{
   use esmith::util::network qw(isValidIP);
   use Net::IPv4Addr qw(ipv4_in_network ipv4_parse);

   my $relayclients = ${qpsmtpd}{UnauthenticatedRelayClients} || return;
   my @relayclients = split /[,:]/, $relayclients;

   my $ndb = esmith::NetworksDB->open_ro();

   sub convert_to_cidr
   {
       $_ = shift;
       return "$_/32" unless m!/!;
       my ($ip,$bits) = ipv4_parse($_);
       return "$ip/$bits";
   }

   my @localAccess = map {
       convert_to_cidr($_)
   } $ndb->local_access_spec();

   foreach my $relayclient (@relayclients)
   {
       if (!isValidIP($relayclient))
       {
           $OUT .= "## $relayclient is not an IP\n";
       }
       elsif (grep { ipv4_in_network($_, $relayclient) } @localAccess)
       {
           $OUT .= "$relayclient\n";
       }
       else
       {
           $OUT .= "## $relayclient is not in any local network\n";
       }
   }
}
