diff --git a/NEWS b/NEWS
index cf37e47729f46dceb1a7e4c1d935f9acd8978b1c..3ebd0dcc2bc4ab7a04a6a4a6abc46e2ef71c5927 100644
--- a/NEWS
+++ b/NEWS
@@ -1,5 +1,9 @@
 unreleased (207x-xx-xx)
 
+    [postfix] Change the sender address for root mail from
+    "root@${::hostname}" to "root@${::fqdn}". This is needed by newer
+    versions of postfix and makes more sense anyway.
+
     [wallet] Make wallet ketyab use the correct path for ktutil.
 
     [duo] Change apt pin file to point to codename rather than archive
diff --git a/manifests/postfix.pp b/manifests/postfix.pp
index 9944860164e0cf433ea4b918debaa17ba3b6011b..bd45c661e819a9e03d4829167811b40181bba107 100644
--- a/manifests/postfix.pp
+++ b/manifests/postfix.pp
@@ -61,7 +61,7 @@ class base::postfix {
 
   # Have mail from root@stanford.edu come from root at the local system
   base::postfix::sender { 'root@stanford.edu':
-    ensure => "root@${::hostname}";
+    ensure => "root@${::fqdn}";
   }
 
   # We used to disable and stop sendmail here on Red Hat, but this doesn't