Postfix - antispam and relay package

marcelloc · May 31, 2017, 5:56 PM

I'll check the install process on a clean vm an fix it. Thanks for the feedback.

EDIT

I've found the issue, all repos (including Unofficial) must has Freebsd repo enabled inside it to be able to install Freebsd packages.

I'm fixing the install script and will push soon.

marcelloc · May 31, 2017, 6:12 PM

Re-run the install process, pkg install should be fixed now.

Rene.vandenBroek · May 31, 2017, 6:25 PM

Yes, it ran completely this time.

thank you.

pyrodex · Jun 4, 2017, 3:15 PM

Just setup this with an AWS SES setup for mail relay and I notice I am dropping mail with the following issue in the logs:


Jun  4 11:13:32 firewall postfix/smtpd[62200]: connect from beast-areca.localhome.com[192.168.XX.XX]
Jun  4 11:14:02 firewall postfix/smtpd[62200]: warning: connect to Milter service inet:localhost:8893: Operation timed out

Any ideas?

marcelloc · Jun 4, 2017, 4:00 PM

There are services not running. Check all milters enabled, opendkim, spf, etc..

Rene.vandenBroek · Jun 4, 2017, 4:53 PM

A few posts back I had some problems with installing the postfix and mailscanner packages. As a result some of the permissions / ownerships were not set correctly and the DKIM and SPF milter failed to install correctly.
I've set the ownership to the postfix and mailscanner folders (/incoming ..etc) to user postfix so the temporary databases and incoming folders could be made ( my mails were stuck in the "on hold" queue)

I've then re-installed the CPAN modules as noted in the mailscanner package , and afterwards installed the failed modules with the command;

perl -MCPAN -e "install Mail::DKIM"
(source https://forum.ivorde.com/spamassassin-sa-update-complains-about-not-installed-modules-t32.html

Replace the packagename where required offcourse.

It might not be the same problem as I had, but maybe it helps you.

Igor Filth · Jun 27, 2017, 2:29 PM

Hi, marcelloc! I think I found some minor bugs

Auto whitelist doesn't work until I created manually «postscreen_spf_whitelist.cidr» file
When I try to watch postfix configuration files «relay_recipients» I see blank page.

Bismarck · Jun 27, 2017, 3:17 PM

@Igor:

When I try to watch postfix configuration files «relay_recipients» I see blank page.

You can see this only, if you have "Enable LDAP/URL fetch" ind the Recipients tab enabled.

Igor Filth · Jun 27, 2017, 5:52 PM

Bismarck, "Enable LDAP/URL fetch" is already enabled, file "relay_recipients" contains 248 emails.

Bismarck · Jun 27, 2017, 6:20 PM

@Igor:

Bismarck, "Enable LDAP/URL fetch" is already enabled, file "relay_recipients" contains 248 emails.

Mine is just working fine with aprox 750 lines, maybe you could have a look in /usr/local/www/postfix_view_config.php around line 33

        		'recipients'=> POSTFIX_LOCALBASE . "/etc/postfix/relay_recipients",

and check the paths etc. the code is pretty self explained.

Igor Filth · Jun 27, 2017, 7:10 PM

Yeah, I found mistake.

Line 33 in my postfix_view_config.php is right
But line 99```

relay_recipients


Should be```
*   [relay_recipients](#)

Not "relay", but "recipients" ;)

marcelloc · Jun 27, 2017, 7:31 PM

@Igor:

Yeah, I found mistake.

This way?

https://github.com/marcelloc/Unofficial-pfSense-packages/commit/833483889f73243affe6ba71ce4465bf3f325dec

Igor Filth · Jun 27, 2017, 8:24 PM

This way?

https://github.com/marcelloc/Unofficial-pfSense-packages/commit/833483889f73243affe6ba71ce4465bf3f325dec

Yes

What can i say about

1) Auto whitelist doesn't work until I created manually «postscreen_spf_whitelist.cidr» file

I'm delete «postscreen_spf_whitelist.cidr» file, and start test again.
Domains in file "auto_whitelisted_domains" and CIDR in "auto_whitelisted_cidr" created automatically (previously has been the same), but recipients has not received emails (stasus "soft bounce") from this domains again.

I swapped the lines "cidr:/usr/local/etc/postfix/auto_whitelisted_cidr" and "cidr:/usr/local/etc/postfix/postscreen_spf_whitelist.cidr" in my "main.cf" (without creating file "postscreen_spf_whitelist.cidr")

postscreen_access_list = permit_mynetworks,
			cidr:/usr/local/etc/postfix/cal_cidr,
			cidr:/usr/local/etc/postfix/auto_whitelisted_cidr,
			cidr:/usr/local/etc/postfix/postscreen_spf_whitelist.cidr

And now all emails were delivered to recipients, auto whitelisting works fine.

Rene.vandenBroek · Aug 4, 2017, 4:38 AM

Hi Marcelloc,

it appears that the FreeBSD repo has upgraded the MailScanner pkg to version 5.0.3 ( from 4.85.2 ). Unfortunately this breaks the mailscanner functionality. Since i'm not very good (i've actualy got no clue at all) in tracing back all the possible issues in the new package I thought I'd let you know.

I only saw it removes (or doesn't create) the file /usr/local/sbin/mailscanner .

fo now I've just downloaded the former package from http://pkg.freebsd.org/FreeBSD:11:amd64/release_0/All/MailScanner-4.85.2.txz and installed that on top of the 5.0.3 version, and that restores the mailscanner functionality.

marcelloc · Aug 4, 2017, 7:47 PM

@Rene.vandenBroek:

it appears that the FreeBSD repo has upgraded the MailScanner pkg to version 5.0.3 ( from 4.85.2 ). Unfortunately this breaks the mailscanner functionality. Since i'm not very good (i've actualy got no clue at all) in tracing back all the possible issues in the new package I thought I'd let you know.

Need some changed, I've already did some but it still have other things to fix.

ralf.kirmis · Sep 28, 2017, 6:59 AM

Good Morning,

has somebody tested the postfix installer script on the 2.4 RC Version?
Just to be ready when the 2.4 is released. ::)

regards,
Ralf

Igor Filth · Oct 4, 2017, 6:53 AM

+1)
Postfix is one of most important packages for me. I hope to see it on version 2.4 ::)

pf-disa · Nov 3, 2017, 6:44 PM

Hi Marcelloc,

first of all thank you for your great work…

While waiting for the package for 2.4 ;) I've upgraded pfSense to version 2.3.5 but postfix doesn't start, with the following message in the log:


Nov 3 18:41:51 	php-fpm 	70404 	/pkg_edit.php: Postfix setup completed
Nov 3 18:41:51 	php-fpm 	70404 	/pkg_edit.php: Reloading/starting postfix
Nov 3 18:41:50 	php-fpm 	70404 	/pkg_edit.php: Writing rc_file
Nov 3 18:41:50 	php-fpm 	70404 	/pkg_edit.php: The command '/usr/local/sbin/postmap /usr/local/etc/postfix/sender_access' returned exit code '1', the output was 'Shared object "libicuuc.so.58" not found, required by "postmap"'
Nov 3 18:41:50 	php-fpm 	70404 	/pkg_edit.php: The command '/usr/local/sbin/postmap /usr/local/etc/postfix/transport' returned exit code '1', the output was 'Shared object "libicuuc.so.58" not found, required by "postmap"'
Nov 3 18:41:50 	php-fpm 	70404 	/pkg_edit.php: Writing out configuration

What can I try?

Thanks…
R.

Update: after a couple of reboot and a reinstallation now postfix starts and works correctly...
I'll wait for the 2.4 version of the script... Thanks!

marcelloc · Nov 6, 2017, 5:00 PM

@pf-disa:

What can I try?

Try to reinstall the package. It's missing some libs from freebsd.

Bismarck · Nov 12, 2017, 8:29 AM

@marcelloc:

@pf-disa:

What can I try?

Try to reinstall the package. It's missing some libs from freebsd.

After update from 2.3.4 to 2.3.5, postfix need to be reinstalled:

pkg install postfix

or

pkg install postfix-sasl

will fix the missing libs, and postfix is operation normal again.