OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: RV: Problem to Load-Balance Outgoing SMTP traffic with postfix.

From: Gary Mort (gmlugsaplings.us)
Date: Mon Jul 02 2007 - 01:39:33 CDT


Edgar Díaz Orellana wrote:
>>> 1) Your lacking a PTR record for the ip address sending email. For
>>> example, 219.132.27.200 is your problem, it's coming up with a dynamic
>>> PTR record and no valid A record:
>
>>> Randomly checking the other IP addresses reveals the same.
>>> No PTR records, dynamic address range, to them your a spammer. Fix it.
>
>>> The root name servers for those addresses are timing out, so lookups are
>>> depending on cache. Have those servers fixed.
>
> If you can check at
> http://www.dnsstuff.com/tools/ptr.ch?ip=200.27.132.219 or
> http://www.dnsstuff.com/tools/ptr.ch?ip=200.27.132.220 or
> http://www.dnsstuff.com/tools/ptr.ch?ip=200.27.132.221 or
> http://www.dnsstuff.com/tools/ptr.ch?ip=200.27.132.222, you can see all dns
> PTR records are fine and correspond to the correct ip address.
>
> All root name Server ns00.fulltimehosting.net to ns02.fulltimehosting.net
> are responding with no more than 20ms of delay. Is weird to my root name
> servers are timeout.
>

Interesting as I used the exact same service to do the lookups earlier
today and the root servers where timing out and I was getting the cached
dynamic values. Could be that your ISP's DNS servers have been acting up.

> Thanks for your time, but this workarrounds don't fix my problem, make
> postfix use all outbound ip address to send mail.
>

As was previously mentioned, it's not a postfix configuration, but an OS
configuration. Postfix asks the OS for an outgoing socket, it does not
specify what interface that outgoing socket should be on - the OS
determines that. So if you want the OS to cycle through the different
interfaces, your operating system must support that.

I'm not sure what your problem is at this point.

If your problem is that your being flagged as a spammer, fix your DNS
entrees, use Domain Keys, sign up for feedback loops, and lock spammers
out from sending email.

If your problem is that you want postfix to rotate ip addresses, than
grab the sourcecode and change the outgoing socket requests to explictly
ask for a specific IP address(if that is even possible).

If your problem is that you want outgoing sockets to rotate amonst
different IP addresses when any socket is requested, and don't care how
it's done, learn how to do that with the operating system your using -
if it's even possible.

If your problem is that your operating system won't support that or you
can't figure out how to do it, than setup a firewall on the server and
configure NAT/IP Masquerading to rotate outgoing connections to port 25
amongs the different IP addresses(all connections will originate from
the same NIC, but their headers will be mangled to rotate amongst your
valid ip addresses)