From: Wietse Venema (wietseporcupine.org)
Date: Wed Jan 02 2008 - 18:14:14 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Victor Duchovni:
> > if the load balancer implements the XCLIENT command (by sending it with
> > infos on the original client), then postfix would get the IP.
>
> The load balancer we do this with can have a customizable conversation
> with the server before it yields control to the client.
>
> Client->LB: Connect
> LB->Server: Connect, wait for banner
> Server->LB: 220 ...
> LB->Server: XCLIENT ADDR=...
> Server->LB: 250 ...
> LB->Client: 220 ...
> ... LB yields connection to client ...
>
> various error handling ...

(forget about two server replies after XCLIENT; there is only one)

I never thought of using XCLIENT this way.

Does the load balancer provide the client hostname with the XCLIENT
command? If not, then Postfix will use (and log) the real client
address with the load balancer's hostname. It's not a big deal, it
just means you can't have access rules based on the client hostname.

        Wietse

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]