On 2025-01-25 13:27, duluxoz via Postfix-users wrote:
> alerts/reports (to the sys-ops) and by users for internal organisation
> communication. Those users that require external email access also have
> an email account in an externally-facing domain, and usually use the
> appropriate domain when sending email. Occasionally, an internal domain

What do you expect to happen when some internal-to-internal
communication at some point gets "Internet" CC?

While alice@internal could be mapped to alice@external, the "To:" header
would still have bob@internal (and CC: newly_added@internet).

Now the newly_added@internet replies to all: alice@external (rewritten)
and undeliverable bob@internal.

Do you want to remap these addresses (via some automagic), or simply
prohibit users from sending (e.g. to prevent some internal documents
leaking)?

> while filtering on submission sounds like it might be the way to go, we
> have to ensure that emails to/from user_x@example.internal can still
> reach use...@example.com, etc, but not user_z@somewhere_on_the_internet.com

As the internal and external are separate accounts (if I understand
correctly) this still seems to be the job for submission stage.
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to