* Stefan Foerster <cite+postfix-us...@incertum.net>: > I _think_ (and I'm really not 100% sure if this would work) another > possibility would be to use a feature introduced with Postfix 2.7, > namely sender_dependent_default_transport_maps. You could define a > transport which passes all mail to the DKIM proxy. The proxy itself > would have to reinject the mails to a dedicated smtpd(8) clone, > defined in master.cf, with and empty sender_dependent_default_transport_maps > (or at least one which doesn't include the entry for your DKIM proxy). > Then populate the map referenced in sender_dependent_default_transport_maps > with all your domains you want to sign. As I said, this might be a bad > idea.
Bad idea. As stated in the release notes, sender_dependent_default_transport_maps don't support the "nexthop" feature of a regular transport map entry. You could try with sender_dependent_relayhost_maps, available as of Postfix 2.3. Stefan