Skip to main content

Postfix mail server

v0.1.7

Queue inspection, config dump, log tailing, plus narrow operator actions (flush, requeue, delete-by-queue-id). These mutators are high- or critical-risk; the reversible hold/release pause is medium. All are audited. Postfix uid must own the runner OR runner must be in the postdrop group.

10 allowed by default 3 need approval by default 1 denied by default
Pack ID
postfix
Vendor
emisar
OS
linux
Actions
14

Install

emisar pack install fetches this pack, re-validates it, and verifies its content hash against the --hash below — the exact bytes this page was rendered against, so a tampered copy is rejected — before copying it into the runner's packs dir. The command reloads a running daemon itself; no manual restart.

on the runner host
sudo emisar pack install postfix --hash sha256:233a5b7628a3787e2f1e85a524727550a2f15cd3952ff0cd5b5d1dd0b4630dc5

Actions 14 total

View on GitHub
  • postfix.check_config exec low

    postfix check

    Validates Postfix configuration files.

    View source on GitHub
  • postfix.delete_qid exec critical

    postsuper -d <queue-id>

    Deletes one queued message. Permanent — message is lost.

    View source on GitHub
  • postfix.flush_queue exec high

    postqueue -f (retry all deferred)

    Forces retry of every deferred message. Can cause a thundering-herd toward downstream SMTP.

    View source on GitHub
  • postfix.maillog_grep exec low

    grep mail.log for queue-id / address

    List all mail-log entries matching a string.

    View source on GitHub
  • postfix.maillog_tail exec low

    tail mail.log

    Tail the last N lines of the mail log.

    View source on GitHub
  • postfix.mailq exec low

    mailq (current queue)

    Show the Postfix mail queue — pending, deferred, hold counts.

    View source on GitHub
  • postfix.postcat_qid exec low

    postcat -q <queue-id>

    Decode one queued message — headers + body. Body may contain sensitive content; rely on audit redaction.

    View source on GitHub
  • postfix.postconf exec low

    postconf -n

    Show non-default Postfix config.

    View source on GitHub
  • postfix.postsuper_hold exec medium

    postsuper -h <qid>

    Move one message into the hold queue. The message is not delivered until released with postsuper_release. Used when a message needs to be inspected without redelivering on every queue tick.

    View source on GitHub
  • postfix.postsuper_release exec medium

    postsuper -H <qid>

    Release one held message back to active. Postfix will attempt delivery on the next queue scan.

    View source on GitHub
  • postfix.postsuper_requeue exec high

    postsuper -r <qid|ALL>

    Re-queue one message (or ALL deferred). The message is re-classified from the deferred queue back to active, retrying delivery.

    View source on GitHub
  • postfix.qshape exec low

    qshape (queue by domain x age)

    Show bucketed queue counts by destination + age.

    View source on GitHub
  • postfix.queue_counts exec low

    Per-queue message counts

    Count messages in incoming/active/deferred/hold queues.

    View source on GitHub
  • postfix.reload exec high

    postfix reload

    Tell Postfix to re-read main.cf and master.cf. Existing deliveries finish on the old config; new ones use the new. No downtime.

    View source on GitHub