On Fri, Dec 23, 2022 at 06:19:06AM +0400, Samer Afach <samer.af...@msn.com> 
wrote:

> Btw, the relays happened because I actively changed mynetworks_style to
> subnet, forgetting and not checking that all incoming connections will come
> from the gateway of docker subnet. Still under research to identify how that
> works.

I'm not sure that that's right. I expect that the
incoming connections that HAproxy sees have their
original remote IP addresses (not the address of the
"gateway of docker subnet"). It's just that the HAproxy
is in the same Docker network as Postfix, so when it
initiates a connection to Postfix in order to proxy the
incoming connection, Postfix sees the internal IP
address that HAproxy is using.

By the way, it seems odd to me that HAproxy would be on
the same physical host as the service being HAproxied.
I wouldn't have thought that HAproxy could add any
high-availability in that situation.

cheers,
raf

Reply via email to