Matus UHLAR - fantomas: > Hello, > > >Viktor Dukhovni: > >> I don't recall whether milter message content processing happens before > >> or after canonical rewriting, Wietse might post a reminder. If milters > >> go first, you'll need to do DKIM signing after the message first goes > >> through a null content filter (directly back into Postfix on a different > >> port, with nothing in the middle), with milters only on the far side and > >> the canonical rewrites on the near side. > > On 03.11.22 19:42, Wietse Venema wrote: > >Postfix rewrites headers and envelopes before storing the message > >in a queue file. Then, Milters can make changes, where each Milter > >sees the result of changes made by its predecessor. > > I have implemented SRS via postsrsd and my observation says that while > envelope sender is changed by canonical_maps and the new sender is logged, > existing milters only see old sender. > > Perhaps I'm doing something wrong?
No. The Postfix SMTP server passses the MAIL FROM and RCPT TO addresses to the Milter, not the rewritten ones, and passes the header/body as stored in the queue file. Milter requests to replace an RCPT TO address will work, even if that address was rewritten before the envelope was stored. This works as long as Postfix is allowed to store the original-to address. Wietse