# Backend ACLnot configuring

**URL:** <https://discourse.haproxy.org/t/backend-aclnot-configuring/7904>\
**Category:** Help!\
**Created:** [August 14, 2022, 10:54am UTC](https://discourse.haproxy.org/t/backend-aclnot-configuring/7904 "2022-08-14T10:54:36Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mythz](https://avatars.discourse-cdn.com/v4/letter/m/3da27b/32.png) [@Mythz](https://discourse.haproxy.org/u/Mythz)\
**Post date:** [August 14, 2022, 10:54am UTC](https://discourse.haproxy.org/t/backend-aclnot-configuring/7904/1 "2022-08-14T10:54:36Z")

</div>

Hi All,

I created the following FE and BE in HAproxy (On Pfsense) for a set of VM`s:

frontend Exchange-FE-SMTP  
bind External-IP-here:25 name External-IP-here:25 ssl crt-list /var/etc/haproxy\_test/Exchange-FE-SMTP.crt\_list  
mode tcp  
log global  
timeout client 30000  
default\_backend ExchangeBE-withLB-SMTP\_ipvANY

backend ExchangeBE-withLB-SMTP\_ipvANY  
mode tcp  
id 108  
log global  
balance roundrobin  
timeout connect 30000  
timeout server 30000  
retries 3  
option httpchk OPTIONS /  
use-server E2019Node1 if SMTP  
use-server E2019Node2 if SMTP  
server E2019Node1 10.10.10.201:25 id 101 check inter 1000  
server E2019Node2 10.10.10.202:25 id 102 check inter 1000

But when i hit save I get the following message :

Errors found while starting haproxy  
[ALERT] 225/161943 (4392) : parsing [/var/etc/haproxy\_test/haproxy.cfg:111] : error detected while parsing switching rule : no such ACL : ‘SMTP’.  
[ALERT] 225/161943 (4392) : parsing [/var/etc/haproxy\_test/haproxy.cfg:112] : error detected while parsing switching rule : no such ACL : ‘SMTP’.  
[ALERT] 225/161943 (4392) : Error(s) found in configuration file : /var/etc/haproxy\_test/haproxy.cfg  
[ALERT] 225/161943 (4392) : Fatal errors found in configuration.

I had a look at “/var/etc/haproxy\_test/haproxy.cfg”. Its the lines I`ve pasted above, and noticed the ACL parameter is always missing (even though I’m defining it in the Backend config)

The ACL is not getting saved to the config file, which results in the back end servers not being used as intended.  
Editing the /var/etc/haproxy/haproxy.cfg file gets overwritten by PF sense when the ‘Save’ button is clicked in the HAProxy/Backend GUI.

Am I doing something wrong here? I have created setups like this in the past and I’ve never run into anything like this.

---

<div class="post-metadata">

**Author:** ![Mythz](https://avatars.discourse-cdn.com/v4/letter/m/3da27b/32.png) [@Mythz](https://discourse.haproxy.org/u/Mythz)\
**Post date:** [August 21, 2022, 7:13am UTC](https://discourse.haproxy.org/t/backend-aclnot-configuring/7904/2 "2022-08-21T07:13:46Z")

</div>

Anyone? I still haven’t got this to work.

---

<div class="post-metadata">

**Author:** ![rhada](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.haproxy.org/rhada/32/585_2.png) [@rhada](https://discourse.haproxy.org/u/rhada)\
**Post date:** [August 22, 2022, 1:36pm UTC](https://discourse.haproxy.org/t/backend-aclnot-configuring/7904/3 "2022-08-22T13:36:18Z")

</div>

Hello,

The error message is quiet clear : no such ACL : ‘SMTP’.

In your BE section, you have a rules :

```auto
use-server E2019Node1 if SMTP
use-server E2019Node2 if SMTP

```

But the SMTP acl is not defined anywhere in your config file. You have to define SMTP acl then your rul should work.