master/slave setup via VPN?

[Alain Spineux]

On Mon, Jul 21, 2008 at 1:19 PM, Thorsten Schnebeck
<thorsten.schnebeck at gmx.net> wrote:
> Am Monday 21 July 2008 um 12:35:37 schrieb Thorsten Schnebeck:
>> On Monday 21 July 2008 11:45:39 Alain Spineux wrote:
>> > On Sun, Jul 20, 2008 at 1:32 PM, Thorsten Schnebeck
>> >
>> > <thorsten.schnebeck at gmx.net> wrote:
>> > > Am Samstag 19 Juli 2008 schrieb Alain Spineux:
>> > >> On Fri, Jul 18, 2008 at 10:38 PM, Thorsten Schnebeck
>> > >
>> > > When I ping to slave.domain2.com now it pings to 10.10.10.2
>> > > but postfix still want to deliver to the real IP. I also insert
>> > >
>> > > smtp_host_lookup = native,dns
>> >
>> > Hmm, yes maybe, I didn't know about that
>> > but "disable_dns_lookups" looks more appropriate.
>> > I was thinking "disable_dns_lookups" was the default, happy
>> > to learn something new
>>
>> /kolab/sbin/postconf -d | grep _dns_
>> disable_dns_lookups = no
>>
>> I changed it to "yes" and now this works without timeout and forced
>> relaying :-)
>
> BUT...
> now some mail servers do not like my server anymore:
> status=deferred (connect to gmx.net[213.165.65.50]: Connection timed out)

from http://www.postfix.org/faq.html

. When you disable DNS lookups, you must specify the relayhost  as
either a numeric IP address, or as a hostname that resolves to one .
or more IP addresses (with DNS lookup disabled, Postfix does no MX
lookup).

we are on the wrong way, you need MX lookup, IP lookup only is not enough
Then remove the disable_dns_lookups !

The entry in /etc/hosts alone should be enough !

>
> If I change this back to "no" everything is fine
> relay=mx0.gmx.de[213.165.64.100]:25, delay=1087, delays=1087/0.05/0.13/0.17,
> dsn=2.6.0, status=sent (250 2.6.0 Message accepted {mx007})
>
> So, while this option helps for my local vpn setup, is a showstopper for my
> global system.
>
> Bye
>
>  Thorsten
>
> _______________________________________________
> Kolab-users mailing list
> Kolab-users at kolab.org
> https://kolab.org/mailman/listinfo/kolab-users
>



-- 
Alain Spineux
aspineux gmail com
May the sources be with you