Re: question about transparancy

2010-04-22 Thread Willy Tarreau
On Thu, Apr 22, 2010 at 09:47:51PM +0200, Michiel van Es wrote: > Hmm, I found out that it is not supported for mode tcp: > > Starting HAproxy: [WARNING] 111/213701 (5089) : config : 'option > forwardfor' ignored for proxy 'load_balanced_smtp' as it requires HTTP mode. >

Re: forward proxy ?

2010-04-22 Thread Willy Tarreau
On Thu, Apr 22, 2010 at 02:55:43PM +0200, Jan-Frode Myklebust wrote: > On 2010-04-21, Willy Tarreau wrote: > > > > You can also use haproxy in front of squid to suppress the 502 in the > > response, because you can make it block this response (which normally > > also causes a 502 to be sent to the

Re: question about transparancy

2010-04-22 Thread Michiel van Es
Hmm, I found out that it is not supported for mode tcp: Starting HAproxy: [WARNING] 111/213701 (5089) : config : 'option forwardfor' ignored for proxy 'load_balanced_smtp' as it requires HTTP mode. [ OK ] Is this possible for the mod

Re: question about transparancy

2010-04-22 Thread Michiel van Es
I am running ASSP on the mailservers, since 1.6.2 ASSP understands headres like x-forward-for : - Text to Identify Originating IP Header* (OriginatingIP) If ASSP runs behind another server(s), no IP/HELO based filter will work. If a special header with the originating IP is inserted from the f

Re: question about transparancy

2010-04-22 Thread Michiel van Es
Yes That is the default smtp failover setup but I want to balance the load via a load balancer setup Mx records can not balance load Regards Michiel van Es Op 22 apr 2010 om 19:06 heeft Guillaume Bourque > het volgende geschreven:\ Hi, Why dont you use 2 MX record with the same weight A

Re: question about transparancy

2010-04-22 Thread Guillaume Bourque
Hi, Why dont you use 2 MX record with the same weight All email will come in to youre 2 servers. Just my 2¢ Bye Michiel van Es a écrit : Hi, I am running 2 mailservers with ASSP as a spam proxy. I use haproxy to load balance between the 2 mailservers. The problem is that the spam filter is

RE: question about transparancy

2010-04-22 Thread Emmanuel Bailleul
> -Message d'origine- > De : Michiel van Es [mailto:m...@pcintelligence.nl] > Envoyé : jeudi 22 avril 2010 18:11 > À : Chris Sarginson > Cc : haproxy@formilux.org > Objet : Re: question about transparancy > > > > On 4/22/10 6:03 PM, Chris Sarginson wrote: > > Michiel van Es wrote: > >> I

Re: question about transparancy

2010-04-22 Thread Michiel van Es
On 4/22/10 6:03 PM, Chris Sarginson wrote: Michiel van Es wrote: I read this archive from 2008: http://www.formilux.org/archives/haproxy/0801/0507.html But the problem is that I can not recompile the kernel :( Isn't there any other way like the x-forward-for header to make this work? As th

Re: question about transparancy

2010-04-22 Thread Chris Sarginson
Michiel van Es wrote: I read this archive from 2008: http://www.formilux.org/archives/haproxy/0801/0507.html But the problem is that I can not recompile the kernel :( Isn't there any other way like the x-forward-for header to make this work? As this runs on layer 4 headers can not be inserted

Re: question about transparancy

2010-04-22 Thread Michiel van Es
I read this archive from 2008: http://www.formilux.org/archives/haproxy/0801/0507.html But the problem is that I can not recompile the kernel :( Isn't there any other way like the x-forward-for header to make this work? Kind regards, Michiel On 4/22/10 5:55 PM, Michiel van Es wrote: Hi, I

question about transparancy

2010-04-22 Thread Michiel van Es
Hi, I am running 2 mailservers with ASSP as a spam proxy. I use haproxy to load balance between the 2 mailservers. The problem is that the spam filter is seeing every connection coming from the load balancer and not the originating ip. Do you know how I make the connections from my HAproxy load

Re: forward proxy ?

2010-04-22 Thread Jan-Frode Myklebust
On 2010-04-21, Willy Tarreau wrote: > > You can also use haproxy in front of squid to suppress the 502 in the > response, because you can make it block this response (which normally > also causes a 502 to be sent to the client), but you can define what > to send on the 502 error. Basically it woul