Well...I seem to have partially answered my own question. If I remove the catch-all regexp, the address is rewritten correctly. Still, why does postmap -q present a different result?
And, how can I accomplish the catch-all rewrite if this is the expected behavior of regexp? I may have misunderstood, but: >From <http://www.postfix.org/virtual.5.html>: Patterns are applied in the order as specified in the table, until a pattern is found that matches the string.
smime.p7s
Description: S/MIME Cryptographic Signature