Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Postfix - antispam and relay package

    Scheduled Pinned Locked Moved pfSense Packages
    855 Posts 136 Posters 1.2m Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • marcellocM
      marcelloc
      last edited by

      @Bismarck:

      Thank you looks very good so far, just one thing, the Widget always shows reject = 0.

      I've updated some improvements on log to database function and search as well. Try updating the gui files or running the install process again.

      Also check if you have reject logs on /var/log/maillog.

      postfix_widget.PNG
      postfix_widget.PNG_thumb

      Treinamentos de Elite: http://sys-squad.com

      Help a community developer! ;D

      1 Reply Last reply Reply Quote 0
      • marcellocM
        marcelloc
        last edited by

        To follow updates on the package, check

        https://github.com/marcelloc/Unofficial-pfSense-packages/commits/master/pkg-postfix

        Treinamentos de Elite: http://sys-squad.com

        Help a community developer! ;D

        1 Reply Last reply Reply Quote 0
        • BismarckB
          Bismarck
          last edited by

          Hello marcelloc, I did run the install process again but no luck, reject is still 0 and I have different stats about the spam count in MailWatch as well.

          Any idea?

          BTW SPF and DKIM integration is awesome, thank you!

          1 Reply Last reply Reply Quote 0
          • marcellocM
            marcelloc
            last edited by

            Do you have any non word character on server name like antispam-01 ?

            The stats on widget are based on destination recipients. Is this what mailwatch does?

            A message sid can have more then one destination recipient.

            The spam message on widget is specific for spamassassin message that has the alert on logs with 'is spam'.

            Treinamentos de Elite: http://sys-squad.com

            Help a community developer! ;D

            1 Reply Last reply Reply Quote 0
            • BismarckB
              Bismarck
              last edited by

              @marcelloc:

              Do you have any non word character on server name like antispam-01 ?

              No its just pfsense

              The stats on widget are based on destination recipients. Is this what mailwatch does?

              Yes, but it looks like the widget just counts high scored spam and not all, same when searching for spam in postfix_search.php it just finds high scored spam and the numbers of high scored spam are are always the same in the widget and MailMatch.

              The spam message on widget is specific for spamassassin message that has the alert on logs with 'is spam'.

              Yes, but for some odd reason, only the high scored spam gets logged to sqlite.

              In the first unofficial version, the logging to sqlite was working fine, nothing changed since with my setup, except the new Postfix package.

              If you like I can send you my maillog?

              /edit

              Searching for spam in postfix_search.php before the update in a sqlite db it shows all spam messages, the low and high scored.

              1 Reply Last reply Reply Quote 0
              • marcellocM
                marcelloc
                last edited by

                @Bismarck:

                If you like I can send you my maillog?

                Send me the link on private message.

                Treinamentos de Elite: http://sys-squad.com

                Help a community developer! ;D

                1 Reply Last reply Reply Quote 0
                • marcellocM
                  marcelloc
                  last edited by

                  @Bismarck:

                  Yes, but it looks like the widget just counts high scored spam and not all, same when searching for spam in postfix_search.php it just finds high scored spam and the numbers of high scored spam are are always the same in the widget and MailMatch.

                  The point is that database gets the last status from message. 'Normal spam' on your configuration are sent to user, this way, last state is sent, instead of spam.

                  @Bismarck:

                  The spam message on widget is specific for spamassassin message that has the alert on logs with 'is spam'.

                  There was some logic error on widget I've fixed too.

                  There was also an index on database that suposed to be unique but wasn't. Fixed this too.

                  https://github.com/marcelloc/Unofficial-pfSense-packages/commit/5cea314818b93122582be87bdf63c0a1eedad475
                  Thanks for your feedback.  :)

                  ps: Your mailscanner and spamassassin looks working really great. Did you had to change a lot of default gui config or rules? Are you using other spamassassin rules?

                  Treinamentos de Elite: http://sys-squad.com

                  Help a community developer! ;D

                  1 Reply Last reply Reply Quote 0
                  • BismarckB
                    Bismarck
                    last edited by

                    @marcelloc:

                    https://github.com/marcelloc/Unofficial-pfSense-packages/commit/5cea314818b93122582be87bdf63c0a1eedad475
                    Thanks for your feedback.  :)

                    I've applied the patch and it looks very good so far!  :)

                    ps: Your mailscanner and spamassassin looks working really great. Did you had to change a lot of default gui config or rules? Are you using other spamassassin rules?

                    I've changed a lot of small things and yes I use custom scripts, rule channels and clamav sigs etc. but I think a good bayes training is the key.

                    If you like a can pack it all together for you?

                    Muito obrigado novamente!  ;)

                    1 Reply Last reply Reply Quote 0
                    • marcellocM
                      marcelloc
                      last edited by

                      @Bismarck:

                      If you like a can pack it all together for you?

                      Sure. Is it something I can apply on mailscanner package installation?

                      Treinamentos de Elite: http://sys-squad.com

                      Help a community developer! ;D

                      1 Reply Last reply Reply Quote 0
                      • BismarckB
                        Bismarck
                        last edited by

                        @marcelloc:

                        @Bismarck:

                        If you like a can pack it all together for you?

                        Sure. Is it something I can apply on mailscanner package installation?

                        Sure why not. I'll make you a list of the things and files and where to get them.

                        1 Reply Last reply Reply Quote 0
                        • P
                          pf-disa
                          last edited by

                          Hello marcelloc,

                          thank you for your work and this package… Is there any documentation on how to enable postfix as smarthost and to relay via gmail smtp?

                          I'm trying to configure it as the old package (in pfsense 2.2x) that was working as smarthost for the internal lan, with relay via my gmail account: the only instruction I've found are http://ghanima.net/doku.php?id=wiki:pfsense:postfixmailrelay but I can't make it work (different paths) and various errors in /var/log/system.log

                          Apr  7 17:42:38 pfSense0 php-fpm[64394]: /pkg_edit.php: Writing out configuration
                          Apr  7 17:42:40 pfSense0 php-fpm[64394]: /pkg_edit.php: Writing rc_file
                          Apr  7 17:42:41 pfSense0 php-fpm[64394]: /pkg_edit.php: Stopping postfix
                          Apr  7 17:42:41 pfSense0 postfix/postfix-script[73787]: fatal: the Postfix mail system is not running
                          Apr  7 17:42:42 pfSense0 php-fpm[64394]: /pkg_edit.php: The command  stop' returned exit code '1', the output was ''
                          …
                          Apr  7 17:45:43 pfSense0 php-fpm[67433]: /pkg_edit.php: Writing out configuration
                          Apr  7 17:45:45 pfSense0 php-fpm[67433]: /pkg_edit.php: Writing rc_file
                          Apr  7 17:45:46 pfSense0 php-fpm[67433]: /pkg_edit.php: Reloading/starting postfix
                          Apr  7 17:45:46 pfSense0 postfix/postfix-script[98918]: fatal: the Postfix mail system is not running
                          Apr  7 17:45:47 pfSense0 php-fpm[67433]: /pkg_edit.php: Postfix setup completed
                          Apr  7 17:45:58 pfSense0 postfix/smtp[70787]: fatal: SASL library initialization
                          Apr  7 17:46:59 pfSense0 postfix/smtp[3068]: fatal: SASL library initialization
                          Apr  7 17:48:00 pfSense0 postfix/smtp[24940]: fatal: SASL library initialization

                          Executing via ssh the command "/usr/local/etc/rc.d/postfix.sh start" gives the following output:

                          kern.ipc.nmbclusters: 379268
                          sysctl: kern.ipc.nmbclusters=65536: Invalid argument
                          kern.ipc.somaxconn: 16384 -> 16384
                          kern.maxfiles: 131072 -> 131072
                          kern.maxfilesperproc: 104856 -> 104856
                          kern.threads.max_threads_per_proc: 4096 -> 4096
                          postfix: Postfix is running with backwards-compatible default settings
                          postfix: See http://www.postfix.org/COMPATIBILITY_README.html for details
                          postfix: To disable backwards compatibility use "postconf compatibility_level=2" and "postfix reload"
                          postfix/postfix-script: fatal: the Postfix mail system is already running

                          What can I check? Thank you for your time…
                          Riccardo.

                          1 Reply Last reply Reply Quote 0
                          • marcellocM
                            marcelloc
                            last edited by

                            New pkg version includes postwhite integration  8)

                            Thanks for Postwhite, spf-tools projects and Bismarck

                            postwhite.PNG
                            postwhite.PNG_thumb

                            Treinamentos de Elite: http://sys-squad.com

                            Help a community developer! ;D

                            1 Reply Last reply Reply Quote 0
                            • BismarckB
                              Bismarck
                              last edited by

                              @pf-disa - you could try (untested but would make sense)

                              cd /root
                              
                              fetch https://raw.githubusercontent.com/marcelloc/Unofficial-pfSense-packages/master/pkg-postfix/files/install_postfix_23.sh
                              
                              nano install_postfix_23.sh
                              

                              go down to line 81 and edit like this:

                              Install postfix package

                              pkg install postfix**-sasl** libspf2 opendkim libmilter py27-postfix-policyd-spf-python p5-perl-ldap

                              and then

                              sh ./install_postfix_23.sh
                              

                              to get rid of the compatibility warning add

                              smtputf8_enable=yes
                              compatibility_level=2
                              

                              to the custom main.cf options

                              @marcelloc

                              This package is getting in a really beautiful shape, its so sad that its not be in the official repo.  :'(

                              Anyway excellent work!  :)

                              1 Reply Last reply Reply Quote 0
                              • marcellocM
                                marcelloc
                                last edited by

                                I'll include the sasl option in the install. The idea of this package is to give sysadmins an excellent smtp layer 7 filtering /proxy.

                                Treinamentos de Elite: http://sys-squad.com

                                Help a community developer! ;D

                                1 Reply Last reply Reply Quote 0
                                • P
                                  pf-disa
                                  last edited by

                                  Hello,

                                  @Bismark thanks for the info now everything works as desired!  8)

                                  In /var/log/system.log remain the fatal error, even if all works…

                                  Apr  9 12:26:55 pfSense0 pkg: postfix-3.1.4,1 deinstalled
                                  Apr  9 12:26:56 pfSense0 pkg: pkg reinstalled: 1.10.1 -> 1.10.1 
                                  Apr  9 12:27:00 pfSense0 pkg: postfix-sasl-3.1.4,1 installed
                                  Apr  9 12:27:01 pfSense0 pkg: tiff-4.0.7_1 installed
                                  ...
                                  Apr  9 12:28:45 pfSense0 php-fpm[47768]: /pkg_edit.php: Writing out configuration
                                  Apr  9 12:28:47 pfSense0 php-fpm[47768]: /pkg_edit.php: Writing rc_file
                                  Apr  9 12:28:48 pfSense0 php-fpm[47768]: /pkg_edit.php: Reloading/starting postfix
                                  Apr  9 12:28:48 pfSense0 postfix/postfix-script[17508]: fatal: the Postfix mail system is not running
                                  Apr  9 12:28:49 pfSense0 php-fpm[47768]: /pkg_edit.php: Postfix setup completed
                                  
                                  

                                  Excellent work @Marcelloc, thank you!
                                  Riccardo.

                                  1 Reply Last reply Reply Quote 0
                                  • marcellocM
                                    marcelloc
                                    last edited by

                                    The fatal maybe related to a restart call to a process that is not ruining.

                                    Good to see that this package is useful for community.

                                    Treinamentos de Elite: http://sys-squad.com

                                    Help a community developer! ;D

                                    1 Reply Last reply Reply Quote 0
                                    • N
                                      n3by
                                      last edited by

                                      I just update my install on 2.3.2-p1 with your new script without any problems ( with sasl changes from Bismark ).

                                      Thank you all.

                                      1 Reply Last reply Reply Quote 0
                                      • marcellocM
                                        marcelloc
                                        last edited by

                                        These changes will be merged soon.

                                        There are other improvements that will be merged soon.

                                        Long life for community contributors  :D

                                        Treinamentos de Elite: http://sys-squad.com

                                        Help a community developer! ;D

                                        1 Reply Last reply Reply Quote 0
                                        • BismarckB
                                          Bismarck
                                          last edited by

                                          Noticed 3 little things,

                                          1.  postfix_postwhite.template isn't copied to /usr/local/etc/postwhite.conf

                                          		//save file
                                          		$postwhite_domains = preg_replace("/\s+/"," ",$domains);
                                          		include("/usr/local/pkg/postfix_postwhite.template");
                                          		file_put_contents($postwhite_conf , POSTFIX_LOCALBASE . "/etc/postwhite.conf" , LOCK_EX);
                                          

                                          2. additional domains don't get added to postwhite.conf, maybe because of 1.

                                          3. postwhite is looking for postwhite.conf in a different place anyway

                                          # Read config file options
                                          if [ -s /etc/postwhite.conf ] ; then
                                          	printf "\nReading options from /etc/postwhite.conf...\n"
                                          	source /etc/postwhite.conf
                                          else
                                          	printf "\nCan't find /etc/postwhite.conf. Exiting.\n\n"
                                          	exit 1
                                          fi
                                          

                                          and I had a cronjob for this every morning, cant see where postwhite is executed here?

                                          Thanks. :)

                                          /edit

                                          We need policyd-spf_time_limit = 3600 in main.cf if SPF Lookup is enabled or we get a lot of those lines in maillog:

                                          Mar  5 14:03:26 mail postfix/spawn[57894]: warning: /usr/local/bin/policyd-spf: process id 58877: command time limit exceeded
                                          Mar  5 14:32:21 mail postfix/spawn[57894]: warning: /usr/local/bin/policyd-spf: process id 60423: command time limit exceeded
                                          Mar  5 15:13:00 mail postfix/spawn[62387]: warning: /usr/local/bin/policyd-spf: process id 62501: command time limit exceeded
                                          Mar  5 15:30:07 mail postfix/spawn[62387]: warning: /usr/local/bin/policyd-spf: process id 63269: command time limit exceeded
                                          
                                          1 Reply Last reply Reply Quote 0
                                          • I
                                            Igor Filth
                                            last edited by

                                            Great job! Package works fine.
                                            Thank you very much guys!

                                            I found a little mistake.
                                            On "Access Lists" page, when i click on field "Sender" and "MIME" i'm redirected to http://www.postfix.org/pcre_table.5.html page  :)

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.