Viktor Dukhovni:
> > On Apr 23, 2021, at 11:10 AM, Wietse Venema <wie...@porcupine.org> wrote:
> >
> > Indeed. The reason is that email should not be lost when Postfix
> > is down (system is booting up, or Postfix is down for maintenance).
> >
> > We could certainly add a policy callout for local submission. But
> > that is too much change for Postfix 3.6.0 which should be released
> > soon.
>
> A multi-instance null-client with delivery handled by a back-end
> full MTA instance can support a local SMTP hop, and still reliably
> queue local submission into the null client.
Yes we can, but to me this looks like a non-obvious solution for
an obvious problem (enforce some policy check on inbound email).
Wietse
