HAProxy + tproxy 4 problem

From: Wouter Callewaert <W.Callewaert#proximedia.be>
Date: Fri, 21 Mar 2008 10:45:48 +0100


I'm trying to install HAProxy for multiple incoming SMTP servers.

Since I need the ip address for RBL checks, I need to use tproxy as well.  

I've installed HAProxy snapshot 20080318 and tproxy 4.0.4 on the 2.6.22 kernel.

Both the nf_conntrack & iptable_tproxy modules are loaded.  

When I test the proxy with a telnet connection, I just get a timeout. It works fine without the 'usesrc clientip'  

Any idea what I could do wrong?  

No change that the XCLIENT extension will be implemented in the near future? (http://www.postfix.org/XCLIENT_README.html , comparable with the X-Forwarded-For header)  

Kind regards,  

Wouter Callewaert

Proxy server:

Mail server:

test telnet:  

My test config:  

listen balancesmtp

        mode tcp

        retries 1

        option redispatch

        contimeout 5000

        clitimeout 5000

        srvtimeout 5000

        maxconn 400000

        bind *:25

        balance roundrobin

        server srv1 source usesrc clientip  

haproxy debug:  

00000000:balancesmtp.accept(0004)=0005 from []





Netstat output during connection (syn_sent status remains until the timeout):  

tcp 0 0 ESTABLISHED tcp 0 0 ESTABLISHED tcp 0 1 SYN_SENT       Received on 2008/03/21 10:45

This archive was generated by hypermail 2.2.0 : 2008/03/21 10:45 CET