relay_acl: add a default netmask

(Yes, the docs *do* say to use CIDR notation, but putting a bare IP in there turns the server into an open relay)