Re: SMTPS and L7 health-checks

2015-04-29 Thread Baptiste
On Wed, Apr 29, 2015 at 9:18 AM, iain wrote: > On 29/04/15 04:26, Baptiste wrote: > >> Hi, >> You need to enable the check-ssl on the server line. >> In your case haproxy sends a check in clear, while the server expects a >> ciphered connexion. > > That's correct, because I am trying to keep the h

Re: SMTPS and L7 health-checks

2015-04-29 Thread iain
On 29/04/15 04:26, Baptiste wrote: > Hi, > You need to enable the check-ssl on the server line. > In your case haproxy sends a check in clear, while the server expects a > ciphered connexion. That's correct, because I am trying to keep the health checks on the cleartext TCP/25 port. However, I d

Re: SMTPS and L7 health-checks

2015-04-28 Thread Baptiste
Le 28 avr. 2015 06:25, "iain" a écrit : > > I have a working configuration for a couple of MTAs listening on TCP/25. > The layer 7 health checks work just fine with: > > ---CUT--->8---CUT--- > listen MTA > bind xx.xx.xx.xx:25 > bind XX:XX:XX:XX:::25 > mode tcp > option tcpka > option

SMTPS and L7 health-checks

2015-04-28 Thread iain
I have a working configuration for a couple of MTAs listening on TCP/25. The layer 7 health checks work just fine with: ---CUT--->8---CUT--- listen MTA bind xx.xx.xx.xx:25 bind XX:XX:XX:XX:::25 mode tcp option tcpka option tcplog option smtpchk HELO lb1.example.org no option http