.ex!=127.0.0.1
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 104.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255, 127.0.0.0)
+>>> 255.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.104 at rbl.test.ex returned 255.255.255.255; invalid address discarded
+>>> 127.0.0.0 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> => updated address list: 127.0.0.0
 >>> => that means V4NET.13.13.104 is listed at rbl.test.ex
 >>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 27)
+>>> processing "warn" (TESTSUITE/test-config 37)
 >>> check dnslists = rbl.test.ex!=127.0.0.3
 >>> dnslists check: rbl.test.ex!=127.0.0.3
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 104.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255, 127.0.0.0)
+>>> 255.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.104 at rbl.test.ex returned 255.255.255.255; invalid address discarded
+>>> 127.0.0.0 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> => updated address list: 127.0.0.0
 >>> => that means V4NET.13.13.104 is listed at rbl.test.ex
 >>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 28)
+>>> processing "warn" (TESTSUITE/test-config 38)
 >>> check dnslists = rbl.test.ex==127.0.0.1
 >>> dnslists check: rbl.test.ex==127.0.0.1
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 104.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255, 127.0.0.0)
+>>> 255.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.104 at rbl.test.ex returned 255.255.255.255; invalid address discarded
+>>> 127.0.0.0 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> => updated address list: 127.0.0.0
 >>> => but we are not accepting this block class because
 >>> => there was an IP address that did not match for ==127.0.0.1
 >>> warn: condition test failed in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 29)
+>>> processing "warn" (TESTSUITE/test-config 39)
 >>> check dnslists = rbl.test.ex==127.0.0.1,127.0.0.2
 >>> dnslists check: rbl.test.ex==127.0.0.1,127.0.0.2
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 104.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255, 127.0.0.0)
+>>> 255.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.104 at rbl.test.ex returned 255.255.255.255; invalid address discarded
+>>> 127.0.0.0 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> => updated address list: 127.0.0.0
 >>> => but we are not accepting this block class because
 >>> => there was an IP address that did not match for ==127.0.0.1,127.0.0.2
 >>> warn: condition test failed in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 30)
+>>> processing "warn" (TESTSUITE/test-config 40)
 >>> check dnslists = rbl.test.ex!==127.0.0.1
 >>> dnslists check: rbl.test.ex!==127.0.0.1
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 104.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255, 127.0.0.0)
+>>> 255.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.104 at rbl.test.ex returned 255.255.255.255; invalid address discarded
+>>> 127.0.0.0 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> => updated address list: 127.0.0.0
 >>> => that means V4NET.13.13.104 is listed at rbl.test.ex
 >>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 31)
+>>> processing "warn" (TESTSUITE/test-config 41)
 >>> check dnslists = rbl.test.ex!==127.0.0.3
 >>> dnslists check: rbl.test.ex!==127.0.0.3
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 104.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255, 127.0.0.0)
+>>> 255.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.104 at rbl.test.ex returned 255.255.255.255; invalid address discarded
+>>> 127.0.0.0 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> => updated address list: 127.0.0.0
 >>> => that means V4NET.13.13.104 is listed at rbl.test.ex
 >>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 32)
+>>> processing "warn" (TESTSUITE/test-config 42)
 >>> check dnslists = rbl.test.ex!==127.0.0.1,127.0.0.2
 >>> dnslists check: rbl.test.ex!==127.0.0.1,127.0.0.2
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 104.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255, 127.0.0.0)
+>>> 255.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.104 at rbl.test.ex returned 255.255.255.255; invalid address discarded
+>>> 127.0.0.0 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> => updated address list: 127.0.0.0
 >>> => that means V4NET.13.13.104 is listed at rbl.test.ex
 >>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 33)
+>>> processing "warn" (TESTSUITE/test-config 43)
 >>> check dnslists = rbl.test.ex
 >>> dnslists check: rbl.test.ex
 >>> dnslists: using result of previous lookup
 >>> DNS lookup for 104.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255, 127.0.0.0)
-LOG: DNS list lookup for V4NET.13.13.104 at rbl.test.ex returned 255.255.255.255; not in 127.0/8 and discarded
+>>> 255.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.104 at rbl.test.ex returned 255.255.255.255; invalid address discarded
+>>> 127.0.0.0 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> => updated address list: 127.0.0.0
 >>> => that means V4NET.13.13.104 is listed at rbl.test.ex
 >>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "accept" (TESTSUITE/test-config 34)
+>>> processing "accept" (TESTSUITE/test-config 44)
 >>> accept: condition test succeeded in ACL "check_vrfy"
 >>> end of ACL "check_vrfy": ACCEPT
 >>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
@@ -839,75 +1003,317 @@ LOG: VRFY failed for a@b H=[V4NET.13.13.104]
 >>> host in helo_accept_junk_hosts? no (option unset)
 >>> host in smtp_accept_max_nonmail_hosts? yes (matched "*")
 >>> using ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 25)
+>>> processing "warn" (TESTSUITE/test-config 35)
 >>> check dnslists = rbl.test.ex=127.0.0.1
 >>> dnslists check: rbl.test.ex=127.0.0.1
 >>> new DNS lookup for 105.13.13.V4NET.rbl.test.ex
 >>> dnslists: wrote cache entry, ttl=3600
 >>> DNS lookup for 105.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255, 255.255.255.254)
+>>> 255.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.105 at rbl.test.ex returned 255.255.255.255; invalid address discarded
+>>> 255.255.255.254 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.105 at rbl.test.ex returned 255.255.255.254; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.105 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 36)
+>>> check dnslists = rbl.test.ex!=127.0.0.1
+>>> dnslists check: rbl.test.ex!=127.0.0.1
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 105.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255, 255.255.255.254)
+>>> 255.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.105 at rbl.test.ex returned 255.255.255.255; invalid address discarded
+>>> 255.255.255.254 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.105 at rbl.test.ex returned 255.255.255.254; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.105 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 37)
+>>> check dnslists = rbl.test.ex!=127.0.0.3
+>>> dnslists check: rbl.test.ex!=127.0.0.3
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 105.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255, 255.255.255.254)
+>>> 255.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.105 at rbl.test.ex returned 255.255.255.255; invalid address discarded
+>>> 255.255.255.254 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.105 at rbl.test.ex returned 255.255.255.254; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.105 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 38)
+>>> check dnslists = rbl.test.ex==127.0.0.1
+>>> dnslists check: rbl.test.ex==127.0.0.1
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 105.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255, 255.255.255.254)
+>>> 255.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.105 at rbl.test.ex returned 255.255.255.255; invalid address discarded
+>>> 255.255.255.254 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.105 at rbl.test.ex returned 255.255.255.254; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.105 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 39)
+>>> check dnslists = rbl.test.ex==127.0.0.1,127.0.0.2
+>>> dnslists check: rbl.test.ex==127.0.0.1,127.0.0.2
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 105.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255, 255.255.255.254)
+>>> 255.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.105 at rbl.test.ex returned 255.255.255.255; invalid address discarded
+>>> 255.255.255.254 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.105 at rbl.test.ex returned 255.255.255.254; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.105 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 40)
+>>> check dnslists = rbl.test.ex!==127.0.0.1
+>>> dnslists check: rbl.test.ex!==127.0.0.1
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 105.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255, 255.255.255.254)
+>>> 255.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.105 at rbl.test.ex returned 255.255.255.255; invalid address discarded
+>>> 255.255.255.254 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.105 at rbl.test.ex returned 255.255.255.254; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.105 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 41)
+>>> check dnslists = rbl.test.ex!==127.0.0.3
+>>> dnslists check: rbl.test.ex!==127.0.0.3
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 105.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255, 255.255.255.254)
+>>> 255.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.105 at rbl.test.ex returned 255.255.255.255; invalid address discarded
+>>> 255.255.255.254 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.105 at rbl.test.ex returned 255.255.255.254; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.105 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 42)
+>>> check dnslists = rbl.test.ex!==127.0.0.1,127.0.0.2
+>>> dnslists check: rbl.test.ex!==127.0.0.1,127.0.0.2
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 105.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255, 255.255.255.254)
+>>> 255.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.105 at rbl.test.ex returned 255.255.255.255; invalid address discarded
+>>> 255.255.255.254 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.105 at rbl.test.ex returned 255.255.255.254; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.105 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 43)
+>>> check dnslists = rbl.test.ex
+>>> dnslists check: rbl.test.ex
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 105.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255, 255.255.255.254)
+>>> 255.255.255.255 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.105 at rbl.test.ex returned 255.255.255.255; invalid address discarded
+>>> 255.255.255.254 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.105 at rbl.test.ex returned 255.255.255.254; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.105 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "accept" (TESTSUITE/test-config 44)
+>>> accept: condition test succeeded in ACL "check_vrfy"
+>>> end of ACL "check_vrfy": ACCEPT
+>>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
+>>> routing a@b
+>>> calling system_aliases router
+>>> system_aliases router declined for a@b
+>>> a in "userx"? no (end of list)
+>>> no more routers
+LOG: VRFY failed for a@b H=[V4NET.13.13.105]
+>>> host in hosts_connection_nolog? no (option unset)
+>>> host in host_lookup? no (option unset)
+>>> host in host_reject_connection? no (option unset)
+>>> host in sender_unqualified_hosts? no (option unset)
+>>> host in recipient_unqualified_hosts? no (option unset)
+>>> host in helo_verify_hosts? no (option unset)
+>>> host in helo_try_verify_hosts? no (option unset)
+>>> host in helo_accept_junk_hosts? no (option unset)
+>>> host in smtp_accept_max_nonmail_hosts? yes (matched "*")
+>>> using ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 35)
+>>> check dnslists = rbl.test.ex=127.0.0.1
+>>> dnslists check: rbl.test.ex=127.0.0.1
+>>> new DNS lookup for 106.13.13.V4NET.rbl.test.ex
+>>> dnslists: wrote cache entry, ttl=3600
+>>> DNS lookup for 106.13.13.V4NET.rbl.test.ex succeeded (yielding 127.255.255.255)
+>>> 127.255.255.255 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
 >>> => but we are not accepting this block class because
 >>> => there was no match for =127.0.0.1
 >>> warn: condition test failed in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 26)
+>>> processing "warn" (TESTSUITE/test-config 36)
 >>> check dnslists = rbl.test.ex!=127.0.0.1
 >>> dnslists check: rbl.test.ex!=127.0.0.1
 >>> dnslists: using result of previous lookup
->>> DNS lookup for 105.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255, 255.255.255.254)
->>> => that means V4NET.13.13.105 is listed at rbl.test.ex
+>>> DNS lookup for 106.13.13.V4NET.rbl.test.ex succeeded (yielding 127.255.255.255)
+>>> 127.255.255.255 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> => that means V4NET.13.13.106 is listed at rbl.test.ex
 >>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 27)
+>>> processing "warn" (TESTSUITE/test-config 37)
 >>> check dnslists = rbl.test.ex!=127.0.0.3
 >>> dnslists check: rbl.test.ex!=127.0.0.3
 >>> dnslists: using result of previous lookup
->>> DNS lookup for 105.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255, 255.255.255.254)
->>> => that means V4NET.13.13.105 is listed at rbl.test.ex
+>>> DNS lookup for 106.13.13.V4NET.rbl.test.ex succeeded (yielding 127.255.255.255)
+>>> 127.255.255.255 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> => that means V4NET.13.13.106 is listed at rbl.test.ex
 >>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 28)
+>>> processing "warn" (TESTSUITE/test-config 38)
 >>> check dnslists = rbl.test.ex==127.0.0.1
 >>> dnslists check: rbl.test.ex==127.0.0.1
 >>> dnslists: using result of previous lookup
->>> DNS lookup for 105.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255, 255.255.255.254)
+>>> DNS lookup for 106.13.13.V4NET.rbl.test.ex succeeded (yielding 127.255.255.255)
+>>> 127.255.255.255 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
 >>> => but we are not accepting this block class because
 >>> => there was an IP address that did not match for ==127.0.0.1
 >>> warn: condition test failed in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 29)
+>>> processing "warn" (TESTSUITE/test-config 39)
 >>> check dnslists = rbl.test.ex==127.0.0.1,127.0.0.2
 >>> dnslists check: rbl.test.ex==127.0.0.1,127.0.0.2
 >>> dnslists: using result of previous lookup
->>> DNS lookup for 105.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255, 255.255.255.254)
+>>> DNS lookup for 106.13.13.V4NET.rbl.test.ex succeeded (yielding 127.255.255.255)
+>>> 127.255.255.255 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
 >>> => but we are not accepting this block class because
 >>> => there was an IP address that did not match for ==127.0.0.1,127.0.0.2
 >>> warn: condition test failed in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 30)
+>>> processing "warn" (TESTSUITE/test-config 40)
 >>> check dnslists = rbl.test.ex!==127.0.0.1
 >>> dnslists check: rbl.test.ex!==127.0.0.1
 >>> dnslists: using result of previous lookup
->>> DNS lookup for 105.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255, 255.255.255.254)
->>> => that means V4NET.13.13.105 is listed at rbl.test.ex
+>>> DNS lookup for 106.13.13.V4NET.rbl.test.ex succeeded (yielding 127.255.255.255)
+>>> 127.255.255.255 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> => that means V4NET.13.13.106 is listed at rbl.test.ex
 >>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 31)
+>>> processing "warn" (TESTSUITE/test-config 41)
 >>> check dnslists = rbl.test.ex!==127.0.0.3
 >>> dnslists check: rbl.test.ex!==127.0.0.3
 >>> dnslists: using result of previous lookup
->>> DNS lookup for 105.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255, 255.255.255.254)
->>> => that means V4NET.13.13.105 is listed at rbl.test.ex
+>>> DNS lookup for 106.13.13.V4NET.rbl.test.ex succeeded (yielding 127.255.255.255)
+>>> 127.255.255.255 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> => that means V4NET.13.13.106 is listed at rbl.test.ex
 >>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 32)
+>>> processing "warn" (TESTSUITE/test-config 42)
 >>> check dnslists = rbl.test.ex!==127.0.0.1,127.0.0.2
 >>> dnslists check: rbl.test.ex!==127.0.0.1,127.0.0.2
 >>> dnslists: using result of previous lookup
->>> DNS lookup for 105.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255, 255.255.255.254)
->>> => that means V4NET.13.13.105 is listed at rbl.test.ex
+>>> DNS lookup for 106.13.13.V4NET.rbl.test.ex succeeded (yielding 127.255.255.255)
+>>> 127.255.255.255 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> => that means V4NET.13.13.106 is listed at rbl.test.ex
 >>> warn: condition test succeeded in ACL "check_vrfy"
->>> processing "warn" (TESTSUITE/test-config 33)
+>>> processing "warn" (TESTSUITE/test-config 43)
 >>> check dnslists = rbl.test.ex
 >>> dnslists check: rbl.test.ex
 >>> dnslists: using result of previous lookup
->>> DNS lookup for 105.13.13.V4NET.rbl.test.ex succeeded (yielding 255.255.255.255, 255.255.255.254)
-LOG: DNS list lookup for V4NET.13.13.105 at rbl.test.ex returned 255.255.255.255; not in 127.0/8 and discarded
-LOG: DNS list lookup for V4NET.13.13.105 at rbl.test.ex returned 255.255.255.254; not in 127.0/8 and discarded
+>>> DNS lookup for 106.13.13.V4NET.rbl.test.ex succeeded (yielding 127.255.255.255)
+>>> 127.255.255.255 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> => that means V4NET.13.13.106 is listed at rbl.test.ex
+>>> warn: condition test succeeded in ACL "check_vrfy"
+>>> processing "accept" (TESTSUITE/test-config 44)
+>>> accept: condition test succeeded in ACL "check_vrfy"
+>>> end of ACL "check_vrfy": ACCEPT
+>>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
+>>> routing a@b
+>>> calling system_aliases router
+>>> system_aliases router declined for a@b
+>>> a in "userx"? no (end of list)
+>>> no more routers
+LOG: VRFY failed for a@b H=[V4NET.13.13.106]
+>>> host in hosts_connection_nolog? no (option unset)
+>>> host in host_lookup? no (option unset)
+>>> host in host_reject_connection? no (option unset)
+>>> host in sender_unqualified_hosts? no (option unset)
+>>> host in recipient_unqualified_hosts? no (option unset)
+>>> host in helo_verify_hosts? no (option unset)
+>>> host in helo_try_verify_hosts? no (option unset)
+>>> host in helo_accept_junk_hosts? no (option unset)
+>>> host in smtp_accept_max_nonmail_hosts? yes (matched "*")
+>>> using ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 35)
+>>> check dnslists = rbl.test.ex=127.0.0.1
+>>> dnslists check: rbl.test.ex=127.0.0.1
+>>> new DNS lookup for 2.13.13.V4NET.rbl.test.ex
+>>> dnslists: wrote cache entry, ttl=3600
+>>> DNS lookup for 2.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 127.0.0.2)
+>>> 127.0.0.1 in dnslist_valid_addresses? yes (matched "127.0.0.0/9")
+>>> 127.0.0.2 in dnslist_valid_addresses? yes (matched "127.0.0.0/9")
+>>> => that means V4NET.13.13.2 is listed at rbl.test.ex
+>>> warn: condition test succeeded in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 36)
+>>> check dnslists = rbl.test.ex!=127.0.0.1
+>>> dnslists check: rbl.test.ex!=127.0.0.1
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 2.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 127.0.0.2)
+>>> 127.0.0.1 in dnslist_valid_addresses? yes (matched "127.0.0.0/9")
+>>> 127.0.0.2 in dnslist_valid_addresses? yes (matched "127.0.0.0/9")
+>>> => but we are not accepting this block class because
+>>> => there was an exclude match for =127.0.0.1
 >>> warn: condition test failed in ACL "check_vrfy"
->>> processing "accept" (TESTSUITE/test-config 34)
+>>> processing "warn" (TESTSUITE/test-config 37)
+>>> check dnslists = rbl.test.ex!=127.0.0.3
+>>> dnslists check: rbl.test.ex!=127.0.0.3
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 2.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 127.0.0.2)
+>>> 127.0.0.1 in dnslist_valid_addresses? yes (matched "127.0.0.0/9")
+>>> 127.0.0.2 in dnslist_valid_addresses? yes (matched "127.0.0.0/9")
+>>> => that means V4NET.13.13.2 is listed at rbl.test.ex
+>>> warn: condition test succeeded in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 38)
+>>> check dnslists = rbl.test.ex==127.0.0.1
+>>> dnslists check: rbl.test.ex==127.0.0.1
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 2.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 127.0.0.2)
+>>> 127.0.0.1 in dnslist_valid_addresses? yes (matched "127.0.0.0/9")
+>>> 127.0.0.2 in dnslist_valid_addresses? yes (matched "127.0.0.0/9")
+>>> => but we are not accepting this block class because
+>>> => there was an IP address that did not match for ==127.0.0.1
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 39)
+>>> check dnslists = rbl.test.ex==127.0.0.1,127.0.0.2
+>>> dnslists check: rbl.test.ex==127.0.0.1,127.0.0.2
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 2.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 127.0.0.2)
+>>> 127.0.0.1 in dnslist_valid_addresses? yes (matched "127.0.0.0/9")
+>>> 127.0.0.2 in dnslist_valid_addresses? yes (matched "127.0.0.0/9")
+>>> => that means V4NET.13.13.2 is listed at rbl.test.ex
+>>> warn: condition test succeeded in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 40)
+>>> check dnslists = rbl.test.ex!==127.0.0.1
+>>> dnslists check: rbl.test.ex!==127.0.0.1
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 2.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 127.0.0.2)
+>>> 127.0.0.1 in dnslist_valid_addresses? yes (matched "127.0.0.0/9")
+>>> 127.0.0.2 in dnslist_valid_addresses? yes (matched "127.0.0.0/9")
+>>> => that means V4NET.13.13.2 is listed at rbl.test.ex
+>>> warn: condition test succeeded in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 41)
+>>> check dnslists = rbl.test.ex!==127.0.0.3
+>>> dnslists check: rbl.test.ex!==127.0.0.3
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 2.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 127.0.0.2)
+>>> 127.0.0.1 in dnslist_valid_addresses? yes (matched "127.0.0.0/9")
+>>> 127.0.0.2 in dnslist_valid_addresses? yes (matched "127.0.0.0/9")
+>>> => that means V4NET.13.13.2 is listed at rbl.test.ex
+>>> warn: condition test succeeded in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 42)
+>>> check dnslists = rbl.test.ex!==127.0.0.1,127.0.0.2
+>>> dnslists check: rbl.test.ex!==127.0.0.1,127.0.0.2
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 2.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 127.0.0.2)
+>>> 127.0.0.1 in dnslist_valid_addresses? yes (matched "127.0.0.0/9")
+>>> 127.0.0.2 in dnslist_valid_addresses? yes (matched "127.0.0.0/9")
+>>> => but we are not accepting this block class because
+>>> => there were no IP addresses that did not match for ==127.0.0.1,127.0.0.2
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 43)
+>>> check dnslists = rbl.test.ex
+>>> dnslists check: rbl.test.ex
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 2.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 127.0.0.2)
+>>> 127.0.0.1 in dnslist_valid_addresses? yes (matched "127.0.0.0/9")
+>>> 127.0.0.2 in dnslist_valid_addresses? yes (matched "127.0.0.0/9")
+>>> => that means V4NET.13.13.2 is listed at rbl.test.ex
+>>> warn: condition test succeeded in ACL "check_vrfy"
+>>> processing "accept" (TESTSUITE/test-config 44)
 >>> accept: condition test succeeded in ACL "check_vrfy"
 >>> end of ACL "check_vrfy": ACCEPT
 >>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
@@ -916,4 +1322,358 @@ LOG: DNS list lookup for V4NET.13.13.105 at rbl.test.ex returned 255.255.255.254
 >>> system_aliases router declined for a@b
 >>> a in "userx"? no (end of list)
 >>> no more routers
-LOG: VRFY failed for a@b H=[V4NET.13.13.105]
+LOG: VRFY failed for a@b H=[V4NET.13.13.2]
+>>> host in hosts_connection_nolog? no (option unset)
+>>> host in host_lookup? no (option unset)
+>>> host in host_reject_connection? no (option unset)
+>>> host in sender_unqualified_hosts? no (option unset)
+>>> host in recipient_unqualified_hosts? no (option unset)
+>>> host in helo_verify_hosts? no (option unset)
+>>> host in helo_try_verify_hosts? no (option unset)
+>>> host in helo_accept_junk_hosts? no (option unset)
+>>> host in smtp_accept_max_nonmail_hosts? yes (matched "*")
+>>> using ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 35)
+>>> check dnslists = rbl.test.ex=127.0.0.1
+>>> dnslists check: rbl.test.ex=127.0.0.1
+>>> new DNS lookup for 106.13.13.V4NET.rbl.test.ex
+>>> dnslists: wrote cache entry, ttl=3600
+>>> DNS lookup for 106.13.13.V4NET.rbl.test.ex succeeded (yielding 127.255.255.255)
+>>> 127.255.255.255 in dnslist_valid_addresses? no (matched "!127.255.255.0/24")
+LOG: DNS list lookup for V4NET.13.13.106 at rbl.test.ex returned 127.255.255.255; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.106 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 36)
+>>> check dnslists = rbl.test.ex!=127.0.0.1
+>>> dnslists check: rbl.test.ex!=127.0.0.1
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 106.13.13.V4NET.rbl.test.ex succeeded (yielding 127.255.255.255)
+>>> 127.255.255.255 in dnslist_valid_addresses? no (matched "!127.255.255.0/24")
+LOG: DNS list lookup for V4NET.13.13.106 at rbl.test.ex returned 127.255.255.255; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.106 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 37)
+>>> check dnslists = rbl.test.ex!=127.0.0.3
+>>> dnslists check: rbl.test.ex!=127.0.0.3
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 106.13.13.V4NET.rbl.test.ex succeeded (yielding 127.255.255.255)
+>>> 127.255.255.255 in dnslist_valid_addresses? no (matched "!127.255.255.0/24")
+LOG: DNS list lookup for V4NET.13.13.106 at rbl.test.ex returned 127.255.255.255; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.106 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 38)
+>>> check dnslists = rbl.test.ex==127.0.0.1
+>>> dnslists check: rbl.test.ex==127.0.0.1
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 106.13.13.V4NET.rbl.test.ex succeeded (yielding 127.255.255.255)
+>>> 127.255.255.255 in dnslist_valid_addresses? no (matched "!127.255.255.0/24")
+LOG: DNS list lookup for V4NET.13.13.106 at rbl.test.ex returned 127.255.255.255; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.106 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 39)
+>>> check dnslists = rbl.test.ex==127.0.0.1,127.0.0.2
+>>> dnslists check: rbl.test.ex==127.0.0.1,127.0.0.2
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 106.13.13.V4NET.rbl.test.ex succeeded (yielding 127.255.255.255)
+>>> 127.255.255.255 in dnslist_valid_addresses? no (matched "!127.255.255.0/24")
+LOG: DNS list lookup for V4NET.13.13.106 at rbl.test.ex returned 127.255.255.255; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.106 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 40)
+>>> check dnslists = rbl.test.ex!==127.0.0.1
+>>> dnslists check: rbl.test.ex!==127.0.0.1
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 106.13.13.V4NET.rbl.test.ex succeeded (yielding 127.255.255.255)
+>>> 127.255.255.255 in dnslist_valid_addresses? no (matched "!127.255.255.0/24")
+LOG: DNS list lookup for V4NET.13.13.106 at rbl.test.ex returned 127.255.255.255; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.106 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 41)
+>>> check dnslists = rbl.test.ex!==127.0.0.3
+>>> dnslists check: rbl.test.ex!==127.0.0.3
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 106.13.13.V4NET.rbl.test.ex succeeded (yielding 127.255.255.255)
+>>> 127.255.255.255 in dnslist_valid_addresses? no (matched "!127.255.255.0/24")
+LOG: DNS list lookup for V4NET.13.13.106 at rbl.test.ex returned 127.255.255.255; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.106 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 42)
+>>> check dnslists = rbl.test.ex!==127.0.0.1,127.0.0.2
+>>> dnslists check: rbl.test.ex!==127.0.0.1,127.0.0.2
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 106.13.13.V4NET.rbl.test.ex succeeded (yielding 127.255.255.255)
+>>> 127.255.255.255 in dnslist_valid_addresses? no (matched "!127.255.255.0/24")
+LOG: DNS list lookup for V4NET.13.13.106 at rbl.test.ex returned 127.255.255.255; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.106 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 43)
+>>> check dnslists = rbl.test.ex
+>>> dnslists check: rbl.test.ex
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 106.13.13.V4NET.rbl.test.ex succeeded (yielding 127.255.255.255)
+>>> 127.255.255.255 in dnslist_valid_addresses? no (matched "!127.255.255.0/24")
+LOG: DNS list lookup for V4NET.13.13.106 at rbl.test.ex returned 127.255.255.255; invalid address discarded
+>>> => all addresses are invalid
+>>> => that means V4NET.13.13.106 is not listed at rbl.test.ex
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "accept" (TESTSUITE/test-config 44)
+>>> accept: condition test succeeded in ACL "check_vrfy"
+>>> end of ACL "check_vrfy": ACCEPT
+>>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
+>>> routing a@b
+>>> calling system_aliases router
+>>> system_aliases router declined for a@b
+>>> a in "userx"? no (end of list)
+>>> no more routers
+LOG: VRFY failed for a@b H=[V4NET.13.13.106]
+>>> host in hosts_connection_nolog? no (option unset)
+>>> host in host_lookup? no (option unset)
+>>> host in host_reject_connection? no (option unset)
+>>> host in sender_unqualified_hosts? no (option unset)
+>>> host in recipient_unqualified_hosts? no (option unset)
+>>> host in helo_verify_hosts? no (option unset)
+>>> host in helo_try_verify_hosts? no (option unset)
+>>> host in helo_accept_junk_hosts? no (option unset)
+>>> host in smtp_accept_max_nonmail_hosts? yes (matched "*")
+>>> using ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 35)
+>>> check dnslists = rbl.test.ex=127.0.0.1
+>>> dnslists check: rbl.test.ex=127.0.0.1
+>>> new DNS lookup for 2.13.13.V4NET.rbl.test.ex
+>>> dnslists: wrote cache entry, ttl=3600
+>>> DNS lookup for 2.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 127.0.0.2)
+LOG: failed to expand "${if eq{intentional_expansion_failure" while checking a list: missing } at end of string
+LOG: DNS list lookup for V4NET.13.13.2 at rbl.test.ex returned 127.0.0.1; unable to verify, returned DEFER
+LOG: failed to expand "${if eq{intentional_expansion_failure" while checking a list: missing } at end of string
+LOG: DNS list lookup for V4NET.13.13.2 at rbl.test.ex returned 127.0.0.2; unable to verify, returned DEFER
+>>> warn: condition test deferred in ACL "check_vrfy"
+LOG: H=[V4NET.13.13.2] Warning: ACL "warn" statement skipped: condition test deferred
+>>> processing "warn" (TESTSUITE/test-config 36)
+>>> check dnslists = rbl.test.ex!=127.0.0.1
+>>> dnslists check: rbl.test.ex!=127.0.0.1
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 2.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 127.0.0.2)
+LOG: failed to expand "${if eq{intentional_expansion_failure" while checking a list: missing } at end of string
+LOG: DNS list lookup for V4NET.13.13.2 at rbl.test.ex returned 127.0.0.1; unable to verify, returned DEFER
+LOG: failed to expand "${if eq{intentional_expansion_failure" while checking a list: missing } at end of string
+LOG: DNS list lookup for V4NET.13.13.2 at rbl.test.ex returned 127.0.0.2; unable to verify, returned DEFER
+>>> warn: condition test deferred in ACL "check_vrfy"
+LOG: H=[V4NET.13.13.2] Warning: ACL "warn" statement skipped: condition test deferred
+>>> processing "warn" (TESTSUITE/test-config 37)
+>>> check dnslists = rbl.test.ex!=127.0.0.3
+>>> dnslists check: rbl.test.ex!=127.0.0.3
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 2.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 127.0.0.2)
+LOG: failed to expand "${if eq{intentional_expansion_failure" while checking a list: missing } at end of string
+LOG: DNS list lookup for V4NET.13.13.2 at rbl.test.ex returned 127.0.0.1; unable to verify, returned DEFER
+LOG: failed to expand "${if eq{intentional_expansion_failure" while checking a list: missing } at end of string
+LOG: DNS list lookup for V4NET.13.13.2 at rbl.test.ex returned 127.0.0.2; unable to verify, returned DEFER
+>>> warn: condition test deferred in ACL "check_vrfy"
+LOG: H=[V4NET.13.13.2] Warning: ACL "warn" statement skipped: condition test deferred
+>>> processing "warn" (TESTSUITE/test-config 38)
+>>> check dnslists = rbl.test.ex==127.0.0.1
+>>> dnslists check: rbl.test.ex==127.0.0.1
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 2.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 127.0.0.2)
+LOG: failed to expand "${if eq{intentional_expansion_failure" while checking a list: missing } at end of string
+LOG: DNS list lookup for V4NET.13.13.2 at rbl.test.ex returned 127.0.0.1; unable to verify, returned DEFER
+LOG: failed to expand "${if eq{intentional_expansion_failure" while checking a list: missing } at end of string
+LOG: DNS list lookup for V4NET.13.13.2 at rbl.test.ex returned 127.0.0.2; unable to verify, returned DEFER
+>>> warn: condition test deferred in ACL "check_vrfy"
+LOG: H=[V4NET.13.13.2] Warning: ACL "warn" statement skipped: condition test deferred
+>>> processing "warn" (TESTSUITE/test-config 39)
+>>> check dnslists = rbl.test.ex==127.0.0.1,127.0.0.2
+>>> dnslists check: rbl.test.ex==127.0.0.1,127.0.0.2
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 2.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 127.0.0.2)
+LOG: failed to expand "${if eq{intentional_expansion_failure" while checking a list: missing } at end of string
+LOG: DNS list lookup for V4NET.13.13.2 at rbl.test.ex returned 127.0.0.1; unable to verify, returned DEFER
+LOG: failed to expand "${if eq{intentional_expansion_failure" while checking a list: missing } at end of string
+LOG: DNS list lookup for V4NET.13.13.2 at rbl.test.ex returned 127.0.0.2; unable to verify, returned DEFER
+>>> warn: condition test deferred in ACL "check_vrfy"
+LOG: H=[V4NET.13.13.2] Warning: ACL "warn" statement skipped: condition test deferred
+>>> processing "warn" (TESTSUITE/test-config 40)
+>>> check dnslists = rbl.test.ex!==127.0.0.1
+>>> dnslists check: rbl.test.ex!==127.0.0.1
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 2.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 127.0.0.2)
+LOG: failed to expand "${if eq{intentional_expansion_failure" while checking a list: missing } at end of string
+LOG: DNS list lookup for V4NET.13.13.2 at rbl.test.ex returned 127.0.0.1; unable to verify, returned DEFER
+LOG: failed to expand "${if eq{intentional_expansion_failure" while checking a list: missing } at end of string
+LOG: DNS list lookup for V4NET.13.13.2 at rbl.test.ex returned 127.0.0.2; unable to verify, returned DEFER
+>>> warn: condition test deferred in ACL "check_vrfy"
+LOG: H=[V4NET.13.13.2] Warning: ACL "warn" statement skipped: condition test deferred
+>>> processing "warn" (TESTSUITE/test-config 41)
+>>> check dnslists = rbl.test.ex!==127.0.0.3
+>>> dnslists check: rbl.test.ex!==127.0.0.3
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 2.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 127.0.0.2)
+LOG: failed to expand "${if eq{intentional_expansion_failure" while checking a list: missing } at end of string
+LOG: DNS list lookup for V4NET.13.13.2 at rbl.test.ex returned 127.0.0.1; unable to verify, returned DEFER
+LOG: failed to expand "${if eq{intentional_expansion_failure" while checking a list: missing } at end of string
+LOG: DNS list lookup for V4NET.13.13.2 at rbl.test.ex returned 127.0.0.2; unable to verify, returned DEFER
+>>> warn: condition test deferred in ACL "check_vrfy"
+LOG: H=[V4NET.13.13.2] Warning: ACL "warn" statement skipped: condition test deferred
+>>> processing "warn" (TESTSUITE/test-config 42)
+>>> check dnslists = rbl.test.ex!==127.0.0.1,127.0.0.2
+>>> dnslists check: rbl.test.ex!==127.0.0.1,127.0.0.2
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 2.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 127.0.0.2)
+LOG: failed to expand "${if eq{intentional_expansion_failure" while checking a list: missing } at end of string
+LOG: DNS list lookup for V4NET.13.13.2 at rbl.test.ex returned 127.0.0.1; unable to verify, returned DEFER
+LOG: failed to expand "${if eq{intentional_expansion_failure" while checking a list: missing } at end of string
+LOG: DNS list lookup for V4NET.13.13.2 at rbl.test.ex returned 127.0.0.2; unable to verify, returned DEFER
+>>> warn: condition test deferred in ACL "check_vrfy"
+LOG: H=[V4NET.13.13.2] Warning: ACL "warn" statement skipped: condition test deferred
+>>> processing "warn" (TESTSUITE/test-config 43)
+>>> check dnslists = rbl.test.ex
+>>> dnslists check: rbl.test.ex
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 2.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 127.0.0.2)
+LOG: failed to expand "${if eq{intentional_expansion_failure" while checking a list: missing } at end of string
+LOG: DNS list lookup for V4NET.13.13.2 at rbl.test.ex returned 127.0.0.1; unable to verify, returned DEFER
+LOG: failed to expand "${if eq{intentional_expansion_failure" while checking a list: missing } at end of string
+LOG: DNS list lookup for V4NET.13.13.2 at rbl.test.ex returned 127.0.0.2; unable to verify, returned DEFER
+>>> warn: condition test deferred in ACL "check_vrfy"
+LOG: H=[V4NET.13.13.2] Warning: ACL "warn" statement skipped: condition test deferred
+>>> processing "accept" (TESTSUITE/test-config 44)
+>>> accept: condition test succeeded in ACL "check_vrfy"
+>>> end of ACL "check_vrfy": ACCEPT
+>>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
+>>> routing a@b
+>>> calling system_aliases router
+>>> system_aliases router declined for a@b
+>>> a in "userx"? no (end of list)
+>>> no more routers
+LOG: VRFY failed for a@b H=[V4NET.13.13.2]
+>>> host in hosts_connection_nolog? no (option unset)
+>>> host in host_lookup? no (option unset)
+>>> host in host_reject_connection? no (option unset)
+>>> host in sender_unqualified_hosts? no (option unset)
+>>> host in recipient_unqualified_hosts? no (option unset)
+>>> host in helo_verify_hosts? no (option unset)
+>>> host in helo_try_verify_hosts? no (option unset)
+>>> host in helo_accept_junk_hosts? no (option unset)
+>>> host in smtp_accept_max_nonmail_hosts? yes (matched "*")
+>>> using ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 35)
+>>> check dnslists = rbl.test.ex=127.0.0.1
+>>> dnslists check: rbl.test.ex=127.0.0.1
+>>> new DNS lookup for 107.13.13.V4NET.rbl.test.ex
+>>> dnslists: wrote cache entry, ttl=3600
+>>> DNS lookup for 107.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 128.0.0.0)
+>>> 127.0.0.1 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> 128.0.0.0 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.107 at rbl.test.ex returned 128.0.0.0; invalid address discarded
+>>> => updated address list: 127.0.0.1
+>>> => that means V4NET.13.13.107 is listed at rbl.test.ex
+>>> warn: condition test succeeded in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 36)
+>>> check dnslists = rbl.test.ex!=127.0.0.1
+>>> dnslists check: rbl.test.ex!=127.0.0.1
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 107.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 128.0.0.0)
+>>> 127.0.0.1 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> 128.0.0.0 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.107 at rbl.test.ex returned 128.0.0.0; invalid address discarded
+>>> => updated address list: 127.0.0.1
+>>> => but we are not accepting this block class because
+>>> => there was an exclude match for =127.0.0.1
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 37)
+>>> check dnslists = rbl.test.ex!=127.0.0.3
+>>> dnslists check: rbl.test.ex!=127.0.0.3
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 107.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 128.0.0.0)
+>>> 127.0.0.1 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> 128.0.0.0 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.107 at rbl.test.ex returned 128.0.0.0; invalid address discarded
+>>> => updated address list: 127.0.0.1
+>>> => that means V4NET.13.13.107 is listed at rbl.test.ex
+>>> warn: condition test succeeded in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 38)
+>>> check dnslists = rbl.test.ex==127.0.0.1
+>>> dnslists check: rbl.test.ex==127.0.0.1
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 107.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 128.0.0.0)
+>>> 127.0.0.1 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> 128.0.0.0 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.107 at rbl.test.ex returned 128.0.0.0; invalid address discarded
+>>> => updated address list: 127.0.0.1
+>>> => that means V4NET.13.13.107 is listed at rbl.test.ex
+>>> warn: condition test succeeded in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 39)
+>>> check dnslists = rbl.test.ex==127.0.0.1,127.0.0.2
+>>> dnslists check: rbl.test.ex==127.0.0.1,127.0.0.2
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 107.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 128.0.0.0)
+>>> 127.0.0.1 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> 128.0.0.0 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.107 at rbl.test.ex returned 128.0.0.0; invalid address discarded
+>>> => updated address list: 127.0.0.1
+>>> => that means V4NET.13.13.107 is listed at rbl.test.ex
+>>> warn: condition test succeeded in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 40)
+>>> check dnslists = rbl.test.ex!==127.0.0.1
+>>> dnslists check: rbl.test.ex!==127.0.0.1
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 107.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 128.0.0.0)
+>>> 127.0.0.1 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> 128.0.0.0 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.107 at rbl.test.ex returned 128.0.0.0; invalid address discarded
+>>> => updated address list: 127.0.0.1
+>>> => but we are not accepting this block class because
+>>> => there were no IP addresses that did not match for ==127.0.0.1
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 41)
+>>> check dnslists = rbl.test.ex!==127.0.0.3
+>>> dnslists check: rbl.test.ex!==127.0.0.3
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 107.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 128.0.0.0)
+>>> 127.0.0.1 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> 128.0.0.0 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.107 at rbl.test.ex returned 128.0.0.0; invalid address discarded
+>>> => updated address list: 127.0.0.1
+>>> => that means V4NET.13.13.107 is listed at rbl.test.ex
+>>> warn: condition test succeeded in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 42)
+>>> check dnslists = rbl.test.ex!==127.0.0.1,127.0.0.2
+>>> dnslists check: rbl.test.ex!==127.0.0.1,127.0.0.2
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 107.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 128.0.0.0)
+>>> 127.0.0.1 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> 128.0.0.0 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.107 at rbl.test.ex returned 128.0.0.0; invalid address discarded
+>>> => updated address list: 127.0.0.1
+>>> => but we are not accepting this block class because
+>>> => there were no IP addresses that did not match for ==127.0.0.1,127.0.0.2
+>>> warn: condition test failed in ACL "check_vrfy"
+>>> processing "warn" (TESTSUITE/test-config 43)
+>>> check dnslists = rbl.test.ex
+>>> dnslists check: rbl.test.ex
+>>> dnslists: using result of previous lookup
+>>> DNS lookup for 107.13.13.V4NET.rbl.test.ex succeeded (yielding 127.0.0.1, 128.0.0.0)
+>>> 127.0.0.1 in dnslist_valid_addresses? yes (matched "127.0.0.0/8")
+>>> 128.0.0.0 in dnslist_valid_addresses? no (end of list)
+LOG: DNS list lookup for V4NET.13.13.107 at rbl.test.ex returned 128.0.0.0; invalid address discarded
+>>> => updated address list: 127.0.0.1
+>>> => that means V4NET.13.13.107 is listed at rbl.test.ex
+>>> warn: condition test succeeded in ACL "check_vrfy"
+>>> processing "accept" (TESTSUITE/test-config 44)
+>>> accept: condition test succeeded in ACL "check_vrfy"
+>>> end of ACL "check_vrfy": ACCEPT
+>>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
+>>> routing a@b
+>>> calling system_aliases router
+>>> system_aliases router declined for a@b
+>>> a in "userx"? no (end of list)
+>>> no more routers
+LOG: VRFY failed for a@b H=[V4NET.13.13.107]
diff --git a/test/stdout/0139 b/test/stdout/0139
index 12764953f6..2e7ed8837c 100644
--- a/test/stdout/0139
+++ b/test/stdout/0139
@@ -119,3 +119,43 @@
 220 the.local.host.name ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
 550 <a@b> Unrouteable address
 221 the.local.host.name closing connection
+
+**** SMTP testing session as if from host V4NET.13.13.106
+**** but without any ident (RFC 1413) callback.
+**** This is not for real!
+
+220 the.local.host.name ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
+550 <a@b> Unrouteable address
+221 the.local.host.name closing connection
+
+**** SMTP testing session as if from host V4NET.13.13.2
+**** but without any ident (RFC 1413) callback.
+**** This is not for real!
+
+220 the.local.host.name ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
+550 <a@b> Unrouteable address
+221 the.local.host.name closing connection
+
+**** SMTP testing session as if from host V4NET.13.13.106
+**** but without any ident (RFC 1413) callback.
+**** This is not for real!
+
+220 the.local.host.name ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
+550 <a@b> Unrouteable address
+221 the.local.host.name closing connection
+
+**** SMTP testing session as if from host V4NET.13.13.2
+**** but without any ident (RFC 1413) callback.
+**** This is not for real!
+
+220 the.local.host.name ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
+550 <a@b> Unrouteable address
+221 the.local.host.name closing connection
+
+**** SMTP testing session as if from host V4NET.13.13.107
+**** but without any ident (RFC 1413) callback.
+**** This is not for real!
+
+220 the.local.host.name ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
+550 <a@b> Unrouteable address
+221 the.local.host.name closing connection