Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Postfix - antispam and relay package

    Scheduled Pinned Locked Moved pfSense Packages
    855 Posts 136 Posters 1.1m Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      darklogic
      last edited by

      on your check box for helo check. I see it says checked for default. So if I check it, I am assuming it will check helo and if it is unchecked it will not check helo?

      Thanks,

      1 Reply Last reply Reply Quote 0
      • D
        darklogic
        last edited by

        ahhh, I think your updated package has worked. I am starting to recieve these e-mails now. I just recieved the ones from earlier today.

        This makes me feel so much better.

        Thanks marcelloc

        1 Reply Last reply Reply Quote 0
        • marcellocM
          marcelloc
          last edited by

          Great news. In few days you will have many logs on Database. Take a look on dashboard postfix widget and on search mail.

          Treinamentos de Elite: http://sys-squad.com

          Help a community developer! ;D

          1 Reply Last reply Reply Quote 0
          • D
            darklogic
            last edited by

            I am currently looking into it. Great work marcelloc.

            1 Reply Last reply Reply Quote 0
            • D
              darklogic
              last edited by

              This is odd. I am getting an error when trying to go to avalible packages. Are you getting this?

              1 Reply Last reply Reply Quote 0
              • D
                darklogic
                last edited by

                This is the error I am getting. It was just working???

                Unable to communicate with www.pfsense.com. Please verify DNS and interface configuration, and that pfSense has functional Internet connectivity.

                1 Reply Last reply Reply Quote 0
                • D
                  darklogic
                  last edited by

                  It was SNORT HTTP inspect causing the issue.

                  Anyways, I have a question about the logs. I am not seeing anything showing up yet. I followed the instructions, but don't understand the last line that I highlighted below in red.

                  Choose how often pfSense will transfer log files to Sqlite database.
                  To use Diagnostics -> Search mail you need to:
                  Select Loggin Destination to /var/log/maillog
                  Select update Sqlite frequency
                  Inlcude /^Subject:/ WARN line in Acl Headers after all your Subject rules.

                  Thanks,

                  1 Reply Last reply Reply Quote 0
                  • marcellocM
                    marcelloc
                    last edited by

                    Go to acls tab and include the subject line in header option.

                    Treinamentos de Elite: http://sys-squad.com

                    Help a community developer! ;D

                    1 Reply Last reply Reply Quote 0
                    • D
                      darklogic
                      last edited by

                      OK, got it. I am starting to see data coming into the logs.

                      You have done an excellent job on this package. Thanks for all your hard work.

                      Thanks,

                      1 Reply Last reply Reply Quote 0
                      • C
                        cmariotti
                        last edited by

                        I posted a question to the pfSense mailing list and was directed to look at the Postfix relay package. I saw a posting asking if SMTP out was an option, but I didn't see a clear answer to this.

                        Let me explain my issue…

                        After converting a network of computers to use a fairly popular 3rd party email service (not my decision unfortunately), users are experiencing very odd issues with email (POP and SMTP based). The 3rd party says we should try different ports, increase timeouts, etc…  and they sometimes take days to admit they themselves have an issue (after we have jumped through their hoops).

                        One of the issues is email taking a while to be sent out of the network to the 3rd party SMTP servers… in many cases, items sit in Outlook… with recipients complaining that they received multiple copies of the same email.

                        My thought was to see if there was an SMTP server that can run on pfSense 2.0? I would like to be able to monitor the queue, etc…  My hope is that the client computers would stop failing/timing out/multiple deliveries and that pfSense would just act as the active sender SMTP server... basically to send out emails from the network directly to the recipient's mailserver... But I need to be able to manage and monitor it easily in real-time and after the fact on specific dates/times to see what is happening with a specific email problem.

                        Any advice or suggestions? Does the replay package allow this? Or is it simply for inbound emails only?

                        Regards,

                        Chuck

                        1 Reply Last reply Reply Quote 0
                        • marcellocM
                          marcelloc
                          last edited by

                          If you have static ip on your internet connection and if you could include this ip as a Spf record on your internet dns domain, then you could configure your smtp client option to this package.

                          I suggest you to change pop3 to imap. It's much better.

                          Smtp auth with SASL is not working on current version because a missing dependencie in cyrrus-SASL package.

                          Treinamentos de Elite: http://sys-squad.com

                          Help a community developer! ;D

                          1 Reply Last reply Reply Quote 0
                          • C
                            cmariotti
                            last edited by

                            So basically just install the package, create spf record for the public IP and point the clients to use the internal firewall IP as their SMTP server. That sound right?

                            1 Reply Last reply Reply Quote 0
                            • marcellocM
                              marcelloc
                              last edited by

                              Yes. That's it.

                              On package, try this configurarion:

                              • listen only in localhost and lan

                              • disable postscreen

                              • choose basic header verification

                              • do not check Helo valid hostname

                              • at acls, include your internal network on client access list

                              Treinamentos de Elite: http://sys-squad.com

                              Help a community developer! ;D

                              1 Reply Last reply Reply Quote 0
                              • T
                                timreichhart
                                last edited by

                                does this package have a option for users to manage there whitelist/blacklist or any other options they need to configure under there own login page?

                                1 Reply Last reply Reply Quote 0
                                • marcellocM
                                  marcelloc
                                  last edited by

                                  This package act as a relay for internal smtp server. Postfix on pfsense has no client accounts or user page.

                                  Treinamentos de Elite: http://sys-squad.com

                                  Help a community developer! ;D

                                  1 Reply Last reply Reply Quote 0
                                  • D
                                    darklogic
                                    last edited by

                                    marcelloc,

                                    Any word on the postfix AV and anti-spam add-on? Your latest release fixed all the issues I was having. Great package. I am excited to see what will come next.

                                    Thanks Again,

                                    1 Reply Last reply Reply Quote 0
                                    • marcellocM
                                      marcelloc
                                      last edited by

                                      The upcoming version 2.3 improves maillog Database and fixes some minor bugs.

                                      Mailscanner maybe released in december.

                                      Treinamentos de Elite: http://sys-squad.com

                                      Help a community developer! ;D

                                      1 Reply Last reply Reply Quote 0
                                      • D
                                        darklogic
                                        last edited by

                                        That is excellent news. Keep up the great work.

                                        Thanks Again,

                                        MDP

                                        1 Reply Last reply Reply Quote 0
                                        • M
                                          mince69meat
                                          last edited by

                                          @marcelloc:

                                          Hi all,

                                          Postfix compilation on x64 now includes cyrus-SASL2 and TLS.

                                          who need or want to test it, reinstall or remove/install postfix package.

                                          No changes in gui for this option. Include all your SASL and/or TLS config in custom main.cf options

                                          att,
                                          Marcello Coutinho

                                          Hi Marcello and everyone else

                                          can anyone help me out I would like to send mail from internal to exturnal though this fantastic packege but can't get passed "smtpd_recipient_restrictions = reject_unauth_destination" have tried "smtpd_recipient_restrictions = permit_mynetworks reject_unauth_destination" in custom but it will not override the defaults, tried SASL but don't know how to install it on pfsense, have spent a week doing this before postting so sorry if its in a post elswere, any help or point to any posts that could help or how to override the default would be grateful

                                          Mick

                                          1 Reply Last reply Reply Quote 0
                                          • marcellocM
                                            marcelloc
                                            last edited by

                                            mince69meat,

                                            I'ts included in upcoming version 2.3. I'm finished coding and now I'm testing before publishing.

                                            The not so good news is that 2.2 sqlite database is not compatible with 2.3.

                                            Treinamentos de Elite: http://sys-squad.com

                                            Help a community developer! ;D

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.