On Thu, Nov 18, 2010 at 06:31:27PM +0000, Chris G wrote: > > Avoid sender_canonical_maps, it is semantically wrong in most cases. > > Avoid masquerading (at least for inbound mail) as it is difficult to > > combine with recipient validation. > > Thanks too - I'll go and have a good read.
Enjoy! And, as Wietse correctly points out, the NAT router *is* irrelevant. You have an internal-only host name-space, it is the disparity in host *naming* between the inside network and the outside that is is pertinent here, NAT has nothing to do with it. You can redesign your namespace to be consistent inside and outside, if you wish (with internal DNS views returning internal IPs for each globally valid host name), or Postfix supports a variety of rewriting mechanisms. Larger sites tend to run with virtual_alias_domains valid both inside and outside, with internal rewriting to direct each user's mail to the right mail store. Internal-only email address namespaces are more in SOHO sites, you could also peruse SOHO_README.html. -- Viktor.