diff --git a/roles/ensure_postfix/templates/Fedora/42/etc/postfix/main.cf b/roles/ensure_postfix/templates/Fedora/42/etc/postfix/main.cf
index 81bcec7..f974b4b 100644
--- a/roles/ensure_postfix/templates/Fedora/42/etc/postfix/main.cf
+++ b/roles/ensure_postfix/templates/Fedora/42/etc/postfix/main.cf
@@ -31,7 +31,7 @@
 #
 # The level below is what should be used with new (not upgrade) installs.
 #
-compatibility_level = 3.7
+compatibility_level = 3.9
 
 # SOFT BOUNCE
 #
@@ -456,7 +456,7 @@ alias_database = hash:/etc/aliases
 # The mailbox_command parameter specifies the optional external
 # command to use instead of mailbox delivery. The command is run as
 # the recipient with proper HOME, SHELL and LOGNAME environment settings.
-# Exception:  delivery for root is done as $default_user.
+# Exception:  delivery for root is done as $default_privs.
 #
 # Other environment variables of interest: USER (recipient username),
 # EXTENSION (address extension), DOMAIN (domain part of address),
@@ -673,7 +673,7 @@ debugger_command =
 # sendmail_path: The full pathname of the Postfix sendmail command.
 # This is the Sendmail-compatible mail posting interface.
 # 
-sendmail_path = /usr/sbin/sendmail.postfix
+sendmail_path = /usr/bin/sendmail.postfix
 
 # newaliases_path: The full pathname of the Postfix newaliases command.
 # This is the Sendmail-compatible command to build alias databases.
diff --git a/roles/ensure_postfix/templates/Fedora/42/etc/postfix/main.cf.proto b/roles/ensure_postfix/templates/Fedora/42/etc/postfix/main.cf.proto
index 112c1f1..5ad8343 100644
--- a/roles/ensure_postfix/templates/Fedora/42/etc/postfix/main.cf.proto
+++ b/roles/ensure_postfix/templates/Fedora/42/etc/postfix/main.cf.proto
@@ -31,7 +31,7 @@
 #
 # The level below is what should be used with new (not upgrade) installs.
 #
-compatibility_level = 3.7
+compatibility_level = 3.9
 
 # SOFT BOUNCE
 #
@@ -456,7 +456,7 @@ alias_database = hash:/etc/aliases
 # The mailbox_command parameter specifies the optional external
 # command to use instead of mailbox delivery. The command is run as
 # the recipient with proper HOME, SHELL and LOGNAME environment settings.
-# Exception:  delivery for root is done as $default_user.
+# Exception:  delivery for root is done as $default_privs.
 #
 # Other environment variables of interest: USER (recipient username),
 # EXTENSION (address extension), DOMAIN (domain part of address),
diff --git a/roles/ensure_postfix/templates/Fedora/42/etc/postfix/master.cf b/roles/ensure_postfix/templates/Fedora/42/etc/postfix/master.cf
index bb0eae9..c9a55c9 100644
--- a/roles/ensure_postfix/templates/Fedora/42/etc/postfix/master.cf
+++ b/roles/ensure_postfix/templates/Fedora/42/etc/postfix/master.cf
@@ -21,6 +21,7 @@ smtp      inet  n       -       n       -       -       smtpd
 #  -o smtpd_tls_security_level=encrypt
 #  -o smtpd_sasl_auth_enable=yes
 #  -o smtpd_tls_auth_only=yes
+#  -o local_header_rewrite_clients=static:all
 #  -o smtpd_reject_unlisted_recipient=no
 #     Instead of specifying complex smtpd_<xxx>_restrictions here,
 #     specify "smtpd_<xxx>_restrictions=$mua_<xxx>_restrictions"
@@ -38,6 +39,7 @@ smtp      inet  n       -       n       -       -       smtpd
 #  -o syslog_name=postfix/submissions
 #  -o smtpd_tls_wrappermode=yes
 #  -o smtpd_sasl_auth_enable=yes
+#  -o local_header_rewrite_clients=static:all
 #  -o smtpd_reject_unlisted_recipient=no
 #     Instead of specifying complex smtpd_<xxx>_restrictions here,
 #     specify "smtpd_<xxx>_restrictions=$mua_<xxx>_restrictions"
@@ -65,7 +67,7 @@ proxymap  unix  -       -       n       -       -       proxymap
 proxywrite unix -       -       n       -       1       proxymap
 smtp      unix  -       -       n       -       -       smtp
 relay     unix  -       -       n       -       -       smtp
-        -o syslog_name=postfix/$service_name
+        -o syslog_name=${multi_instance_name?{$multi_instance_name}:{postfix}}/$service_name
 #       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
 showq     unix  n       -       n       -       -       showq
 error     unix  -       -       n       -       -       error
diff --git a/roles/ensure_postfix/templates/Fedora/42/etc/postfix/master.cf.proto b/roles/ensure_postfix/templates/Fedora/42/etc/postfix/master.cf.proto
index bb0eae9..c9a55c9 100644
--- a/roles/ensure_postfix/templates/Fedora/42/etc/postfix/master.cf.proto
+++ b/roles/ensure_postfix/templates/Fedora/42/etc/postfix/master.cf.proto
@@ -21,6 +21,7 @@ smtp      inet  n       -       n       -       -       smtpd
 #  -o smtpd_tls_security_level=encrypt
 #  -o smtpd_sasl_auth_enable=yes
 #  -o smtpd_tls_auth_only=yes
+#  -o local_header_rewrite_clients=static:all
 #  -o smtpd_reject_unlisted_recipient=no
 #     Instead of specifying complex smtpd_<xxx>_restrictions here,
 #     specify "smtpd_<xxx>_restrictions=$mua_<xxx>_restrictions"
@@ -38,6 +39,7 @@ smtp      inet  n       -       n       -       -       smtpd
 #  -o syslog_name=postfix/submissions
 #  -o smtpd_tls_wrappermode=yes
 #  -o smtpd_sasl_auth_enable=yes
+#  -o local_header_rewrite_clients=static:all
 #  -o smtpd_reject_unlisted_recipient=no
 #     Instead of specifying complex smtpd_<xxx>_restrictions here,
 #     specify "smtpd_<xxx>_restrictions=$mua_<xxx>_restrictions"
@@ -65,7 +67,7 @@ proxymap  unix  -       -       n       -       -       proxymap
 proxywrite unix -       -       n       -       1       proxymap
 smtp      unix  -       -       n       -       -       smtp
 relay     unix  -       -       n       -       -       smtp
-        -o syslog_name=postfix/$service_name
+        -o syslog_name=${multi_instance_name?{$multi_instance_name}:{postfix}}/$service_name
 #       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
 showq     unix  n       -       n       -       -       showq
 error     unix  -       -       n       -       -       error
diff --git a/roles/ensure_postfix/templates/Fedora/42/etc/postfix/virtual b/roles/ensure_postfix/templates/Fedora/42/etc/postfix/virtual
index 96390fe..8200ca4 100644
--- a/roles/ensure_postfix/templates/Fedora/42/etc/postfix/virtual
+++ b/roles/ensure_postfix/templates/Fedora/42/etc/postfix/virtual
@@ -11,12 +11,16 @@
 #        postmap -q - /etc/postfix/virtual <inputfile
 # 
 # DESCRIPTION
-#        The  optional  virtual(5)  alias  table rewrites recipient
-#        addresses for all local, all virtual, and all remote  mail
-#        destinations.   This  is unlike the aliases(5) table which
-#        is used only for local(8) delivery.  Virtual  aliasing  is
-#        recursive,  and  is  implemented by the Postfix cleanup(8)
-#        daemon before mail is queued.
+#        The  optional  virtual(5) alias table (virtual_alias_maps)
+#        applies to all recipients: local(8), virtual, and  remote.
+#        This feature is implemented in the Postfix cleanup(8) dae-
+#        mon before mail is queued.
+# 
+#        This is unlike the  aliases(5)  table  (alias_maps)  which
+#        applies only to local(8) recipients.
+# 
+#        Virtual  aliasing is recursive; to terminate recursion for
+#        a specific address, alias that address to itself.
 # 
 #        The main applications of virtual aliasing are:
 # 
@@ -252,46 +256,47 @@
 #        command after a configuration change.
 # 
 #        virtual_alias_maps ($virtual_maps)
-#               Optional lookup tables  that  alias  specific  mail
-#               addresses  or  domains  to  other  local  or remote
-#               addresses.
+#               Optional lookup tables with aliases that  apply  to
+#               all recipients: local(8), virtual, and remote; this
+#               is unlike alias_maps that apply  only  to  local(8)
+#               recipients.
 # 
 #        virtual_alias_domains ($virtual_alias_maps)
-#               Postfix is the final destination for the  specified
+#               Postfix  is the final destination for the specified
 #               list of virtual alias domains, that is, domains for
-#               which all addresses are  aliased  to  addresses  in
+#               which  all  addresses  are  aliased to addresses in
 #               other local or remote domains.
 # 
 #        propagate_unmatched_extensions (canonical, virtual)
-#               What  address  lookup tables copy an address exten-
+#               What address lookup tables copy an  address  exten-
 #               sion from the lookup key to the lookup result.
 # 
 #        Other parameters of interest:
 # 
 #        inet_interfaces (all)
-#               The network interface addresses that this mail sys-
-#               tem receives mail on.
+#               The  local  network  interface  addresses that this
+#               mail system receives mail on.
 # 
 #        mydestination  ($myhostname,  localhost.$mydomain,  local-
 #        host)
-#               The  list  of  domains  that  are delivered via the
+#               The list of domains  that  are  delivered  via  the
 #               $local_transport mail delivery transport.
 # 
 #        myorigin ($myhostname)
 #               The domain name that locally-posted mail appears to
-#               come  from,  and that locally posted mail is deliv-
+#               come from, and that locally posted mail  is  deliv-
 #               ered to.
 # 
 #        owner_request_special (yes)
 #               Enable special treatment for owner-listname entries
 #               in the aliases(5) file, and don't split owner-list-
-#               name and listname-request address  localparts  when
+#               name  and  listname-request address localparts when
 #               the recipient_delimiter is set to "-".
 # 
 #        proxy_interfaces (empty)
-#               The network interface addresses that this mail sys-
-#               tem receives mail on by way of a proxy  or  network
-#               address translation unit.
+#               The remote network interface  addresses  that  this
+#               mail  system  receives mail on by way of a proxy or
+#               network address translation unit.
 # 
 # SEE ALSO
 #        cleanup(8), canonicalize and enqueue mail
@@ -300,14 +305,14 @@
 #        canonical(5), canonical address mapping
 # 
 # README FILES
-#        Use  "postconf  readme_directory" or "postconf html_direc-
+#        Use "postconf readme_directory" or  "postconf  html_direc-
 #        tory" to locate this information.
 #        ADDRESS_REWRITING_README, address rewriting guide
 #        DATABASE_README, Postfix lookup table overview
 #        VIRTUAL_README, domain hosting guide
 # 
 # LICENSE
-#        The Secure Mailer license must be  distributed  with  this
+#        The  Secure  Mailer  license must be distributed with this
 #        software.
 # 
 # AUTHOR(S)