On 14 Jul 2019, at 20:49, Viktor Dukhovni <postfix-us...@dukhovni.org> wrote: > On Sun, Jul 14, 2019 at 07:51:11PM -0600, @lbutlr wrote: >> -o smtpd_milters= >> -o milter_connect_macros= >> -o milter_macro_daemon_name=ORIGINATING >> >> That is likely where you are going to run into the most issues. > > No. DKIM signing is a typical use-case for this.
Many people runs filters like amavis, spamass-milter, and others that run checks on mail that should not be run on authenticated submission. For example, the OP was having issues with SPF failures which COULD be a milter, I suppose. As it is setup now, the OPs postfix is run rspamd for authenticated users outbound mail, I believe. non_smtpd_milters = $smtpd_milters smtpd_milters = unix:/var/run/rspamd/milter.sock,inet:172.16.21.3:8472 Depending on how rspamd behaves with outbound mail, this may be an issue. (I don’t know, I don’t use it, but SpamAssassin/spamd certainly need care when trying to process outbound mail IIRC) -- 'I knew the two of you would get along like a house on fire.' Screams, flames, people running for safety…