Transport table and postmap

10 msg	header check question
12 msg	verify parameters
4 msg	Configure postfix in big env
2 msg	envelope sender '<>' via uucp gets rewrit...
2 msg	Spam filtering only for specific email accounts
3 msg	Postfix 2.4 to 2.5: smtp(d)_tls_session_cache_d...
15 msg	Question about 'standards' WRT BATV and SAV
7 msg	my solution to fight backscatter email
2 msg	AUTO: Joe Grastara is out of the office (return...
12 msg	Q about sender_dependent_relayhost_maps inbound...
16 msg	Milter Suggestions

Transport table and postmap
\ Richard Stockton (8 May 2008)
. \ (Wietse Venema) (8 May 2008)
. \ mouss (8 May 2008)
. . \ D Hill (8 May 2008)
. . \ Zbigniew Szalbot (8 May 2008)
. . . \ (Wietse Venema) (8 May 2008)
. \ (Wietse Venema) (8 May 2008)
. . \ Richard Stockton (8 May 2008)
. . . \ (Wietse Venema) (8 May 2008)

3 msg	Archiving e-mail?
8 msg	Error 550: unable to relay
1 msg	FW: new subject
13 msg	TLS handshake error
6 msg	Seperating SMTP and POP/IMAP services
3 msg	Test 2
1 msg	Testing
12 msg	[Fwd: ldap users & aliases config]

Subject:	Transport table and postmap
Group:	Postfix-users
From:	Richard Stockton
Date:	8 May 2008

Hi postfix people,

I am noticing an odd and somewhat disturbing thing on my FreeBSD
postfix installations. When I redo my transport table,

postmap /etc/postfix/transport

and then do a "strings /etc/postfix/transport.db" I see not only
the contents of the "transport" file, but also my entire master
password file including the password hashes! That seems like a
very bad thing. This occurs on all 8 of my FreeBSD postfix
installations.

On an almost identical postfix setup using RedHat instead of
FreeBSD, "strings /etc/postfix/transport.db" only includes the
contents of the "transport" file.

Note that the transport files are identical on all servers
whether FreeBSD or RedHat.

While normal users do not have access to the "transport.db" file,
it is still disturbing to see those password hashes in there.
I would appreciate any advice other than "convert everything to
RedHat" (although that may be what we do anyway).

TIA.
- Richard