Kousuke Ebihara: [sending email to a "|non-Postfix command" alias] > Postfix might execute commands in a content of e-mail.
Postfix does not execute commands in the content of email messages. Postfix creates the pipe, not the shell. For safety, Postfix has a command_expansion_filter feature that cleans email addresses etc. in environment variables. Of course, you have to be careful with sending email messages into non-Postfix commands, especially when those programs were not written by someone with expertise in the handling of unsafe content. Wietse