Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Postfix - antispam and relay package

    Scheduled Pinned Locked Moved pfSense Packages
    855 Posts 136 Posters 1.1m Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • marcellocM
      marcelloc
      last edited by

      You mean per day log files in db format?

      If so, just delete it to cleanup disk.

      Treinamentos de Elite: http://sys-squad.com

      Help a community developer! ;D

      1 Reply Last reply Reply Quote 0
      • J
        jamesc
        last edited by

        Yes that's correct, e.g:

        2012-03-01.db
        2012-03-02.db
        2012-03-03.db
        2012-03-04.db

        Do I just delete the .db file, simple as that?

        Thanks for all your advice Marcello, you have been very helpful while i've been getting to grips with this excellent package :-)

        1 Reply Last reply Reply Quote 0
        • marcellocM
          marcelloc
          last edited by

          @jamesc:

          Do I just delete the .db file, simple as that?

          Yes  :)

          Treinamentos de Elite: http://sys-squad.com

          Help a community developer! ;D

          1 Reply Last reply Reply Quote 0
          • J
            jamesc
            last edited by

            Marcello, I notice when I disable the anvil daemon I get these warning messages in the log:

            Mar  6 13:16:58 smtp postfix/smtpd[19050]: warning: connect to private/anvil: Connection refused
            Mar  6 13:16:58 smtp postfix/smtpd[19050]: warning: problem talking to server private/anvil: Connection refused
            
            

            When I run the postfix upgrade-configuration command, this is what happens:

            [2.0.1-RELEASE][root@smtp.lab.local]/var/log(51): postfix upgrade-configuration
            Editing /usr/local/etc/postfix/master.cf, adding missing entry for anvil service
            Editing /usr/local/etc/postfix/master.cf, adding missing entry for postscreen TCP service
            

            Then these lines are added back into master.cf:

            anvil	  unix	-	-	n	-	1	anvil
            #smtp      inet  n       -       n       -       1       postscreen
            
            1 Reply Last reply Reply Quote 0
            • marcellocM
              marcelloc
              last edited by

              The disable anvil option was added to avoid delays between connections(maybe just for debug).

              If you do not have this issue, leave it enabled.

              Treinamentos de Elite: http://sys-squad.com

              Help a community developer! ;D

              1 Reply Last reply Reply Quote 0
              • J
                jamesc
                last edited by

                I have internal clients relaying directly to the Postfix box and the helper text suggests it should be disabled in this scenario?

                anvil - Postfix session count and request rate control.
                You can disable it if your server relays mail from internal clients to internet.
                
                1 Reply Last reply Reply Quote 0
                • marcellocM
                  marcelloc
                  last edited by

                  I do. :)

                  Take a look on mailscanner topic.

                  Treinamentos de Elite: http://sys-squad.com

                  Help a community developer! ;D

                  1 Reply Last reply Reply Quote 0
                  • K
                    ktims
                    last edited by

                    Great package, thanks. I used to install postfix manually, and this makes life a lot easier especially on NanoBSD installs.

                    I have one simple request: could you add fields for relayhost and smtp_fallback_relay, as I'm just using it as a relay?

                    1 Reply Last reply Reply Quote 0
                    • marcellocM
                      marcelloc
                      last edited by

                      @ktims:

                      Great package, thanks. I used to install postfix manually, and this makes life a lot easier especially on NanoBSD installs.

                      I have one simple request: could you add fields for relayhost and smtp_fallback_relay, as I'm just using it as a relay?

                      Try to paste this options on custom field.

                      Treinamentos de Elite: http://sys-squad.com

                      Help a community developer! ;D

                      1 Reply Last reply Reply Quote 0
                      • J
                        jamesc
                        last edited by

                        @marcelloc:

                        I do. :)

                        Take a look on mailscanner topic.

                        I did, but no mention of the anvil daemon on there, unless i'm missing something obvious?

                        1 Reply Last reply Reply Quote 0
                        • marcellocM
                          marcelloc
                          last edited by

                          @jamesc:

                          I did, but no mention of the anvil daemon on there, unless i'm missing something obvious?

                          If you are having no issues with anvil, just leave it enabled.

                          Treinamentos de Elite: http://sys-squad.com

                          Help a community developer! ;D

                          1 Reply Last reply Reply Quote 0
                          • K
                            ktims
                            last edited by

                            @marcelloc:

                            Try to paste this options on custom field.

                            This works of course, a decent UI for it was just a suggestion :).

                            1 Reply Last reply Reply Quote 0
                            • S
                              Sn3ak
                              last edited by

                              Can this package be used as a secondary MX in it's current form? ie. No internal email servers.
                              My primary email server is co-located at another location then this pfsense box.

                              I honestly haven't installed the package yet, as I still have a bad taste in my mouth after installing
                              spamd once, and there being no warning that it would automatically start eatting email without it
                              being configured.

                              I've previously used the jails package and used ran a jail for email, but after being blown away for a clean
                              2.0 upgrade, and noticing this package, I thought it would be rather nice if it was able to do this.

                              I have read the thread, and searched the forum / wiki, and either this hasn't been answered, or I'm not searching
                              for the right phrases.

                              I know I could rtfm, and probably make this package do what I need, but that is not really what I am after, unless
                              there is a text box or some such for custom strings that will survive a package reinstall/upgrade/etc.

                              If it's not directly supported, could it be added to the todo list?

                              As a secondary question, (while cringing..)  has anyone tried this package with the spamd package? Just wondering
                              if a warning should be added on here about those.. I'm guessing the way spamd grabs control it wouldn't be compatible
                              with this package..

                              1 Reply Last reply Reply Quote 0
                              • marcellocM
                                marcelloc
                                last edited by

                                This package is not compatible with spamd if you want to use postfix to filter spam and bad configured/fake servers. Both need to be the fist contact from remote server.

                                Afaik, Spamd needs a forward mail server so That's why postfix first release was done for.

                                Postfix package has a lot of reports to help you identify What happened to rejected Message and postscreen(anti zombie)+ rbls + spf + header checks are very good on Message filtering.

                                Something this package does not act as a mail server and no plans to be, so no local mailboxes, just an inbound/outbound filter to another smtp server(s).

                                Mailscanner package implements more filtering options and antivirus to this MTA filtering solution.

                                If you are really good on postfix and believe That you have better config files to run postfix on pfsense, you can install postfix package itself and configure it by hand using filer package. This way all custom setup you have can be applied, just like I supose you did on jails.

                                Postfix forwarder has a custom field to save options That are not on gui.

                                Att,
                                Marcello Coutinho

                                Treinamentos de Elite: http://sys-squad.com

                                Help a community developer! ;D

                                1 Reply Last reply Reply Quote 0
                                • S
                                  Sn3ak
                                  last edited by

                                  @marcelloc:

                                  Something this package does not act as a mail server and no plans to be, so no local mailboxes, just an inbound/outbound filter to another smtp server(s).

                                  A secondary MX wouldn't have local mailboxes (well a dedicated backup MX anyways). and is essentially the same thing, except storing the emails for
                                  a potentially longer period of time if the primary mail server is down.

                                  So, is the answer the same? If so, that's fine, again I can use my Jail solution, but a neat little appliance package would be cool.

                                  1 Reply Last reply Reply Quote 0
                                  • marcellocM
                                    marcelloc
                                    last edited by

                                    Backup mx holding Messages until mx1 is back can be done wih this package. :)

                                    I have also edited previous post while you where answering, take a look.

                                    I think you will like postfix forwarder package. ;)

                                    Treinamentos de Elite: http://sys-squad.com

                                    Help a community developer! ;D

                                    1 Reply Last reply Reply Quote 0
                                    • S
                                      Sn3ak
                                      last edited by

                                      Great, glad to hear. Actually I know very little about postfix, I've historically been a qmail guy.
                                      Any pointers on setting it up as a backup mx? or am I going to need to add custom fields?

                                      I think I will attempt to setup a vm (to be on the safe side) to test this with later this evening
                                      if I get a chance.

                                      1 Reply Last reply Reply Quote 0
                                      • marcellocM
                                        marcelloc
                                        last edited by

                                        Configure your mx1 to accept relay from mx2 and add mx1 on postfix config as an internal server.

                                        Quite simple and full gui support for this setup. :)

                                        Most all options has help,hints and link to oficial postfix documentation.

                                        Just to know, I was a sendmail guy before decide to migrate this antispam solution to postfix.

                                        Treinamentos de Elite: http://sys-squad.com

                                        Help a community developer! ;D

                                        1 Reply Last reply Reply Quote 0
                                        • S
                                          Sn3ak
                                          last edited by

                                          Perfect, I'll be giving it a shot. Thanks for the information.
                                          Yeah, I used sendmail for a # of years before moving to qmail for an anti-spam solution
                                          as amavisd wasn't really cutting it back then.

                                          I'm tired of trying to figure out qmail logs when things break though, so I've been meaning
                                          to try out postfix, and this is the perfect opportunity to kick the tires a little.

                                          1 Reply Last reply Reply Quote 0
                                          • S
                                            Sn3ak
                                            last edited by

                                            Figured I would report my success. The package looks great.
                                            It looks like Anvil Daemon is more or less required, otherwise
                                            it spits out errors in the maillog, and seems to cause a small
                                            connection delay as well (at least on my setup).

                                            I turned off most of the protections, since it is a secondary
                                            MX, and I wasn't doing any filtering previously, at least until
                                            I have a chance to read up more as to what the settings do.

                                            I am however however excited by the Valid recipients from clear
                                            text url option. That will cut out a lot of the junk that gets stuck
                                            in the secondary MX.

                                            I'll need to read more about that, and find out the format of the
                                            text file, and how often it polls, but that is a very nice option.

                                            Thanks for the good work.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.