Yes, because those ranges belonged to virtual interfaces I previously had on my machine. I removed that already. Thank you for the comment, though!

On 2019-12-09 13:15, @lbutlr wrote:
On 09 Dec 2019, at 00:17, Felix Rubio <fe...@kngnt.org> wrote:

Allow unencrypted/unauthenticated users to submit mail from local (127.0.0.x) connections

There is no need for this, and it is dangerous. Just because a
connection is local doesn’t mean it is trustworthy.

   mynetworks = 127.0.0.0/24, 10.8.0.0/24, 172.17.0.0/16

You are allowing connections from not just the local machine, but also
from two private blocks of Its, meaning you are trusting every device
on your LAN to send unauthenticated mail.

Don’t do this.

I didn’t look any further because until you close this security hole,
none of the rest of your settings matter.

--
Don't believe what you are told. Double check.

Reply via email to