github-com-docker-mailserver/docker-mailserver
1
0
Fork 0
mirror of https://github.com/docker-mailserver/docker-mailserver.git synced 2024-01-19 02:48:50 +00:00
Code Issues Projects Releases Wiki Activity

README, env file: Warn about open relay configuration

Browse source 
Addresses: #1405
This commit is contained in:
Rainer Rillke 2020-03-01 19:40:50 +01:00
parent 7f3fe45a83
commit 43df48cb06
2 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
README.md
View file

@ -298,7 +298,7 @@ Enables the Sender Rewriting Scheme. SRS is needed if your mail server acts as f
##### PERMIT_DOCKER ##### PERMIT_DOCKER
Set different options for mynetworks option (can be overwrite in postfix-main.cf) Set different options for mynetworks option (can be overwrite in postfix-main.cf) **WARNING**: Adding the docker network's gateway to the list of trusted hosts, e.g. using the `network` or `connected-networks` option, can create an [**open relay**](https://en.wikipedia.org/wiki/Open_mail_relay), [for instance](https://github.com/tomav/docker-mailserver/issues/1405#issuecomment-590106498) if IPv6 is enabled on the host machine but not in Docker.
- **empty** => localhost only - **empty** => localhost only
- host => Add docker host (ipv4 only) - host => Add docker host (ipv4 only)
- network => Add the docker default bridge network (172.16.0.0/12); **WARNING**: `docker-compose` might use others (e.g. 192.168.0.0/16) use `PERMIT_DOCKER=connected-networks` in this case - network => Add the docker default bridge network (172.16.0.0/12); **WARNING**: `docker-compose` might use others (e.g. 192.168.0.0/16) use `PERMIT_DOCKER=connected-networks` in this case

3
env-mailserver.dist
View file

@ -20,6 +20,9 @@ ONE_DIR=0
POSTMASTER_ADDRESS= POSTMASTER_ADDRESS=
# Set different options for mynetworks option (can be overwrite in postfix-main.cf) # Set different options for mynetworks option (can be overwrite in postfix-main.cf)
# **WARNING**: Adding the docker network's gateway to the list of trusted hosts, e.g. using the `network` or
# `connected-networks` option, can create an open relay
# https://github.com/tomav/docker-mailserver/issues/1405#issuecomment-590106498
# empty => localhost only # empty => localhost only
# host => Add docker host (ipv4 only) # host => Add docker host (ipv4 only)
# network => Add all docker containers (ipv4 only) # network => Add all docker containers (ipv4 only)