Re: inet_interfaces and dynamic interfaces

6 msg	Temporary blacklisting of hosts that send email...
9 msg	defer and deferred
3 msg	How to make postfix log complete 'From' address?

inet_interfaces and dynamic interfaces
\ Curtis Doty (23 Oct 2007)
. \ Noel Jones (23 Oct 2007)
. . \ Curtis Doty (24 Oct 2007)
. . . \ Victor Duchovni (24 Oct 2007)
. . . . \ Curtis Doty (24 Oct 2007)
. . . . . \ Robert Vangel (25 Oct 2007)

2 msg	Whether to set masquerade_classes
3 msg	Transport map? or.. sending mail somewhere othe...
3 msg	Large scale Postfix/Cyrus email system for 100,...
4 msg	Collecting spam via RBLs?
4 msg	queue not moving fast
1 msg	RE: What is a Postfix policy server? - Thanks
4 msg	gateway between the world and an internal mails...
2 msg	rbl
2 msg	high-priority queue?
2 msg	Postgray + Postfix Recipient Access
3 msg	'Illegal seek' errors
5 msg	Postfix + CyrusSASL on Centos
5 msg	postfix 2.2.8 losing emails
4 msg	'Recipient address rejected: Policy' - What Pol...
7 msg	Postfix and RDNS
1 msg	LDAP and mail expansion while sending it.

Subject:	Re: inet_interfaces and dynamic interfaces
Group:	Postfix-users
From:	Robert Vangel
Date:	25 Oct 2007

Curtis Doty wrote:
> 9:32am Victor Duchovni said:
>
>> On Wed, Oct 24, 2007 at 06:27:08AM -0700, Curtis Doty wrote:
>>
>>> No, I meant that postfix wasn't listening on the tunnel interface, which
>>> is where the clients will try to connect/relay. And if I add the
>>> tunnel's
>>> IP address to inet_interfaces, postfix will refuse to start if the
>>> tunnel
>>> is down.
>>
>> If Postfix is listening on "all" interfaces, the tunnel will be included
>> in the 0.0.0.0 listening socket. Otherwise you are out of luck. If some
>> interfaces need to not be exposed, use the hosts firewall software if
>> any to block the interfaces that should be excluded.
>>
>
> Gotcha, thanks. I will disable all use of inet_interfaces and use other
> non-postfix means to restrict access to the "dangerous" interfaces.
>
> ../C
>

If the tunnel's address is static then add the IP address to lo/eth0 in
a script when lo/eth0 comes up. The address will exist for postfix and
once the interface actually comes up, then voila.