From: Victor Duchovni (Victor.DuchovniMorganStanley.com)
Date: Wed Jan 02 2008 - 18:59:24 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Wed, Jan 02, 2008 at 07:14:14PM -0500, Wietse Venema wrote:

> > Client->LB: Connect
> > LB->Server: Connect, wait for banner
> > Server->LB: 220 ...
> > LB->Server: XCLIENT ADDR=...
> > Server->LB: 250 ...
> > LB->Client: 220 ...
> > ... LB yields connection to client ...
> >
> > various error handling ...
>
> (forget about two server replies after XCLIENT; there is only one)
>
> I never thought of using XCLIENT this way.
>
> Does the load balancer provide the client hostname with the XCLIENT
> command? If not, then Postfix will use (and log) the real client
> address with the load balancer's hostname. It's not a big deal, it
> just means you can't have access rules based on the client hostname.

I think we only send the address, the load balancer is not doing
reverse lookups. We may be sending (in a single XCLIENT command)
"NAME=[UNAVAILABLE]" or similar. It has been a while since I helped
that up, and I don't have access to the LB config, we are too big,
that's another department. :-)

--
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majordomopostfix.org?body=unsubscribe%20postfix-users>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]