> On Apr 4, 2017, at 5:26 PM, John Stoffel <j...@stoffel.org> wrote: > > But I only want this replamcent to happen for email that comes from a > specific set of outside servers. I think I might have to run my own > milter here to do this. I really can't depend on the headers not > being forged somehow, but I can depend on the host which connects to > me being who it says. > > To a degree. > > Am I making sense?
Yes. Another option is to build a custom version of Postfix in which the Delivered-To: header is renamed. Perhaps this should be configurable, and maybe even forgery-protected, but an obscure alternative header would suffice, if you're willing to run Postfix binaries built on site. -- Viktor.