From 650db94b3b8dc6665c3883ac29f78adfe23e03f0 Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Tue, 14 Jan 2014 06:51:03 +0100 Subject: Don't use IPSec to relay messages to localhost. --- roles/common/templates/etc/postfix/main.cf.j2 | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'roles/common/templates') diff --git a/roles/common/templates/etc/postfix/main.cf.j2 b/roles/common/templates/etc/postfix/main.cf.j2 index 4c56cea..83f97b4 100644 --- a/roles/common/templates/etc/postfix/main.cf.j2 +++ b/roles/common/templates/etc/postfix/main.cf.j2 @@ -43,7 +43,11 @@ relay_domains = # Tunnel everything through IPSec smtp_tls_security_level = none +{% if 'MTA-out' in group_names %} +smtp_bind_address = 127.0.0.1 +{% else %} smtp_bind_address = 172.16.0.1 +{% endif %} smtpd_tls_security_level = none # Turn off all TCP/IP listener ports except that dedicated to -- cgit v1.2.3