On Tue, Aug 14, 2012 at 05:02:53PM -0400, Wietse Venema wrote: > How should SRS work in this configuration?
If SRS is to be used at all, it needs to be used in the "final" (after all filters, ...) output stage of an otherwise "inbound" MTA. In this "final" output stage, the default_transport (outbound mail) would be configured with a fixed nexthop that does the SRS processing (one recipient at a time). A sender-dependendent default transport table would exclude local sender addresses (though best if these never reach this "inbound" MTA in the first place) from the SRS destination and deliver these directly. With this, no architecture changes required. The OP's mistake is to treat SRS as in input transformation (Postfix typically does filtering on input), but in reality SRS is an output transformation and must thus be delayed until a message is ready to leave. -- Viktor.