BSD Ports

mail/tumgreyspf 1.38_3 DragonFly

External policy checker for the postfix mail server

System
DragonFly
Repository
DPorts
Maintainer
[email protected] (as in FreeBSD)
License
GPLv2
Categories
mail
Package size
22.1 KiB, 68.4 KiB installed

Description

Tumgreyspf, an external policy checker for the postfix mail server. It can optionally greylist and/or use spfquery to check SPF records to determine if email should be accepted by your server.

Because of its design, legitimate e-mail is never trapped or rejected. Only spam and viruses are caught. Since adding it to our mail server (which also uses Spam Assassin, ClamAV, and an outsourced anti-spam system), our spam level has dropped by an order of magnitude.

It uses the file-system as its database, no additional database is required to use it.

In the other systems

The newest version among them is 1.38, as upstream numbers it.

SystemPortVersionVulnerabilitiesStatusMaintainerLast update
DragonFlymail/tumgreyspf1.38_3 newestnone known-[email protected]-
FreeBSDmail/tumgreyspf1.38_3 newestnone known-[email protected]-
HardenedBSDmail/tumgreyspf1.38_3 newestno data-[email protected]-
GhostBSDmail/tumgreyspf1.38_3 newestno data-[email protected]-

Install

Binary package:

pkg install tumgreyspf

From DPorts:

cd /usr/dports/mail/tumgreyspf && make install clean

Dependency graph

Ports that need it on the left, what it needs to run on the right; at most 8 of each. "Dependencies" below lists them all.

Dependencies

Run dependencies 2

No port depends on this one.

Configuration

No options to configure.

Service scripts
none

Message after installing

#
# To configure Postfix
#

Add to your postfix master.cf:

tumgreyspf  unix  -       n       n       -       -       spawn
  user=nobody argv=/usr/local/bin/python3.11 /usr/local/bin/tumgreyspf

Next, main.cf must be configured so that "smtpd_sender_restrictions"
includes a call to the tumgreyspf policy filter.  If you already have
a "smtpd_sender_restrictions" line(s), you can add the following line
anywhere after the line which reads "reject_unauth_destination".

check_policy_service unix:private/tumgreyspf

WARNING: It's very important that you have
"reject_unauth_destination" before the "check_policy_service".  If
you do not, your system may be an open relay.

So, for example, a minimal "smtpd_sender_restrictions" may look like:

smtpd_sender_restrictions = reject_unauth_destination,
                            check_policy_service unix:private/tumgreyspf

You will also need to have a line in the main.cf which reads:

tumgreyspf_time_limit = 3600

Please consult the postfix documentation for more information on
these and other settings you may wish to have in the
"smtpd_recipient_restrictions" configuration.