On Fri, Oct 12, 2012 at 06:40:08PM +0200, Eric Faurot wrote: > One reason for this change is to be consistent with the pf dialect but > also to remove the "all" keyword from the grammar because it masks the > "all" interface group. As a result, a rule like: > > accept from all ... > > is still accepted by the parser, but the behavior changes: it will not > match mails enqueued through the local socket anymore, only those that > come from any listening interface.
Actually this is not exactly what happens: it only accepts from host "all". But it is still wrong, and you still need to update the ruleset.