Does postfix need to be secured before it's safe to run it on a production server?
I rely on Monit to notify me if certain processes are down or in trouble. For this purpose and this purpose only, I need postfix on the server so that Monit can send me email notifications.
If it's necessary to secure Postfix before deploying it, what are some steps I can take to make it safer?