Though the Exim servers on the VRTS hosts are not internet facing, it would be great to prioritize migrating them to Postfix. Per T232343 Postfix offers a better track record than Exim on security vulnerabilities.
- Audit Current Setup
- Incoming/outgoing mail handling rules
- Queue management
- Postfix Configuration Design
- Port current exim config to postfix: transport and routing logic
- Puppetization of the same
- Rspam training in the same way as is currently done with Spamassassin (T402260)
- Cutover Checklist
- Draining current queues
- Pause mail delivery to VRTS MX level?
- Activate postfix and disable exim
- Testing
- Rollback Plan