Try to route outgoing messages through diff IPs depending on trust
authorAlex Dehnert <alex@dehnerts.com>
Wed, 1 Nov 2017 07:59:37 +0000 (03:59 -0400)
committerAlex Dehnert <alex@dehnerts.com>
Wed, 1 Nov 2017 07:59:37 +0000 (03:59 -0400)
commit06162c0801ba011bfa70b0a6cd2891d95a2f4f8d
tree7bd09c56d2ebed65c16f0fac5dc7be136ab0fd89
parent444719912c6a6e3e77c71da2dfb7ad2c6672f19a
Try to route outgoing messages through diff IPs depending on trust

Ideally, if there was auth on a message (kerberos/password remotely, or
legitimately sourced locally -- mailman messages dubiously count), we'd use one
IP, and forwarded messages (eg, mail to jim@ being forwarded to GMail) would
use another. That way, when GMail decided to hate the latter, the (more
important) former would still go through. I'm not quite sure how to decide
based on auth, so instead, I just whitelisting a few envelope senders, but it's
better than nothing.

See
https://serverfault.com/questions/663979/virtual-alias-domains-how-to-use-different-ip-addresses-when-forwarding-mail,
http://www.postfix.org/postconf.5.html#smtp_bind_address, and
http://www.postfix.org/postconf.5.html#sender_dependent_default_transport_maps
for some relevant docs.
main.cf
master.cf