On Fri, Dec 23, 2022 at 06:19:06AM +0400, Samer Afach <samer.af...@msn.com> wrote:
> Btw, the relays happened because I actively changed mynetworks_style to > subnet, forgetting and not checking that all incoming connections will come > from the gateway of docker subnet. Still under research to identify how that > works. I'm not sure that that's right. I expect that the incoming connections that HAproxy sees have their original remote IP addresses (not the address of the "gateway of docker subnet"). It's just that the HAproxy is in the same Docker network as Postfix, so when it initiates a connection to Postfix in order to proxy the incoming connection, Postfix sees the internal IP address that HAproxy is using. By the way, it seems odd to me that HAproxy would be on the same physical host as the service being HAproxied. I wouldn't have thought that HAproxy could add any high-availability in that situation. cheers, raf