Skip to content
Snippets Groups Projects
Verified Commit 5c5ad8bd authored by Sheogorath's avatar Sheogorath :european_castle:
Browse files

fix(postfix): Enforce usage of haproxy

Apparently one needs to configure `-o smtpd_upstream_proxy_protocol=haproxy`
for other inet services as well in order to actually make it through.
This patch enables it on smtp and submissions ports.

The hint for that came from experimenting and the docker-mailserver project.

References:
https://docker-mailserver.github.io/docker-mailserver/edge/config/advanced/kubernetes/#proxy-port-to-service-via-proxy-protocol
parent 3fd9106c
No related branches found
No related tags found
No related merge requests found
...@@ -92,6 +92,8 @@ postscreen_upstream_proxy_timeout = 5s ...@@ -92,6 +92,8 @@ postscreen_upstream_proxy_timeout = 5s
postscreen_access_list = permit_mynetworks postscreen_access_list = permit_mynetworks
postscreen_blacklist_action = drop postscreen_blacklist_action = drop
postscreen_greet_action = ignore postscreen_greet_action = ignore
# Disable zombie detection
postscreen_greet_banner =
postscreen_dnsbl_action = enforce postscreen_dnsbl_action = enforce
postscreen_dnsbl_threshold = 3 postscreen_dnsbl_threshold = 3
postscreen_dnsbl_allowlist_threshold = -1 postscreen_dnsbl_allowlist_threshold = -1
......
...@@ -8,6 +8,7 @@ ...@@ -8,6 +8,7 @@
smtpd pass - - - - - smtpd smtpd pass - - - - - smtpd
-o smtpd_tls_received_header=yes -o smtpd_tls_received_header=yes
-o content_filter= -o content_filter=
-o smtpd_upstream_proxy_protocol=haproxy
dnsblog unix - - - - 0 dnsblog dnsblog unix - - - - 0 dnsblog
tlsproxy unix - - - - 0 tlsproxy tlsproxy unix - - - - 0 tlsproxy
#smtps inet n - - - - smtpd #smtps inet n - - - - smtpd
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment