Geert Hendrickx via Postfix-users:
> On Tue, Feb 13, 2024 at 12:23:32 -0500, Wietse Venema via Postfix-users wrote:
> > - masquerade_domains complicates table-driven address validation.
> > Log a deprecation warning with compatibility_levels>=3.9.
> 
> 
> What's the alternative for masquerade_domains ?

The proper alternative is a two-way 1:1 mapping between internal
email addresses and the corresponding addresses in 'publicly visible'
domains.

On an inbound email gateway, accept only recipients in 'publicly
visible' domains, and map the envelope recipient to the corresponding
internal address.

On an outbound email gateway, accept only sender addresses that
have a 'publicly visible' equivalent, and convert internal address
forms to the 'public' forms.

        Wietse
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to