<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"></head><body>To overcome this I placed an haproxy istance on every postfix node handling config by puppet instead of having a dedicated haproxy node.<div>But this on a smaller environment 6 postfix 10 amavis.<br><div><div><br><div><div dir="auto">On a larger environment like you are describing you would better try milter first.</div></div></div></div><div dir="auto"><br></div></div><div>Milter sould also cut off returning traffic on port 10025.</div><div><br></div><div><br></div><div style="font-size:100%;color:#000000"><!-- originalMessage --><div>-------- Messaggio originale --------</div><div>Da: Vitali Quiering <vitali@quiering.com> </div><div>Data: 19/09/18 14:15 (GMT+01:00) </div><div>A: amavis-users@amavis.org </div><div>Oggetto: amavis behind haproxy </div><div><br></div></div>Hello,<br><br>I am planning to setup a clustered amavis setup with loadbalancing haproxy. There are approx. 80 standalone mailservers (postfix, dovecot) that will use the new amavis cluster.<br><br>I thought about the setup like this:<br>Postfix receives the mail and sends it (content-filter) to the haproxy on port 10024 which passes the tcp connection to one of the amavis servers on port 10024. After scanning amavis sends it back to postfix on port 10025.<br><br>I already got the forward_method, socket_bind and inet_acl setup correctly. The problem I’m facing now is the ip that amavis sees and wants to send the result to. This is the haproxy ip address which of course doesn’t work.<br><br>Is this possible at all?<br>Do I need amavisd-milter? If yes, why? What’s different besides before or after queue?<br><br>Thank you very much<br><br>Regards,<br>Vitali</body></html>