> On Thu, Jun 17, 2010 at 06:55:33PM +0200, Carlos Velasco wrote:
> 
>>> Loop detection is on by default when the destination port is 25.
>>> Loop detection matches on either banner hostnames or interfaces
>>> or IP addresses found in inet_interfaces or proxy_addresses.
>>
>> It could be good to have a switch to turn it off for cases like this :)
>>
>>> Alternatively, you can override "inet_interfaces" for just the
>>> smtp(8) delivery agent:
>>>
>>>     smtp unix ... smtp
>>>         -o inet_interfaces=127.0.0.1
>>
>> I think I will go with this as this one doesn't need smtpd to listen on
>> 127.0.0.1:25.
> 
> I think this is a mistake, in the sense that it is a crude work-around.
> The right solution is keep the "inet_interfaces" settings of Postfix
> instances *disjoint*, and to never forward mail to port 25 *within*
> an instance. This keeps things clear and predictable.
> 
>       - Each instance "owns" a separate pool of IPs
> 
>       - Internal forwarding is never to port 25, that's
>         where outside mail comes in, and you never loop
>         it back-in again.
> 
>       - Loop detection is not disabled.
> 
> Don't fight the system, work within the design.
> 

Sorry, but I don't see your point here.
I understand the check as to stop a mail bouncing to itself, but this is
not the case, mail is going from one instance to another. This is,
postfix is assuming that it is always listening on port 25 where this is
not the case, this instance is listening on another port (via master.cf)
and the other instance is the one listening on port 25. So the mail is
not bouncing to itself really. I looked into code and can see that the
check only applies to port 25, so I suppose it is rather an assumption
that postfix is always listening on that port. But really it is not the
case here.

As per a pool of ip addresses by instance, well, yes, it makes things
cleaner, although a bit more difficult into networking, but when we are
working with public Internet IP addresses it makes not happy to any NCC
to "waste" scarce public IP addresses for this :)

Regards,
Carlos Velasco


*************** AVISO LEGAL ***************
Este mensaje va dirigido, de manera exclusiva, a su destinatario y
contiene información confidencial y sujeta al secreto profesional,
cuya divulgación no está permitida por la ley. En caso de haber
recibido este mensaje por error, le rogamos que, de forma inmediata,
nos lo comunique mediante correo electrónico remitido a nuestra
atención o a través del teléfono (+34 914531200) y proceda a su
eliminación, así como a la de cualquier documento adjunto al mismo.
Asimismo, le comunicamos que la distribución, copia o utilización de
este mensaje, o de cualquier documento adjunto al mismo, cualquiera
que fuera su finalidad, están prohibidas por la ley. Le informamos,
como destinatario de este mensaje, que el correo electrónico y las
comunicaciones por medio de Internet no permiten asegurar ni
garantizar la confidencialidad de los mensajes transmitidos, así como
tampoco su integridad o su correcta recepción, por lo que el CNIC no
asume responsabilidad alguna por tales circunstancias. Si no
consintiese la utilización del correo electrónico o de las
comunicaciones vía Internet le rogamos nos lo comunique y ponga en
nuestro conocimiento de manera inmediata.

*************** LEGAL NOTICE **************
This message is intended exclusively for the person to whom it is
addressed and contains privileged and confidential information
protected from disclosure by law. If you are not the addressee
indicated in this message, you should immediately delete it and any
attachments and notify the sender by reply e-mail or by phone
(+34 914531200). In such case, you are hereby notified that any
dissemination, distribution, copying or use of this message or any
attachments, for any purpose, is strictly prohibited by law. We
hereby inform you, as addressee of this message, that e-mail and
Internet do not guarantee the confidentiality, nor the completeness
or proper reception of the messages sent and, thus, CNIC does not
assume any liability for those circumstances. Should you not agree
to the use of e-mail or to communications via Internet, you are
kindly requested to notify us immediately.

Reply via email to