From 650db94b3b8dc6665c3883ac29f78adfe23e03f0 Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Tue, 14 Jan 2014 06:51:03 +0100 Subject: Don't use IPSec to relay messages to localhost. --- roles/MX/templates/etc/postfix/main.cf.j2 | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'roles/MX/templates/etc') diff --git a/roles/MX/templates/etc/postfix/main.cf.j2 b/roles/MX/templates/etc/postfix/main.cf.j2 index 570a797..9f88eef 100644 --- a/roles/MX/templates/etc/postfix/main.cf.j2 +++ b/roles/MX/templates/etc/postfix/main.cf.j2 @@ -81,7 +81,11 @@ smtp_data_done_timeout = 1200s # Tunnel everything through IPSec smtp_tls_security_level = none +{% if 'MTA-out' in group_names %} +smtp_bind_address = 127.0.0.1 +{% else %} smtp_bind_address = 172.16.0.1 +{% endif %} # TLS smtpd_tls_security_level = may -- cgit v1.2.3