Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Postfix - antispam and relay package

    Scheduled Pinned Locked Moved pfSense Packages
    855 Posts 136 Posters 1.2m Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • U
      Unubtanium
      last edited by

      And one last question!  8)
      how or why are an ip that are in a RBL being PASS NEW and not just automatically dropped after it is confirmed that the ip is on a rbl to save resources ?????????????

      
      postfix/postscreen[8038]: DISCONNECT [190.167.194.178]:64340
      postfix/postscreen[8038]: PASS NEW [190.167.194.178]:64340
      postfix/postscreen[8038]: HANGUP after 2.2 from [190.167.194.178]:64340 in tests after SMTP handshake
      postfix/postscreen[8038]: NOQUEUE: reject: RCPT from [190.167.194.178]:64340: 450 4.3.2 Service currently unavailable; from=<services@us-ups.com>, to=<novalidrecipients@domain.com>, proto=SMTP, helo= <us-ups.com>postfix/dnsblog[50328]: addr 190.167.194.178 listed by domain b.barracudacentral.org as 127.0.0.2
      pf:     190.167.194.178.64340 > WANIP.25: Flags [s], cksum 0xf8f6 (correct), seq 5162395, win 8192, options [mss 1260,nop,nop,sackOK], length 0
      postfix/postscreen[8038]: CONNECT from [190.167.194.178]:64340
      
      [/s]</us-ups.com></novalidrecipients@domain.com></services@us-ups.com>
      
      1 Reply Last reply Reply Quote 0
      • V
        voona
        last edited by

        Anyone? What permissions am i meant to use?

        ERROR: Can't open /var/log/clamav/freshclam.log in append mode (check permissions!).
        ERROR: Problem with internal logger (UpdateLogFile = /var/log/clamav/freshclam.log).
        
        
        1 Reply Last reply Reply Quote 0
        • U
          Unubtanium
          last edited by

          @voona:

          Anyone? What permissions am i meant to use?

          ERROR: Can't open /var/log/clamav/freshclam.log in append mode (check permissions!).
          ERROR: Problem with internal logger (UpdateLogFile = /var/log/clamav/freshclam.log).
          
          

          I did not even have this file when i did a fresh install so i created the file and just gave it rw-rw-rw-, maby not the smartest to do but it works.. and it is only my clamlog..  ;D

          1 Reply Last reply Reply Quote 0
          • V
            voona
            last edited by

            Ok Clamd seems to be running now but im having issues with mail scanner actually enforcing the policy

            For example i set the maximum attachment size to 0 (Blocking any attachments) and mail still flows through Postfix without being scanned / processed by mail scanner

            
            Aug 30 10:08:13 	postfix/postscreen[3173]: CONNECT from [209.85.210.178]:38820
            Aug 30 10:08:13 	postfix/postscreen[3173]: PASS OLD [209.85.210.178]:38820
            Aug 30 10:08:13 	postfix/smtpd[3358]: connect from mail-iy0-f178.google.com[209.85.210.178]
            Aug 30 10:08:14 	postfix/smtpd[3358]: 770AC739A6: client=mail-iy0-f178.google.com[209.85.210.178]
            Aug 30 10:08:14 	postfix/cleanup[3948]: 770AC739A6: message-id= <canygpjxck1vxv3szxtdz-vm-e8hqbjas5b3wtnnfvtvub_hjoq@mail.gmail.com>Aug 30 10:08:15 	postfix/qmgr[3429]: 770AC739A6: from=<xxxxxxxxxxxxxxx@gmail.com>, size=130538, nrcpt=1 (queue active)
            Aug 30 10:08:16 	postfix/smtp[4255]: 770AC739A6: to=<xxxxxxxxxxxxxxxxxxxx@xxxxxxxxxxxxxxxxxxxxxxx.com.au>, relay=10.100.100.2[10.100.100.2]:25, delay=2.2, delays=2/0.02/0/0.23, dsn=2.6.0, status=sent (250 2.6.0 <canygpjxck1vxv3szxtdz-vm-e8hqbjas5b3wtnnfvtvub_hjoq@mail.gmail.com>[InternalId=27] Queued mail for delivery)
            Aug 30 10:08:16 	postfix/qmgr[3429]: 770AC739A6: removed
            Aug 30 10:08:45 	postfix/smtpd[3358]: disconnect from mail-iy0-f178.google.com[209.85.210.178]</canygpjxck1vxv3szxtdz-vm-e8hqbjas5b3wtnnfvtvub_hjoq@mail.gmail.com></xxxxxxxxxxxxxxxxxxxx@xxxxxxxxxxxxxxxxxxxxxxx.com.au></xxxxxxxxxxxxxxx@gmail.com></canygpjxck1vxv3szxtdz-vm-e8hqbjas5b3wtnnfvtvub_hjoq@mail.gmail.com> 
            
            
            Aug 30 10:09:59 	check_reload_status: Syncing firewall
            Aug 30 10:09:59 	check_reload_status: Syncing firewall
            Aug 30 10:10:00 	php: /pkg_edit.php: Restarting clamav-clamd daemon
            Aug 30 10:10:07 	php: /pkg_edit.php: Restarting dccifd
            Aug 30 10:10:07 	dccifd[56724]: 1.3.140 detected 0 spam, ignored for 0, rejected for 0, and discarded for 0 targets among 0 total messages for 5 targets since 08/30/12 10:00:13
            Aug 30 10:10:07 	dccifd[15470]: 1.3.140 listening to /usr/local/dcc/dccifd for ASCII protocol
            Aug 30 10:10:07 	php: /pkg_edit.php: Restarting MailScanner
            Aug 30 10:10:11 	MailScanner[28826]: MailScanner E-Mail Virus Scanner version 4.83.5 starting...
            Aug 30 10:10:11 	MailScanner[28826]: Reading configuration file /usr/local/etc/MailScanner/MailScanner.conf
            Aug 30 10:10:11 	MailScanner[28826]: Reading configuration file /usr/local/etc/MailScanner/conf.d/README
            Aug 30 10:10:11 	MailScanner[28826]: Using SpamAssassin results cache
            Aug 30 10:10:11 	MailScanner[28826]: Connected to SpamAssassin cache database
            Aug 30 10:10:11 	MailScanner[28826]: Enabling SpamAssassin auto-whitelist functionality...
            Aug 30 10:10:16 	MailScanner[29081]: MailScanner E-Mail Virus Scanner version 4.83.5 starting...
            Aug 30 10:10:16 	MailScanner[29081]: Reading configuration file /usr/local/etc/MailScanner/MailScanner.conf
            Aug 30 10:10:16 	MailScanner[29081]: Reading configuration file /usr/local/etc/MailScanner/conf.d/README
            Aug 30 10:10:16 	MailScanner[29081]: Using SpamAssassin results cache
            Aug 30 10:10:16 	MailScanner[29081]: Connected to SpamAssassin cache database
            Aug 30 10:10:16 	MailScanner[29081]: Enabling SpamAssassin auto-whitelist functionality...
            Aug 30 10:10:21 	MailScanner[37257]: MailScanner E-Mail Virus Scanner version 4.83.5 starting...
            Aug 30 10:10:21 	MailScanner[37257]: Reading configuration file /usr/local/etc/MailScanner/MailScanner.conf
            Aug 30 10:10:21 	MailScanner[37257]: Reading configuration file /usr/local/etc/MailScanner/conf.d/README
            Aug 30 10:10:21 	MailScanner[37257]: Using SpamAssassin results cache
            Aug 30 10:10:21 	MailScanner[37257]: Connected to SpamAssassin cache database
            Aug 30 10:10:21 	MailScanner[37257]: Enabling SpamAssassin auto-whitelist functionality...
            Aug 30 10:10:26 	MailScanner[44670]: MailScanner E-Mail Virus Scanner version 4.83.5 starting...
            Aug 30 10:10:26 	MailScanner[44670]: Reading configuration file /usr/local/etc/MailScanner/MailScanner.conf
            Aug 30 10:10:26 	MailScanner[44670]: Reading configuration file /usr/local/etc/MailScanner/conf.d/README
            Aug 30 10:10:26 	MailScanner[44670]: Using SpamAssassin results cache
            Aug 30 10:10:26 	MailScanner[44670]: Connected to SpamAssassin cache database
            Aug 30 10:10:26 	MailScanner[44670]: Enabling SpamAssassin auto-whitelist functionality...
            Aug 30 10:10:31 	MailScanner[52918]: MailScanner E-Mail Virus Scanner version 4.83.5 starting...
            Aug 30 10:10:31 	MailScanner[52918]: Reading configuration file /usr/local/etc/MailScanner/MailScanner.conf
            Aug 30 10:10:31 	MailScanner[52918]: Reading configuration file /usr/local/etc/MailScanner/conf.d/README
            Aug 30 10:10:31 	MailScanner[52918]: Using SpamAssassin results cache
            Aug 30 10:10:31 	MailScanner[52918]: Connected to SpamAssassin cache database
            Aug 30 10:10:31 	MailScanner[52918]: Enabling SpamAssassin auto-whitelist functionality...
            
            
            
            postfix 28643  0.0  1.9 21916 19280  ??  Is   10:10AM   0:00.01 MailScanner: master waiting for children, sleeping (perl5.12.4)
            postfix 28826  0.0  5.0 63832 51228  ??  S    10:10AM   0:02.13 MailScanner: waiting for messages (perl5.12.4)
            postfix 29081  0.0  5.0 63832 51228  ??  S    10:10AM   0:02.14 MailScanner: waiting for messages (perl5.12.4)
            postfix 37257  0.0  5.0 63832 51272  ??  S    10:10AM   0:02.16 MailScanner: waiting for messages (perl5.12.4)
            postfix 44670  0.0  5.0 63832 51272  ??  S    10:10AM   0:02.23 MailScanner: waiting for messages (perl5.12.4)
            postfix 52918  0.0  5.0 63832 51228  ??  S    10:10AM   0:02.17 MailScanner: waiting for messages (perl5.12.4)
            
            

            I have ticked the use 3rd Party Anti-Spam box in the postfix configuration. Anyone got a quick run through guide to get this setup and working properly ?

            1 Reply Last reply Reply Quote 0
            • U
              Unubtanium
              last edited by

              @voona:

              Ok Clamd seems to be running now but im having issues with mail scanner actually enforcing the policy

              For example i set the maximum attachment size to 0 (Blocking any attachments) and mail still flows through Postfix without being scanned / processed by mail scanner

              
              Aug 30 10:08:13 	postfix/postscreen[3173]: CONNECT from [209.85.210.178]:38820
              Aug 30 10:08:13 	postfix/postscreen[3173]: PASS OLD [209.85.210.178]:38820
              Aug 30 10:08:13 	postfix/smtpd[3358]: connect from mail-iy0-f178.google.com[209.85.210.178]
              Aug 30 10:08:14 	postfix/smtpd[3358]: 770AC739A6: client=mail-iy0-f178.google.com[209.85.210.178]
              Aug 30 10:08:14 	postfix/cleanup[3948]: 770AC739A6: message-id= <canygpjxck1vxv3szxtdz-vm-e8hqbjas5b3wtnnfvtvub_hjoq@mail.gmail.com>Aug 30 10:08:15 	postfix/qmgr[3429]: 770AC739A6: from=<xxxxxxxxxxxxxxx@gmail.com>, size=130538, nrcpt=1 (queue active)
              Aug 30 10:08:16 	postfix/smtp[4255]: 770AC739A6: to=<xxxxxxxxxxxxxxxxxxxx@xxxxxxxxxxxxxxxxxxxxxxx.com.au>, relay=10.100.100.2[10.100.100.2]:25, delay=2.2, delays=2/0.02/0/0.23, dsn=2.6.0, status=sent (250 2.6.0 <canygpjxck1vxv3szxtdz-vm-e8hqbjas5b3wtnnfvtvub_hjoq@mail.gmail.com>[InternalId=27] Queued mail for delivery)
              Aug 30 10:08:16 	postfix/qmgr[3429]: 770AC739A6: removed
              Aug 30 10:08:45 	postfix/smtpd[3358]: disconnect from mail-iy0-f178.google.com[209.85.210.178]</canygpjxck1vxv3szxtdz-vm-e8hqbjas5b3wtnnfvtvub_hjoq@mail.gmail.com></xxxxxxxxxxxxxxxxxxxx@xxxxxxxxxxxxxxxxxxxxxxx.com.au></xxxxxxxxxxxxxxx@gmail.com></canygpjxck1vxv3szxtdz-vm-e8hqbjas5b3wtnnfvtvub_hjoq@mail.gmail.com> 
              
              
              Aug 30 10:09:59 	check_reload_status: Syncing firewall
              Aug 30 10:09:59 	check_reload_status: Syncing firewall
              Aug 30 10:10:00 	php: /pkg_edit.php: Restarting clamav-clamd daemon
              Aug 30 10:10:07 	php: /pkg_edit.php: Restarting dccifd
              Aug 30 10:10:07 	dccifd[56724]: 1.3.140 detected 0 spam, ignored for 0, rejected for 0, and discarded for 0 targets among 0 total messages for 5 targets since 08/30/12 10:00:13
              Aug 30 10:10:07 	dccifd[15470]: 1.3.140 listening to /usr/local/dcc/dccifd for ASCII protocol
              Aug 30 10:10:07 	php: /pkg_edit.php: Restarting MailScanner
              Aug 30 10:10:11 	MailScanner[28826]: MailScanner E-Mail Virus Scanner version 4.83.5 starting...
              Aug 30 10:10:11 	MailScanner[28826]: Reading configuration file /usr/local/etc/MailScanner/MailScanner.conf
              Aug 30 10:10:11 	MailScanner[28826]: Reading configuration file /usr/local/etc/MailScanner/conf.d/README
              Aug 30 10:10:11 	MailScanner[28826]: Using SpamAssassin results cache
              Aug 30 10:10:11 	MailScanner[28826]: Connected to SpamAssassin cache database
              Aug 30 10:10:11 	MailScanner[28826]: Enabling SpamAssassin auto-whitelist functionality...
              Aug 30 10:10:16 	MailScanner[29081]: MailScanner E-Mail Virus Scanner version 4.83.5 starting...
              Aug 30 10:10:16 	MailScanner[29081]: Reading configuration file /usr/local/etc/MailScanner/MailScanner.conf
              Aug 30 10:10:16 	MailScanner[29081]: Reading configuration file /usr/local/etc/MailScanner/conf.d/README
              Aug 30 10:10:16 	MailScanner[29081]: Using SpamAssassin results cache
              Aug 30 10:10:16 	MailScanner[29081]: Connected to SpamAssassin cache database
              Aug 30 10:10:16 	MailScanner[29081]: Enabling SpamAssassin auto-whitelist functionality...
              Aug 30 10:10:21 	MailScanner[37257]: MailScanner E-Mail Virus Scanner version 4.83.5 starting...
              Aug 30 10:10:21 	MailScanner[37257]: Reading configuration file /usr/local/etc/MailScanner/MailScanner.conf
              Aug 30 10:10:21 	MailScanner[37257]: Reading configuration file /usr/local/etc/MailScanner/conf.d/README
              Aug 30 10:10:21 	MailScanner[37257]: Using SpamAssassin results cache
              Aug 30 10:10:21 	MailScanner[37257]: Connected to SpamAssassin cache database
              Aug 30 10:10:21 	MailScanner[37257]: Enabling SpamAssassin auto-whitelist functionality...
              Aug 30 10:10:26 	MailScanner[44670]: MailScanner E-Mail Virus Scanner version 4.83.5 starting...
              Aug 30 10:10:26 	MailScanner[44670]: Reading configuration file /usr/local/etc/MailScanner/MailScanner.conf
              Aug 30 10:10:26 	MailScanner[44670]: Reading configuration file /usr/local/etc/MailScanner/conf.d/README
              Aug 30 10:10:26 	MailScanner[44670]: Using SpamAssassin results cache
              Aug 30 10:10:26 	MailScanner[44670]: Connected to SpamAssassin cache database
              Aug 30 10:10:26 	MailScanner[44670]: Enabling SpamAssassin auto-whitelist functionality...
              Aug 30 10:10:31 	MailScanner[52918]: MailScanner E-Mail Virus Scanner version 4.83.5 starting...
              Aug 30 10:10:31 	MailScanner[52918]: Reading configuration file /usr/local/etc/MailScanner/MailScanner.conf
              Aug 30 10:10:31 	MailScanner[52918]: Reading configuration file /usr/local/etc/MailScanner/conf.d/README
              Aug 30 10:10:31 	MailScanner[52918]: Using SpamAssassin results cache
              Aug 30 10:10:31 	MailScanner[52918]: Connected to SpamAssassin cache database
              Aug 30 10:10:31 	MailScanner[52918]: Enabling SpamAssassin auto-whitelist functionality...
              
              
              
              postfix 28643  0.0  1.9 21916 19280  ??  Is   10:10AM   0:00.01 MailScanner: master waiting for children, sleeping (perl5.12.4)
              postfix 28826  0.0  5.0 63832 51228  ??  S    10:10AM   0:02.13 MailScanner: waiting for messages (perl5.12.4)
              postfix 29081  0.0  5.0 63832 51228  ??  S    10:10AM   0:02.14 MailScanner: waiting for messages (perl5.12.4)
              postfix 37257  0.0  5.0 63832 51272  ??  S    10:10AM   0:02.16 MailScanner: waiting for messages (perl5.12.4)
              postfix 44670  0.0  5.0 63832 51272  ??  S    10:10AM   0:02.23 MailScanner: waiting for messages (perl5.12.4)
              postfix 52918  0.0  5.0 63832 51228  ??  S    10:10AM   0:02.17 MailScanner: waiting for messages (perl5.12.4)
              
              

              I have ticked the use 3rd Party Anti-Spam box in the postfix configuration. Anyone got a quick run through guide to get this setup and working properly ?

              Have a look here:
              http://forum.pfsense.org/index.php/topic,43687.0.html
              There might be some info there that might help.

              1 Reply Last reply Reply Quote 0
              • R
                RobinGill
                last edited by

                @ics:

                @marcelloc:

                @ics:

                I've noticed that when a server is blocked because of its presence in a DNSBL, it is not logged in sqlite files.
                We can only see that it has been blocked in maillog.

                Is there a way to view it in search mail ?

                Did you tried to search it on noqueue ?

                Of course I did  :)

                I'm getting the same issue here.

                The only way of me detecting these events is to packet capture port 25 on WAN and then manually look through it.

                Edit: looking through /var/log/mailog is much easier than capturing port 25 on WAN

                1 Reply Last reply Reply Quote 0
                • Z
                  zlyzwy
                  last edited by

                  Hi Marcelloc,

                  I unchecked "Helo Hostname" in antispam page, but it seems that the postfix is still reject the mail from unknown host.

                  RCPT from unknown[114.251.18.30]: 450 4.7.1 Client host rejected: cannot find your hostname, [114.251.18.30]
                  

                  I've already restart the PF once so I think the setting should be applied.

                  thanks for any advice.

                  Zlyzwy

                  1 Reply Last reply Reply Quote 0
                  • marcellocM
                    marcelloc
                    last edited by

                    @zlyzwy:

                    I unchecked "Helo Hostname" in antispam page, but it seems that the postfix is still reject the mail from unknown host.

                    RCPT from unknown[114.251.18.30]: 450 4.7.1 Client host rejected: cannot find your hostname, [114.251.18.30]
                    

                    The helo check verifies the helo info, the log you sent is the host check. The best way is to ask remote admin to fix his dns or if you trust remote domain insert his dns on pfsense dns overide or include this host on my_network.

                    Treinamentos de Elite: http://sys-squad.com

                    Help a community developer! ;D

                    1 Reply Last reply Reply Quote 0
                    • J
                      JesusQ
                      last edited by

                      Hi Marcello,

                      In the Postfix Forwarder, I cannot search mail.
                      I set the logging destination and the sqlite update freq. but in the search mail tab the sqlite files box is empty.
                      And when starting a search it says 'Please select at least one file' which I am not able to do…
                      Looks like sqlite is not functioning?

                      Ideas?
                      Thanks!

                      1 Reply Last reply Reply Quote 0
                      • marcellocM
                        marcelloc
                        last edited by

                        did you included subject log on acls?

                        what happens when you run postfix updade database script on console?

                        Treinamentos de Elite: http://sys-squad.com

                        Help a community developer! ;D

                        1 Reply Last reply Reply Quote 0
                        • J
                          JesusQ
                          last edited by

                          Hi Marcello,

                          I reinstalled the package and all is working fine now,

                          Thanks for your time!

                          1 Reply Last reply Reply Quote 0
                          • M
                            mauricioniñoavella
                            last edited by

                            Hello everyone following took help of our partner Marcello Coutinho.

                            No solution had written, excuse me for not having done so before. This is the step by step solution

                            Marcello Coutinho,

                            Thanks for all the hard work!

                            sasl on postfix?

                            x64
                            missing dependencies for saslpasswd2 (place it on /usr/lib/ dir)
                            http://e-sac.siteseguro.ws/pfsense/8/amd64/All/ldd/
                            additional package for sasl
                            http://e-sac.siteseguro.ws/pfsense/8/amd64/All/cyrus-sasl-saslauthd-2.1.25.tbz

                            i386
                            missing dependencies for saslpasswd2 (place it on /usr/lib/ dir)
                            http://e-sac.siteseguro.ws/pfsense/8/All/ldd/
                            additional package for sasl
                            http://e-sac.siteseguro.ws/pfsense/8/All/cyrus-sasl-saslauthd-2.1.25.tbz

                            =====================================================================================

                            Configuration postfix sasl pfsense x64

                            1. I check dependencies for saslpasswd2

                            [2.0.1-RELEASE]/root(1): ldd /usr/local/sbin/saslpasswd2
                            /usr/local/sbin/saslpasswd2:

                            libsasl2.so.2 => /usr/local/lib/libsasl2.so.2 (0x800647000)
                            libcrypto.so.6 => /lib/libcrypto.so.6 (0x800761000)
                            libgssapi.so.10 => not found (0x0)
                            libheimntlm.so.10 => not found (0x0)
                            libkrb5.so.10 => not found (0x0)
                            libhx509.so.10 => not found (0x0)
                            libcom_err.so.5 => /usr/lib/libcom_err.so.5 (0x8009fb000)
                            libasn1.so.10 => not found (0x0)
                            libroken.so.10 => not found (0x0)
                            libcrypt.so.5 => /lib/libcrypt.so.5 (0x800afd000)
                            libopie.so.6 => /usr/lib/libopie.so.6 (0x800c16000)
                            libc.so.7 => /lib/libc.so.7 (0x800d1f000)
                            libmd.so.5 => /lib/libmd.so.5 (0x800f5b000)

                            2. Download dependencies for saslpasswd2   and copied in /usr/lib/

                            link   dependencies for saslpasswd2  http://e-sac.siteseguro.ws/pfsense/8/amd64/All/ldd/

                            libgssapi.so.10
                            libheimntlm.so.10
                            libhx509.so.10
                            libkrb5.so.10
                            libroken.so.10

                            3. I copy these files to the following path /usr/lib/

                            [2.0.1-RELEASE]/root(1): ls
                            libasn1.so.10  libgssapi.so.10  libheimntlm.so.10  libhx509.so.10  libkrb5.so.10  libroken.so.10

                            [2.0.1-RELEASE]/root(1): cp *.10 /usr/lib/

                            libasn1.so.10                                                                                                                
                            libgssapi.so.10                                                                                                              
                            libheimntlm.so.10                                                                                                          
                            libhx509.so.10                                                                                                                
                            libkrb5.so.10                                                                                                                
                            libroken.so.10

                            4. Download additional package for sasl (cyrus-sasl-saslauthd-2.1.25.tbz)

                            link Download additional package for sasl  http://e-sac.siteseguro.ws/pfsense/8/amd64/All/cyrus-sasl-saslauthd-2.1.25.tbz

                            5. Install the package with the command pkg_add  cyrus-sasl-saslauthd-2.1.25.tbz

                            link Install packages frebsd

                            http://www.freebsd.org/doc/es/books/handbook/packages-using.html
                            http://docs.freebsd.org/doc/4.9-RELEASE/usr/share/doc/es/books/handbook/packages-using.html

                            [2.0.1-RELEASE]/root(1): pkg_add cyrus-sasl-saslauthd-2.1.25.tbz


                            To run saslauthd from startup, add saslauthd_enable="YES" in your
                            /etc/rc.conf.


                            6. I check dependencies for saslpasswd2

                            [2.0.1-RELEASE]/root(1): ldd /usr/local/sbin/saslpasswd2
                            /usr/local/sbin/saslpasswd2:
                            libsasl2.so.2 => /usr/local/lib/libsasl2.so.2 (0x800647000)
                            libcrypto.so.6 => /lib/libcrypto.so.6 (0x800761000)
                            libgssapi.so.10 => /usr/lib/libgssapi.so.10 (0x8009fb000)
                            libheimntlm.so.10 => /usr/lib/libheimntlm.so.10 (0x800b04000)
                            libkrb5.so.10 => /usr/lib/libkrb5.so.10 (0x800c09000)
                            libhx509.so.10 => /usr/lib/libhx509.so.10 (0x800d76000)
                            libcom_err.so.5 => /usr/lib/libcom_err.so.5 (0x800eb5000)
                            libasn1.so.10 => /usr/lib/libasn1.so.10 (0x800fb7000)
                            libroken.so.10 => /usr/lib/libroken.so.10 (0x801136000)
                            libcrypt.so.5 => /lib/libcrypt.so.5 (0x801247000)
                            libopie.so.6 => /usr/lib/libopie.so.6 (0x801360000)
                            libc.so.7 => /lib/libc.so.7 (0x801469000)
                            libmd.so.5 => /lib/libmd.so.5 (0x8016a5000)

                            7. Dependencies and additional package for sasl. are already

                            Thanks.  :)  Marcello Coutinho,

                            Mauricio Niño.

                            1 Reply Last reply Reply Quote 0
                            • M
                              mauricioniñoavella
                              last edited by

                              @mauricioniñoavella:

                              This is for
                              Forum and BSD developers pfSense
                              I do not understand why people who work in this great project, such as pfSense, stop the publication of a package, which is not compatible with pfSense.
                              Please do not degrade this great software such as pfSense without offending anyone, first of all congratulate marcelloc and Postfix antispam and relay package has problems.
                              But I do recommend working to improve, and we who belong to the family of pfSense, are the ones who try and give them guidelines for improving pfSense.
                              PfSense do not compare with other systems or software firewalls, for there is but I have reviewed (ClearOs Linux), and has a very simple setup SMTP Relay with Authentication. (relay host)
                              I hope this is taken into account
                              regards

                              excuse me to everyone in the forum especially Marcello Coutinho, so writing here

                              Mauricio Niño

                              1 Reply Last reply Reply Quote 0
                              • D
                                Dragyn
                                last edited by

                                Postfix relay and 2.0.2

                                I recently upgraded to 2.0.2 and now postfix will not start, I scanned the forums and this thread for anything similar but I didn't see anything.

                                After upgrade reboot, postfix didn't even appear, I uninstalled and reinstalled and now it shows up under services but it will not start.  When I SSH into the console and try to start it I get:

                                [2.0.2-RELEASE][peter@]/usr(13): /usr/local/etc/rc.d/mailscanner start
                                eval: cannot open /var/run/MailScanner.pid: Permission denied
                                Starting mailscanner.
                                Can't call method "close" on an undefined value at /usr/local/libexec/MailScanner/mailscanner_create_locks line 69.
                                Error: Attempt to create locks in /var/spool/MailScanner/incoming/Locks failed!
                                Can't set GID 125 at /usr/local/sbin/mailscanner line 1541.
                                /usr/local/etc/rc.d/mailscanner: WARNING: failed to start mailscanner
                                [2.0.2-RELEASE][peter@]/usr(14):

                                Any help with this would be appreciated, I love using this to relay my mail.

                                1 Reply Last reply Reply Quote 0
                                • marcellocM
                                  marcelloc
                                  last edited by

                                  Mailscanner runs with postfix user, check it user exists on pfsense and then try to reinstall mailscanner.

                                  Treinamentos de Elite: http://sys-squad.com

                                  Help a community developer! ;D

                                  1 Reply Last reply Reply Quote 0
                                  • D
                                    Dragyn
                                    last edited by

                                    Sorry I didn't post full info, I am running postfix as well, and the user is there.  This all worked fine under 2.0.1 so it has to do with whatever changes came with 2.0.2 to pfSense.  I am also getting log entries of:
                                    mailscanner: Cannot write pid file /var/run/MailScanner.pid, Permission denied
                                    in the system log when trying to call mailscanner from the command prompt.

                                    1 Reply Last reply Reply Quote 0
                                    • marcellocM
                                      marcelloc
                                      last edited by

                                      try to create these missing folders and permissions.

                                      Treinamentos de Elite: http://sys-squad.com

                                      Help a community developer! ;D

                                      1 Reply Last reply Reply Quote 0
                                      • C
                                        chris32lr
                                        last edited by

                                        Marcelloc,

                                        Thank you so much for taking the time to put this package together and help so many of us. Being new to PFSense, I just want to make sure I configure it properly because this is our only firewall. Here's what I'm a little concerned about:

                                        1. Right now I have a NAT Port Forward configured as:
                                                Interface: WAN
                                                Protocol: TCP
                                                Destination: WAN Address
                                                Destination Port: SMTP
                                                Redirect Target IP: My internal exchange server IP
                                                Redirect Target Port: SMTP
                                              - I read here: http://forum.pfsense.org/index.php/topic,46196.0.html you say "remember to remove nat from port 25 and allow access on wan firewall rules to postfix." So I delete this port forward? If so, can you tell me how to properly configure the rule such as the Interface, Protocol, Source, Destination, etc.?

                                        Thanks again!!

                                        1 Reply Last reply Reply Quote 0
                                        • marcellocM
                                          marcelloc
                                          last edited by

                                          Just take a look on current rule your nat has created and replace internal destination IP to wan address.

                                          Make sure your Postfix is configured and running before using it with real traffic.

                                          Treinamentos de Elite: http://sys-squad.com

                                          Help a community developer! ;D

                                          1 Reply Last reply Reply Quote 0
                                          • C
                                            chris32lr
                                            last edited by

                                            @marcelloc:

                                            Just take a look on current rule your nat has created and replace internal destination IP to wan address.

                                            Make sure your Postfix is configured and running before using it with real traffic.

                                            Thank you!  :)

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.