Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Postfix - antispam and relay package

    Scheduled Pinned Locked Moved pfSense Packages
    855 Posts 136 Posters 1.0m Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • U
      Unubtanium
      last edited by

      I have two strange problems and hope someone can help to point me in the right direction of the solution to it!

      Here goes:
      On Page:   In Services -> Postfix forwarder -> Access List (both problems are related to this page)

      NR1: In the box/field Sender i have entered an email like this on its on line: info@club108.co.uk REJECT
      BUT       still on the 18th aug i got an email from them:

      
2012-08-18 15:01:28	Mail.Info	LANIP	Aug 18 15:05:41 postfix/postscreen[55280]: CONNECT from [216.75.30.240]:56243
2012-08-18 15:01:28	Mail.Info	LANIP	Aug 18 15:05:41 postfix/postscreen[55280]: PASS OLD [216.75.30.240]:56243
2012-08-18 15:01:28	Mail.Info	LANIP	Aug 18 15:05:41 postfix/smtpd[55431]: connect from mail.zoneedit.com[216.75.30.240]
2012-08-18 15:01:28	Mail.Info	LANIP	Aug 18 15:05:42 postfix/smtpd[55431]: 148B811D31: client=mail.zoneedit.com[216.75.30.240]
2012-08-18 15:01:28	Local0.Info	LANIP	Aug 18 15:05:42 pf: 00:00:32.461734 rule 27/0(match): pass in on de0: (tos 0x0, ttl 49, id 16506, offset 0, flags [DF], proto TCP (6), length 60)
2012-08-18 15:01:28	Local0.Info	LANIP	Aug 18 15:05:42 pf:     216.75.30.240.56243 > WANIP.25: Flags [s], cksum 0xdc33 (correct), seq 1302170047, win 5840, options [mss 1460,sackOK,TS val 3096627653 ecr 0,nop,wscale 7], length 0
2012-08-18 15:01:28	Mail.Info	LANIP	Aug 18 15:05:42 postfix/cleanup[56044]: 148B811D31: warning: header Subject: CLUB 108 from mail.zoneedit.com[216.75.30.240]; from= <user29223@lws05.ldn5.groupnbt.net>to= <my@email.com>proto=ESMTP helo= <mail.zoneedit.com>2012-08-18 15:01:28	Mail.Info	LANIP	Aug 18 15:05:42 postfix/cleanup[56044]: 148B811D31: hold: header From: Club 108 <info@club108.co.uk>  from mail.zoneedit.com[216.75.30.240]; from= <user29223@lws05.ldn5.groupnbt.net>to= <my@email.com>proto=ESMTP helo= <mail.zoneedit.com>2012-08-18 15:01:28	Mail.Info	LANIP	Aug 18 15:05:42 postfix/cleanup[56044]: 148B811D31: message-id= <e1t2jem-0008eb-m2@lws05.ldn5.groupnbt.net>2012-08-18 15:01:28	Mail.Info	LANIP	Aug 18 15:05:42 postfix/smtpd[55431]: disconnect from mail.zoneedit.com[216.75.30.240]
2012-08-18 15:01:29	Mail.Info	LANIP	Aug 18 15:05:42 MailScanner[61380]: New Batch: Scanning 1 messages, 1769 bytes
2012-08-18 15:01:29	Mail.Info	LANIP	Aug 18 15:05:42 MailScanner[61380]: Filename Checks: Allowing 148B811D31.ACD2F msg-61380-1.txt
2012-08-18 15:01:29	Mail.Info	LANIP	Aug 18 15:05:43 MailScanner[61380]: Filetype Checks: Allowing 148B811D31.ACD2F msg-61380-1.txt
2012-08-18 15:01:29	Mail.Info	LANIP	Aug 18 15:05:43 MailScanner[61380]: Virus and Content Scanning: Starting
2012-08-18 15:01:29	Mail.Info	LANIP	Aug 18 15:05:43 MailScanner[61380]: Virus Scanning completed at 6753 bytes per second
2012-08-18 15:01:29	Mail.Info	LANIP	Aug 18 15:05:43 MailScanner[61380]: Spam Checks: Starting
2012-08-18 15:01:29	Mail.Info	LANIP	Aug 18 15:05:43 MailScanner[61380]: SpamAssassin cache hit for message 148B811D31.ACD2F
2012-08-18 15:01:29	Mail.Info	LANIP	Aug 18 15:05:43 MailScanner[61380]: Message 148B811D31.ACD2F from 216.75.30.240 (user29223@lws05.ldn5.groupnbt.net) to evensen-it.com is not spam, SpamAssassin (cached, score=1.989, required 6, DKIM_ADSP_NXDOMAIN 0.80, RCVD_IN_DNSWL_NONE -0.00, UPPERCASE_75_100 1.19)
2012-08-18 15:01:29	Mail.Notice	LANIP	Aug 18 15:05:43 MailScanner[61380]: Delivery of nonspam: message 148B811D31.ACD2F from user29223@lws05.ldn5.groupnbt.net to my@email.com with subject CLUB 108
2012-08-18 15:01:29	Mail.Info	LANIP	Aug 18 15:05:43 MailScanner[61380]: Spam Checks completed at 75498 bytes per second
2012-08-18 15:01:29	Mail.Info	LANIP	Aug 18 15:05:43 MailScanner[61380]: Requeue: 148B811D31.ACD2F to 52D8711D36
2012-08-18 15:01:29	Mail.Info	LANIP	Aug 18 15:05:43 MailScanner[61380]: Uninfected: Delivered 1 messages
2012-08-18 15:01:29	Mail.Info	LANIP	Aug 18 15:05:43 MailScanner[61380]: Virus Processing completed at 10632 bytes per second
2012-08-18 15:01:29	Mail.Info	LANIP	Aug 18 15:05:43 postfix/qmgr[42867]: 52D8711D36: from=<user29223@lws05.ldn5.groupnbt.net>, size=1084, nrcpt=1 (queue active)
2012-08-18 15:01:29	Mail.Info	LANIP	Aug 18 15:05:43 MailScanner[61380]: Deleted 1 messages from processing-database
2012-08-18 15:01:29	Mail.Info	LANIP	Aug 18 15:05:43 MailScanner[61380]: Batch completed at 3563 bytes per second (1769 / 0)
2012-08-18 15:01:29	Mail.Info	LANIP	Aug 18 15:05:43 MailScanner[61380]: Batch (1 message) processed in 0.50 seconds
2012-08-18 15:01:30	Mail.Info	LANIP	Aug 18 15:05:43 postfix/smtp[61179]: 52D8711D36: to=<my@email.com>, relay=MailServerLanIP[MailServerLanIP]:25, delay=1.6, delays=1.4/0/0.01/0.23, dsn=2.6.0, status=sent (250 2.6.0 <e1t2jem-0008eb-m2@lws05.ldn5.groupnbt.net> [InternalId=218] Queued mail for delivery)
2012-08-18 15:01:30	Mail.Info	LANIP	Aug 18 15:05:43 postfix/qmgr[42867]: 52D8711D36: removed

SO my question is, how can i make SURE that it uses my sender rules or is it using it but the email is not in the from field and 
this email info@club108.co.uk are presented in the header because this a forwarded email and i have to put this email in the MIME filed/box?

And NR2:

I have entered this domain in CIDR box/field on its own line: 
[b] venus.aleo.no OK[/b]

But when i check the log  see this??
[code]
postfix/postscreen[30282]: warning: cidr map /usr/local/etc/postfix/cal_cidr, line 4: bad address pattern: "venus.aleo.no": skipping this rule
[/code]

But in the description for the CIDR it says that i can use a domain but is this wrong? 
Because the IPs i have entered there are all oki?

Thanks to reading.. 

  ;D[/s]</e1t2jem-0008eb-m2@lws05.ldn5.groupnbt.net></my@email.com></user29223@lws05.ldn5.groupnbt.net></e1t2jem-0008eb-m2@lws05.ldn5.groupnbt.net></mail.zoneedit.com></my@email.com></user29223@lws05.ldn5.groupnbt.net></info@club108.co.uk></mail.zoneedit.com></my@email.com></user29223@lws05.ldn5.groupnbt.net>
      1 Reply Last reply Reply Quote 0
      • L
        louis-m
        last edited by

        if you are using 2.1_x64, your gui config could show you one thing while postfix is doing another thing due to where it reads it's config from.
        i don't think the package has been updated for 2.1_x64 yet if that's what you are using.
        every time i do an upgrade of pfsense_x64, i have to copy /usr/local/etc/postfix to /usr/pbi/postfix-amd64/etc/postfix and then it works.

        1 Reply Last reply Reply Quote 0
        • U
          Unubtanium
          last edited by

          Thanks for the heads up louis-m, but i am using 2.0.1 Release i386 .

          1 Reply Last reply Reply Quote 0
          • U
            Unubtanium
            last edited by

            And one last question!  8)
            how or why are an ip that are in a RBL being PASS NEW and not just automatically dropped after it is confirmed that the ip is on a rbl to save resources ?????????????

            
postfix/postscreen[8038]: DISCONNECT [190.167.194.178]:64340
postfix/postscreen[8038]: PASS NEW [190.167.194.178]:64340
postfix/postscreen[8038]: HANGUP after 2.2 from [190.167.194.178]:64340 in tests after SMTP handshake
postfix/postscreen[8038]: NOQUEUE: reject: RCPT from [190.167.194.178]:64340: 450 4.3.2 Service currently unavailable; from=<services@us-ups.com>, to=<novalidrecipients@domain.com>, proto=SMTP, helo= <us-ups.com>postfix/dnsblog[50328]: addr 190.167.194.178 listed by domain b.barracudacentral.org as 127.0.0.2
pf:     190.167.194.178.64340 > WANIP.25: Flags [s], cksum 0xf8f6 (correct), seq 5162395, win 8192, options [mss 1260,nop,nop,sackOK], length 0
postfix/postscreen[8038]: CONNECT from [190.167.194.178]:64340

[/s]</us-ups.com></novalidrecipients@domain.com></services@us-ups.com>
            1 Reply Last reply Reply Quote 0
            • V
              voona
              last edited by

              Anyone? What permissions am i meant to use?

              ERROR: Can't open /var/log/clamav/freshclam.log in append mode (check permissions!).
ERROR: Problem with internal logger (UpdateLogFile = /var/log/clamav/freshclam.log).
              1 Reply Last reply Reply Quote 0
              • U
                Unubtanium
                last edited by

                @voona:

                Anyone? What permissions am i meant to use?

                ERROR: Can't open /var/log/clamav/freshclam.log in append mode (check permissions!).
ERROR: Problem with internal logger (UpdateLogFile = /var/log/clamav/freshclam.log).

                I did not even have this file when i did a fresh install so i created the file and just gave it rw-rw-rw-, maby not the smartest to do but it works.. and it is only my clamlog..  ;D

                1 Reply Last reply Reply Quote 0
                • V
                  voona
                  last edited by

                  Ok Clamd seems to be running now but im having issues with mail scanner actually enforcing the policy

                  For example i set the maximum attachment size to 0 (Blocking any attachments) and mail still flows through Postfix without being scanned / processed by mail scanner

                  
Aug 30 10:08:13 	postfix/postscreen[3173]: CONNECT from [209.85.210.178]:38820
Aug 30 10:08:13 	postfix/postscreen[3173]: PASS OLD [209.85.210.178]:38820
Aug 30 10:08:13 	postfix/smtpd[3358]: connect from mail-iy0-f178.google.com[209.85.210.178]
Aug 30 10:08:14 	postfix/smtpd[3358]: 770AC739A6: client=mail-iy0-f178.google.com[209.85.210.178]
Aug 30 10:08:14 	postfix/cleanup[3948]: 770AC739A6: message-id= <canygpjxck1vxv3szxtdz-vm-e8hqbjas5b3wtnnfvtvub_hjoq@mail.gmail.com>Aug 30 10:08:15 	postfix/qmgr[3429]: 770AC739A6: from=<xxxxxxxxxxxxxxx@gmail.com>, size=130538, nrcpt=1 (queue active)
Aug 30 10:08:16 	postfix/smtp[4255]: 770AC739A6: to=<xxxxxxxxxxxxxxxxxxxx@xxxxxxxxxxxxxxxxxxxxxxx.com.au>, relay=10.100.100.2[10.100.100.2]:25, delay=2.2, delays=2/0.02/0/0.23, dsn=2.6.0, status=sent (250 2.6.0 <canygpjxck1vxv3szxtdz-vm-e8hqbjas5b3wtnnfvtvub_hjoq@mail.gmail.com>[InternalId=27] Queued mail for delivery)
Aug 30 10:08:16 	postfix/qmgr[3429]: 770AC739A6: removed
Aug 30 10:08:45 	postfix/smtpd[3358]: disconnect from mail-iy0-f178.google.com[209.85.210.178]</canygpjxck1vxv3szxtdz-vm-e8hqbjas5b3wtnnfvtvub_hjoq@mail.gmail.com></xxxxxxxxxxxxxxxxxxxx@xxxxxxxxxxxxxxxxxxxxxxx.com.au></xxxxxxxxxxxxxxx@gmail.com></canygpjxck1vxv3szxtdz-vm-e8hqbjas5b3wtnnfvtvub_hjoq@mail.gmail.com> 

                  
Aug 30 10:09:59 	check_reload_status: Syncing firewall
Aug 30 10:09:59 	check_reload_status: Syncing firewall
Aug 30 10:10:00 	php: /pkg_edit.php: Restarting clamav-clamd daemon
Aug 30 10:10:07 	php: /pkg_edit.php: Restarting dccifd
Aug 30 10:10:07 	dccifd[56724]: 1.3.140 detected 0 spam, ignored for 0, rejected for 0, and discarded for 0 targets among 0 total messages for 5 targets since 08/30/12 10:00:13
Aug 30 10:10:07 	dccifd[15470]: 1.3.140 listening to /usr/local/dcc/dccifd for ASCII protocol
Aug 30 10:10:07 	php: /pkg_edit.php: Restarting MailScanner
Aug 30 10:10:11 	MailScanner[28826]: MailScanner E-Mail Virus Scanner version 4.83.5 starting...
Aug 30 10:10:11 	MailScanner[28826]: Reading configuration file /usr/local/etc/MailScanner/MailScanner.conf
Aug 30 10:10:11 	MailScanner[28826]: Reading configuration file /usr/local/etc/MailScanner/conf.d/README
Aug 30 10:10:11 	MailScanner[28826]: Using SpamAssassin results cache
Aug 30 10:10:11 	MailScanner[28826]: Connected to SpamAssassin cache database
Aug 30 10:10:11 	MailScanner[28826]: Enabling SpamAssassin auto-whitelist functionality...
Aug 30 10:10:16 	MailScanner[29081]: MailScanner E-Mail Virus Scanner version 4.83.5 starting...
Aug 30 10:10:16 	MailScanner[29081]: Reading configuration file /usr/local/etc/MailScanner/MailScanner.conf
Aug 30 10:10:16 	MailScanner[29081]: Reading configuration file /usr/local/etc/MailScanner/conf.d/README
Aug 30 10:10:16 	MailScanner[29081]: Using SpamAssassin results cache
Aug 30 10:10:16 	MailScanner[29081]: Connected to SpamAssassin cache database
Aug 30 10:10:16 	MailScanner[29081]: Enabling SpamAssassin auto-whitelist functionality...
Aug 30 10:10:21 	MailScanner[37257]: MailScanner E-Mail Virus Scanner version 4.83.5 starting...
Aug 30 10:10:21 	MailScanner[37257]: Reading configuration file /usr/local/etc/MailScanner/MailScanner.conf
Aug 30 10:10:21 	MailScanner[37257]: Reading configuration file /usr/local/etc/MailScanner/conf.d/README
Aug 30 10:10:21 	MailScanner[37257]: Using SpamAssassin results cache
Aug 30 10:10:21 	MailScanner[37257]: Connected to SpamAssassin cache database
Aug 30 10:10:21 	MailScanner[37257]: Enabling SpamAssassin auto-whitelist functionality...
Aug 30 10:10:26 	MailScanner[44670]: MailScanner E-Mail Virus Scanner version 4.83.5 starting...
Aug 30 10:10:26 	MailScanner[44670]: Reading configuration file /usr/local/etc/MailScanner/MailScanner.conf
Aug 30 10:10:26 	MailScanner[44670]: Reading configuration file /usr/local/etc/MailScanner/conf.d/README
Aug 30 10:10:26 	MailScanner[44670]: Using SpamAssassin results cache
Aug 30 10:10:26 	MailScanner[44670]: Connected to SpamAssassin cache database
Aug 30 10:10:26 	MailScanner[44670]: Enabling SpamAssassin auto-whitelist functionality...
Aug 30 10:10:31 	MailScanner[52918]: MailScanner E-Mail Virus Scanner version 4.83.5 starting...
Aug 30 10:10:31 	MailScanner[52918]: Reading configuration file /usr/local/etc/MailScanner/MailScanner.conf
Aug 30 10:10:31 	MailScanner[52918]: Reading configuration file /usr/local/etc/MailScanner/conf.d/README
Aug 30 10:10:31 	MailScanner[52918]: Using SpamAssassin results cache
Aug 30 10:10:31 	MailScanner[52918]: Connected to SpamAssassin cache database
Aug 30 10:10:31 	MailScanner[52918]: Enabling SpamAssassin auto-whitelist functionality...


                  
postfix 28643  0.0  1.9 21916 19280  ??  Is   10:10AM   0:00.01 MailScanner: master waiting for children, sleeping (perl5.12.4)
postfix 28826  0.0  5.0 63832 51228  ??  S    10:10AM   0:02.13 MailScanner: waiting for messages (perl5.12.4)
postfix 29081  0.0  5.0 63832 51228  ??  S    10:10AM   0:02.14 MailScanner: waiting for messages (perl5.12.4)
postfix 37257  0.0  5.0 63832 51272  ??  S    10:10AM   0:02.16 MailScanner: waiting for messages (perl5.12.4)
postfix 44670  0.0  5.0 63832 51272  ??  S    10:10AM   0:02.23 MailScanner: waiting for messages (perl5.12.4)
postfix 52918  0.0  5.0 63832 51228  ??  S    10:10AM   0:02.17 MailScanner: waiting for messages (perl5.12.4)

                  I have ticked the use 3rd Party Anti-Spam box in the postfix configuration. Anyone got a quick run through guide to get this setup and working properly ?

                  1 Reply Last reply Reply Quote 0
                  • U
                    Unubtanium
                    last edited by

                    @voona:

                    Ok Clamd seems to be running now but im having issues with mail scanner actually enforcing the policy

                    For example i set the maximum attachment size to 0 (Blocking any attachments) and mail still flows through Postfix without being scanned / processed by mail scanner

                    
Aug 30 10:08:13 	postfix/postscreen[3173]: CONNECT from [209.85.210.178]:38820
Aug 30 10:08:13 	postfix/postscreen[3173]: PASS OLD [209.85.210.178]:38820
Aug 30 10:08:13 	postfix/smtpd[3358]: connect from mail-iy0-f178.google.com[209.85.210.178]
Aug 30 10:08:14 	postfix/smtpd[3358]: 770AC739A6: client=mail-iy0-f178.google.com[209.85.210.178]
Aug 30 10:08:14 	postfix/cleanup[3948]: 770AC739A6: message-id= <canygpjxck1vxv3szxtdz-vm-e8hqbjas5b3wtnnfvtvub_hjoq@mail.gmail.com>Aug 30 10:08:15 	postfix/qmgr[3429]: 770AC739A6: from=<xxxxxxxxxxxxxxx@gmail.com>, size=130538, nrcpt=1 (queue active)
Aug 30 10:08:16 	postfix/smtp[4255]: 770AC739A6: to=<xxxxxxxxxxxxxxxxxxxx@xxxxxxxxxxxxxxxxxxxxxxx.com.au>, relay=10.100.100.2[10.100.100.2]:25, delay=2.2, delays=2/0.02/0/0.23, dsn=2.6.0, status=sent (250 2.6.0 <canygpjxck1vxv3szxtdz-vm-e8hqbjas5b3wtnnfvtvub_hjoq@mail.gmail.com>[InternalId=27] Queued mail for delivery)
Aug 30 10:08:16 	postfix/qmgr[3429]: 770AC739A6: removed
Aug 30 10:08:45 	postfix/smtpd[3358]: disconnect from mail-iy0-f178.google.com[209.85.210.178]</canygpjxck1vxv3szxtdz-vm-e8hqbjas5b3wtnnfvtvub_hjoq@mail.gmail.com></xxxxxxxxxxxxxxxxxxxx@xxxxxxxxxxxxxxxxxxxxxxx.com.au></xxxxxxxxxxxxxxx@gmail.com></canygpjxck1vxv3szxtdz-vm-e8hqbjas5b3wtnnfvtvub_hjoq@mail.gmail.com> 

                    
Aug 30 10:09:59 	check_reload_status: Syncing firewall
Aug 30 10:09:59 	check_reload_status: Syncing firewall
Aug 30 10:10:00 	php: /pkg_edit.php: Restarting clamav-clamd daemon
Aug 30 10:10:07 	php: /pkg_edit.php: Restarting dccifd
Aug 30 10:10:07 	dccifd[56724]: 1.3.140 detected 0 spam, ignored for 0, rejected for 0, and discarded for 0 targets among 0 total messages for 5 targets since 08/30/12 10:00:13
Aug 30 10:10:07 	dccifd[15470]: 1.3.140 listening to /usr/local/dcc/dccifd for ASCII protocol
Aug 30 10:10:07 	php: /pkg_edit.php: Restarting MailScanner
Aug 30 10:10:11 	MailScanner[28826]: MailScanner E-Mail Virus Scanner version 4.83.5 starting...
Aug 30 10:10:11 	MailScanner[28826]: Reading configuration file /usr/local/etc/MailScanner/MailScanner.conf
Aug 30 10:10:11 	MailScanner[28826]: Reading configuration file /usr/local/etc/MailScanner/conf.d/README
Aug 30 10:10:11 	MailScanner[28826]: Using SpamAssassin results cache
Aug 30 10:10:11 	MailScanner[28826]: Connected to SpamAssassin cache database
Aug 30 10:10:11 	MailScanner[28826]: Enabling SpamAssassin auto-whitelist functionality...
Aug 30 10:10:16 	MailScanner[29081]: MailScanner E-Mail Virus Scanner version 4.83.5 starting...
Aug 30 10:10:16 	MailScanner[29081]: Reading configuration file /usr/local/etc/MailScanner/MailScanner.conf
Aug 30 10:10:16 	MailScanner[29081]: Reading configuration file /usr/local/etc/MailScanner/conf.d/README
Aug 30 10:10:16 	MailScanner[29081]: Using SpamAssassin results cache
Aug 30 10:10:16 	MailScanner[29081]: Connected to SpamAssassin cache database
Aug 30 10:10:16 	MailScanner[29081]: Enabling SpamAssassin auto-whitelist functionality...
Aug 30 10:10:21 	MailScanner[37257]: MailScanner E-Mail Virus Scanner version 4.83.5 starting...
Aug 30 10:10:21 	MailScanner[37257]: Reading configuration file /usr/local/etc/MailScanner/MailScanner.conf
Aug 30 10:10:21 	MailScanner[37257]: Reading configuration file /usr/local/etc/MailScanner/conf.d/README
Aug 30 10:10:21 	MailScanner[37257]: Using SpamAssassin results cache
Aug 30 10:10:21 	MailScanner[37257]: Connected to SpamAssassin cache database
Aug 30 10:10:21 	MailScanner[37257]: Enabling SpamAssassin auto-whitelist functionality...
Aug 30 10:10:26 	MailScanner[44670]: MailScanner E-Mail Virus Scanner version 4.83.5 starting...
Aug 30 10:10:26 	MailScanner[44670]: Reading configuration file /usr/local/etc/MailScanner/MailScanner.conf
Aug 30 10:10:26 	MailScanner[44670]: Reading configuration file /usr/local/etc/MailScanner/conf.d/README
Aug 30 10:10:26 	MailScanner[44670]: Using SpamAssassin results cache
Aug 30 10:10:26 	MailScanner[44670]: Connected to SpamAssassin cache database
Aug 30 10:10:26 	MailScanner[44670]: Enabling SpamAssassin auto-whitelist functionality...
Aug 30 10:10:31 	MailScanner[52918]: MailScanner E-Mail Virus Scanner version 4.83.5 starting...
Aug 30 10:10:31 	MailScanner[52918]: Reading configuration file /usr/local/etc/MailScanner/MailScanner.conf
Aug 30 10:10:31 	MailScanner[52918]: Reading configuration file /usr/local/etc/MailScanner/conf.d/README
Aug 30 10:10:31 	MailScanner[52918]: Using SpamAssassin results cache
Aug 30 10:10:31 	MailScanner[52918]: Connected to SpamAssassin cache database
Aug 30 10:10:31 	MailScanner[52918]: Enabling SpamAssassin auto-whitelist functionality...


                    
postfix 28643  0.0  1.9 21916 19280  ??  Is   10:10AM   0:00.01 MailScanner: master waiting for children, sleeping (perl5.12.4)
postfix 28826  0.0  5.0 63832 51228  ??  S    10:10AM   0:02.13 MailScanner: waiting for messages (perl5.12.4)
postfix 29081  0.0  5.0 63832 51228  ??  S    10:10AM   0:02.14 MailScanner: waiting for messages (perl5.12.4)
postfix 37257  0.0  5.0 63832 51272  ??  S    10:10AM   0:02.16 MailScanner: waiting for messages (perl5.12.4)
postfix 44670  0.0  5.0 63832 51272  ??  S    10:10AM   0:02.23 MailScanner: waiting for messages (perl5.12.4)
postfix 52918  0.0  5.0 63832 51228  ??  S    10:10AM   0:02.17 MailScanner: waiting for messages (perl5.12.4)

                    I have ticked the use 3rd Party Anti-Spam box in the postfix configuration. Anyone got a quick run through guide to get this setup and working properly ?

                    Have a look here:
                    http://forum.pfsense.org/index.php/topic,43687.0.html
                    There might be some info there that might help.

                    1 Reply Last reply Reply Quote 0
                    • R
                      RobinGill
                      last edited by

                      @ics:

                      @marcelloc:

                      @ics:

                      I've noticed that when a server is blocked because of its presence in a DNSBL, it is not logged in sqlite files.
                      We can only see that it has been blocked in maillog.

                      Is there a way to view it in search mail ?

                      Did you tried to search it on noqueue ?

                      Of course I did  :)

                      I'm getting the same issue here.

                      The only way of me detecting these events is to packet capture port 25 on WAN and then manually look through it.

                      Edit: looking through /var/log/mailog is much easier than capturing port 25 on WAN

                      1 Reply Last reply Reply Quote 0
                      • Z
                        zlyzwy
                        last edited by

                        Hi Marcelloc,

                        I unchecked "Helo Hostname" in antispam page, but it seems that the postfix is still reject the mail from unknown host.

                        RCPT from unknown[114.251.18.30]: 450 4.7.1 Client host rejected: cannot find your hostname, [114.251.18.30]

                        I've already restart the PF once so I think the setting should be applied.

                        thanks for any advice.

                        Zlyzwy

                        1 Reply Last reply Reply Quote 0
                        • marcellocM
                          marcelloc
                          last edited by

                          @zlyzwy:

                          I unchecked "Helo Hostname" in antispam page, but it seems that the postfix is still reject the mail from unknown host.

                          RCPT from unknown[114.251.18.30]: 450 4.7.1 Client host rejected: cannot find your hostname, [114.251.18.30]

                          The helo check verifies the helo info, the log you sent is the host check. The best way is to ask remote admin to fix his dns or if you trust remote domain insert his dns on pfsense dns overide or include this host on my_network.

                          Treinamentos de Elite: http://sys-squad.com

                          Help a community developer! ;D

                          1 Reply Last reply Reply Quote 0
                          • J
                            JesusQ
                            last edited by

                            Hi Marcello,

                            In the Postfix Forwarder, I cannot search mail.
                            I set the logging destination and the sqlite update freq. but in the search mail tab the sqlite files box is empty.
                            And when starting a search it says 'Please select at least one file' which I am not able to do…
                            Looks like sqlite is not functioning?

                            Ideas?
                            Thanks!

                            1 Reply Last reply Reply Quote 0
                            • marcellocM
                              marcelloc
                              last edited by

                              did you included subject log on acls?

                              what happens when you run postfix updade database script on console?

                              Treinamentos de Elite: http://sys-squad.com

                              Help a community developer! ;D

                              1 Reply Last reply Reply Quote 0
                              • J
                                JesusQ
                                last edited by

                                Hi Marcello,

                                I reinstalled the package and all is working fine now,

                                Thanks for your time!

                                1 Reply Last reply Reply Quote 0
                                • M
                                  mauricioniñoavella
                                  last edited by

                                  Hello everyone following took help of our partner Marcello Coutinho.

                                  No solution had written, excuse me for not having done so before. This is the step by step solution

                                  Marcello Coutinho,

                                  Thanks for all the hard work!

                                  sasl on postfix?

                                  x64
                                  missing dependencies for saslpasswd2 (place it on /usr/lib/ dir)
                                  http://e-sac.siteseguro.ws/pfsense/8/amd64/All/ldd/
                                  additional package for sasl
                                  http://e-sac.siteseguro.ws/pfsense/8/amd64/All/cyrus-sasl-saslauthd-2.1.25.tbz

                                  i386
                                  missing dependencies for saslpasswd2 (place it on /usr/lib/ dir)
                                  http://e-sac.siteseguro.ws/pfsense/8/All/ldd/
                                  additional package for sasl
                                  http://e-sac.siteseguro.ws/pfsense/8/All/cyrus-sasl-saslauthd-2.1.25.tbz

                                  =====================================================================================

                                  Configuration postfix sasl pfsense x64

                                  1. I check dependencies for saslpasswd2

                                  [2.0.1-RELEASE]/root(1): ldd /usr/local/sbin/saslpasswd2
                                  /usr/local/sbin/saslpasswd2:

                                  libsasl2.so.2 => /usr/local/lib/libsasl2.so.2 (0x800647000)
                                  libcrypto.so.6 => /lib/libcrypto.so.6 (0x800761000)
                                  libgssapi.so.10 => not found (0x0)
                                  libheimntlm.so.10 => not found (0x0)
                                  libkrb5.so.10 => not found (0x0)
                                  libhx509.so.10 => not found (0x0)
                                  libcom_err.so.5 => /usr/lib/libcom_err.so.5 (0x8009fb000)
                                  libasn1.so.10 => not found (0x0)
                                  libroken.so.10 => not found (0x0)
                                  libcrypt.so.5 => /lib/libcrypt.so.5 (0x800afd000)
                                  libopie.so.6 => /usr/lib/libopie.so.6 (0x800c16000)
                                  libc.so.7 => /lib/libc.so.7 (0x800d1f000)
                                  libmd.so.5 => /lib/libmd.so.5 (0x800f5b000)

                                  2. Download dependencies for saslpasswd2   and copied in /usr/lib/

                                  link   dependencies for saslpasswd2  http://e-sac.siteseguro.ws/pfsense/8/amd64/All/ldd/

                                  libgssapi.so.10
                                  libheimntlm.so.10
                                  libhx509.so.10
                                  libkrb5.so.10
                                  libroken.so.10

                                  3. I copy these files to the following path /usr/lib/

                                  [2.0.1-RELEASE]/root(1): ls
                                  libasn1.so.10  libgssapi.so.10  libheimntlm.so.10  libhx509.so.10  libkrb5.so.10  libroken.so.10

                                  [2.0.1-RELEASE]/root(1): cp *.10 /usr/lib/

                                  libasn1.so.10                                                                                                                
                                  libgssapi.so.10                                                                                                              
                                  libheimntlm.so.10                                                                                                          
                                  libhx509.so.10                                                                                                                
                                  libkrb5.so.10                                                                                                                
                                  libroken.so.10

                                  4. Download additional package for sasl (cyrus-sasl-saslauthd-2.1.25.tbz)

                                  link Download additional package for sasl  http://e-sac.siteseguro.ws/pfsense/8/amd64/All/cyrus-sasl-saslauthd-2.1.25.tbz

                                  5. Install the package with the command pkg_add  cyrus-sasl-saslauthd-2.1.25.tbz

                                  link Install packages frebsd

                                  http://www.freebsd.org/doc/es/books/handbook/packages-using.html
                                  http://docs.freebsd.org/doc/4.9-RELEASE/usr/share/doc/es/books/handbook/packages-using.html

                                  [2.0.1-RELEASE]/root(1): pkg_add cyrus-sasl-saslauthd-2.1.25.tbz

                                  To run saslauthd from startup, add saslauthd_enable="YES" in your
                                  /etc/rc.conf.

                                  6. I check dependencies for saslpasswd2

                                  [2.0.1-RELEASE]/root(1): ldd /usr/local/sbin/saslpasswd2
                                  /usr/local/sbin/saslpasswd2:
                                  libsasl2.so.2 => /usr/local/lib/libsasl2.so.2 (0x800647000)
                                  libcrypto.so.6 => /lib/libcrypto.so.6 (0x800761000)
                                  libgssapi.so.10 => /usr/lib/libgssapi.so.10 (0x8009fb000)
                                  libheimntlm.so.10 => /usr/lib/libheimntlm.so.10 (0x800b04000)
                                  libkrb5.so.10 => /usr/lib/libkrb5.so.10 (0x800c09000)
                                  libhx509.so.10 => /usr/lib/libhx509.so.10 (0x800d76000)
                                  libcom_err.so.5 => /usr/lib/libcom_err.so.5 (0x800eb5000)
                                  libasn1.so.10 => /usr/lib/libasn1.so.10 (0x800fb7000)
                                  libroken.so.10 => /usr/lib/libroken.so.10 (0x801136000)
                                  libcrypt.so.5 => /lib/libcrypt.so.5 (0x801247000)
                                  libopie.so.6 => /usr/lib/libopie.so.6 (0x801360000)
                                  libc.so.7 => /lib/libc.so.7 (0x801469000)
                                  libmd.so.5 => /lib/libmd.so.5 (0x8016a5000)

                                  7. Dependencies and additional package for sasl. are already

                                  Thanks.  :)  Marcello Coutinho,

                                  Mauricio Niño.

                                  1 Reply Last reply Reply Quote 0
                                  • M
                                    mauricioniñoavella
                                    last edited by

                                    @mauricioniñoavella:

                                    This is for
                                    Forum and BSD developers pfSense
                                    I do not understand why people who work in this great project, such as pfSense, stop the publication of a package, which is not compatible with pfSense.
                                    Please do not degrade this great software such as pfSense without offending anyone, first of all congratulate marcelloc and Postfix antispam and relay package has problems.
                                    But I do recommend working to improve, and we who belong to the family of pfSense, are the ones who try and give them guidelines for improving pfSense.
                                    PfSense do not compare with other systems or software firewalls, for there is but I have reviewed (ClearOs Linux), and has a very simple setup SMTP Relay with Authentication. (relay host)
                                    I hope this is taken into account
                                    regards

                                    excuse me to everyone in the forum especially Marcello Coutinho, so writing here

                                    Mauricio Niño

                                    1 Reply Last reply Reply Quote 0
                                    • D
                                      Dragyn
                                      last edited by

                                      Postfix relay and 2.0.2

                                      I recently upgraded to 2.0.2 and now postfix will not start, I scanned the forums and this thread for anything similar but I didn't see anything.

                                      After upgrade reboot, postfix didn't even appear, I uninstalled and reinstalled and now it shows up under services but it will not start.  When I SSH into the console and try to start it I get:

                                      [2.0.2-RELEASE][peter@]/usr(13): /usr/local/etc/rc.d/mailscanner start
                                      eval: cannot open /var/run/MailScanner.pid: Permission denied
                                      Starting mailscanner.
                                      Can't call method "close" on an undefined value at /usr/local/libexec/MailScanner/mailscanner_create_locks line 69.
                                      Error: Attempt to create locks in /var/spool/MailScanner/incoming/Locks failed!
                                      Can't set GID 125 at /usr/local/sbin/mailscanner line 1541.
                                      /usr/local/etc/rc.d/mailscanner: WARNING: failed to start mailscanner
                                      [2.0.2-RELEASE][peter@]/usr(14):

                                      Any help with this would be appreciated, I love using this to relay my mail.

                                      1 Reply Last reply Reply Quote 0
                                      • marcellocM
                                        marcelloc
                                        last edited by

                                        Mailscanner runs with postfix user, check it user exists on pfsense and then try to reinstall mailscanner.

                                        Treinamentos de Elite: http://sys-squad.com

                                        Help a community developer! ;D

                                        1 Reply Last reply Reply Quote 0
                                        • D
                                          Dragyn
                                          last edited by

                                          Sorry I didn't post full info, I am running postfix as well, and the user is there.  This all worked fine under 2.0.1 so it has to do with whatever changes came with 2.0.2 to pfSense.  I am also getting log entries of:
                                          mailscanner: Cannot write pid file /var/run/MailScanner.pid, Permission denied
                                          in the system log when trying to call mailscanner from the command prompt.

                                          1 Reply Last reply Reply Quote 0
                                          • marcellocM
                                            marcelloc
                                            last edited by

                                            try to create these missing folders and permissions.

                                            Treinamentos de Elite: http://sys-squad.com

                                            Help a community developer! ;D

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.