Hello, We currently run a postfix smtp gateway which is behind a Firewall and Load balancer (using NAT). We have 8 servers and want to enable TLS. I am keen to have a better understanding of how TLS works with Postfix. I have been unable to find more information to answer the specific question.
In our environment we have a public IP address on the Firewall, that has a 1:1 destination NAT to a Load Balancer which then based on response time forwards the request through to the backend servers (6 of them). I want to know if the TLS validation is done based on the public IP which has a reverse resolve of the hostname when the server answers the connect/session. Any additional feedback or experience that people have would be really appreciated. Regards, Jimmy.