Hi,

What is the current best practice for forwarded email? I am building a
new server with postfix+rspamd and want to do it the right way (and
later also migrate existing older setup to this). I have forwarding
defined via virtual_alias_maps.

For DKIM, should it be just ARC enabled in rspamd? When is ARC
actually needed, if postfix does not alter the forwarded email (so
original DKIM should not break)?
For SPF, the fix is SRS.

For SRS, how to configure it, so that only the forwarded email (e.g.
to gmail) is rewritten and not also the original email from SASL user
to gmail? postsrsd rewrites all emails and there are some examples to
use multiple postfix instances, but I don't fully understand the
division of work. The instance which receives mail from outside via MX
is the one which should be running postsrsd (only outgoing email from
it are the forwards?), and instance where SASL users connect should
not (so outgoing mail, and also locally delivered email - or that
should go from SASL instance via the MX instance)?

I have also found examples with just 1 instance where the rewriting is
limited by MySQL table. If I understand, the query returns the
original sender for outgoing email (senders which are virtual
accounts/aliases) and only if the query does not return anything,
postsrsd is asked. Does this approach have any downsides? Or which one
is the preferred way?

Something like this: sender_canonical_maps =
mysql:/etc/postfix/mysql-no-srs.cf,tcp:127.0.0.1:10001


-- 
  bye, Marki
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to