Re: PATCH: smtpd_upstream_proxy_protocol + smtpd_tls_wrappermode

2015-09-24 Thread Lukas Erlacher
Thanks for the prompt support! Will you be merging this? In the next 3.1 development release, and in a month or so, in the next stable releases (2.9 .. 3.0). Wietse That's great to hear! Best, Luke smime.p7s Description: S/MIME Cryptographic Signature

Re: PATCH: smtpd_upstream_proxy_protocol + smtpd_tls_wrappermode

2015-09-24 Thread Wietse Venema
Lukas Erlacher: > Hi, > > > Please try this. > > > > Wietse > > > > [patch] > > Works like a charm! I couldn't just patch our live server of course > but I grabbed the ubuntu 14.04 postfix 2.11.0 source package on a > VM, and the haproxy1.5 from trusty-backports and it works. > > Thanks for t

Re: PATCH: smtpd_upstream_proxy_protocol + smtpd_tls_wrappermode

2015-09-24 Thread Lukas Erlacher
Hi, Please try this. Wietse [patch] Works like a charm! I couldn't just patch our live server of course but I grabbed the ubuntu 14.04 postfix 2.11.0 source package on a VM, and the haproxy1.5 from trusty-backports and it works. Thanks for the prompt support! Will you be merging t

Re: PATCH: smtpd_upstream_proxy_protocol + smtpd_tls_wrappermode

2015-09-23 Thread Lukas Erlacher
Thanks, I will try that! Best, Luke

PATCH: smtpd_upstream_proxy_protocol + smtpd_tls_wrappermode

2015-09-23 Thread Wietse Venema
Wietse Venema: > Lukas Erlacher: > > Something goes wrong with establishing the SSL session: > > > > Aug 31 09:52:47 mail postfix-from-user/smtpd[2416]: connect from > > a-mua.informatik.tu-muenchen.de[xxx.xxx.42.153] > > The HaProxy hand-over succeeds: Postfix gets a client name and address. >

Re: smtpd_upstream_proxy_protocol + smtpd_tls_wrappermode

2015-09-23 Thread Wietse Venema
Lukas Erlacher: > Something goes wrong with establishing the SSL session: > > Aug 31 09:52:47 mail postfix-from-user/smtpd[2416]: connect from > a-mua.informatik.tu-muenchen.de[xxx.xxx.42.153] The HaProxy hand-over succeeds: Postfix gets a client name and address. > Aug 31 09:52:49 mail postfix

smtpd_upstream_proxy_protocol + smtpd_tls_wrappermode

2015-09-23 Thread Lukas Erlacher
Hello, I am trying to put haproxy in front of postfix and utilise the proxy protocol to get accurate client IPs. This works fine for all unencrypted / starttls based listeners, but not for tls-wrapped listeners using smtpd_tls_wrappermode. This is the haproxy configuration: frontend ft_smtps