From: Carsten Haerle <carsten.haerle@straightec.de>
To: pmg-devel@lists.proxmox.com
Cc: Carsten Haerle <carsten.haerle@straightec.de>
Subject: [PATCH pmg-docs 6/6] mail proxy: networks: document automatically trusted networks
Date: Mon, 26 Oct 2026 10:58:51 +0100 [thread overview]
Message-ID: <20261026095852.3243241-7-carsten.haerle@straightec.de> (raw)
In-Reply-To: <20261026095852.3243241-1-carsten.haerle@straightec.de>
Document which networks are trusted in addition to the configured ones,
the new 'Trust Local Network' option and that host names of the default
relay and transport hosts are resolved when the configuration is
generated.
Signed-off-by: Carsten Haerle <carsten.haerle@straightec.de>
---
pmgconfig.adoc | 15 +++++++++++++--
1 file changed, 13 insertions(+), 2 deletions(-)
diff --git a/pmgconfig.adoc b/pmgconfig.adoc
index 00a988e..1269021 100644
--- a/pmgconfig.adoc
+++ b/pmgconfig.adoc
@@ -578,8 +578,19 @@ endif::manvolnum[]
You can add additional internal (trusted) IP networks or hosts. All hosts in
this list are allowed to relay.
-NOTE: Hosts in the same subnet as {pmg} can relay by default and don't need to
-be added to this list.
+In addition, the following networks are trusted automatically. They are shown
+greyed out in the list and cannot be edited there:
+
+* The network of the node's IP address, so hosts in the same subnet as {pmg} can
+ relay by default and don't need to be added to this list. You can disable
+ this with the option 'Trust Local Network' under 'Mail Proxy -> Options'.
+ Then only the networks in this list and the hosts below are trusted.
+
+* The default relay and the hosts of all transports, as they are the mail
+ servers that send outgoing mail through {pmg}. Host names are resolved when
+ the configuration is generated, that is, on configuration changes and at
+ boot. If the address of such a host changes, it is only updated with the next
+ configuration change.
[[pmgconfig_mailproxy_tls]]
--
2.53.0
prev parent reply other threads:[~2026-10-27 9:31 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-10-26 9:58 [PATCH pmg-api/pmg-gui/pmg-docs 0/6] fix #8231: mail proxy: make automatically trusted networks visible and the local network optional Carsten Haerle
2026-10-26 9:58 ` [PATCH pmg-api 1/6] fix #8231: config: add option to not trust the local network automatically Carsten Haerle
2026-10-26 9:58 ` [PATCH pmg-api 2/6] config: factor out automatically trusted networks Carsten Haerle
2026-10-26 9:58 ` [PATCH pmg-api 3/6] fix #8231: api: mynetworks: optionally list " Carsten Haerle
2026-10-26 9:58 ` [PATCH pmg-api 4/6] fix #8231: config: resolve relay and transport host names for mynetworks Carsten Haerle
2026-10-26 9:58 ` [PATCH pmg-gui 5/6] fix #8231: mail proxy: add trust local network option, show automatic networks Carsten Haerle
2026-10-26 9:58 ` Carsten Haerle [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20261026095852.3243241-7-carsten.haerle@straightec.de \
--to=carsten.haerle@straightec.de \
--cc=pmg-devel@lists.proxmox.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.