On 18/04/2025 20:06, Matus UHLAR - fantomas via Postfix-users wrote:
I remember now when I implemented SRS, I configured separate postfix instance for outgoing mail.  This is the postfix issue described in postsrs docs: canonical maps are processed when mail is being received.

Yep, I have 2 separate deployments, one for incoming mail which includes antispam check and verification of domain, and second for outgoing mail with postsrsd and aliases database.

This outgoing instance rewrites mail sender, the default postfix instance only rewrites recipient. This way, only outgoing/forwarded mail is subject to sender rewriting.

On 18.04.25 22:00, Dmytro Alieksieiev via Postfix-users wrote:
So you say it's better to do recipient_canonical_maps on incoming mail? How it will improve situation? SRS will still throw same error and Postfix still reply with 4xx, no?

canonical_maps apply when postfix receives mail.

Using recipient_canonical_maps on postfix instance that receives mail from the internet is fine - this way you can check for valid SRS address when receiving and can immediately refuse that mail.

Using sender_canonical_maps is better when you send mail to the internet, e.g. 
forward it
- so mail recveived from internet will not have sender rewritten, but any mail forwarded from your system with remote sender address will.

This can be achieved when you send outgoing mail through another postfix instance.

--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
BSE = Mad Cow Desease ... BSA = Mad Software Producents Desease
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to