Yup. It took me a couple of weeks of slow reading to make sure I was doing it exactly right (this included me learning how email works on a deeper level than I had before), but once I launched I've had no problems whatsoever, and so far really no maintenance (what there has been has been spamassassin-related).

Sometimes I think someone could build something on top of postfix that simply made executive decisions about security policies, and exposed a much-simplified subset of configuration options to the user.

On the other hand, once you know how all the mapping and rewriting systems work, it's actually a real pleasure to make use of them.

I still don't get why the configuration for something as simple as mail has to be such a hassle.