allow relay from any gray IP (because Docker can choose any gray network)