postfix — postfix configuration¶
New postfix versions rename or remove parameters; postfix then warns at every start, or stops reading its configuration altogether.
At a glance
| ID | postfix |
| Category | Applications |
| Needs root | no |
| Needs programs | postconf |
| Compares with a snapshot | no |
| Options | 0 |
What it checks¶
postconf -n: whether postfix can read its configuration, and the warnings it prints about it (unknown or obsolete parameters).
Findings¶
| Severity | Finding | What to do |
|---|---|---|
| critical | postfix can't read its configuration | sudo postconf -n; sudo systemctl status postfix. |
| warning | postfix warns about its configuration | Fix or remove the parameters it names (the evidence lists them). |
Commands it runs¶
postfix check would be more thorough but isn't used: it creates missing
directories and fixes permissions, which is a change.
Limitations¶
- Only
main.cfparameters are checked;master.cfservices and lookup tables aren't validated.
Options¶
This check has no options. Turn it off with enabled: false under checks: postfix: in the configuration file, or for one run with --skip postfix.