On 8/11/2014 11:19 AM, terrygalant.li...@fastest.cc wrote: > Hi Noel > > On Mon, Aug 11, 2014, at 09:11 AM, Noel Jones wrote: >> proxy_interfaces should list any external IPs that *this* postfix is >> connected to on the other side of a NAT. Any IPs that are not >> "local" on this box that connect to postfix should be listed here. > > By 'connect' you do mean 'reponds at', via any IP routed/NAT path, right?
Right, any IP not on a local interface that you can telnet to and have postfix respond. > > From the outside world, telnet TO 198.51.100.1:25 or 198.51.100.2:25 on > SERVER-1 gets a response from postfix on SERVER-3. And those are the ONLY 2 > addresses that should respond. So, IIUC -- my guess at > > proxy_interfaces = 198.51.100.1, 198.51.100.2 > > is correct AND sufficient? > > Terry > Yes, that sounds right. -- Noel Jones