Postfix - antispam and relay package

Rene.vandenBroek

Unfortunately the install script searches the repo for the package..

here's a the entire output from the install script. It can't install the patches, because the files to patch ain't there.

 sh ./install_mailscanner_23.sh
fetching  /usr/local/www/mailscanner_about.php from github
fetching  /usr/local/pkg/mailscanner.conf.template from github
fetching  /usr/local/pkg/mailscanner.xml from github
fetching  /usr/local/pkg/mailscanner_antispam.xml from github
fetching  /usr/local/pkg/mailscanner_attachments.xml from github
fetching  /usr/local/pkg/mailscanner_report.xml from github
fetching  /usr/local/pkg/mailscanner.inc from github
fetching  /usr/local/pkg/mailscanner_alerts.xml from github
fetching  /usr/local/pkg/mailscanner_antivirus.xml from github
fetching  /usr/local/pkg/mailscanner_content.xml from github
fetching  /usr/local/pkg/mailscanner_sync.xml from github
fetching  /usr/local/www/shortcuts/pkg_mailscanner.inc from github
fetching  /usr/local/bin/sa-updater-custom-channels.sh from github
fetching  /usr/local/bin/sa-wrapper.pl from github
Locking pkg-1.10.1_1
Updating Unofficial repository catalogue...
Fetching meta.txz: 100%    260 B   0.3kB/s    00:01
Fetching packagesite.txz: 100%    2 KiB   2.3kB/s    00:01
Processing entries: 100%
Unofficial repository update completed. 5 packages processed.
Updating pfSense-core repository catalogue...
pfSense-core repository is up to date.
Updating pfSense repository catalogue...
pfSense repository is up to date.
All repositories are up to date.

pkg-1.10.1_1 is locked and may not be modified
pkg: No packages available to install matching 'mailscanner' have been found in the repositories
0cd: root: No such file or directory
fetch: https://github.com/extremeshok/spamassassin-extremeshok_fromreplyto/archive/master.zip: size of remote file is not known
extremeshok_fromreplyto.zip                           7385  B   34 MBps 00m00s
fetch: https://github.com/smfreegard/DecodeShortURLs/archive/master.zip: size of remote file is not known
DecodeShortURLs.zip                                     11 kB   39 MBps 00m00s
pdfid.zip                                     100% of 9679  B   54 MBps 00m00s
fetch: https://github.com/extremeshok/clamav-unofficial-sigs/archive/master.zip: size of remote file is not known
clamav-unofficial-sigs.zip                              76 kB  353 kBps 00m00s
./install_mailscanner_23.sh: rehash: not found
./install_mailscanner_23.sh: /usr/local/bin/sa-update: not found
Hmm...  Looks like a unified diff to me...
The text leading up to this was:
--------------------------
|--- /usr/local/lib/MailScanner/MailScanner/ConfigDefs.orig.pl  2017-04-17 01:30:06.687969000 +0000
|+++ /usr/local/lib/MailScanner/MailScanner/ConfigDefs.pl       2017-04-17 01:37:31.896642000 +0000
--------------------------
File to patch:
No file found--skip this patch? [n]

marcelloc

I'll check the install process on a clean vm an fix it. Thanks for the feedback.

EDIT

I've found the issue, all repos (including Unofficial) must has Freebsd repo enabled inside it to be able to install Freebsd packages.

I'm fixing the install script and will push soon.

marcelloc

Re-run the install process, pkg install should be fixed now.

Rene.vandenBroek

Yes, it ran completely this time.

thank you.

pyrodex

Just setup this with an AWS SES setup for mail relay and I notice I am dropping mail with the following issue in the logs:


Jun  4 11:13:32 firewall postfix/smtpd[62200]: connect from beast-areca.localhome.com[192.168.XX.XX]
Jun  4 11:14:02 firewall postfix/smtpd[62200]: warning: connect to Milter service inet:localhost:8893: Operation timed out

Any ideas?

marcelloc

There are services not running. Check all milters enabled, opendkim, spf, etc..

Rene.vandenBroek

A few posts back I had some problems with installing the postfix and mailscanner packages. As a result some of the permissions / ownerships were not set correctly and the DKIM and SPF milter failed to install correctly.
I've set the ownership to the postfix and mailscanner folders (/incoming ..etc) to user postfix so the temporary databases and incoming folders could be made ( my mails were stuck in the "on hold" queue)

I've then re-installed the CPAN modules as noted in the mailscanner package , and afterwards installed the failed modules with the command;

perl -MCPAN -e "install Mail::DKIM"
(source https://forum.ivorde.com/spamassassin-sa-update-complains-about-not-installed-modules-t32.html

Replace the packagename where required offcourse.

It might not be the same problem as I had, but maybe it helps you.

Igor Filth

Hi, marcelloc! I think I found some minor bugs

Auto whitelist doesn't work until I created manually «postscreen_spf_whitelist.cidr» file
When I try to watch postfix configuration files «relay_recipients» I see blank page.

Recipients.JPG_thumb

Bismarck

@Igor:

When I try to watch postfix configuration files «relay_recipients» I see blank page.

You can see this only, if you have "Enable LDAP/URL fetch" ind the Recipients tab enabled.

Igor Filth

Bismarck, "Enable LDAP/URL fetch" is already enabled, file "relay_recipients" contains 248 emails.

Bismarck

@Igor:

Bismarck, "Enable LDAP/URL fetch" is already enabled, file "relay_recipients" contains 248 emails.

Mine is just working fine with aprox 750 lines, maybe you could have a look in /usr/local/www/postfix_view_config.php around line 33

        		'recipients'=> POSTFIX_LOCALBASE . "/etc/postfix/relay_recipients",

and check the paths etc. the code is pretty self explained.

Igor Filth

Yeah, I found mistake.

Line 33 in my postfix_view_config.php is right
But line 99```

relay_recipients


Should be```
*   [relay_recipients](#)

Not "relay", but "recipients" ;)

marcelloc

@Igor:

Yeah, I found mistake.

This way?

https://github.com/marcelloc/Unofficial-pfSense-packages/commit/833483889f73243affe6ba71ce4465bf3f325dec

Igor Filth

This way?

https://github.com/marcelloc/Unofficial-pfSense-packages/commit/833483889f73243affe6ba71ce4465bf3f325dec

Yes

What can i say about

1) Auto whitelist doesn't work until I created manually «postscreen_spf_whitelist.cidr» file

I'm delete «postscreen_spf_whitelist.cidr» file, and start test again.
Domains in file "auto_whitelisted_domains" and CIDR in "auto_whitelisted_cidr" created automatically (previously has been the same), but recipients has not received emails (stasus "soft bounce") from this domains again.

I swapped the lines "cidr:/usr/local/etc/postfix/auto_whitelisted_cidr" and "cidr:/usr/local/etc/postfix/postscreen_spf_whitelist.cidr" in my "main.cf" (without creating file "postscreen_spf_whitelist.cidr")

postscreen_access_list = permit_mynetworks,
			cidr:/usr/local/etc/postfix/cal_cidr,
			cidr:/usr/local/etc/postfix/auto_whitelisted_cidr,
			cidr:/usr/local/etc/postfix/postscreen_spf_whitelist.cidr

And now all emails were delivered to recipients, auto whitelisting works fine.

Rene.vandenBroek

Hi Marcelloc,

it appears that the FreeBSD repo has upgraded the MailScanner pkg to version 5.0.3 ( from 4.85.2 ). Unfortunately this breaks the mailscanner functionality. Since i'm not very good (i've actualy got no clue at all) in tracing back all the possible issues in the new package I thought I'd let you know.

I only saw it removes (or doesn't create) the file /usr/local/sbin/mailscanner .

fo now I've just downloaded the former package from http://pkg.freebsd.org/FreeBSD:11:amd64/release_0/All/MailScanner-4.85.2.txz and installed that on top of the 5.0.3 version, and that restores the mailscanner functionality.

marcelloc

@Rene.vandenBroek:

it appears that the FreeBSD repo has upgraded the MailScanner pkg to version 5.0.3 ( from 4.85.2 ). Unfortunately this breaks the mailscanner functionality. Since i'm not very good (i've actualy got no clue at all) in tracing back all the possible issues in the new package I thought I'd let you know.

Need some changed, I've already did some but it still have other things to fix.

ralf.kirmis

Good Morning,

has somebody tested the postfix installer script on the 2.4 RC Version?
Just to be ready when the 2.4 is released. ::)

regards,
Ralf

Igor Filth

+1)
Postfix is one of most important packages for me. I hope to see it on version 2.4 ::)

pf-disa

Hi Marcelloc,

first of all thank you for your great work…

While waiting for the package for 2.4 ;) I've upgraded pfSense to version 2.3.5 but postfix doesn't start, with the following message in the log:


Nov 3 18:41:51 	php-fpm 	70404 	/pkg_edit.php: Postfix setup completed
Nov 3 18:41:51 	php-fpm 	70404 	/pkg_edit.php: Reloading/starting postfix
Nov 3 18:41:50 	php-fpm 	70404 	/pkg_edit.php: Writing rc_file
Nov 3 18:41:50 	php-fpm 	70404 	/pkg_edit.php: The command '/usr/local/sbin/postmap /usr/local/etc/postfix/sender_access' returned exit code '1', the output was 'Shared object "libicuuc.so.58" not found, required by "postmap"'
Nov 3 18:41:50 	php-fpm 	70404 	/pkg_edit.php: The command '/usr/local/sbin/postmap /usr/local/etc/postfix/transport' returned exit code '1', the output was 'Shared object "libicuuc.so.58" not found, required by "postmap"'
Nov 3 18:41:50 	php-fpm 	70404 	/pkg_edit.php: Writing out configuration

What can I try?

Thanks…
R.

Update: after a couple of reboot and a reinstallation now postfix starts and works correctly...
I'll wait for the 2.4 version of the script... Thanks!

marcelloc

@pf-disa:

What can I try?

Try to reinstall the package. It's missing some libs from freebsd.