Re: Postfix: How to run the milter BEFORE reject_unverified_recipient

Wietse Venema:
> Benoit Panizzon:
> > Dear Lists (sorry for the xpost).
> > 
> > I have a milter which performs SRS Signing in case of forwarded emails
> > and SRS Verification of bounces.
> > 
> > This worked quite well, until we configured our mail plattform to also
> > relay emails for other domains and thus activated
> > reject_unverified_recipient to perform smtp forward recipient checking.
> > 
> > http://www.postfix.org/ADDRESS_VERIFICATION_README.html
> > 
> > Well unfortunately reject_unverified_recipient is checking the
> > recipient BEFORE it is passed throught the milter check_recipient would
> > extract the real recipient from a valid signed SRS address.
> > 
> > So every recipient SRS signed bounced recipient is being rejected by
> > reject_unverified_recipient.
> > 
> > So is there any way to configure postfix to either run the milter
> > BEFORE reject_unverified_recipient or to not run
> > reject_unverified_recipient for the transports
> > address_verify_local_transport or address_verify_virtual_transport but
> > only for address_verify_relay_transport?
> 
> Not possible. The Milter protocol implements the 'change sender'
> feature AFTER the entire message is received. That is long
> after the MAIL FROM and RCPT TO commands.

My best guess is to SPLIT your mail streams, and use separate
SMTP servers for transit mail and for final delivery.

	Wietse