On Wed, Jun 25, 2008 at 03:00:47AM -0700, Jo Rhett wrote: > On Jun 25, 2008, at 2:34 AM, Henrik K wrote: >> This is getting out of hand and offtopic.. > > Yes > >> You have already your options: >> >> - Add all hosts to internal_networks. >> - Don't call SA at all >> >> Why is this getting on and on? > > > Why is it getting offtopic, I don't know. > > Why is the conversation still going on? Because I asked a few questions > still unanswered -- reading the code it implies that maybe I should make > internal_networks explicitly defined (right now its implicit and thus == > trusted_networks) to be smaller than trusted networks. This will > probably solve my SPF problem. Is there a reason not to do this?
It's fine to do that. This is all documented on wiki etc. I don't know why it's still not clear.