On scans the VRFY command is a finding, to disable it

Add this line below to the

/etc/postfix/main.cf.

disable_vrfy_command = yes

Now test if VRFY is disabled.

If the VRFY command does not come back as „VRFY command is disabled“ then this is a finding.