Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Postfix - antispam and relay package

    pfSense Packages
    136
    855
    1.0m
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      darklogic
      last edited by

      marcelloc,

      Any word on the postfix AV and anti-spam add-on? Your latest release fixed all the issues I was having. Great package. I am excited to see what will come next.

      Thanks Again,

      1 Reply Last reply Reply Quote 0
      • marcellocM
        marcelloc
        last edited by

        The upcoming version 2.3 improves maillog Database and fixes some minor bugs.

        Mailscanner maybe released in december.

        Treinamentos de Elite: http://sys-squad.com

        Help a community developer! ;D

        1 Reply Last reply Reply Quote 0
        • D
          darklogic
          last edited by

          That is excellent news. Keep up the great work.

          Thanks Again,

          MDP

          1 Reply Last reply Reply Quote 0
          • M
            mince69meat
            last edited by

            @marcelloc:

            Hi all,

            Postfix compilation on x64 now includes cyrus-SASL2 and TLS.

            who need or want to test it, reinstall or remove/install postfix package.

            No changes in gui for this option. Include all your SASL and/or TLS config in custom main.cf options

            att,
            Marcello Coutinho

            Hi Marcello and everyone else

            can anyone help me out I would like to send mail from internal to exturnal though this fantastic packege but can't get passed "smtpd_recipient_restrictions = reject_unauth_destination" have tried "smtpd_recipient_restrictions = permit_mynetworks reject_unauth_destination" in custom but it will not override the defaults, tried SASL but don't know how to install it on pfsense, have spent a week doing this before postting so sorry if its in a post elswere, any help or point to any posts that could help or how to override the default would be grateful

            Mick

            1 Reply Last reply Reply Quote 0
            • marcellocM
              marcelloc
              last edited by

              mince69meat,

              I'ts included in upcoming version 2.3. I'm finished coding and now I'm testing before publishing.

              The not so good news is that 2.2 sqlite database is not compatible with 2.3.

              Treinamentos de Elite: http://sys-squad.com

              Help a community developer! ;D

              1 Reply Last reply Reply Quote 0
              • M
                mince69meat
                last edited by

                @marcelloc:

                mince69meat,

                I'ts included in upcoming version 2.3. I'm finished coding and now I'm testing before publishing.

                The not so good news is that 2.2 sqlite database is not compatible with 2.3.

                Love you man, im up all though the night as I was just about to build a bsd VM to get around the problem till your fantastic package was more.. if you want I have a fresh PF without postfix just finnished installing if you need a tester :-) before release. dont know what to do now wait or carry on with the bsd VM, dont know if I can help any more than being a user tester but know a little about coding and postfix, great work - respect

                1 Reply Last reply Reply Quote 0
                • marcellocM
                  marcelloc
                  last edited by

                  to patch 2.2 to accept mynetworks,BACKUP /usr/local/pkg/postfix.inc to /root dir and then edit /usr/local/pkg/postfix.inc to modify postfix declaration.

                  Do not backup postfix.inc file on same dir, it will break your boot.

                  look for 'postscreen_access_list=' and include permit_mynetworks:
                  postscreen_access_list = permit_mynetworks,\n\t\t\tcidr:/usr/local/etc/postfix/cal_cidr\n"

                  look for 'smtpd_recipient_restrictions=' (02 times in file) and include permit_mynetworks
                  smtpd_recipient_restrictions = permit_mynetworks,reject_unauth_destination,

                  save file, Go to custom options in gui, declare 'mynetworks' list save config and check main.cf file in view configuration tab

                  
                  Examples:
                  mynetworks = 127.0.0.0/8 168.100.189.0/28
                  mynetworks = !192.168.0.1, 192.168.0.0/28
                  mynetworks = 127.0.0.0/8 168.100.189.0/28 [::1]/128 [2001:240:587::]/64
                  "mynetworks_style = host"
                  "mynetworks_style = subnet" 
                  "mynetworks_style = class"
                  
                  

                  reference: http://www.postfix.org/postconf.5.html

                  Treinamentos de Elite: http://sys-squad.com

                  Help a community developer! ;D

                  1 Reply Last reply Reply Quote 0
                  • M
                    mince69meat
                    last edited by

                    @marcelloc:

                    to patch 2.2 to accept mynetworks,BACKUP /usr/local/pkg/postfix.inc to /root dir and then edit /usr/local/pkg/postfix.inc to modify postfix declaration.

                    Do not backup postfix.inc file on same dir, it will break your boot.

                    look for 'postscreen_access_list=' and include permit_mynetworks:
                    postscreen_access_list = permit_mynetworks,\n\t\t\tcidr:/usr/local/etc/postfix/cal_cidr\n"

                    look for 'smtpd_recipient_restrictions=' (02 times in file) and include permit_mynetworks
                    smtpd_recipient_restrictions = permit_mynetworks,reject_unauth_destination,

                    save file, Go to custom options in gui, declare 'mynetworks' list save config and check main.cf file in view configuration tab

                    
                    Examples:
                    mynetworks = 127.0.0.0/8 168.100.189.0/28
                    mynetworks = !192.168.0.1, 192.168.0.0/28
                    mynetworks = 127.0.0.0/8 168.100.189.0/28 [::1]/128 [2001:240:587::]/64
                    "mynetworks_style = host"
                    "mynetworks_style = subnet" 
                    "mynetworks_style = class"
                    
                    

                    reference: http://www.postfix.org/postconf.5.html

                    Hi marcelloc, knew to edit postfix.inc (would have missed postscreen_access_list, thanks), did not want to edit this file as I'm worried about braking the package on updates, can you comfirm this will not brake anything on update? was looking for a way to override just by the "custom main.cf options" to keep the package as you made it :-) and not cause problems on upgrades as I have boken things in the past by doing things my way and not the matainers way lol

                    some info for you, installing postfix on x64 I see that cyrus-sasl-2.1.25_1.tbz is installed as dependencie but on a x86 system it is not installed, don't know if you know that, also for the rest of the community pkg_add will not install it properly on x86 :-(

                    nice work and brill post about adding mynetworks, should help more on here out than just me

                    respect

                    1 Reply Last reply Reply Quote 0
                    • marcellocM
                      marcelloc
                      last edited by

                      The postfix in 32 bit version is not compilled every day just like 64bits. This may be something related to 2.1 working. The cyrrus-SASL has a missing dependencie that was not fixed yet, So you can only use unauth outgoing smtp for now.

                      About the postfix.inc, if you do the way I described, it will not broke any package update. Just insert the update on file and do not remove anything.
                      Package update will update postfix.inc
                      Do it with caution.
                      I'll send a line to core team asking 32bits updates.
                      Postix is on 2.8.7 on 64 bits and 2.8.5 on 32.

                      Treinamentos de Elite: http://sys-squad.com

                      Help a community developer! ;D

                      1 Reply Last reply Reply Quote 0
                      • M
                        mince69meat
                        last edited by

                        How would you use unauth outgoing smtp and get passed the "reject_unauth_destination" or is the only wayto  edit /usr/local/pkg/postfix.inc as you said a few posts back?

                        1 Reply Last reply Reply Quote 0
                        • M
                          mince69meat
                          last edited by

                          @marcelloc:

                          to patch 2.2 to accept mynetworks,BACKUP /usr/local/pkg/postfix.inc to /root dir and then edit /usr/local/pkg/postfix.inc to modify postfix declaration.

                          Do not backup postfix.inc file on same dir, it will break your boot.

                          look for 'postscreen_access_list=' and include permit_mynetworks:
                          postscreen_access_list = permit_mynetworks,\n\t\t\tcidr:/usr/local/etc/postfix/cal_cidr\n"

                          look for 'smtpd_recipient_restrictions=' (02 times in file) and include permit_mynetworks
                          smtpd_recipient_restrictions = permit_mynetworks,reject_unauth_destination,

                          save file, Go to custom options in gui, declare 'mynetworks' list save config and check main.cf file in view configuration tab

                          
                          Examples:
                          mynetworks = 127.0.0.0/8 168.100.189.0/28
                          mynetworks = !192.168.0.1, 192.168.0.0/28
                          mynetworks = 127.0.0.0/8 168.100.189.0/28 [::1]/128 [2001:240:587::]/64
                          "mynetworks_style = host"
                          "mynetworks_style = subnet" 
                          "mynetworks_style = class"
                          
                          

                          reference: http://www.postfix.org/postconf.5.html

                          is this line right the middle part (tcidr) just don't seem right?
                          postscreen_access_list = permit_mynetworks,\n\t\t\tcidr:/usr/local/etc/postfix/cal_cidr\n"

                          1 Reply Last reply Reply Quote 0
                          • M
                            mince69meat
                            last edited by

                            hope someone can help with this one, have multi wan and want postfix to send mail out of non default wan gateway, tried smtp_bind_address = xxx.xxx.xxx.xxx and it works sendding out but then incoming mail will not forward to internal mail server, any hint want to try either on pf firewall or postfix would be great

                            Mince

                            1 Reply Last reply Reply Quote 0
                            • marcellocM
                              marcelloc
                              last edited by

                              Did you created a wan rule to accept incoming traffic on this ip?

                              Another way to do it is listening postfix on loopback and then create inbound and outbound nat to your ip aliases or carp.

                              is this line right the middle part (tcidr) just don't seem right?
                              postscreen_access_list = permit_mynetworks,\n\t\t\tcidr:/usr/local/etc/postfix/cal_cidr\n"

                              Just include the 'permit_mynetworks,' at The beginning of postscreen_access_list.

                              Treinamentos de Elite: http://sys-squad.com

                              Help a community developer! ;D

                              1 Reply Last reply Reply Quote 0
                              • marcellocM
                                marcelloc
                                last edited by

                                Hi everybody,

                                I've just published package version 2.3 with many improvements. check first post for screen shots

                                main improvements:

                                • sqlite export option to allow multiple box admins to search mail in only one box

                                • new database structure

                                • queue gui tab

                                • more search options

                                • wildcard support in search

                                • postfix version 2.8.7 for x64bits

                                • widget options to prevent memory limit reach in dashboard

                                • apply permissions to non adminis users, so they can only search mail or view queue

                                • include mynetworks to allow internal clients/hosts to send mail through postfix forwarder

                                Treinamentos de Elite: http://sys-squad.com

                                Help a community developer! ;D

                                1 Reply Last reply Reply Quote 0
                                • M
                                  mince69meat
                                  last edited by

                                  hi all, first off, fantastic work on 2.3 :-)

                                  now on a PF x86 box we have

                                  Downloading http://files.pfsense.org/packages/8/All/perl-5.12.4_3.tbz …  could not download from there or http://ftp2.FreeBSD.org/pub/FreeBSD/ports/i386/packages-8.1-release/All/perl-5.12.4_3.tbz.
                                  of perl-5.12.4_3 failed!

                                  x64 box all seens fine so far will play alot more and report back soon, hopping the above error is just waitting for the ports to update

                                  Mince

                                  1 Reply Last reply Reply Quote 0
                                  • marcellocM
                                    marcelloc
                                    last edited by

                                    mince69meat,

                                    thanks for your feedback.

                                    I've just fixed 32bits perl version. try again in 15minutes.

                                    Treinamentos de Elite: http://sys-squad.com

                                    Help a community developer! ;D

                                    1 Reply Last reply Reply Quote 0
                                    • D
                                      darklogic
                                      last edited by

                                      Excellent work marcelloc, This package is really coming along very nice. Seems to be working good. The only thing I noticed after doing an update, was all my configuration seetings stayed as was, but I had to re-add my domain and point it to the internal mail server for some reason?

                                      Thanks for all your hard work.

                                      1 Reply Last reply Reply Quote 0
                                      • M
                                        mince69meat
                                        last edited by

                                        hate saying when there is somthing wrong as it feels like im ungreatfull, that said here it comes lol

                                        pkg_add -r MailScanner don't work on both x86 & x64 "Error: Unable to get ftp://ftp.freebsd.org/pub/FreeBSD/ports/amd64/packages-8.1-release/Latest/MailScanner.tbz: File unavailable (e.g., file not found, no access)"

                                        if you have the "Use Third part antispam" ticked it blocks outgoing mail and the outgoing mail logs report the mail as incoming

                                        maybe warn not to tick untill mailscanner installed or have i got it wrong and VA is installed?

                                        sorry for not getting back sooner feel asleep been working long hours, x86 installing installing now but noticed when reinstalling a newer virsion installing and now we have 2 installs pkg_info shows
                                        perl-5.10.1_3       Practical Extraction and Report Language
                                        perl-5.12.4_2       Practical Extraction and Report Language

                                        not tested properly so take as just could be bug, think the logging is not loging incoming and out going properly as it seems to be logging the recipiant as the sender in some cases, more than likely a bounce massage but it should be from postmaster, will keep an eye on it but think its more than likely my bad and readding it wrong.

                                        any tests I can do to help out just say and it will be done, as always respect, great work :-)

                                        you might want to surgest in info below mynetworks to add 127.0.0.0/8 if adding custom unless you have this taken care of else where

                                        there is 2 mynetworks_style = host in main.cf

                                        Mince

                                        1 Reply Last reply Reply Quote 0
                                        • marcellocM
                                          marcelloc
                                          last edited by

                                          Darklogic,

                                          I've moved domains to it's own tab. That's why you needed to config again.

                                          Treinamentos de Elite: http://sys-squad.com

                                          Help a community developer! ;D

                                          1 Reply Last reply Reply Quote 0
                                          • marcellocM
                                            marcelloc
                                            last edited by

                                            mince69meat,

                                            I've started testing mailscanner package and it only works with perl version 5.10. So I've changed postfix perl dependencie from 5.12 to 5.10.

                                            Remove both manually with pkg_delete and then reinstall package.

                                            When you check mailscanner, you tell postfix to hold all messages, thats why you have no mail working.

                                            I'm going to publish tomorrow the mailscanner-dev package until it get stable enough to a RELEASE version.

                                            Treinamentos de Elite: http://sys-squad.com

                                            Help a community developer! ;D

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.