smtp-ssl.cfg

#  vim:ts=4:sts=4:sw=4:et
#
#  Author: Hari Sekhon
#  Date: 2017-12-20 18:40:20 +0000 (Wed, 20 Dec 2017)
#
#  https://github.com/harisekhon/haproxy-configs
#
#  License: see accompanying Hari Sekhon LICENSE file
#
#  If you're using my code you're welcome to connect with me on LinkedIn and optionally send me feedback to help steer this or other code I publish
#
#  https://www.linkedin.com/in/harisekhon
#

# ============================================================================ #
#                       H A P r o x y  -  S M T P   S S L
# ============================================================================ #

# run as root to bind to port 25

frontend smtp-ssl
    description "SMTP SSL"
    bind *:25
    mode tcp
    option tcplog
    default_backend smtp-ssl

backend smtp-ssl
    description "SMTP SSL"
    balance leastconn
    mode tcp
    acl internal_networks src 192.168.0.0/16 172.16.0.0/12 10.0.0.0/8 127.0.0.1
    tcp-request content reject if ! internal_networks
    option smtpchk
    # GMail needs TLS
    default-server check-ssl verify none
    #server gmail smtp.gmail.com:465 check
    server smtp smtp:25 check
    server mail mail:25 check
    server docker docker:25 check
    server 192.168.99.100 192.168.99.100:25 check