Re: Postfix: How to run the milter BEFORE reject_unverified_recipient

Wietse Venema <[email protected]> Tue, 20 Feb 2018 07:14:04 -0500 (EST)
Newsgroups gmane.mail.postfix.user,gmane.mail.mimedefang
Message-ID <[email protected]>
Benoit Panizzon:
> Dear Lists (sorry for the xpost).
> 
> I have a milter which performs SRS Signing in case of forwarded emails
> and SRS Verification of bounces.
> 
> This worked quite well, until we configured our mail plattform to also
> relay emails for other domains and thus activated
> reject_unverified_recipient to perform smtp forward recipient checking.
> 
> http://www.postfix.org/ADDRESS_VERIFICATION_README.html
> 
> Well unfortunately reject_unverified_recipient is checking the
> recipient BEFORE it is passed throught the milter check_recipient would
> extract the real recipient from a valid signed SRS address.
> 
> So every recipient SRS signed bounced recipient is being rejected by
> reject_unverified_recipient.
> 
> So is there any way to configure postfix to either run the milter
> BEFORE reject_unverified_recipient or to not run
> reject_unverified_recipient for the transports
> address_verify_local_transport or address_verify_virtual_transport but
> only for address_verify_relay_transport?

Not possible. The Milter protocol implements the 'change sender'
feature AFTER the entire message is received. That is long
after the MAIL FROM and RCPT TO commands.

	Wietse