Gerben Wierda via Postfix-users:
> Hmm, I just noticed (all outgoing smtp was going to a backup server that
> works) that one of my postfix instances cannot send mail (smtp doesn't work,
> postscreen and smtpd work fine).
>
> # submission (587)
> submission inet n - n - - smtpd
> -o smtpd_tls_security_level=encrypt
> -o smtpd_sasl_auth_enable=yes
> -o smtpd_tls_auth_only=yes
> -o syslog_name=submission
> 990 inet n - n - - smtpd
> -o smtpd_tls_security_level=encrypt
> -o smtpd_sasl_auth_enable=yes
> -o smtpd_tls_auth_only=yes
> -o syslog_name=submission_haproxy
> -o smtpd_upstream_proxy_protocol=haproxy
>
> The one that haproxy sees as down has been recently updated to postfix 3.9
>
> So, HAproxy sees smtpd as up on postfix 3.9 but it sees smtp as down. In
> reality, both are up.
Postfix logging for failed haproxy connections would be extremely
informative.
There was a change in how Postfix detects clients that talk too early
(smtpd_forbid_unauth_pipelining = yes). This was disabled prior to
Postfix 3.9. Perhaps haproxy falls into this trap.
Wietse
> It probably started to behave this when I installed postfix 3.9 on one side,
> though I cannot exclude that I updated HAproxy too, so I am not 100% certain.
>
> What should I do? Revert to postfix 3.8? I rather not, I rather would upgrade
> the other to 3.9 (but if I do that, I probably lose all smtp behind HAproxy
> for now)
>
> Gerben Wierda (LinkedIn <https://www.linkedin.com/in/gerbenwierda>, Mastodon
> <https://newsie.social/@gctwnl>)
> R&A IT Strategy <https://ea.rna.nl/> (main site)
> Book: Chess and the Art of Enterprise?Architecture
> <https://ea.rna.nl/the-book/>
> Book: Mastering ArchiMate <https://ea.rna.nl/the-book-edition-iii/>
> YouTube Channel <http://www.youtube.com/@GerbenWierda>
> _______________________________________________
> Postfix-users mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
