APT repository · deb.freshdeb.com/postsrsdprinted 28 Oct 2026, 07:50 UTC

postsrsd

PostSRSd rewrites the envelope sender of mail that Postfix forwards, using the Sender Rewriting Scheme, so it passes the recipient's SPF checks, and reverses the rewritten addresses for bounces. Current 2.x releases, which answer Postfix over a socketmap socket or as a milter. One release line for Debian 12 and 13, Ubuntu 24.04 and 26.04 on amd64 and arm64.

latest 2.4.1github.com/roehling/postsrsd upstream source packaging

Componentmain

follows every upstream release, minors and majors included. Currently 2.4.1.

Release line

Deliver to

postsrsd 2.4.1-1+freshdeb~deb13

1Trust the signing key (once per machine)

sudo install -d -m 0755 /etc/apt/keyrings
curl -fsSL https://deb.freshdeb.com/freshdeb-archive-keyring.gpg \
  | sudo tee /etc/apt/keyrings/freshdeb-archive-keyring.gpg >/dev/null

Fingerprint 3BBD F03A 9C0B F890 F8CA 9510 7595 CC55 468F 3161. How to verify.

2Add the source

sudo tee /etc/apt/sources.list.d/freshdeb-postsrsd.sources >/dev/null <<EOF
Types: deb
URIs: https://deb.freshdeb.com/postsrsd
Suites: $(. /etc/os-release && echo $VERSION_CODENAME)
Components: main
Signed-By: /etc/apt/keyrings/freshdeb-archive-keyring.gpg
EOF

With auto, the shell reads the codename from /etc/os-release on the machine you paste this into.

3Install

sudo apt update && sudo apt install postsrsd
apt policy postsrsd   # expect 2.4.1-1+freshdeb~…

Before you upgrade from the distribution's postsrsd

The freshdeb version sorts higher, so apt upgrade moves you over in place. Upgrading from 1.x, Postfix needs a change the package can't make: 2.x answers on the socket /var/spool/postfix/srs instead of tcp: tables on ports 10001 and 10002. In /etc/postfix/main.cf, set sender_canonical_maps = socketmap:unix:srs:forward and recipient_canonical_maps = socketmap:unix:srs:reverse, keep the classes (envelope_sender; envelope_recipient, header_recipient), and reload Postfix. Until then Postfix defers mail and retries it later. The package's NEWS entry says the same.

postsrsd 2.4.1-1+freshdeb~deb13

Compared with Debian's package

Debian's packaging decides where things go: package names, paths, users, services and how upgrades behave. The build follows upstream's own release builds wherever Debian's differs.

Build: Debian's packaging, built from upstream's git tag with CMake and upstream's defaults, and upstream's test suite gating the build. It patches nothing upstream.
Layout: Debian's: /etc/postsrsd.conf, the secret in /etc/postsrsd.secret, the socket /var/spool/postfix/srs, the chroot /var/lib/postsrsd, the systemd unit and the debconf question for the local domain.
Upgrade from 1.x: Settings from /etc/default/postsrsd are carried into the new /etc/postsrsd.conf, as upstream's migration notes describe, and the secret stays, so addresses rewritten by 1.x still reverse. Debian's package only documents the migration.
Init script: Debian's started postsrsd 2.x in the foreground, so service postsrsd start never returned on systems without systemd. It now daemonizes it with a pid file.
Releases: Not built for jammy: postsrsd 2.x needs CMake 3.24, and jammy has 3.22.

Packing list

Every release line of postsrsd and the distributions it's built for. Each line is its own APT component and only gets the releases it follows (main: every upstream release, minors and majors included). After upstream end of life it stops building but stays installable. Hatched cells have no build: usually that distribution already ships the same or a newer version itself.

Line	Component	Current	bookwormDebian 12	trixieDebian 13	jammyUbuntu 22.04	nobleUbuntu 24.04	resoluteUbuntu 26.04	Support
main	main	2.4.1	built: 2.4.1-1	built: 2.4.1-1	not built for jammy	built: 2.4.1-1	built: 2.4.1-1	–

Versions follow <upstream>-<revision>+freshdeb~<distro>, distro being deb12, deb13, ubuntu22.04, ubuntu24.04 or ubuntu26.04, for amd64 and arm64. Published versions are never rebuilt or replaced.

postsrsd: The daemon, with its systemd unit, init script and man page.

Origin

Upstream: github.com/roehling/postsrsdrelease tags pinned to commit hashes
Debian packaging: salsa.debian.org/debian/postsrsdimported unmodified at dee0328 (2.4.1-1, unstable)
Our changes: overlays under overlays/ for bookworm, trixie, jammy, noble, resolute.
Built for: bookworm, trixie, noble, resoluteamd64, arm64, built natively
Notes: packaging notes · package.yaml · report an issue