On Sat, 2022-01-01 at 13:35 -0500, Wietse Venema wrote: > Ken Wright: > > - Does the socket /var/spool/postfix/public/showq exist? It > should look like this: > > srw-rw-rw- 1 postfix postfix 0 Dec 17 18:13 > /var/spool/postfix/public/showq
Looks just like this, except that it's the postdrop group. > Is the showq service defined in master.cf? It should look like this: > > showq unix n - ... - - showq > > Note that the third column must be 'n'. It is, but the fifth column is a y. I see you have an ellipsis in the fifth column; does that mean "doesn't matter"? > Is the postqueue command subject to AppArmor reduced privileges? > The postqueue command will log EACES (Permission denied) errors, > but when AppArmor returns a different error code such as EPERM, > postqueue will just say "mail system is down" (it does not try > to evaluate every possible error code). AppArmor 2.13.3 is installed, but I'm not familiar with it. How would I check to see if it has reduced privileges? > I have updated Postfix 3.7 and added EPERM to the list of expected > permission errors. > > - Is there more than one Postfix configuration on the machine? In > that case the postqueue command may have been looking at a > different > Postfix configuration than the one that you were looking at. No, just the one. Thank you for the prompt response and helpful suggestions! (not snark, real gratitude.) Ken