# Host-originated connections reach postfix/dovecot via the docker bridge
# gateway. Without ignoring it, the postfix jail bans our own host as
# collateral of port-25 scanner noise + local TLS probes (self-DoS: host
# submission times out). Keep in sync with the compose network subnet.
[DEFAULT]
ignoreip = 127.0.0.1/8 192.168.32.0/24 192.168.1.0/24