On 25/2/25 02:40, Wietse Venema via Postfix-users wrote:
Matthew J Black via Postfix-users:
Hi Wietse,
Thanks for getting back to me.
1) Its a connection to port 25587; a substitute for 587 (see (2) below)
Maybe your getaddrinfo() implementation does not want to convert a
numerical port to internal form, when that prot has no entry in
/etc/services (that would be security by obscurity).
They're Rocky Linux boxes (latest version, as is Postfix and HAProxy) -
I don't know the ins and outs that well, but that doesn't sound like
something the Rocky boys'd do (security by obscurity) - I will float it
past them though.
2) Its behind a haproxy box, which in turn is behind a NAT router. I
haven't implemented postfix (yet)
Protocol version 1 or version 2? Maybe it sends something that
Postfix does not expect. The code is rather defensive but it may
not detect all possible garbage.
HAProxy v2_ I'll drop it down to v1 ass a test next time I'm on the box
(coupe of hours from now - bed-time :-)
3) inet_protocols = ipv4
Relevant line from mastr.conf:
25587 inet n - - - - smtpd
-o smtpd_tls_security_level=encrypt
-o smtpd_upstream_proxy_protocol=haproxy
I *think* things are working OK ie mail is flowing into and out of the
system (its still in "prototype" testing) - its just the logs are
filling up with the OP error message
A fatal ereror means that the progress terminates witrhout
completing an email transaction. If the client connects again
and succeeds, then you have a non-reproducible error.
Yeah, that's what I'm afraid of cause they're a bitch to track down and
fix - I don't suppoe you've got any ideas, do you?
Wietse
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
