<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hello,</p>
<p>We would like to use Dovecot Submission to have less queues to
maintain.<br>
The relayhost (Postfix) after Dovecot routes mail by sender_map,
so authenticated user, not the "mail from" because .<br>
<br>
For what we've seen, we can't use receive header to retrieve this
authenticated_user.</p>
<p>Example of header :<br>
</p>
<pre> Received: from mailhost ([0.0.0.0])
by submission.host with ESMTPSA
id submission-id
(envelope-from <a class="moz-txt-link-rfc2396E" href="mailto:myadress@example.com"><myadress@example.com></a>)
for <a class="moz-txt-link-rfc2396E" href="mailto:myadress@example.com"><myadress@example.com></a>; Thu, 9 Nov 2022 08:27:41 +0000</pre>
<p>So we've thought to use X-client, but reading the doc seems
that's not the a good way :<br>
<i><a class="moz-txt-link-freetext"
href="https://doc.dovecot.org/settings/core/">https://doc.dovecot.org/settings/core/</a></i><br>
</p>
<pre> <span class="sig-name descname"><span class="pre">- submission_relay_trusted</span></span>
If enabled, the relay server is trusted.
Determines whether we try to send (Postfix-specific) XCLIENT data to the
relay server (only if enabled).
</pre>
But, XCLIENT for Submission seems to not transfer LOGIN :<br>
<i><a class="moz-txt-link-freetext"
href="https://doc.dovecot.org/settings/core/">https://doc.dovecot.org/settings/core/</a><br>
</i>
<pre> XCLIENT command can be used to override:
Session ID
Client IP and port (<code class="docutils literal notranslate"><span class="pre">%{rip}</span></code>, <code class="docutils literal notranslate"><span class="pre">%{rport}</span></code>)
HELO - Overrides what the client sent earlier in the EHLO command
LOGIN - Currently unused
PROTO - Currently unused</pre>
<blockquote>
<div>
<pre><code class="docutils literal notranslate"><span class="pre">forward_*</span></code> fields can be sent to auth process’s passdb lookup</pre>
<pre>The trust is always checked against the connecting IP address.
Except if HAProxy is used, then the original client IP address is used.
</pre>
</div>
</blockquote>
Do you know another way to inform the relayhost of submission of the
authenticated_user?<br>
<br>
Thanks<br>
<br>
Ismaël TANGUY
<p></p>
</body>
</html>