policy_includes_addr_mask_implicitly is broken?
The default exit policy rejects internal IP spaces, yet the server warns about them on startup when you leave your exitpolicy undefined.
Apr 28 16:07:18.083 [warn] exit_policy_implicitly_allows_local_networks(): Exit policy (default) implicitly accepts localhost (127.x)
The "(default)" seems to imply that the if's in policy_includes_addr_mask_implicitly are never triggered.
[Automatically added by flyspray2trac: Operating System: All]