    POSTSUPER(1)                                                      POSTSUPER(1)

    NAME
           postsuper - Postfix superintendent

    SYNOPSIS
           postsuper [-psSv] [-c config_dir] [-d queue_id]
                   [-h queue_id] [-H queue_id]
                   [-r queue_id] [directory ...]

    DESCRIPTION
           The  postsuper(1)  command  does maintenance jobs on the Postfix queue.
           Use  of  the  command  is  restricted  to  the  superuser.    See   the
           postqueue(1)  command for unprivileged queue operations such as listing
           or flushing the mail queue.

           By default, postsuper(1) performs the operations requested with the  -s
           and  -p  command-line  options  on all Postfix queue directories - this
           includes the incoming, active and deferred directories with mail  files
           and the bounce, defer, trace and flush directories with log files.

           Options:

           -c config_dir
                  The main.cf configuration file is in the named directory instead
                  of the default configuration directory. See also the MAIL_CONFIG
                  environment setting below.

           -d queue_id
                  Delete  one  message with the named queue ID from the named mail
                  queue(s) (default: hold, incoming, active and deferred).

                  If a queue_id of - is specified, the  program  reads  queue  IDs
                  from  standard  input.  For  example,  to  delete  all mail with
                  exactly one recipient user@example.com:

                  mailq | tail +2 | grep -v '^ *(' | awk  'BEGIN { RS = "" }
                      # $7=sender, $8=recipient1, $9=recipient2
                      { if ($8 == "user@example.com" && $9 == "")
                            print $1 }
                  ' | tr -d '*!' | postsuper -d -

                  Specify "-d ALL" to remove all messages;  for  example,  specify
                  "-d  ALL deferred" to delete all mail in the deferred queue.  As
                  a safety measure, the word ALL must be specified in upper  case.

                  Warning:  Postfix  queue  IDs are reused (always with Postfix <=
                  2.8; and with Postfix  >=  2.9  when  enable_long_queue_ids=no).
                  There  is  a  very  small possibility that postsuper deletes the
                  wrong message file when it is executed while  the  Postfix  mail
                  system is delivering mail.

                  The scenario is as follows:

                  1)     The  Postfix queue manager deletes the message that post-
                         super(1) is asked to delete, because Postfix is  finished
                         with  the  message (it is delivered, or it is returned to
                         the sender).

                  2)     New mail arrives, and the new message is given  the  same
                         queue  ID as the message that postsuper(1) is supposed to
                         delete.  The probability for reusing a deleted  queue  ID
                         is  about 1 in 2**15 (the number of different microsecond
                         values that the system clock  can  distinguish  within  a
                         second).

                  3)     postsuper(1)  deletes the new message, instead of the old
                         message that it should have deleted.

           -h queue_id
                  Put mail "on hold" so that no attempt is  made  to  deliver  it.
                  Move  one  message  with  the named queue ID from the named mail
                  queue(s) (default: incoming, active and deferred)  to  the  hold
                  queue.

                  If  a  queue_id  of  - is specified, the program reads queue IDs
                  from standard input.

                  Specify "-h ALL" to hold all messages; for example, specify  "-h
                  ALL  deferred"  to  hold  all  mail in the deferred queue.  As a
                  safety measure, the word ALL must be specified in upper case.

                  Note: while mail is "on hold" it will not expire when  its  time
                  in    the    queue   exceeds   the   maximal_queue_lifetime   or
                  bounce_queue_lifetime setting. It becomes subject to  expiration
                  after it is released from "hold".

                  This feature is available in Postfix 2.0 and later.

           -H queue_id
                  Release  mail that was put "on hold".  Move one message with the
                  named queue ID from the named mail queue(s) (default:  hold)  to
                  the deferred queue.

                  If  a  queue_id  of  - is specified, the program reads queue IDs
                  from standard input.

                  Note: specify "postsuper -r" to release mail that  was  kept  on
                  hold  for  a  significant fraction of $maximal_queue_lifetime or
                  $bounce_queue_lifetime, or longer.

                  Specify "-H ALL" to release all mail that is "on  hold".   As  a
                  safety measure, the word ALL must be specified in upper case.

                  This feature is available in Postfix 2.0 and later.

           -p     Purge  old  temporary  files  that are left over after system or
                  software crashes.

           -r queue_id
                  Requeue the message with the named queue ID from the named  mail
                  queue(s)  (default:  hold,  incoming,  active and deferred).  To
                  requeue multiple  messages,  specify  multiple  -r  command-line
                  options.

                  Alternatively,  if  a  queue_id  of  - is specified, the program
                  reads queue IDs from standard input.

                  Specify "-r ALL" to requeue all messages. As a  safety  measure,
                  the word ALL must be specified in upper case.

                  A requeued message is moved to the maildrop queue, from where it
                  is copied by the pickup(8) and cleanup(8) daemons to a new queue
                  file.  In  many respects its handling differs from that of a new
                  local submission.

                  o      The message is not  subjected  to  the  smtpd_milters  or
                         non_smtpd_milters settings.  When mail has passed through
                         an external content filter, this would produce  incorrect
                         results  with Milter applications that depend on original
                         SMTP connection state information.

                  o      The message is subjected again to mail address  rewriting
                         and substitution.  This is useful when rewriting rules or
                         virtual mappings have changed.

                         The address rewriting context (local or  remote)  is  the
                         same as when the message was received.

                  o      The  message is subjected to the same content_filter set-
                         tings (if any) as used for new  local  mail  submissions.
                         This is useful when content_filter settings have changed.

                  Warning: Postfix queue IDs are reused (always  with  Postfix  <=
                  2.8;  and  with  Postfix  >= 2.9 when enable_long_queue_ids=no).
                  There is a very small possibility that postsuper(1) requeues the
                  wrong  message  file  when it is executed while the Postfix mail
                  system is running, but no harm should be done.

                  This feature is available in Postfix 1.1 and later.

           -s     Structure check and structure repair.  This should be done  once
                  before Postfix startup.

                  o      Rename  files  whose name does not match the message file
                         inode number. This operation is necessary after restoring
                         a  mail  queue  from  a different machine or from backup,
                         when queue files were created with Postfix <= 2.8 or with
                         "enable_long_queue_ids = no".

                  o      Move  queue files that are in the wrong place in the file
                         system hierarchy and remove subdirectories  that  are  no
                         longer  needed.   File position rearrangements are neces-
                         sary  after  a  change  in  the  hash_queue_names  and/or
                         hash_queue_depth configuration parameters.

                  o      Rename  queue files created with "enable_long_queue_ids =
                         yes" to short names, for migration  to  Postfix  <=  2.8.
                         The procedure is as follows:

                         # postfix stop
                         # postconf enable_long_queue_ids=no
                         # postsuper

                         Run postsuper(1) repeatedly until it stops reporting file
                         name changes.

           -S     A redundant version of -s that requires  that  long  file  names
                  also match the message file inode number. This option exists for
                  testing purposes, and is available with Postfix 2.9 and later.

           -v     Enable verbose  logging  for  debugging  purposes.  Multiple  -v
                  options make the software increasingly verbose.

    DIAGNOSTICS
           Problems are reported to the standard error stream and to syslogd(8).

           postsuper(1) reports the number of messages deleted with -d, the number
           of messages requeued with -r, and the number of  messages  whose  queue
           file  name  was  fixed  with  -s. The report is written to the standard
           error stream and to syslogd(8).

    ENVIRONMENT
           MAIL_CONFIG
                  Directory with the main.cf file.

    BUGS
           Mail that is not sanitized by Postfix (i.e. mail in the maildrop queue)
           cannot be placed "on hold".

    CONFIGURATION PARAMETERS
           The  following  main.cf parameters are especially relevant to this pro-
           gram.  The text below provides only  a  parameter  summary.  See  post-
           conf(5) for more details including examples.

           config_directory (see 'postconf -d' output)
                  The  default  location of the Postfix main.cf and master.cf con-
                  figuration files.

           hash_queue_depth (1)
                  The number of subdirectory levels for queue  directories  listed
                  with the hash_queue_names parameter.

           hash_queue_names (deferred, defer)
                  The  names  of  queue directories that are split across multiple
                  subdirectory levels.

           queue_directory (see 'postconf -d' output)
                  The location of the Postfix top-level queue directory.

           syslog_facility (mail)
                  The syslog facility of Postfix logging.

           syslog_name (see 'postconf -d' output)
                  The mail system name that is prepended to the  process  name  in
                  syslog  records,  so  that  "smtpd" becomes, for example, "post-
                  fix/smtpd".

           Available in Postfix version 2.9 and later:

           enable_long_queue_ids (no)
                  Enable long, non-repeating, queue IDs (queue file names).

    SEE ALSO
           sendmail(1), Sendmail-compatible user interface
           postqueue(1), unprivileged queue operations

    LICENSE
           The Secure Mailer license must be distributed with this software.

    AUTHOR(S)
           Wietse Venema
           IBM T.J. Watson Research
           P.O. Box 704
           Yorktown Heights, NY 10598, USA

           Wietse Venema
           Google, Inc.
           111 8th Avenue
           New York, NY 10011, USA

                                                                      POSTSUPER(1)