On 8/11/2014 11:19 AM, terrygalant.li...@fastest.cc wrote:
> Hi Noel
> 
> On Mon, Aug 11, 2014, at 09:11 AM, Noel Jones wrote:
>> proxy_interfaces should list any external IPs that *this* postfix is
>> connected to on the other side of a NAT.  Any IPs that are not
>> "local" on this box that connect to postfix should be listed here.
> 
> By 'connect' you do mean 'reponds at', via any IP routed/NAT path, right?

Right, any IP not on a local interface that you can telnet to and
have postfix respond.


> 
> From the outside world, telnet TO 198.51.100.1:25 or 198.51.100.2:25 on 
> SERVER-1 gets a response from postfix on SERVER-3.  And those are the ONLY 2 
> addresses that should respond.  So, IIUC -- my guess at
> 
> proxy_interfaces = 198.51.100.1, 198.51.100.2
> 
> is correct AND sufficient?
> 
> Terry
> 

Yes, that sounds right.



  -- Noel Jones

Reply via email to