postsrsd

Postfix Sender Rewriting Scheme daemon

Breaking change: PostSRSd has been upgraded to version 2.x and requires changes to your Postfix configuration!

Add the following snippet to your /etc/postfix/main.cf

sender_canonical_maps = socketmap:unix:srs:forward
sender_canonical_classes = envelope_sender
recipient_canonical_maps = socketmap:unix:srs:reverse
recipient_canonical_classes = envelope_recipient, header_recipient

PostSRSd 2.x+ requires at least Postfix 2.10 for socketmap support.

Usage

docker run --rm --name postfix-postsrsd -e SRS_DOMAIN=domaintouse.org -e "SRS_SECRET=k/bWL9OyMBGTJ9p4Hb1owcag" ajoergensen/postfix-postsrsd

Environment

• SRS_DOMAIN: Domain to use for sender rewriting (mandatory)
• SRS_SECRET: Secret used to hash the sender email. Generate one with this command: dd if=/dev/random bs=18 count=1 | base64 (mandatory)
• SRS_EXCLUDE_DOMAINS: Senders in these domains will not be rewritten (optional)
• SRS_SEPARATOR: Separator used when rewriting the sender email, default is "=" which generates a rewritten address like this: [email protected] (optional)
• SRS_SOCKET_PORT: Port used for socketmap SRS, default is 10003 (optional)
• SRS_HASHLENGTH: Hash length used when rewriting the sender, default is 4 (optional)
• SRS_HASHMIN: Minimum hash length to consider when doing reverse SRS, default is 4 and should match SRS_HASHLENGTH (optional)
• RUN_AS: User to run the daemon as, default is postsrsd (optional)
• CHROOT: Directory to use for chroot, default is /var/lib/postsrsdr (optional)
• SRS_LISTEN_ADDRESS: Default is 0.0.0.0 (optional)

Secret

Be careful that no one can guess your secret, because anyone who knows it can use your mail server as an open relay!