Graham Leggett wrote:

Because traffic from machines behind the box can cause the mailserver's IP to be blacklisted, the mailserver machine has two IP addresses, one for the mailserver, and one for NAT.

Just to be clear - the box has two public routeable IPs on the same interface.

The first public routable IP address is used by the mailserver to bind to, and this IP is where the mailserver receives mail, and is the IP address listed in inet_interfaces and should in theory be the source address.

The second public routable IP address is the address to which the NAT network is translated to. In practice, postfix is using this address as a source address, when it shouldn't do so, causing outgoing mail to be blacklisted and bounced anyway.

Regards,
Graham
--

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to