From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from gate001.proxmox.com (gate001.proxmox.com [IPv6:2a0f:8001:1:32::40]) by lore.proxmox.com (Postfix) with ESMTPS id 14E251FF0B0 for ; Tue, 27 Oct 2026 10:31:39 +0100 (CET) Received: from gate001.proxmox.com (localhost.localdomain [127.0.0.1]) by gate001.proxmox.com (Proxmox) with ESMTP id 7A1F5216C4; Tue, 27 Oct 2026 10:31:31 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=straightec.de; s=dkim; t=1793008734; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=oRUgfu9q2h9nusPBUOwGS1ghJvdr5KfPDHzVnsg4ClA=; b=mXiSLYwKRY8w+oCnFdWpzf09EXUYBYy7IjMEc4LErZea08hbj/BngRvm3rW6y0vQ3rTWqB 529bxSqafwRGehYMoDyLCtkjDaFbRpbJANQRLP0tZUtQkLbiVgEN7pY3XZcxrJHkvenWK8 iANqYkC5A+/ok4zpIeq+Q/g84bIrimn4zlWOGEa5FVkcA5WyJxCpVCGdVG8gYLGpCywaNG DBnavYQceMO/kwSrR/g8ztwoYHq8aTBCpKyJZGPFRAOxalZTKB4pvTyKJ/Ph8u5cS9bq0V DGsli7buAIPiXtl9oeiup31SpsrrYLaDz7+sksJo1e5UuHi9yPcm3iP0XxKseQ== From: Carsten Haerle To: pmg-devel@lists.proxmox.com Subject: [PATCH pmg-docs 6/6] mail proxy: networks: document automatically trusted networks Date: Mon, 26 Oct 2026 10:58:51 +0100 Message-ID: <20261026095852.3243241-7-carsten.haerle@straightec.de> X-Mailer: git-send-email 2.53.0 In-Reply-To: <20261026095852.3243241-1-carsten.haerle@straightec.de> References: <20261026095852.3243241-1-carsten.haerle@straightec.de> MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-SPAM-LEVEL: Spam detection results: 0 DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from domain DMARC_PASS -0.1 DMARC pass policy SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record X-MailFrom: carsten.haerle@straightec.de X-Mailman-Rule-Hits: nonmember-moderation X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation Message-ID-Hash: NMPECXF2I4LIHQBMFBKKMWVRA2OIZZDE X-Message-ID-Hash: NMPECXF2I4LIHQBMFBKKMWVRA2OIZZDE X-Mailman-Approved-At: Tue, 27 Oct 2026 10:31:21 +0100 CC: Carsten Haerle X-Mailman-Version: 3.3.10 Precedence: list List-Id: Proxmox Mail Gateway development discussion List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: Document which networks are trusted in addition to the configured ones, the new 'Trust Local Network' option and that host names of the default relay and transport hosts are resolved when the configuration is generated. Signed-off-by: Carsten Haerle --- pmgconfig.adoc | 15 +++++++++++++-- 1 file changed, 13 insertions(+), 2 deletions(-) diff --git a/pmgconfig.adoc b/pmgconfig.adoc index 00a988e..1269021 100644 --- a/pmgconfig.adoc +++ b/pmgconfig.adoc @@ -578,8 +578,19 @@ endif::manvolnum[] You can add additional internal (trusted) IP networks or hosts. All hosts= in this list are allowed to relay. =20 -NOTE: Hosts in the same subnet as {pmg} can relay by default and don't nee= d to -be added to this list. +In addition, the following networks are trusted automatically. They are sh= own +greyed out in the list and cannot be edited there: + +* The network of the node's IP address, so hosts in the same subnet as {pm= g} can + relay by default and don't need to be added to this list. You can disabl= e + this with the option 'Trust Local Network' under 'Mail Proxy -> Options'= =2E + Then only the networks in this list and the hosts below are trusted. + +* The default relay and the hosts of all transports, as they are the mail + servers that send outgoing mail through {pmg}. Host names are resolved w= hen + the configuration is generated, that is, on configuration changes and at + boot. If the address of such a host changes, it is only updated with the= next + configuration change. =20 =20 [[pmgconfig_mailproxy_tls]] --=20 2.53.0