Non-production release postfix-2.10-20120617-nonprod has support for up-stream proxy agents in postscreen(8) and smtpd(8).
To enable, specify one of: postscreen_upstream_proxy_protocol = haproxy smtpd_upstream_proxy_protocol = haproxy haproxy is not the only proxy agent that works with Postfix. Support for nginx with proxied SASL authentication is available in Postfix 2.9 smtpd(8). This uses the XCLIENT protocol. Wietse