That's precisely what I don't want to do.

1. all mail from inside goes to this (edge - 1 ) postfix box.

2. if from trusted/don't-scan-it [email protected], then don't go to 
edge/out-MX relayhost, resolve/send directly to Internet.

3. if not from [email protected], then send to relayhost.


So there's no way to do this?

Len
maybe this is what you want
assume all outbound mail sent through the powerful postfix box

in powerful postfix box

main.cf
transport_maps = hash:/etc/postfix/transport
sender_dependent_default_transport_maps = hash:/etc/postfix/sender_dependent_default_transport_maps

transport
untrusted_domain        smtp:your_weak_mx_gateway_for_scaned

sender_dependent_default_transport_maps
[email protected]        powerful-trusted:

master.cf
powerful-trusted    unix    -     -    n    -    -    smtp
  -o smtp_helo_name=powerful_box_fqdn
  -o syslog_name=postfix-powerful-box

postmap hash hash table and reload postfix

but, if [email protected] has destination to u...@untrusted_domain, mail will be route to your_weak_mx_gateway_for_scaned
otherwise it'll sent directly to internet

cmiiw

Reply via email to