bounces not crashproof

[Dave Sill]

There's been a discussion in the Postfix list regarding the
non-crashproofness of queue/bounce. It's possible for a crash at the
wrong time to result in the loss of bounce messages.

This is documented in INTERNALS and the online FAQ:

  http://cr.yp.to/qmail/faq/reliability.html#filesystems

Looking at the qmail-send.c code, I see that the bounce file is not
fsync'ed after writing. I'm not a DJB-level programmer, but it seems
like that would fix the problem. Am I missing something?

-Dave