Hello,

Any sign of postfix 3.9 blacklisting HAproxy because of SMTP 
errors/abuse/half-baked connections?
May 31, 2024 1:06 PM, "Gerben Wierda via Postfix-users" 
<postfix-users@postfix.org> wrote:
Hmm, I just noticed (all outgoing smtp was going to a backup server that works) 
that one of my postfix instances cannot send mail (smtp doesn't work, 
postscreen and smtpd work fine).
        # submission (587)

        submission inet n - n - - smtpd

        -o smtpd_tls_security_level=encrypt

        -o smtpd_sasl_auth_enable=yes

        -o smtpd_tls_auth_only=yes

        -o syslog_name=submission

        990 inet n - n - - smtpd

        -o smtpd_tls_security_level=encrypt

        -o smtpd_sasl_auth_enable=yes

        -o smtpd_tls_auth_only=yes

        -o syslog_name=submission_haproxy

        -o smtpd_upstream_proxy_protocol=haproxy

The one that haproxy sees as down has been recently updated to postfix 3.9

So, HAproxy sees smtpd as up on postfix 3.9 but it sees smtp as down. In 
reality, both are up.

It probably started to behave this when I installed postfix 3.9 on one side, 
though I cannot exclude that I updated HAproxy too, so I am not 100% certain.

What should I do? Revert to postfix 3.8? I rather not, I rather would upgrade 
the other to 3.9 (but if I do that, I probably lose all smtp behind HAproxy for 
now) 

Gerben Wierda (LinkedIn (https://www.linkedin.com/in/gerbenwierda), Mastodon 
(https://newsie.social/@gctwnl))
R&A IT Strategy (https://ea.rna.nl/) (main site)
Book: Chess and the Art of Enterprise Architecture (https://ea.rna.nl/the-book/)
Book: Mastering ArchiMate (https://ea.rna.nl/the-book-edition-iii/)
YouTube Channel (http://www.youtube.com/@GerbenWierda)
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to