Hi, Following up with my other email, I think I can ask the question more directly.
I found it was necessary to have an entry in a check_recipient_access map with the old address as well as in my virtual map that redefines the old address with the new one, and I don't understand why. It looks like it finds it in the virtual map first: Apr 9 17:49:20 xavier postfix-116/smtpd[5101]: maps_find: virtual_alias_maps: cdb:/etc/postfix-116/virtual(0,lock|fold_fix|utf8_request): user...@example.com = u...@example.com but then continues processing the recipient restrictions and rejects it because there's a REJECT at the bottom and no specific entry for user...@example.com Apr 9 17:49:20 xavier postfix-116/smtpd[5101]: maps_find: pcre:/etc/postfix-116/property_map: pcre:/etc/postfix-116/property_map(0,lock|fold_fix|utf8_request): user...@example.com = REJECT I also realized the format I was using in my virtual_alias_maps was wrong. The example in the documentation just says "Wietse.Venema" maps to "wietse" without the FQDN, but that didn't work for me until I used the full address.
