Re: postscreen_whitelist_interfaces behind proxy

2016-10-14 Thread Lukas Erlacher
/permalink.gmane.org/gmane.comp.web.haproxy/8881 / http://www.postfix.org/postconf.5.html#postscreen_upstream_proxy_protocol)? Because in that case it would definitely be expected for postfix to be using the connection information from the frontend. Mit freundlichen Gruessen, Lukas Erlacher -- R

BUG: Typo in postscreen manpage

2016-04-11 Thread Lukas Erlacher
Prompted by the "gmail servers requiring postscreen_access whitelisting" thread I looked at http://www.postfix.org/postscreen.8.html. There is an erroneous (right??) double negative: >The optional "after 220 server greeting" tests involve postscreen(8)'s >built-in SMTP protocol

Re: postfix/dovecot - [private/dovecot-lmtp]: No such file or directory

2016-02-22 Thread Lukas Erlacher
Hi, this is not a postfix problem. Furthermore it is fully covered in the dovecot docs. You need to put the dovecot-lmtp socket into /var/spool/postfix/private. This means the unix_listener must get the path to that. See here: http://wiki2.dovecot.org/HowTo/PostfixDovecotLMTP Also note tha

Re: PATCH: smtpd_upstream_proxy_protocol + smtpd_tls_wrappermode

2015-09-24 Thread Lukas Erlacher
Thanks for the prompt support! Will you be merging this? In the next 3.1 development release, and in a month or so, in the next stable releases (2.9 .. 3.0). Wietse That's great to hear! Best, Luke smime.p7s Description: S/MIME Cryptographic Signature

Re: PATCH: smtpd_upstream_proxy_protocol + smtpd_tls_wrappermode

2015-09-24 Thread Lukas Erlacher
Hi, Please try this. Wietse [patch] Works like a charm! I couldn't just patch our live server of course but I grabbed the ubuntu 14.04 postfix 2.11.0 source package on a VM, and the haproxy1.5 from trusty-backports and it works. Thanks for the prompt support! Will you be merging t

Re: PATCH: smtpd_upstream_proxy_protocol + smtpd_tls_wrappermode

2015-09-23 Thread Lukas Erlacher
Thanks, I will try that! Best, Luke

smtpd_upstream_proxy_protocol + smtpd_tls_wrappermode

2015-09-23 Thread Lukas Erlacher
Hello, I am trying to put haproxy in front of postfix and utilise the proxy protocol to get accurate client IPs. This works fine for all unencrypted / starttls based listeners, but not for tls-wrapped listeners using smtpd_tls_wrappermode. This is the haproxy configuration: frontend ft_smtps