local.8.html   [plain text]


<!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"
        "http://www.w3.org/TR/html4/loose.dtd">
<html> <head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<title> Postfix manual - local(8) </title>
</head> <body> <pre>
LOCAL(8)                                                              LOCAL(8)

<b>NAME</b>
       local - Postfix local mail delivery

<b>SYNOPSIS</b>
       <b>local</b> [generic Postfix daemon options]

<b>DESCRIPTION</b>
       The  <a href="local.8.html"><b>local</b>(8)</a> daemon processes delivery requests from the Postfix queue
       manager to deliver mail to local  recipients.   Each  delivery  request
       specifies  a  queue file, a sender address, a domain or host to deliver
       to, and one or more recipients.  This program expects to  be  run  from
       the <a href="master.8.html"><b>master</b>(8)</a> process manager.

       The  <a href="local.8.html"><b>local</b>(8)</a>  daemon  updates queue files and marks recipients as fin-
       ished, or it informs the queue manager that delivery  should  be  tried
       again  at  a  later  time.  Delivery  status  reports  are  sent to the
       <a href="bounce.8.html"><b>bounce</b>(8)</a>, <a href="defer.8.html"><b>defer</b>(8)</a> or <a href="trace.8.html"><b>trace</b>(8)</a> daemon as appropriate.

<b>CASE FOLDING</b>
       All delivery decisions are made using the bare recipient name (i.e. the
       address  localpart),  folded  to  lower  case.   See also under ADDRESS
       EXTENSION below for a few exceptions.

<b>SYSTEM-WIDE AND USER-LEVEL ALIASING</b>
       The system administrator can set up one or more  system-wide  <b>sendmail</b>-
       style alias databases.  Users can have <b>sendmail</b>-style ~/.<b>forward</b> files.
       Mail for <i>name</i> is delivered  to  the  alias  <i>name</i>,  to  destinations  in
       ~<i>name</i>/.<b>forward</b>,  to  the  mailbox owned by the user <i>name</i>, or it is sent
       back as undeliverable.

       The system administrator can specify a comma/space  separated  list  of
       ~/.<b>forward</b> like files through the <b><a href="postconf.5.html#forward_path">forward_path</a></b> configuration parameter.
       Upon delivery, the local delivery agent tries each pathname in the list
       until a file is found.

       Delivery via ~/.<b>forward</b> files is done with the privileges of the recip-
       ient.  Thus, ~/.<b>forward</b> like files must be readable by  the  recipient,
       and  their  parent directory needs to have "execute" permission for the
       recipient.

       The <b><a href="postconf.5.html#forward_path">forward_path</a></b> parameter is subject to interpolation of <b>$user</b> (recip-
       ient  username),  <b>$home</b>  (recipient  home directory), <b>$shell</b> (recipient
       shell), <b>$recipient</b> (complete recipient address), <b>$extension</b>  (recipient
       address  extension), <b>$domain</b> (recipient domain), <b>$local</b> (entire recipi-
       ent   address   localpart)   and   <b>$<a href="postconf.5.html#recipient_delimiter">recipient_delimiter</a>.</b>   The    forms
       <i>${name?value}</i>  and  <i>${name:value}</i>  expand  conditionally  to <i>value</i> when
       <i>$name</i> is (is not) defined.  Characters that may have special meaning to
       the  shell  or  file  system  are replaced by underscores.  The list of
       acceptable characters is specified  with  the  <b><a href="postconf.5.html#forward_expansion_filter">forward_expansion_filter</a></b>
       configuration parameter.

       An  alias  or ~/.<b>forward</b> file may list any combination of external com-
       mands, destination file names, <b>:include:</b> directives, or mail addresses.
       See  <a href="aliases.5.html"><b>aliases</b>(5)</a>  for a precise description. Each line in a user's .<b>for-</b>
       <b>ward</b> file has the same syntax as the right-hand part of an alias.

       When an address is found in its own alias expansion, delivery  is  made
       to the user instead. When a user is listed in the user's own ~/.<b>forward</b>
       file, delivery is made to the user's mailbox instead.  An empty ~/.<b>for-</b>
       <b>ward</b> file means do not forward mail.

       In  order to prevent the mail system from using up unreasonable amounts
       of memory, input records read from <b>:include:</b> or from  ~/.<b>forward</b>  files
       are broken up into chunks of length <b><a href="postconf.5.html#line_length_limit">line_length_limit</a></b>.

       While  expanding  aliases,  ~/.<b>forward</b>  files,  and  so on, the program
       attempts to avoid duplicate deliveries. The <b><a href="postconf.5.html#duplicate_filter_limit">duplicate_filter_limit</a></b> con-
       figuration parameter limits the number of remembered recipients.

<b>MAIL FORWARDING</b>
       For  the  sake  of reliability, forwarded mail is re-submitted as a new
       message, so that each recipient has a separate on-file delivery  status
       record.

       In  order  to  stop  mail  forwarding loops early, the software adds an
       optional  <b>Delivered-To:</b>  header  with  the  final  envelope   recipient
       address.  If  mail  arrives for a recipient that is already listed in a
       <b>Delivered-To:</b> header, the message is bounced.

<b>MAILBOX DELIVERY</b>
       The default per-user mailbox is a file in the UNIX mail spool directory
       (<b>/var/mail/</b><i>user</i> or <b>/var/spool/mail/</b><i>user</i>); the location can be specified
       with the <b><a href="postconf.5.html#mail_spool_directory">mail_spool_directory</a></b> configuration parameter. Specify  a  name
       ending in <b>/</b> for <b>qmail</b>-compatible <b>maildir</b> delivery.

       Alternatively,  the  per-user  mailbox can be a file in the user's home
       directory with a name  specified  via  the  <b><a href="postconf.5.html#home_mailbox">home_mailbox</a></b>  configuration
       parameter. Specify a relative path name. Specify a name ending in <b>/</b> for
       <b>qmail</b>-compatible <b>maildir</b> delivery.

       Mailbox delivery can be delegated to an external command specified with
       the  <b><a href="postconf.5.html#mailbox_command_maps">mailbox_command_maps</a></b> and <b><a href="postconf.5.html#mailbox_command">mailbox_command</a></b> configuration parameters.
       The command executes with the privileges of the recipient user  (excep-
       tions:  secondary  groups are not enabled; in case of delivery as root,
       the command executes with the privileges of <b><a href="postconf.5.html#default_privs">default_privs</a></b>).

       Mailbox delivery can be delegated  to  alternative  message  transports
       specified  in the <a href="master.5.html"><b>master.cf</b></a> file.  The <b><a href="postconf.5.html#mailbox_transport_maps">mailbox_transport_maps</a></b> and <b><a href="postconf.5.html#mailbox_transport">mail</a>-</b>
       <b><a href="postconf.5.html#mailbox_transport">box_transport</a></b> configuration  parameters  specify  an  optional  message
       transport  that  is  to be used for all local recipients, regardless of
       whether they  are  found  in  the  UNIX  passwd  database.   The  <b><a href="postconf.5.html#fallback_transport_maps">fall</a>-</b>
       <b><a href="postconf.5.html#fallback_transport_maps">back_transport_maps</a></b>   and   <b><a href="postconf.5.html#fallback_transport">fallback_transport</a></b>  parameters  specify  an
       optional message transport for recipients that are  not  found  in  the
       <a href="aliases.5.html">aliases(5)</a> or UNIX passwd database.

       In  the  case  of  UNIX-style  mailbox  delivery,  the  <a href="local.8.html"><b>local</b>(8)</a> daemon
       prepends a "<b>From</b> <i>sender time</i><b>_</b><i>stamp</i>" envelope header  to  each  message,
       prepends  an  <b>X-Original-To:</b> header with the recipient address as given
       to Postfix, prepends an optional <b>Delivered-To:</b> header  with  the  final
       envelope  recipient  address,  prepends  a <b>Return-Path:</b> header with the
       envelope sender address, prepends a &gt; character to lines beginning with
       "<b>From</b>  ",  and appends an empty line.  The mailbox is locked for exclu-
       sive access while delivery is in progress.  In  case  of  problems,  an
       attempt is made to truncate the mailbox to its original length.

       In  the case of <b>maildir</b> delivery, the local daemon prepends an optional
       <b>Delivered-To:</b>  header  with  the  final  envelope  recipient   address,
       prepends  an  <b>X-Original-To:</b> header with the recipient address as given
       to Postfix, and prepends a <b>Return-Path:</b> header with the envelope sender
       address.

<b>EXTERNAL COMMAND DELIVERY</b>
       The  <b><a href="postconf.5.html#allow_mail_to_commands">allow_mail_to_commands</a></b>  configuration parameter restricts delivery
       to external commands. The default setting (<b>alias, forward</b>) forbids com-
       mand destinations in <b>:include:</b> files.

       Optionally, the process working directory is changed to the path speci-
       fied with <b><a href="postconf.5.html#command_execution_directory">command_execution_directory</a></b> (Postfix 2.2 and later).  Failure
       to change directory causes mail to be deferred.

       The  <b><a href="postconf.5.html#command_execution_directory">command_execution_directory</a></b> parameter value is subject to interpo-
       lation of <b>$user</b> (recipient username), <b>$home</b> (recipient home directory),
       <b>$shell</b>  (recipient  shell),  <b>$recipient</b>  (complete  recipient address),
       <b>$extension</b> (recipient address extension), <b>$domain</b>  (recipient  domain),
       <b>$local</b>  (entire  recipient address localpart) and <b>$<a href="postconf.5.html#recipient_delimiter">recipient_delimiter</a>.</b>
       The forms <i>${name?value}</i> and <i>${name:value}</i> expand conditionally to <i>value</i>
       when <i>$name</i> is (is not) defined.  Characters that may have special mean-
       ing to the shell or file system are replaced by underscores.  The  list
       of   acceptable  characters  is  specified  with  the  <b><a href="postconf.5.html#execution_directory_expansion_filter">execution_direc</a>-</b>
       <b><a href="postconf.5.html#execution_directory_expansion_filter">tory_expansion_filter</a></b> configuration parameter.

       The command is executed directly  where  possible.  Assistance  by  the
       shell  (<b>/bin/sh</b> on UNIX systems) is used only when the command contains
       shell magic characters, or when the command invokes  a  shell  built-in
       command.

       A limited amount of command output (standard output and standard error)
       is captured for inclusion with non-delivery status reports.  A  command
       is   forcibly   terminated   if   it  does  not  complete  within  <b>com-</b>
       <b>mand_time_limit</b> seconds.  Command exit status  codes  are  expected  to
       follow  the  conventions  defined in &lt;<b>sysexits.h</b>&gt;.  Exit status 0 means
       normal successful completion.

       Postfix version 2.3 and later support <a href="http://tools.ietf.org/html/rfc3463">RFC  3463</a>-style  enhanced  status
       codes.   If  a  command terminates with a non-zero exit status, and the
       command output begins with an enhanced status code,  this  status  code
       takes precedence over the non-zero exit status.

       A  limited  amount of message context is exported via environment vari-
       ables. Characters that may  have  special  meaning  to  the  shell  are
       replaced  by  underscores.  The list of acceptable characters is speci-
       fied with the <b><a href="postconf.5.html#command_expansion_filter">command_expansion_filter</a></b> configuration parameter.

       <b>SHELL</b>  The recipient user's login shell.

       <b>HOME</b>   The recipient user's home directory.

       <b>USER</b>   The bare recipient name.

       <b>EXTENSION</b>
              The optional recipient address extension.

       <b>DOMAIN</b> The recipient address domain part.

       <b>LOGNAME</b>
              The bare recipient name.

       <b>LOCAL</b>  The entire recipient address localpart (text to the left of  the
              rightmost @ character).

       <b>ORIGINAL_RECIPIENT</b>
              The  entire  recipient  address, before any address rewriting or
              aliasing (Postfix 2.5 and later).

       <b>RECIPIENT</b>
              The entire recipient address.

       <b>SENDER</b> The entire sender address.

       Additional remote client information is made available via the  follow-
       ing environment variables:

       <b>CLIENT_ADDRESS</b>
              Remote client network address. Available as of Postfix 2.2.

       <b>CLIENT_HELO</b>
              Remote  client  EHLO  command parameter. Available as of Postfix
              2.2.

       <b>CLIENT_HOSTNAME</b>
              Remote client hostname. Available as of Postfix 2.2.

       <b>CLIENT_PROTOCOL</b>
              Remote client protocol. Available as of Postfix 2.2.

       <b>SASL_METHOD</b>
              SASL authentication method specified in the remote  client  AUTH
              command. Available as of Postfix 2.2.

       <b>SASL_SENDER</b>
              SASL  sender  address  specified  in the remote client MAIL FROM
              command. Available as of Postfix 2.2.

       <b>SASL_USERNAME</b>
              SASL username specified  in  the  remote  client  AUTH  command.
              Available as of Postfix 2.2.

       The  <b>PATH</b>  environment  variable  is always reset to a system-dependent
       default path, and environment variables whose names are blessed by  the
       <b><a href="postconf.5.html#export_environment">export_environment</a></b> configuration parameter are exported unchanged.

       The current working directory is the mail queue directory.

       The <a href="local.8.html"><b>local</b>(8)</a> daemon prepends a "<b>From</b> <i>sender time</i><b>_</b><i>stamp</i>" envelope header
       to each message, prepends an <b>X-Original-To:</b> header with  the  recipient
       address  as given to Postfix, prepends an optional <b>Delivered-To:</b> header
       with the final recipient  envelope  address,  prepends  a  <b>Return-Path:</b>
       header with the sender envelope address, and appends no empty line.

<b>EXTERNAL FILE DELIVERY</b>
       The  delivery  format  depends on the destination filename syntax.  The
       default is to use UNIX-style mailbox format.  Specify a name ending  in
       <b>/</b> for <b>qmail</b>-compatible <b>maildir</b> delivery.

       The  <b><a href="postconf.5.html#allow_mail_to_files">allow_mail_to_files</a></b>  configuration parameter restricts delivery to
       external files. The default setting (<b>alias, forward</b>) forbids file  des-
       tinations in <b>:include:</b> files.

       In  the  case  of  UNIX-style  mailbox  delivery,  the  <a href="local.8.html"><b>local</b>(8)</a> daemon
       prepends a "<b>From</b> <i>sender time</i><b>_</b><i>stamp</i>" envelope header  to  each  message,
       prepends  an  <b>X-Original-To:</b> header with the recipient address as given
       to Postfix, prepends an optional <b>Delivered-To:</b> header  with  the  final
       recipient  envelope  address, prepends a &gt; character to lines beginning
       with "<b>From</b> ", and appends an empty line.  The envelope  sender  address
       is  available  in  the  <b>Return-Path:</b> header.  When the destination is a
       regular file, it is locked for exclusive access while  delivery  is  in
       progress. In case of problems, an attempt is made to truncate a regular
       file to its original length.

       In the case of <b>maildir</b> delivery, the local daemon prepends an  optional
       <b>Delivered-To:</b>  header  with  the  final envelope recipient address, and
       prepends an <b>X-Original-To:</b> header with the recipient address  as  given
       to  Postfix.   The  envelope sender address is available in the <b>Return-</b>
       <b>Path:</b> header.

<b>ADDRESS EXTENSION</b>
       The optional <b><a href="postconf.5.html#recipient_delimiter">recipient_delimiter</a></b> configuration parameter specifies  how
       to separate address extensions from local recipient names.

       For  example,  with  "<b><a href="postconf.5.html#recipient_delimiter">recipient_delimiter</a>  =  +</b>",  mail for <i>name</i>+<i>foo</i> is
       delivered to the alias <i>name</i>+<i>foo</i> or to the alias <i>name</i>, to  the  destina-
       tions listed in ~<i>name</i>/.<b>forward</b>+<i>foo</i> or in ~<i>name</i>/.<b>forward</b>, to the mailbox
       owned by the user <i>name</i>, or it is sent back as undeliverable.

<b>DELIVERY RIGHTS</b>
       Deliveries to external files and external commands are  made  with  the
       rights  of the receiving user on whose behalf the delivery is made.  In
       the absence of a user context,  the  <a href="local.8.html"><b>local</b>(8)</a>  daemon  uses  the  owner
       rights  of  the <b>:include:</b> file or alias database.  When those files are
       owned by the superuser, delivery is made with the rights specified with
       the <b><a href="postconf.5.html#default_privs">default_privs</a></b> configuration parameter.

<b>STANDARDS</b>
       <a href="http://tools.ietf.org/html/rfc822">RFC 822</a> (ARPA Internet Text Messages)
       <a href="http://tools.ietf.org/html/rfc3463">RFC 3463</a> (Enhanced status codes)

<b>DIAGNOSTICS</b>
       Problems  and transactions are logged to <b>syslogd</b>(8).  Corrupted message
       files are marked so that the queue manager can move them to the <b>corrupt</b>
       queue afterwards.

       Depending  on the setting of the <b><a href="postconf.5.html#notify_classes">notify_classes</a></b> parameter, the postmas-
       ter is notified of bounces and of other trouble.

<b>SECURITY</b>
       The <a href="local.8.html"><b>local</b>(8)</a> delivery agent needs a dual personality 1) to  access  the
       private Postfix queue and IPC mechanisms, 2) to impersonate the recipi-
       ent and deliver to recipient-specified files or commands. It is  there-
       fore security sensitive.

       The  <a href="local.8.html"><b>local</b>(8)</a>  delivery agent disallows regular expression substitution
       of $1 etc. in <b><a href="postconf.5.html#alias_maps">alias_maps</a></b>, because that would open a security hole.

       The <a href="local.8.html"><b>local</b>(8)</a> delivery agent will silently ignore requests  to  use  the
       <a href="proxymap.8.html"><b>proxymap</b>(8)</a>  server  within  <b><a href="postconf.5.html#alias_maps">alias_maps</a></b>. Instead it will open the table
       directly.  Before Postfix version 2.2, the <a href="local.8.html"><b>local</b>(8)</a> delivery agent will
       terminate with a fatal error.

<b>BUGS</b>
       For  security reasons, the message delivery status of external commands
       or of external files is never checkpointed to file. As  a  result,  the
       program  may occasionally deliver more than once to a command or exter-
       nal file. Better safe than sorry.

       Mutually-recursive aliases or ~/.<b>forward</b> files are not detected  early.
       The  resulting  mail forwarding loop is broken by the use of the <b>Deliv-</b>
       <b>ered-To:</b> message header.

<b>CONFIGURATION PARAMETERS</b>
       Changes to <a href="postconf.5.html"><b>main.cf</b></a> are picked up automatically, as  <a href="local.8.html"><b>local</b>(8)</a>  processes
       run for only a limited amount of time. Use the command "<b>postfix reload</b>"
       to speed up a change.

       The text below provides only a parameter summary. See  <a href="postconf.5.html"><b>postconf</b>(5)</a>  for
       more details including examples.

<b>COMPATIBILITY CONTROLS</b>
       <b><a href="postconf.5.html#biff">biff</a> (yes)</b>
              Whether or not to use the local <a href="postconf.5.html#biff">biff</a> service.

       <b><a href="postconf.5.html#expand_owner_alias">expand_owner_alias</a> (no)</b>
              When  delivering  to  an  alias  "aliasname" that has an "owner-
              aliasname" companion alias, set the envelope sender  address  to
              the expansion of the "owner-aliasname" alias.

       <b><a href="postconf.5.html#owner_request_special">owner_request_special</a> (yes)</b>
              Give  special  treatment  to owner-listname and listname-request
              address localparts: don't split such addresses when the  <a href="postconf.5.html#recipient_delimiter">recipi</a>-
              <a href="postconf.5.html#recipient_delimiter">ent_delimiter</a> is set to "-".

       <b><a href="postconf.5.html#sun_mailtool_compatibility">sun_mailtool_compatibility</a> (no)</b>
              Obsolete SUN mailtool compatibility feature.

       Available in Postfix version 2.3 and later:

       <b><a href="postconf.5.html#frozen_delivered_to">frozen_delivered_to</a> (yes)</b>
              Update  the  <a href="local.8.html"><b>local</b>(8)</a> delivery agent's idea of the Delivered-To:
              address (see <a href="postconf.5.html#prepend_delivered_header">prepend_delivered_header</a>) only once, at  the  start
              of  a  delivery attempt; do not update the Delivered-To: address
              while expanding aliases or .forward files.

       Available in Postfix version 2.5.3 and later:

       <b><a href="postconf.5.html#strict_mailbox_ownership">strict_mailbox_ownership</a> (yes)</b>
              Defer delivery when a mailbox file is not owned by  its  recipi-
              ent.

       <b><a href="postconf.5.html#reset_owner_alias">reset_owner_alias</a> (no)</b>
              Reset  the  <a href="local.8.html"><b>local</b>(8)</a>  delivery  agent's  idea of the owner-alias
              attribute, when delivering mail to a child alias that  does  not
              have its own owner alias.

<b>DELIVERY METHOD CONTROLS</b>
       The  precedence  of  <a href="local.8.html"><b>local</b>(8)</a>  delivery  methods  from  high to low is:
       aliases,  .forward  files,  <a href="postconf.5.html#mailbox_transport_maps">mailbox_transport_maps</a>,  <a href="postconf.5.html#mailbox_transport">mailbox_transport</a>,
       <a href="postconf.5.html#mailbox_command_maps">mailbox_command_maps</a>,  <a href="postconf.5.html#mailbox_command">mailbox_command</a>, <a href="postconf.5.html#home_mailbox">home_mailbox</a>, <a href="postconf.5.html#mail_spool_directory">mail_spool_direc</a>-
       <a href="postconf.5.html#mail_spool_directory">tory</a>, <a href="postconf.5.html#fallback_transport_maps">fallback_transport_maps</a>, <a href="postconf.5.html#fallback_transport">fallback_transport</a>, and <a href="postconf.5.html#luser_relay">luser_relay</a>.

       <b><a href="postconf.5.html#alias_maps">alias_maps</a> (see 'postconf -d' output)</b>
              The alias databases that are used for <a href="local.8.html"><b>local</b>(8)</a> delivery.

       <b><a href="postconf.5.html#forward_path">forward_path</a> (see 'postconf -d' output)</b>
              The <a href="local.8.html"><b>local</b>(8)</a> delivery agent search list for finding  a  .forward
              file with user-specified delivery methods.

       <b><a href="postconf.5.html#mailbox_transport_maps">mailbox_transport_maps</a> (empty)</b>
              Optional  lookup  tables  with  per-recipient  message  delivery
              transports to use for <a href="local.8.html"><b>local</b>(8)</a> mailbox delivery, whether or  not
              the recipients are found in the UNIX passwd database.

       <b><a href="postconf.5.html#mailbox_transport">mailbox_transport</a> (empty)</b>
              Optional  message  delivery transport that the <a href="local.8.html"><b>local</b>(8)</a> delivery
              agent should use for mailbox delivery to all  local  recipients,
              whether or not they are found in the UNIX passwd database.

       <b><a href="postconf.5.html#mailbox_command_maps">mailbox_command_maps</a> (empty)</b>
              Optional  lookup  tables with per-recipient external commands to
              use for <a href="local.8.html"><b>local</b>(8)</a> mailbox delivery.

       <b><a href="postconf.5.html#mailbox_command">mailbox_command</a> (empty)</b>
              Optional external  command  that  the  <a href="local.8.html"><b>local</b>(8)</a>  delivery  agent
              should use for mailbox delivery.

       <b><a href="postconf.5.html#home_mailbox">home_mailbox</a> (empty)</b>
              Optional  pathname  of  a  mailbox  file  relative to a <a href="local.8.html"><b>local</b>(8)</a>
              user's home directory.

       <b><a href="postconf.5.html#mail_spool_directory">mail_spool_directory</a> (see 'postconf -d' output)</b>
              The directory where <a href="local.8.html"><b>local</b>(8)</a> UNIX-style mailboxes are kept.

       <b><a href="postconf.5.html#fallback_transport_maps">fallback_transport_maps</a> (empty)</b>
              Optional  lookup  tables  with  per-recipient  message  delivery
              transports for recipients that the <a href="local.8.html"><b>local</b>(8)</a> delivery agent could
              not find in the <a href="aliases.5.html"><b>aliases</b>(5)</a> or UNIX password database.

       <b><a href="postconf.5.html#fallback_transport">fallback_transport</a> (empty)</b>
              Optional message delivery transport that the  <a href="local.8.html"><b>local</b>(8)</a>  delivery
              agent  should use for names that are not found in the <a href="aliases.5.html"><b>aliases</b>(5)</a>
              or UNIX password database.

       <b><a href="postconf.5.html#luser_relay">luser_relay</a> (empty)</b>
              Optional catch-all destination for unknown <a href="local.8.html"><b>local</b>(8)</a>  recipients.

       Available in Postfix version 2.2 and later:

       <b><a href="postconf.5.html#command_execution_directory">command_execution_directory</a> (empty)</b>
              The  <a href="local.8.html"><b>local</b>(8)</a>  delivery  agent working directory for delivery to
              external command.

<b>MAILBOX LOCKING CONTROLS</b>
       <b><a href="postconf.5.html#deliver_lock_attempts">deliver_lock_attempts</a> (20)</b>
              The maximal number of attempts to acquire an exclusive lock on a
              mailbox file or <a href="bounce.8.html"><b>bounce</b>(8)</a> logfile.

       <b><a href="postconf.5.html#deliver_lock_delay">deliver_lock_delay</a> (1s)</b>
              The  time  between  attempts  to  acquire an exclusive lock on a
              mailbox file or <a href="bounce.8.html"><b>bounce</b>(8)</a> logfile.

       <b><a href="postconf.5.html#stale_lock_time">stale_lock_time</a> (500s)</b>
              The time after which  a  stale  exclusive  mailbox  lockfile  is
              removed.

       <b><a href="postconf.5.html#mailbox_delivery_lock">mailbox_delivery_lock</a> (see 'postconf -d' output)</b>
              How  to  lock  a  UNIX-style  <a href="local.8.html"><b>local</b>(8)</a> mailbox before attempting
              delivery.

<b>RESOURCE AND RATE CONTROLS</b>
       <b><a href="postconf.5.html#command_time_limit">command_time_limit</a> (1000s)</b>
              Time limit for delivery to external commands.

       <b><a href="postconf.5.html#duplicate_filter_limit">duplicate_filter_limit</a> (1000)</b>
              The maximal number of addresses remembered by the address dupli-
              cate filter for <a href="aliases.5.html"><b>aliases</b>(5)</a> or <a href="virtual.5.html"><b>virtual</b>(5)</a> alias expansion, or for
              <a href="showq.8.html"><b>showq</b>(8)</a> queue displays.

       <b><a href="postconf.5.html#local_destination_concurrency_limit">local_destination_concurrency_limit</a> (2)</b>
              The maximal number of parallel deliveries  via  the  local  mail
              delivery  transport  to the same recipient (when "<a href="postconf.5.html#local_destination_recipient_limit">local_destina</a>-
              <a href="postconf.5.html#local_destination_recipient_limit">tion_recipient_limit</a> = 1") or the  maximal  number  of  parallel
              deliveries  to  the  same  local  domain  (when  "<a href="postconf.5.html#local_destination_recipient_limit">local_destina</a>-
              <a href="postconf.5.html#local_destination_recipient_limit">tion_recipient_limit</a> &gt; 1").

       <b><a href="postconf.5.html#local_destination_recipient_limit">local_destination_recipient_limit</a> (1)</b>
              The maximal number of recipients per message  delivery  via  the
              local mail delivery transport.

       <b><a href="postconf.5.html#mailbox_size_limit">mailbox_size_limit</a> (51200000)</b>
              The  maximal  size of any <a href="local.8.html"><b>local</b>(8)</a> individual mailbox or maildir
              file, or zero (no limit).

<b>SECURITY CONTROLS</b>
       <b><a href="postconf.5.html#allow_mail_to_commands">allow_mail_to_commands</a> (alias, forward)</b>
              Restrict <a href="local.8.html"><b>local</b>(8)</a> mail delivery to external commands.

       <b><a href="postconf.5.html#allow_mail_to_files">allow_mail_to_files</a> (alias, forward)</b>
              Restrict <a href="local.8.html"><b>local</b>(8)</a> mail delivery to external files.

       <b><a href="postconf.5.html#command_expansion_filter">command_expansion_filter</a> (see 'postconf -d' output)</b>
              Restrict the characters that the <a href="local.8.html"><b>local</b>(8)</a> delivery agent  allows
              in  $name  expansions  of  $<a href="postconf.5.html#mailbox_command">mailbox_command</a>  and $<a href="postconf.5.html#command_execution_directory">command_execu</a>-
              <a href="postconf.5.html#command_execution_directory">tion_directory</a>.

       <b><a href="postconf.5.html#default_privs">default_privs</a> (nobody)</b>
              The default rights used  by  the  <a href="local.8.html"><b>local</b>(8)</a>  delivery  agent  for
              delivery to external file or command.

       <b><a href="postconf.5.html#forward_expansion_filter">forward_expansion_filter</a> (see 'postconf -d' output)</b>
              Restrict  the characters that the <a href="local.8.html"><b>local</b>(8)</a> delivery agent allows
              in $name expansions of $<a href="postconf.5.html#forward_path">forward_path</a>.

       Available in Postfix version 2.2 and later:

       <b><a href="postconf.5.html#execution_directory_expansion_filter">execution_directory_expansion_filter</a> (see 'postconf -d' output)</b>
              Restrict the characters that the <a href="local.8.html"><b>local</b>(8)</a> delivery agent  allows
              in $name expansions of $<a href="postconf.5.html#command_execution_directory">command_execution_directory</a>.

       Available in Postfix version 2.5.3 and later:

       <b><a href="postconf.5.html#strict_mailbox_ownership">strict_mailbox_ownership</a> (yes)</b>
              Defer  delivery  when a mailbox file is not owned by its recipi-
              ent.

<b>MISCELLANEOUS CONTROLS</b>
       <b><a href="postconf.5.html#config_directory">config_directory</a> (see 'postconf -d' output)</b>
              The default location of the Postfix <a href="postconf.5.html">main.cf</a> and  <a href="master.5.html">master.cf</a>  con-
              figuration files.

       <b><a href="postconf.5.html#daemon_timeout">daemon_timeout</a> (18000s)</b>
              How  much  time  a  Postfix  daemon process may take to handle a
              request before it is terminated by a built-in watchdog timer.

       <b><a href="postconf.5.html#delay_logging_resolution_limit">delay_logging_resolution_limit</a> (2)</b>
              The maximal number of digits after the decimal point  when  log-
              ging sub-second delay values.

       <b><a href="postconf.5.html#export_environment">export_environment</a> (see 'postconf -d' output)</b>
              The  list  of  environment variables that a Postfix process will
              export to non-Postfix processes.

       <b><a href="postconf.5.html#ipc_timeout">ipc_timeout</a> (3600s)</b>
              The time limit for sending  or  receiving  information  over  an
              internal communication channel.

       <b><a href="postconf.5.html#local_command_shell">local_command_shell</a> (empty)</b>
              Optional shell program for <a href="local.8.html"><b>local</b>(8)</a> delivery to non-Postfix com-
              mand.

       <b><a href="postconf.5.html#max_idle">max_idle</a> (100s)</b>
              The maximum amount of time that an idle Postfix  daemon  process
              waits for an incoming connection before terminating voluntarily.

       <b><a href="postconf.5.html#max_use">max_use</a> (100)</b>
              The maximal number of incoming connections that a Postfix daemon
              process will service before terminating voluntarily.

       <b><a href="postconf.5.html#prepend_delivered_header">prepend_delivered_header</a> (command, file, forward)</b>
              The  message delivery contexts where the Postfix <a href="local.8.html"><b>local</b>(8)</a> deliv-
              ery agent prepends a  Delivered-To:   message  header  with  the
              address that the mail was delivered to.

       <b><a href="postconf.5.html#process_id">process_id</a> (read-only)</b>
              The process ID of a Postfix command or daemon process.

       <b><a href="postconf.5.html#process_name">process_name</a> (read-only)</b>
              The process name of a Postfix command or daemon process.

       <b><a href="postconf.5.html#propagate_unmatched_extensions">propagate_unmatched_extensions</a> (canonical, virtual)</b>
              What  address  lookup  tables copy an address extension from the
              lookup key to the lookup result.

       <b><a href="postconf.5.html#queue_directory">queue_directory</a> (see 'postconf -d' output)</b>
              The location of the Postfix top-level queue directory.

       <b><a href="postconf.5.html#recipient_delimiter">recipient_delimiter</a> (empty)</b>
              The set of characters that can separate a  user  name  from  its
              extension  (example: user+foo), or a .forward file name from its
              extension (example: .forward+foo).

       <b><a href="postconf.5.html#require_home_directory">require_home_directory</a> (no)</b>
              Require that a <a href="local.8.html"><b>local</b>(8)</a> recipient's home directory exists before
              mail delivery is attempted.

       <b><a href="postconf.5.html#syslog_facility">syslog_facility</a> (mail)</b>
              The syslog facility of Postfix logging.

       <b><a href="postconf.5.html#syslog_name">syslog_name</a> (see 'postconf -d' output)</b>
              The  mail  system  name that is prepended to the process name in
              syslog records, so that "smtpd"  becomes,  for  example,  "post-
              fix/smtpd".

<b>FILES</b>
       The following are examples; details differ between systems.
       $HOME/.forward, per-user aliasing
       /etc/aliases, system-wide alias database
       /var/spool/mail, system mailboxes

<b>SEE ALSO</b>
       <a href="qmgr.8.html">qmgr(8)</a>, queue manager
       <a href="bounce.8.html">bounce(8)</a>, delivery status reports
       <a href="newaliases.1.html">newaliases(1)</a>, create/update alias database
       <a href="postalias.1.html">postalias(1)</a>, create/update alias database
       <a href="aliases.5.html">aliases(5)</a>, format of alias database
       <a href="postconf.5.html">postconf(5)</a>, configuration parameters
       <a href="master.5.html">master(5)</a>, generic daemon options
       syslogd(8), system logging

<b>LICENSE</b>
       The Secure Mailer license must be distributed with this software.

<b>HISTORY</b>
       The  <b>Delivered-To:</b> message header appears in the <b>qmail</b> system by Daniel
       Bernstein.

       The <i>maildir</i> structure appears in the <b>qmail</b> system by Daniel  Bernstein.

<b>AUTHOR(S)</b>
       Wietse Venema
       IBM T.J. Watson Research
       P.O. Box 704
       Yorktown Heights, NY 10598, USA

                                                                      LOCAL(8)
</pre> </body> </html>