On Dec 9, 2019, at 12:58, Viktor Dukhovni <postfix-us...@dukhovni.org> wrote > Please don't impute false crises. There is no "security hole", though the > configuration is a mess, unauthenticated loopback (and other "mynetworks") > traffic is normal.
The configuration as posted, and specifically the line I quoted directly above my comment, allowed unauthenticated traffic from anything on the LAN. This means random printers, IOT devices, android phones, etc were allowed to send mail unchecked. I consider that a security hole.