felderm:
> Hi All
> 
> We operate multiple Postfix instances behind HA-Proxies. The haproxy
> upstream protocol is enabled:
> 
> smtpd_upstream_proxy_protocol=haproxy
> (the IPs of the HA-proxies are in mynetworks)

You should never have to list the HA-proxies in mynetworks.

If the remote connections appear to have the HA-proxies as the
client IP address, then you have a serious mis-configuration.

You need to fix that before you can even start to think about 
rate limiting.

        Wietse

Reply via email to