diff --git a/roles/serveur_postfix/tasks/main.yml b/roles/serveur_postfix/tasks/main.yml
index ba3c56d..514e561 100644
--- a/roles/serveur_postfix/tasks/main.yml
+++ b/roles/serveur_postfix/tasks/main.yml
@@ -36,6 +36,29 @@
     state: present
     update_cache: true
 
+- name: Assurer le répertoire etc du chroot Postfix
+  ansible.builtin.file:
+    path: /var/spool/postfix/etc
+    state: directory
+    owner: root
+    group: root
+    mode: "0755"
+
+- name: Fournir la résolution de noms au chroot Postfix (plancher /etc/hosts)
+  ansible.builtin.copy:
+    src: "{{ item }}"
+    dest: "/var/spool/postfix{{ item }}"
+    remote_src: true
+    owner: root
+    group: root
+    mode: "0644"
+  loop:
+    - /etc/hosts
+    - /etc/resolv.conf
+    - /etc/nsswitch.conf
+    - /etc/services
+  notify: Recharger postfix
+
 # --- Pont de certificat step_ca (déposé par client_pki) ---
 - name: TLS — créer le répertoire des certificats
   ansible.builtin.file:
diff --git a/roles/serveur_postfix/templates/main.cf.j2 b/roles/serveur_postfix/templates/main.cf.j2
index d724bfb..f440a3a 100644
--- a/roles/serveur_postfix/templates/main.cf.j2
+++ b/roles/serveur_postfix/templates/main.cf.j2
@@ -19,6 +19,8 @@ local_recipient_maps =
 virtual_mailbox_domains = {{ serveur_postfix_domaine }}
 virtual_mailbox_maps = ldap:/etc/postfix/ldap-mailboxes.cf
 virtual_transport = lmtp:inet:[{{ serveur_postfix_mailstore_hote }}]:{{ serveur_postfix_lmtp_port }}
+# Résolution via le plancher /etc/hosts (indépendant du DNS) pour la remise interne.
+lmtp_host_lookup = native
 
 {% if serveur_postfix_tls_actif %}
 # --- TLS (certificat step_ca) ---