Hi,
Quoting myself....
The very thing I added to allow forwarding without breaking SPF /
DMARC appends the From field to the primary domain regardless of the
domain the message comes from. I've withdrawn postsrsd for now while I
look into a possibility of work around or something to replace it.
I know this is not strictly on topic, but it probably concludes this
thread :
After realising it wasn't 'myhostname' that needed to be made dynamic, I
searched for a way to get postsrsd to make 'SRS_DOMAIN' dynamic. I
hoped this could be set by the domain of the local recipient (not the
final destination). I gave up after yielding no positive results though.
My get out :
As only 'domain2' forwards any mail externally, I decided to set
'SRS_DOMAIN' to 'domain2' and 'SRS_EXCLUDE_DOMAINS' to exclude all other
domains using config file '/etc/default/postsrsd'. From then on, only
'from' headers from 'domain2' are re-written by postsrsd and are
appended '@domain2' meaning no failed SPF domain alignment results. I
can now set DMARC adkim to strict I suppose.
If anyone has managed to make 'SRS_DOMAIN' dynamic, I'd love to hear
how, otherwise please considder this resolved. Thanks Wietse and
Christian for your help.
Best regards,
Mick.