A remaining concern is bypassing the content_filter I've scanned through http://www.postfix.org/FILTER_README.html and googled this issue.
I think I'd understand the FILTER documentation better with a real example. Let's say I want everything to go through the content filter unless it comes from 1.2.3.4/24 or 5.6.7.8/24 How is that configured? I don't understand the documentation. If the access table was used, then one uses: /whatever/ FILTER foo:bar That would invoke the filter, but what to use when you want no filter? Also, how is /whatever/ constructed to mean everything but 1.2.3.4/24 or 5.6.7.8/24 ?