Reid Sutherland:
> We also had to use the following hack to ensure module load failures do
> not result in bounces. I see that Unix::Syslog is absent from the this
> list or the above bounce may have been prevented.
Indeed, if your program had returned a temporary error status,
Postfix would have queued the message for later delivery. That is
the contract.
> >> or on command timeout?
> >
> > I don't think that it is a good idea to fill up your machine with
> > programs that keep timing out again and again and again. Postfix
> > is not only about performance and security, but also about safety
> > (mail servers should be able to deal with problems and not require
> > a human babysitter).
>
> Understood, but if this condition is occurring, there must be delay or
> failure in another component of the system.
Obviously, there is a failure of some kind, and absent a human
operator to click on OK/ABORT/RETRY, the mail system has to choose
a safe action.
Unsafe actions lead to system congestion and human operators
having to unclog the toilet.
If you prefer a mail system that needs a babysitter, don't use
Postfix. I can't make recommendations about other mail systems.
Wietse
