> It definetely does not work. It only works for smtp not smtpd.
> Also message_drop_headers+=. I now have disabled relay from the
> outside completely and spawn a in-VPN-only-submission
>
> 192.0.2.1:submission inet n - n - - smtpd
> -o syslog_name=vpnsubmission
> -o smtpd_sasl_auth_enable=no
> -o
> smtpd_relay_restrictions=permit_mynetworks,reject_unauth_destination
-o header_checks=pcre:/etc/postfix/vpn_header_checks
/etc/postfix/vpn_header_checks:
# create a regex to filter specific headers only, like
/^Received:.*by <hostname-regex> \(Postfix\) with <ESMTP...>/ IGNORE
(There's also milter_header_checks in case a milter is used).
Best regards
Gerald