Am Donnerstag, 30. Oktober 2014, 20:07:07 schrieb Tom Sommer: > So how do you make sure the postfix and amavis instances see the IP of > the mailserver and not of the haproxy server? > > --- > Tom Sommer
Use a loadbalancer and not a proxy. > On 2014-10-30 19:59, Tom Johnson wrote: > > We just run postfix and amavisd-new on all our servers, and those sit > > behind haproxy. > > > >> On Oct 30, 2014, at 11:53 AM, Kent Oyer <[email protected]> wrote: > >> > >> Hi Tom, > >> > >> I don't know if amavis supports the PROXY protocol but I kinda doubt > >> it. I've solved the problem by putting haproxy in between postfix and > >> amavis like this > >> > >> --> Postfix (ingress) --> haproxy --> amavisd --> Postfix (egress) --> > >> > >> The ingress Postfix server does all the SPF and RBL checks. Then it > >> sends the messages to haproxy which divides the load between several > >> amavis servers to do the heavy lifting. You should add the IP address > >> of the haproxy server to the trusted_networks list in Spamassassin. In > >> my case, I'm running haproxy on the same machine as the ingress > >> Postfix server. So I have 2 Postfix/haproxy servers and 6 amavisd > >> servers followed by 2 Postfix egress servers. It been working great so > >> far. > >> > >> Thanks > >> Kent > >> > >> -----Original Message----- > >> From: Tom Sommer [mailto:[email protected]] > >> Sent: Monday, October 27, 2014 8:42 AM > >> To: [email protected] > >> Subject: Proxy protocol support > >> > >> Hi > >> > >> Does amavis support the PROXY protocol? > >> http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt > >> > >> I want to create an amavis cluster with a load-balancer in front of > >> all the nodes, I was thinking haproxy. > >> I need the source IP in amavis to be the mailserver and not the load > >> balancer (to support forward_method=*), the PROXY protocol seem to fix > >> this? > >> > >> Thanks > >> > >> -- > >> Tom Sommer -- Dr. Michael Schwartzkopff Guardinistr. 63 81375 München Tel: (0162) 1650044 Fax: (089) 620 304 13
signature.asc
Description: This is a digitally signed message part.
