Hi there, I have the following setup, I have three physical servers, 10.10.10.1 (Traefik Dockerized) and 10.10.10.2 (Mailserver Dockerized) and 10.10.10.3 (Wordpress Farm Dockerized) I have set up Traefik doing the DNS-ACME job and routing HTTPS following entrypoints and HostSNI rules. The certifi…

Anybody? I really need your help, guys!

Please guys, any idea what I am doing wrong?

Previusly answered. [image] TCP proxy with SNI support Traefik v2 (latest) Hello, I have a single server with one Public IP and 10 domains. For each domain I’d like to have a separate docker container as an email server (Postfix + Dovecot). I’d like to achieve this with …

Hi, unfortunately, it's not a real answer to my problem. The only answer is "it is possbible to use HostSNI('FQDN') for every service but SMTP". My problem is that when using a tcp route for IMAPS (local ip and port 993) the pass through simply dies after handing out the correct ssl certificates t…

How are you testing? Can you post your config? I tested with mailu setup with no issues(certificate errors ignored) openssl s_client -connect 127.0.0.1:993 -crlf -servername example.com -quiet depth=0 CN = TRAEFIK DEFAULT CERT verify error:num=20:unable to get local issuer certificate verify retu…

Again, I am not connecting to a docker socket but to a real machine Testing against the real machine on port 993 returns openssl s_client -connect 192.168.1.35:993 -quiet depth=0 O = mailcow, CN = mail.example.org verify error:num=20:unable to get local issuer certificate verify return:1 depth=0…

[image] legraml: Again, I am not connecting to a docker socket but to a real machine Sorry I missed the physical servers part. Your service is on 993 so is encrypted. I believe you need to use passthrough if you are doing that but I have no personal experience with that. [image] legraml: …

Exactly, that is the problem, it wouldn't be much of a problem to forward to docker. The big deal is to forward to physical servers! See the different prompts depending on the ports IMAP prompt on 143 * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS LOGINDISABLED…

Okay you would have to reconfigure Dovecot to allow login on port 143. Its giving a secure default(or you configured it this way) and not allowing plain text login. Or setup a dedicated port for traefik.

Okay, just a quick update how I solved this issue even though I am not really satisfied with that "tweak". I managed to get it up and running by tweaking my mail servers configuration for Dovecot (port 143) and Postfix (port 25 / 587) to accept unsecure connections on port 143 and 587 and allow au…

TCP Route IMAPS / SMTPS traffic - HELP!

Traefik Traefik v2

cakiwi December 1, 2020, 12:59pm 4

Previusly answered.

Topic		Replies	Views
TCP route to mail server Traefik v2 docker , tcp	2	5013	February 19, 2023
TCP proxy with SNI support Traefik v2 tcp	3	3888	July 19, 2020
Traefik doesn't route TCP HOST SNI Traefik v3 (latest) docker	8	3008	December 22, 2023
How does TCP routing actually work? Traefik v2 docker-swarm , tcp	4	10059	December 11, 2022
Getting TCP routers to work with Traefik Traefik v2 docker-swarm , tcp	10	3043	September 9, 2019

TCP Route IMAPS / SMTPS traffic - HELP!

Related topics