Re: SMTPS and L7 health-checks

On 29/04/15 04:26, Baptiste wrote: Hi, You need to enable the check-ssl on the server line. In your case haproxy sends a check in clear, while the server expects a ciphered connexion. That's correct, because I am trying to keep the health checks on the cleartext TCP/25 port. However, I did

SMTPS and L7 health-checks

I have a working configuration for a couple of MTAs listening on TCP/25. The layer 7 health checks work just fine with: ---CUT---8---CUT--- listen MTA bind xx.xx.xx.xx:25 bind XX:XX:XX:XX:::25 mode tcp option tcpka option tcplog option smtpchk HELO lb1.example.org no option