Re: Limiting smtpd_upstream_proxy_protocol to certain IPs

2020-08-20 Thread Bastian Blank
Hi Andreas On Thu, Aug 20, 2020 at 01:28:38PM +0200, Andreas Thienemann wrote: > My plan was to setup a proxy on a backup machine somewhere else and just > proxy 25/tcp to my primary MX. My initial plan was to use > smtpd_upstream_proxy_protocol = haproxy and thus inform the smtpd of the > real so

Re: Limiting smtpd_upstream_proxy_protocol to certain IPs

2020-08-20 Thread Wietse Venema
Andreas Thienemann: > That being said, I think that it would be a really nifty feature - > similiar to the smtpd_authorized_xclient_hosts setting - to have a > smtpd_upstream_proxy_hosts setting which limits the > hangup-if-no-proxy-information-available functionality to these peers. > e.g. regul

Limiting smtpd_upstream_proxy_protocol to certain IPs

2020-08-20 Thread Andreas Thienemann
Hi, I had the unfortunate situation the other day, that the network my postfix mailserver is in, was suddenly not reachable from parts of the Internet. Basically Vodafone messed up some internal filters. While they were trying to sort things out, I was having a look to see how I could reduce