On Thu, Nov 03, 2022 at 07:42:17PM -0400, Wietse Venema wrote:
> > I don't recall whether milter message content processing happens before
> > or after canonical rewriting, Wietse might post a reminder. If milters
> > go first, you'll need to do DKIM signing after the message first goes
> > through a null content filter (directly back into Postfix on a different
> > port, with nothing in the middle), with milters only on the far side and
> > the canonical rewrites on the near side.
>
> Postfix rewrites headers and envelopes before storing the message
> in a queue file. Then, Milters can make changes, where each Milter
> sees the result of changes made by its predecessor.
[ I should have known this, or figured it out as the only sensible
design choice, but chose to punt. ]
Thanks, this makes the OP's job rather simpler, just use $canonical_maps
with "envelope_recipient" excluded from $canonical_classes, making use
of wildcard rewrites fairly harmless (unless also using something more
exotic like reject_unlisted_sender).
--
Viktor.
