How to get postfix to send mail to different relay hosts

postfix

I'm running multiple websites on a single server. I'm using sendgrid to send my email.

Right now, I have postfix relay all outgoing mail to a single sendgrid account, using smtp_sasl for authentication.

I need to be able to send each domain's email to a different sendgrid account. So, for domain1.com, I'd want to relay to sendgrid using one account, and for domain2.com, I'd need postfix to use a different account to authenticate.

Best Answer

It's a shame that this one went for so long without a correct answer. And for that matter it's a shame it's not a dealt with by sendgrid's own documentation. The required directives are dealt with succinctly at http://www.postfix.org/SASL_README.html#client_sasl_sender, which I'll quote here, with some sendgrid specific modifcation:

/etc/postfix/main.cf:

smtp_sender_dependent_authentication = yes
sender_dependent_relayhost_maps = hash:/etc/postfix/sender_relay
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
relayhost = my.default.relay.com

/etc/postfix/sasl_passwd:

# Per-sender authentication; see also /etc/postfix/sender_relay.
@domain1.example.com               username1:password1
@domain2.example.com               username2:password2
# Login information for the default relayhost.
[my.default.relay.com]              username:password
# Alternative form:
# [mail.isp.example]:submission username:password

/etc/postfix/sender_relay:

# Per-sender provider; see also /etc/postfix/sasl_passwd.
@domain1.example.com               [sendgrid.net]:submission
@domain2.example.com               [sendgrid.net]:submission

A few notes here though.

  1. The above switches on the SMTP Envelope From address, not the one in the MIME Header.
  2. Getting postfix to send mail in different directions on the basis of MIME Header checks is more difficult. I'm sure it's possible somehow, but postfix is not designed for this.
  3. DKIM Doesn't care whether either the SMTP Envelope from address orthe MIME Header From address match the domain used for the DKIM signing. It may be that the spam policies of some receiving servers do care. (More info much appreciated here).
  4. Because of 1. and 3., you quite possibly don't need to send to separate sendgrid sub-accounts at all.
Related Topic