Postfix - antispam and relay package

kwaci

Marcello

It happened again:((

Jun 29 09:03:51 postfix/postscreen[54318]: fatal: btree:/var/db/postfix/postscreen_cache: unable to get exclusive lock: Resource temporarily unavailable
Jun 29 09:02:50 postfix/postscreen[61744]: fatal: btree:/var/db/postfix/postscreen_cache: unable to get exclusive lock: Resource temporarily unavailable
Jun 29 09:01:49 postfix/postscreen[63059]: fatal: btree:/var/db/postfix/postscreen_cache: unable to get exclusive lock: Resource temporarily unavailable

Hi expert_az,

I think you have configured the Postfix to listen on multiple interfaces.
You can workaround this issue by listening postfix on localhost only and then nat external ips to 127.0.0.1. (http://forum.pfsense.org/index.php/topic,46334.msg242753.html#msg242753)

Listen_Loopback_Only.jpg_thumb

NAT_to_Loopback.jpg_thumb

expert_az

kwaci thank you for reply,i will try solution

expert_az

hello marcelloc,after upgrade version 2.10.0 pkg v.2.3.5 all queued mails in Search Mail tab displayed as hold(status) mail.

but some of theme have sent,spam or hold status,anyway to correct this issue?

FlashPan

Hi all,

I seem to having a little issue with the widget for this package.

Emails are flowing in and out fine but the widget does not show the number of emials which have been rejected etc.

The only disply the widget shows is the number of "Sent" emails which are emails that have passed through successfully and allowed into my exchange server.

I am not using the additional mailscanner and I am running pfsense 2.0.3 i386 and postfix forwarder 2.10.0 pkg v.2.3.5

Any ideas or tweaks I need to make?

Thanks and cheers all.

kwaci

@jemarti:

I need to configure PostFix to accept mail from a specific IP address even though that address is both blacklisted and is presenting a non-existent host name during HELO.

I have tried placing entries like this:
123.231.132.213 OK
in the "helo" section of the "Access Lists" tab, and also added them to /usr/local/etc/postfix/helo_check
but I am still getting the following reject message in the logs:
RCPT from unknown[123.231.132.213]: 550 5.7.1 Client host rejected: cannot find your hostname, [123.231.132.213]

Could anyone advise me on the correct way to configure PostFix so that it will bypass the helo and RBL checks for specific IP addresses?

Thanks.

Hi jemarti, try to put it in the Access List –> MyNetworks.

MyNetworks.jpg_thumb

biggsy

Jemarti,

you can add that IP to mynetworks but it would be far better to email the owner of 123.231.132.213 and ask him to fix his DNS entries so that IP address resolves to the host name sent in the HELO/EHLO command.

ics

Hi

My postfix db /var/db/postfix takes a huge space. I would like to purge postfix sqlite files.
Can I just remove old files ?

doktornotor

@ics:

My postfix db /var/db/postfix takes a huge space. I would like to purge postfix sqlite files.
Can I just remove old files ?

Uhm, how about

sqlite3 database_name "VACUUM;"

ics

I don't know the database_name…
FYI, the folder contents many files [date].db

Also, as I understand, this command will reclaim space in the database This will not remove data.
I want to delete old entries.
As it is split in multiple files, would it be possible to keep some of the latest .db files and delete the oldest ones ?

doktornotor

@ics:

I don't know the database_name…

Eh. It's the filename.

@ics:

Also, as I understand, this command will reclaim space in the database This will not remove data.

Yes.

@ics:

I want to delete old entries.

So delete them?

@ics:

As it is split in multiple files, would it be possible to keep some of the latest .db files and delete the oldest ones ?

Yes, of course. man find

brokendash

This might be off topic but I'm using this package to relay mail into and then outside of my network both using ipv4 and ipv6. I was wondering if there would be a way to change the webgui config's logic so that if you do not select an interface to listen to it would essentially populate the master.cf using one smtp service entry in the master.cf

ie:
smtp inet n - n - 1 postscreen

I think technically using postscreen for inbound traffic & relaying outbound is not the correct method to implement but with my tiny MX environment I feel it's not an issue.

My setup also has the custom main.cf rules form filled in with the following also…

relayhost = [smtp.somewhere.net]
inet_protocols = all
inet_interfaces = 127.0.0.1, [::1], 192.168.1.254, [fd00:470:bce0:1::254]
smtp_bind_address = 0.0.0.0
smtp_bind_address6 = fd00:470:bce0:1::254

Every time I update to a recent snapshot it seems that I've had to resave all settings in the webgui, then hand tune the master.cf, copy it and the rest of the /usr/local/etc/postfix/* configs over to the /usr/pbi/postfix-i386/etc/postfix dir. I essentially came to all of these a good while back when I moved from the stable release to a snapshot build and discovered everything was horridly broke…. :-)

My question now is basically, are there any plans to make this a bit more ipv6 friendly? and could I get some thoughts on the postscreen for in/out relaying as well? Perhaps there is some future changes that will ease my frustrations and/or I'm all for even assisting in the creation any changes.

Cheers,
Brian

Truster

Hello Marcelloc, nice to see you again in another thread :-)

i have a little question about the postfix forwarder package, i'm getting the errro:

postfix/postfix-script[21723]: fatal: the Postfix mail system is not running

And another one: the file /usr/local/etc/rc.d/postfix.sh isn't executable, is this correct?

Best regards from Salzburg
Dave

Edit: Running on pfsense 2.0.2 i386, i'll upgrade it today at 12:00 CEST to the latest version

Truster

Truster, you are the greatest noop on this planet: check "Enable Postfix"-checkbox and get lucky. ;D

aslan1071

Quick question. I hope it has not been covered and I missed it I am sorry as am new to this tool. I have several Cpanel Boxes with several hundred domains on each that I would like to use this for. The Problem comes when I try to add more then 98 domains to the forwarding table it stops adding them. Is this a limit of postfix or pfSense? Please advise.

thanks

marcelloc

@aslan1071:

Quick question. I hope it has not been covered and I missed it I am sorry as am new to this tool. I have several Cpanel Boxes with several hundred domains on each that I would like to use this for. The Problem comes when I try to add more then 98 domains to the forwarding table it stops adding them. Is this a limit of postfix or pfSense? Please advise.

thanks

IIRC This limit is on package framework.

try this:

create a backup for phg_edit.php
edit it and change lines you find for($x=0; $x<99; $x++) to for($x=0; $x<999; $x++)

biggsy

Aslan1071,

Are you adding all those entries manually?

With the postmap command you should be able add them from a text file to /usr/local/etc/postfix/transport.db

aslan1071

Thanks Guys… I will give this a try. I have tried both methods by had and from text file but it was cutting off the list at 98 no matter the input method.

I will let you know if this works.

thanks again.

DQM

Dear Marcello,

I have just installed PF 2.10 on new my box (2.0.3). But it seems not work with Active Directory ( I didn't see the adexport.pl file at /usr/local/etc/postfix).

Could you please show me how does it work with Active Directory to export recipients to the relay_recipients file?

Thank you and look forward to your reply.
DQM

marcelloc

adexport.pl stays on /usr/local/bin/ but you need first to install p5-perl-ldap package.

You can install it with pkg_add from my repo or from freebsd repo

amd64
pkg_add -r http://e-sac.siteseguro.ws/packages/amd64/8/All/p5-perl-ldap-0.4300.tbz

i386
pkg_add -r http://e-sac.siteseguro.ws/packages/8/All/p5-perl-ldap-0.4300.tbz

DQM

Thanks Marcello,

It works well now :)