README, env file: Warn about open relay configuration

Addresses: #1405
This commit is contained in:
Rainer Rillke 2020-03-01 19:40:50 +01:00 committed by Erik Wramner
parent 30c57b944b
commit bcb7f40260
2 changed files with 4 additions and 1 deletions

View file

@ -298,7 +298,7 @@ Enables the Sender Rewriting Scheme. SRS is needed if your mail server acts as f
##### PERMIT_DOCKER
Set different options for mynetworks option (can be overwrite in postfix-main.cf)
Set different options for mynetworks option (can be overwrite in postfix-main.cf) **WARNING**: Adding the docker network's gateway to the list of trusted hosts, e.g. using the `network` or `connected-networks` option, can create an [**open relay**](https://en.wikipedia.org/wiki/Open_mail_relay), [for instance](https://github.com/tomav/docker-mailserver/issues/1405#issuecomment-590106498) if IPv6 is enabled on the host machine but not in Docker.
- **empty** => localhost only
- host => Add docker host (ipv4 only)
- network => Add the docker default bridge network (172.16.0.0/12); **WARNING**: `docker-compose` might use others (e.g. 192.168.0.0/16) use `PERMIT_DOCKER=connected-networks` in this case

View file

@ -20,6 +20,9 @@ ONE_DIR=0
POSTMASTER_ADDRESS=
# Set different options for mynetworks option (can be overwrite in postfix-main.cf)
# **WARNING**: Adding the docker network's gateway to the list of trusted hosts, e.g. using the `network` or
# `connected-networks` option, can create an open relay
# https://github.com/tomav/docker-mailserver/issues/1405#issuecomment-590106498
# empty => localhost only
# host => Add docker host (ipv4 only)
# network => Add all docker containers (ipv4 only)