Postfix - antispam and relay package

marcelloc

@ecfx:

It looks like it is not working at pfsense 2.3.4 - new clean install.

looks like something with pkg.

Can you try to install a package first, like cron for example or try the console menu 13 before trying to install the postfix and mailscanner?

n3by

I installed some packages and it was the same.

At the end I manually installed all packages downloaded by installer in /var/cache/pkg/
pkg install *.txz

p.s.
I remember I had an error message at installation with pkg-devel-1.10.99.4.txz so i had to delete it to be able to install all.

marcelloc

@ecfx:

I installed some packages and it was the same.

At the end I manually installed all packages downloaded by installer in /var/cache/pkg/
pkg install *.txz

p.s.
I remember I had an error message at installation with pkg-devel-1.10.99.4.txz so i had to delete it to be able to install all.

I've removed the pkg lock from a previous update. Test if it's fixed the install when you have a chance.

Rene.vandenBroek

@Marcelloc,

Could there be something missing in the UnOfficial Repo, the mailscanner and Postfix packages cannot be found.

Unofficial repository update completed. 5 packages processed.
Updating pfSense-core repository catalogue...
pfSense-core repository is up to date.
Updating pfSense repository catalogue...
pfSense repository is up to date.
All repositories are up to date.
pkg: No packages available to install matching 'mailscanner' have been found in the repositories

It looks like the mailscanner and Postfix txz files are missing in the repo folder.

edit - fix typo

marcelloc

@Rene.vandenBroek:

@Marcelloc,

Could there be something missing in the UnOfficial Repo, the mailscanner and Postfix packages cannot be found.

It's not there yet. the pkg add for postfix and mailscanner will have only gui files for now because it needs a lot of dependencies from FreeBSD.

Keep using the install script.

Rene.vandenBroek

Unfortunately the install script searches the repo for the package..

here's a the entire output from the install script. It can't install the patches, because the files to patch ain't there.

 sh ./install_mailscanner_23.sh
fetching  /usr/local/www/mailscanner_about.php from github
fetching  /usr/local/pkg/mailscanner.conf.template from github
fetching  /usr/local/pkg/mailscanner.xml from github
fetching  /usr/local/pkg/mailscanner_antispam.xml from github
fetching  /usr/local/pkg/mailscanner_attachments.xml from github
fetching  /usr/local/pkg/mailscanner_report.xml from github
fetching  /usr/local/pkg/mailscanner.inc from github
fetching  /usr/local/pkg/mailscanner_alerts.xml from github
fetching  /usr/local/pkg/mailscanner_antivirus.xml from github
fetching  /usr/local/pkg/mailscanner_content.xml from github
fetching  /usr/local/pkg/mailscanner_sync.xml from github
fetching  /usr/local/www/shortcuts/pkg_mailscanner.inc from github
fetching  /usr/local/bin/sa-updater-custom-channels.sh from github
fetching  /usr/local/bin/sa-wrapper.pl from github
Locking pkg-1.10.1_1
Updating Unofficial repository catalogue...
Fetching meta.txz: 100%    260 B   0.3kB/s    00:01
Fetching packagesite.txz: 100%    2 KiB   2.3kB/s    00:01
Processing entries: 100%
Unofficial repository update completed. 5 packages processed.
Updating pfSense-core repository catalogue...
pfSense-core repository is up to date.
Updating pfSense repository catalogue...
pfSense repository is up to date.
All repositories are up to date.

pkg-1.10.1_1 is locked and may not be modified
pkg: No packages available to install matching 'mailscanner' have been found in the repositories
0cd: root: No such file or directory
fetch: https://github.com/extremeshok/spamassassin-extremeshok_fromreplyto/archive/master.zip: size of remote file is not known
extremeshok_fromreplyto.zip                           7385  B   34 MBps 00m00s
fetch: https://github.com/smfreegard/DecodeShortURLs/archive/master.zip: size of remote file is not known
DecodeShortURLs.zip                                     11 kB   39 MBps 00m00s
pdfid.zip                                     100% of 9679  B   54 MBps 00m00s
fetch: https://github.com/extremeshok/clamav-unofficial-sigs/archive/master.zip: size of remote file is not known
clamav-unofficial-sigs.zip                              76 kB  353 kBps 00m00s
./install_mailscanner_23.sh: rehash: not found
./install_mailscanner_23.sh: /usr/local/bin/sa-update: not found
Hmm...  Looks like a unified diff to me...
The text leading up to this was:
--------------------------
|--- /usr/local/lib/MailScanner/MailScanner/ConfigDefs.orig.pl  2017-04-17 01:30:06.687969000 +0000
|+++ /usr/local/lib/MailScanner/MailScanner/ConfigDefs.pl       2017-04-17 01:37:31.896642000 +0000
--------------------------
File to patch:
No file found--skip this patch? [n]

marcelloc

I'll check the install process on a clean vm an fix it. Thanks for the feedback.

EDIT

I've found the issue, all repos (including Unofficial) must has Freebsd repo enabled inside it to be able to install Freebsd packages.

I'm fixing the install script and will push soon.

marcelloc

Re-run the install process, pkg install should be fixed now.

Rene.vandenBroek

Yes, it ran completely this time.

thank you.

pyrodex

Just setup this with an AWS SES setup for mail relay and I notice I am dropping mail with the following issue in the logs:


Jun  4 11:13:32 firewall postfix/smtpd[62200]: connect from beast-areca.localhome.com[192.168.XX.XX]
Jun  4 11:14:02 firewall postfix/smtpd[62200]: warning: connect to Milter service inet:localhost:8893: Operation timed out

Any ideas?

marcelloc

There are services not running. Check all milters enabled, opendkim, spf, etc..

Rene.vandenBroek

A few posts back I had some problems with installing the postfix and mailscanner packages. As a result some of the permissions / ownerships were not set correctly and the DKIM and SPF milter failed to install correctly.
I've set the ownership to the postfix and mailscanner folders (/incoming ..etc) to user postfix so the temporary databases and incoming folders could be made ( my mails were stuck in the "on hold" queue)

I've then re-installed the CPAN modules as noted in the mailscanner package , and afterwards installed the failed modules with the command;

perl -MCPAN -e "install Mail::DKIM"
(source https://forum.ivorde.com/spamassassin-sa-update-complains-about-not-installed-modules-t32.html

Replace the packagename where required offcourse.

It might not be the same problem as I had, but maybe it helps you.

Igor Filth

Hi, marcelloc! I think I found some minor bugs

Auto whitelist doesn't work until I created manually «postscreen_spf_whitelist.cidr» file
When I try to watch postfix configuration files «relay_recipients» I see blank page.

Recipients.JPG_thumb

Bismarck

@Igor:

When I try to watch postfix configuration files «relay_recipients» I see blank page.

You can see this only, if you have "Enable LDAP/URL fetch" ind the Recipients tab enabled.

Igor Filth

Bismarck, "Enable LDAP/URL fetch" is already enabled, file "relay_recipients" contains 248 emails.

Bismarck

@Igor:

Bismarck, "Enable LDAP/URL fetch" is already enabled, file "relay_recipients" contains 248 emails.

Mine is just working fine with aprox 750 lines, maybe you could have a look in /usr/local/www/postfix_view_config.php around line 33

        		'recipients'=> POSTFIX_LOCALBASE . "/etc/postfix/relay_recipients",

and check the paths etc. the code is pretty self explained.

Igor Filth

Yeah, I found mistake.

Line 33 in my postfix_view_config.php is right
But line 99```

relay_recipients


Should be```
*   [relay_recipients](#)

Not "relay", but "recipients" ;)

marcelloc

@Igor:

Yeah, I found mistake.

This way?

https://github.com/marcelloc/Unofficial-pfSense-packages/commit/833483889f73243affe6ba71ce4465bf3f325dec

Igor Filth

This way?

https://github.com/marcelloc/Unofficial-pfSense-packages/commit/833483889f73243affe6ba71ce4465bf3f325dec

Yes

What can i say about

1) Auto whitelist doesn't work until I created manually «postscreen_spf_whitelist.cidr» file

I'm delete «postscreen_spf_whitelist.cidr» file, and start test again.
Domains in file "auto_whitelisted_domains" and CIDR in "auto_whitelisted_cidr" created automatically (previously has been the same), but recipients has not received emails (stasus "soft bounce") from this domains again.

I swapped the lines "cidr:/usr/local/etc/postfix/auto_whitelisted_cidr" and "cidr:/usr/local/etc/postfix/postscreen_spf_whitelist.cidr" in my "main.cf" (without creating file "postscreen_spf_whitelist.cidr")

postscreen_access_list = permit_mynetworks,
			cidr:/usr/local/etc/postfix/cal_cidr,
			cidr:/usr/local/etc/postfix/auto_whitelisted_cidr,
			cidr:/usr/local/etc/postfix/postscreen_spf_whitelist.cidr

And now all emails were delivered to recipients, auto whitelisting works fine.

Rene.vandenBroek

Hi Marcelloc,

it appears that the FreeBSD repo has upgraded the MailScanner pkg to version 5.0.3 ( from 4.85.2 ). Unfortunately this breaks the mailscanner functionality. Since i'm not very good (i've actualy got no clue at all) in tracing back all the possible issues in the new package I thought I'd let you know.

I only saw it removes (or doesn't create) the file /usr/local/sbin/mailscanner .

fo now I've just downloaded the former package from http://pkg.freebsd.org/FreeBSD:11:amd64/release_0/All/MailScanner-4.85.2.txz and installed that on top of the 5.0.3 version, and that restores the mailscanner functionality.