Re: Postfix behind NAT -> failover IP -> wrong HELO

2020-07-02 Thread Bill Cole
On 1 Jul 2020, at 19:37, Peter wrote: On 1/07/20 11:20 am, Bill Cole wrote: Can't you just fix the DNS? Use a HELO name that resolves to both IPs and give both IPs PTR records that point back to the name you use. This won't work for FCRDNS properly. That is implementation-dependent. Smart v

Re: Postfix behind NAT -> failover IP -> wrong HELO

2020-07-02 Thread Matus UHLAR - fantomas
On 1/07/20 11:20 am, Bill Cole wrote: Can't you just fix the DNS? Use a HELO name that resolves to both IPs and give both IPs PTR records that point back to the name you use. On 02.07.20 11:37, Peter wrote: This won't work for FCRDNS properly. What happens is the lookup on the A record will

Re: Postfix behind NAT -> failover IP -> wrong HELO

2020-07-01 Thread Peter
On 1/07/20 11:20 am, Bill Cole wrote: Can't you just fix the DNS? Use a HELO name that resolves to both IPs and give both IPs PTR records that point back to the name you use. This won't work for FCRDNS properly. What happens is the lookup on the A record will randomly return either one or the

Re: Postfix behind NAT -> failover IP -> wrong HELO

2020-07-01 Thread Curtis Maurand
easier than that.  use linux heartbeat on the two postfix service. the failover happens within seconds.  use the unison file system to keep the spool folders and other necessary folders needed to pick up on the failover machine and when the primary fails, whatever services that need to be runni

Re: Postfix behind NAT -> failover IP -> wrong HELO

2020-07-01 Thread Istvan Prosinger
On 7/1/20 9:02 PM, Bill Cole wrote: On 1 Jul 2020, at 12:29, Istvan Prosinger wrote: Fix the DNS? All reverse DNS should have an A record pointed back in the DNS zone. This would be a real mess It is quite common for one name to have multiple A (and/or ) records and for more than one

Re: Postfix behind NAT -> failover IP -> wrong HELO

2020-07-01 Thread Bill Cole
On 1 Jul 2020, at 12:29, Istvan Prosinger wrote: Fix the DNS? All reverse DNS should have an A record pointed back in the DNS zone. This would be a real mess It is quite common for one name to have multiple A (and/or ) records and for more than one PTR record to point to the same name. Th

Re: Postfix behind NAT -> failover IP -> wrong HELO

2020-07-01 Thread Wietse Venema
Istvan Prosinger: > > Assuming that Postfix runs on the firewall, otherwise you will need > > to add telepathic vision to Postfix and also set smtp_proxy_address > > to avoid "mail loops back to myself" errors. > > > > host1_mynetworks = > > output from "postconf mynetworks" with external

Re: Postfix behind NAT -> failover IP -> wrong HELO

2020-07-01 Thread Istvan Prosinger
On 7/1/20 12:40 AM, Wietse Venema wrote: Istvan Prosinger: On 6/30/20 10:34 PM, Wietse Venema wrote: Istvan Prosinger: On 6/30/20 9:49 PM, Wietse Venema wrote: Istvan Prosinger: Hi, I hope this letter finds you well, I have Postfix behind NAT, and added one failover IP to the main rou

Re: Postfix behind NAT -> failover IP -> wrong HELO

2020-07-01 Thread Istvan Prosinger
On 7/1/20 1:20 AM, Bill Cole wrote: On 30 Jun 2020, at 15:40, Istvan Prosinger wrote: Hi, I hope this letter finds you well, I have Postfix behind NAT, and added one failover IP to the main router. I wanted to "get by cheaply" by just doing something like iptbales -t nat -I POSTROUTING -p

Re: Postfix behind NAT -> failover IP -> wrong HELO

2020-06-30 Thread Curtis Maurand
On 6/30/20 6:40 PM, Wietse Venema wrote: Istvan Prosinger: On 6/30/20 10:34 PM, Wietse Venema wrote: Istvan Prosinger: On 6/30/20 9:49 PM, Wietse Venema wrote: Istvan Prosinger: Hi, I hope this letter finds you well, I have Postfix behind NAT, and added one failover IP to the main route

Re: Postfix behind NAT -> failover IP -> wrong HELO

2020-06-30 Thread Curtis Maurand
It's part of the config in main.cf You can specify "myhostname" myhostname = host.domain.tld Cheers, Curtis On 6/30/20 4:55 PM, Istvan Prosinger wrote: On 6/30/20 10:34 PM, Wietse Venema wrote: Istvan Prosinger: On 6/30/20 9:49 PM, Wietse Venema wrote: Istvan Prosinger: Hi, I hope this

Re: Postfix behind NAT -> failover IP -> wrong HELO

2020-06-30 Thread Bill Cole
On 30 Jun 2020, at 15:40, Istvan Prosinger wrote: Hi, I hope this letter finds you well, I have Postfix behind NAT, and added one failover IP to the main router. I wanted to "get by cheaply" by just doing something like iptbales -t nat -I POSTROUTING -p tcp --dport 25 -j DNAT --to ip> on

Re: Postfix behind NAT -> failover IP -> wrong HELO

2020-06-30 Thread Wietse Venema
Istvan Prosinger: > > > On 6/30/20 10:34 PM, Wietse Venema wrote: > > Istvan Prosinger: > >> > >> On 6/30/20 9:49 PM, Wietse Venema wrote: > >>> Istvan Prosinger: > Hi, I hope this letter finds you well, > > I have Postfix behind NAT, and added one failover IP to the main router. >

Re: Postfix behind NAT -> failover IP -> wrong HELO

2020-06-30 Thread Istvan Prosinger
On 6/30/20 10:34 PM, Wietse Venema wrote: Istvan Prosinger: On 6/30/20 9:49 PM, Wietse Venema wrote: Istvan Prosinger: Hi, I hope this letter finds you well, I have Postfix behind NAT, and added one failover IP to the main router. I wanted to "get by cheaply" by just doing something like

Re: Postfix behind NAT -> failover IP -> wrong HELO

2020-06-30 Thread Wietse Venema
Istvan Prosinger: > > On 6/30/20 9:49 PM, Wietse Venema wrote: > > Istvan Prosinger: > >> Hi, I hope this letter finds you well, > >> > >> I have Postfix behind NAT, and added one failover IP to the main router. > >> > >> I wanted to "get by cheaply" by just doing something like > >> > >> iptbales

Re: Postfix behind NAT -> failover IP -> wrong HELO

2020-06-30 Thread Istvan Prosinger
On 6/30/20 9:49 PM, Wietse Venema wrote: Istvan Prosinger: Hi, I hope this letter finds you well, I have Postfix behind NAT, and added one failover IP to the main router. I wanted to "get by cheaply" by just doing something like iptbales -t nat -I POSTROUTING -p tcp --dport 25 -j DNAT --to

Re: Postfix behind NAT -> failover IP -> wrong HELO

2020-06-30 Thread Wietse Venema
Istvan Prosinger: > Hi, I hope this letter finds you well, > > I have Postfix behind NAT, and added one failover IP to the main router. > > I wanted to "get by cheaply" by just doing something like > > iptbales -t nat -I POSTROUTING -p tcp --dport 25 -j DNAT --to > > on the firewall machine. >

Postfix behind NAT -> failover IP -> wrong HELO

2020-06-30 Thread Istvan Prosinger
Hi, I hope this letter finds you well, I have Postfix behind NAT, and added one failover IP to the main router. I wanted to "get by cheaply" by just doing something like iptbales -t nat -I POSTROUTING -p tcp --dport 25 -j DNAT --to on the firewall machine. So, all well, the only problem is t