pfSense Gold Subscription

Author Topic: Postfix - antispam and relay package  (Read 85388 times)

0 Members and 1 Guest are viewing this topic.

Offline mince69meat

  • Newbie
  • *
  • Posts: 11
  • Karma: +0/-0
    • View Profile
Re: Postfix - antispam and relay package
« Reply #105 on: November 30, 2011, 12:47:27 am »
to patch 2.2 to accept mynetworks,BACKUP /usr/local/pkg/postfix.inc to /root dir and then edit /usr/local/pkg/postfix.inc to modify postfix declaration.

Do not backup postfix.inc file on same dir, it will break your boot.

look for 'postscreen_access_list=' and include permit_mynetworks:
postscreen_access_list = permit_mynetworks,\n\t\t\tcidr:/usr/local/etc/postfix/cal_cidr\n"

look for 'smtpd_recipient_restrictions=' (02 times in file) and include permit_mynetworks
smtpd_recipient_restrictions = permit_mynetworks,reject_unauth_destination,

save file, Go to custom options in gui, declare 'mynetworks' list save config and check main.cf file in view configuration tab
Code: [Select]
Examples:
mynetworks = 127.0.0.0/8 168.100.189.0/28
mynetworks = !192.168.0.1, 192.168.0.0/28
mynetworks = 127.0.0.0/8 168.100.189.0/28 [::1]/128 [2001:240:587::]/64
"mynetworks_style = host"
"mynetworks_style = subnet"
"mynetworks_style = class"
reference: http://www.postfix.org/postconf.5.html

is this line right the middle part (tcidr) just don't seem right?
postscreen_access_list = permit_mynetworks,\n\t\t\tcidr:/usr/local/etc/postfix/cal_cidr\n"

Offline mince69meat

  • Newbie
  • *
  • Posts: 11
  • Karma: +0/-0
    • View Profile
Re: Postfix - antispam and relay package
« Reply #106 on: November 30, 2011, 02:46:49 am »
hope someone can help with this one, have multi wan and want postfix to send mail out of non default wan gateway, tried smtp_bind_address = xxx.xxx.xxx.xxx and it works sendding out but then incoming mail will not forward to internal mail server, any hint want to try either on pf firewall or postfix would be great

Mince

Online marcelloc

  • Hero Member
  • *****
  • Posts: 9996
  • Karma: +4/-0
    • View Profile
Re: Postfix - antispam and relay package
« Reply #107 on: November 30, 2011, 04:54:16 am »
Did you created a wan rule to accept incoming traffic on this ip?

Another way to do it is listening postfix on loopback and then create inbound and outbound nat to your ip aliases or carp.

Quote
is this line right the middle part (tcidr) just don't seem right?
postscreen_access_list = permit_mynetworks,\n\t\t\tcidr:/usr/local/etc/postfix/cal_cidr\n"
Just include the 'permit_mynetworks,' at The beginning of postscreen_access_list.
« Last Edit: November 30, 2011, 04:59:09 am by marcelloc »

Online marcelloc

  • Hero Member
  • *****
  • Posts: 9996
  • Karma: +4/-0
    • View Profile
Re: Postfix - antispam and relay package
« Reply #108 on: December 01, 2011, 10:46:28 am »
Hi everybody,

I've just published package version 2.3 with many improvements. check first post for screen shots

main improvements:
  • sqlite export option to allow multiple box admins to search mail in only one box
  • new database structure
  • queue gui tab
  • more search options
  • wildcard support in search
  • postfix version 2.8.7 for x64bits
  • widget options to prevent memory limit reach in dashboard
  • apply permissions to non adminis users, so they can only search mail or view queue
  • include mynetworks to allow internal clients/hosts to send mail through postfix forwarder


Offline mince69meat

  • Newbie
  • *
  • Posts: 11
  • Karma: +0/-0
    • View Profile
Re: Postfix - antispam and relay package
« Reply #109 on: December 01, 2011, 11:09:39 am »
hi all, first off, fantastic work on 2.3 :-)

now on a PF x86 box we have

Downloading http://files.pfsense.org/packages/8/All/perl-5.12.4_3.tbz ...  could not download from there or http://ftp2.FreeBSD.org/pub/FreeBSD/ports/i386/packages-8.1-release/All/perl-5.12.4_3.tbz.
of perl-5.12.4_3 failed!

x64 box all seens fine so far will play alot more and report back soon, hopping the above error is just waitting for the ports to update

Mince

Online marcelloc

  • Hero Member
  • *****
  • Posts: 9996
  • Karma: +4/-0
    • View Profile
Re: Postfix - antispam and relay package
« Reply #110 on: December 01, 2011, 11:18:42 am »
mince69meat,

thanks for your feedback.

I've just fixed 32bits perl version. try again in 15minutes.

Offline darklogic

  • Full Member
  • ***
  • Posts: 175
  • Karma: +0/-0
    • View Profile
Re: Postfix - antispam and relay package
« Reply #111 on: December 01, 2011, 05:08:24 pm »
Excellent work marcelloc, This package is really coming along very nice. Seems to be working good. The only thing I noticed after doing an update, was all my configuration seetings stayed as was, but I had to re-add my domain and point it to the internal mail server for some reason?

Thanks for all your hard work.

Offline mince69meat

  • Newbie
  • *
  • Posts: 11
  • Karma: +0/-0
    • View Profile
Re: Postfix - antispam and relay package
« Reply #112 on: December 01, 2011, 07:42:22 pm »
hate saying when there is somthing wrong as it feels like im ungreatfull, that said here it comes lol

pkg_add -r MailScanner don't work on both x86 & x64 "Error: Unable to get ftp://ftp.freebsd.org/pub/FreeBSD/ports/amd64/packages-8.1-release/Latest/MailScanner.tbz: File unavailable (e.g., file not found, no access)"

if you have the "Use Third part antispam" ticked it blocks outgoing mail and the outgoing mail logs report the mail as incoming

maybe warn not to tick untill mailscanner installed or have i got it wrong and VA is installed?

sorry for not getting back sooner feel asleep been working long hours, x86 installing installing now but noticed when reinstalling a newer virsion installing and now we have 2 installs pkg_info shows
perl-5.10.1_3       Practical Extraction and Report Language
perl-5.12.4_2       Practical Extraction and Report Language

not tested properly so take as just could be bug, think the logging is not loging incoming and out going properly as it seems to be logging the recipiant as the sender in some cases, more than likely a bounce massage but it should be from postmaster, will keep an eye on it but think its more than likely my bad and readding it wrong.

any tests I can do to help out just say and it will be done, as always respect, great work :-)

you might want to surgest in info below mynetworks to add 127.0.0.0/8 if adding custom unless you have this taken care of else where

there is 2 mynetworks_style = host in main.cf

Mince
« Last Edit: December 01, 2011, 08:53:03 pm by mince69meat »

Online marcelloc

  • Hero Member
  • *****
  • Posts: 9996
  • Karma: +4/-0
    • View Profile
Re: Postfix - antispam and relay package
« Reply #113 on: December 01, 2011, 09:07:14 pm »
Darklogic,

I've moved domains to it's own tab. That's why you needed to config again.

Online marcelloc

  • Hero Member
  • *****
  • Posts: 9996
  • Karma: +4/-0
    • View Profile
Re: Postfix - antispam and relay package
« Reply #114 on: December 01, 2011, 09:13:50 pm »
mince69meat,

I've started testing mailscanner package and it only works with perl version 5.10. So I've changed postfix perl dependencie from 5.12 to 5.10.

Remove both manually with pkg_delete and then reinstall package.


When you check mailscanner, you tell postfix to hold all messages, thats why you have no mail working.


I'm going to publish tomorrow the mailscanner-dev package until it get stable enough to a RELEASE version.
« Last Edit: December 01, 2011, 09:46:31 pm by marcelloc »

Online marcelloc

  • Hero Member
  • *****
  • Posts: 9996
  • Karma: +4/-0
    • View Profile
Re: Postfix - antispam and relay package
« Reply #115 on: December 05, 2011, 05:25:48 pm »
package version 2.3.1 is out with mailscanner integration (logs + options).

also mailscanner-dev 0.1 is out too.

I will start a new tread for it.

Just be sure to do have perl specific version perl-5.10.1_3.

Mailscanner-dev package uses freebsd 8.2 packages, so do not try it with any other perl version.

if you have any other perl version, i suggest you to uninstall it, any p5-module and maybe sqlite version prior to 3.7.4 you find with pkg_add.

After removing it, close console and try to install packages.


Online marcelloc

  • Hero Member
  • *****
  • Posts: 9996
  • Karma: +4/-0
    • View Profile
Re: Postfix - antispam and relay package
« Reply #116 on: December 16, 2011, 03:41:36 pm »
package version 2.3.2 is out with check_sender gui option.

perl dependencie is back to 5.12 for mailscanner 4.83.5 integration.

Offline mince69meat

  • Newbie
  • *
  • Posts: 11
  • Karma: +0/-0
    • View Profile
Re: Postfix - antispam and relay package
« Reply #117 on: December 22, 2011, 05:33:08 am »
package version 2.3.2 is out with check_sender gui option.

perl dependencie is back to 5.12 for mailscanner 4.83.5 integration.

postfix-2.8.7,1.tbz
dose not install on either x86 or x64 :-(
shows as version 2.3.3 also

Mince

Online marcelloc

  • Hero Member
  • *****
  • Posts: 9996
  • Karma: +4/-0
    • View Profile
Re: Postfix - antispam and relay package
« Reply #118 on: December 22, 2011, 05:52:46 am »
files.pfsense.org are offline, wait some time and try again.

Offline expert_az

  • Full Member
  • ***
  • Posts: 147
  • Karma: +0/-0
    • View Profile
Re: Postfix - antispam and relay package
« Reply #119 on: December 31, 2011, 01:31:20 am »
marcelloc thank you for your great job,very userfull and helpfull package i ever used on pfsense.
any plans  DKIM(opendkim) support for outgoing mails?