postfix rewrites address to non-verifiable form hosts a virtualmin pro domain - A html web-to-email form collects user input and is set to use cgiemail to send mail. The form completes successfully but the email sending fails like this:

I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.
For further assistance, please send mail to postmaster.
If you do so, please include this problem report. You can
delete your own text from the attached returned message.
                   The mail system
<>: host[] said: 550-Verification
    failed for <wheeldoc@web1> 550-Unrouteable address 550 Sorry, sender
    address verification failed for (wheeldoc@web1) (in reply to RCPT TO

and the fqdn is:

$ hostname -f

/etc/postfix/ is:

# See /usr/share/postfix/ for a commented, more complete version
# Debian specific:  Specifying a file name will cause the first
# line of that file to be used as the name.  The Debian default
# is /etc/mailname.
#myorigin = /etc/mailname
smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
biff = no
# appending .domain is the MUA's job.
append_dot_mydomain = no
# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h
readme_directory = no
# TLS parameters
#the next three lines commented out by Dennis Strain 07Apr13
#smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
#smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.
myhostname =
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination =, web1,, localhost
mynetworks = [::ffff:]/104 [::1]/128
mailbox_command = /usr/bin/procmail-wrapper -o -a $DOMAIN -d $LOGNAME
mailbox_size_limit = 0
recipient_delimiter = +
virtual_alias_maps = hash:/etc/postfix/virtual
sender_bcc_maps = hash:/etc/postfix/bcc
home_mailbox = Maildir/
smtpd_sasl_auth_enable = yes
broken_sasl_auth_clients = yes
smtpd_recipient_restrictions = permit_mynetworks permit_sasl_authenticated reject_unauth_destination
allow_percent_hack = no
smtpd_sasl_authenticated_header = yes
smtp_sasl_password_maps = hash:/etc/postfix/smtp_sasl_password_map
#added 2013 02 15 by Dennis Strain to allow relay through amazon ses
#relayhost =
smtp_sasl_auth_enable = yes
smtp_sasl_security_options = noanonymous
#smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
#all references to TLS commented out by Dennis Strain 07Apr13
#smtp_use_tls = yes
#smtp_tls_security_level = encrypt
#smtp_tls_note_starttls_offer = yes
smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt
#smtpd_sasl_authenticated_header = yes
#smtpd_tls_security_level = none
#smtpd_tls_mandatory_protocols = SSLv3, TLSv1
#smtpd_tls_mandatory_ciphers = high
milter_default_action = accept
milter_protocol = 2
smtpd_tls_key_file = /etc/postfix/postfix.key.pem
smtpd_tls_cert_file = /etc/postfix/postfix.cert.pem
smtpd_tls_security_level = may
smtpd_tls_mandatory_protocols = SSLv3, TLSv1
smtpd_tls_mandatory_ciphers = high
smtpd_tls_CAfile = /etc/postfix/

And I don't know where else to look. Suggestions?





Try adding the line mydomain = to and then restarting Postfix.

Alternately, whatever script sends email needs to set a valid From: address.

good suggestions, no fix yet. I saw in the process that rdns is not set up so am waiting for the ISP to fix that, will let you know.