> Beyond Viktor's recommendation to NOT chroot Postfix, another option is to
> run Postfix on demand, since you appear to only be running it
> in a client-only mode. I'm not sure how you'd do that on Debian, but the
> general idea is to run 'master -e 60' whenever a file appears in the
> maildrop queue directory.
FWIW, I've been running Postfix like that (i.e. to *send* email but
never to receive any) on all my destops/laptops using Debian's mostly
default config for the last 10 years or so. And it's served me very
well during this time. I know that machine-originated email are a dying
breed (as opposed to user-originated email sent directly by the MUA to
some smarthost), but I'll keep using this as long as I can, because it's
much more convenient for my usage pattern.