Preserve Queue entries across spool failures

2026-07-23 08:59:42 +02:00
parent 5aeccb4fe7
commit 4bcc8b6476
8 changed files with 576 additions and 48 deletions
@@ -38,6 +38,12 @@ for the configured retry path. Likewise, a per-recipient LMTP temporary error
 must preserve only that recipient for retry and must not redeliver recipients
 which already returned a final success.

+Queue control-file rewrites use a same-directory work file and an atomic
+rename. The original is retained unless every buffered write and close
+succeeds. A failed submission flush or final rename is rejected and its
+partial entry discarded, so the submitting SMTP peer remains responsible for
+retrying the message instead of receiving a false success.
+
 ## Administration and shutdown

 Use `bongo-queuetool` to inspect and perform documented queue operations; do