BSD Ports

mail/postfix 3.11.7,1 MidnightBSD

Secure alternative to widely-used Sendmail

System
MidnightBSD
Repository
mports
Maintainer
[email protected]
Last update
Commit
9a833b0c3a
License
epl, IPL10
Categories
mail

Description

Postfix attempts to be fast, easy to administer, and secure, while at the same time being sendmail compatible enough to not upset existing users. Thus, the outside has a sendmail-ish flavor, but the inside is completely different.

Some features:

Connection cache for SMTP, DSN status notifications, IP version 6, Plug-in support for multiple SASL implementations (Cyrus, Dovecot), TLS encryption and authentication, Configurable status notification message text, Access control per client/sender/recipient/etc, Content filter (built-in, external before queue, external after queue), Berkeley DB database, LDAP database, MySQL database, PostgreSQL database, Maildir and mailbox format, Virtual domains, VERP envelope return addresses and others.

In the other systems

SystemPortVersion
MidnightBSDmail/postfix3.11.7,1
FreeBSDmail/postfix3.11.7_4,1
NetBSDmail/postfix3.11.7
DragonFlymail/postfix3.10.1,1
HardenedBSDmail/postfix3.11.7_1,1
GhostBSDmail/postfix3.11.7,1
OPNsensemail/postfix3.11.3,1

Install

Binary package:

mport install postfix

From mports:

cd /usr/mports/mail/postfix && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	postfix>0:mail/postfix

Dependencies

Configuration

Options name: mail_postfix

OptionDefaultDescription
BDBoff
BLACKLISTDonEnable blacklistd support
CDBoffCDB maps lookups
DOCSoff
EAIonEmail Address Internationalization (SMTPUTF8) support
INST_BASEoffInstall into /usr and /etc/postfix
LDAPoffLDAP maps (uses WITH_OPENLDAP_VER)
LMDBoffLMDB maps
MONGOoff
MYSQLoff
NISoff
PCRE2onUse Perl Compatible Regular Expressions, version 2
PGSQLoff
SASLoffCyrus SASL support (Dovecot SASL is always built in)
SASLKMIToffIf your SASL req. MIT Kerberos5, select this
SASLKRB5offIf your SASL req. Kerberos5, select this
SQLITEoff
TESToffSMTP/LMTP test server and generator
TLSon
TLSRPToffEnable sending RFC 8460 TLS reports
USES
cpe shebangfix ssl
Service scripts
postfix
Conflicts with
courier-0.* opensmtpd opensmtpd-devel postfix postfix-base postfix-ldap-sasl postfix-sasl sendmail sendmail-devel

Files

Manual pages 80
  • access(5)
  • aliases(5)
  • anvil(8)
  • body_checks(5)
  • bounce(5)
  • bounce(8)
  • canonical(5)
  • cidr_table(5)
  • cleanup(8)
  • defer(8)
  • discard(8)
  • dnsblog(8)
  • error(8)
  • flush(8)
  • generic(5)
  • header_checks(5)
  • ldap_table(5)
  • lmdb_table(5)
  • lmtp(8)
  • local(8)
  • mailq(1)
  • master(5)
  • master(8)
  • memcache_table(5)
  • mongodb_table(5)
  • mysql_table(5)
  • nbdb_reindexd(8)
  • newaliases(1)
  • nisplus_table(5)
  • oqmgr(8)
  • pcre_table(5)
  • pgsql_table(5)
  • pickup(8)
  • pipe(8)
  • postalias(1)
  • postcat(1)
  • postconf(1)
  • postconf(5)
  • postdrop(1)
  • postfix(1)
  • postfix-non-bdb(1)
  • postfix-tls(1)
  • postfix-wrapper(5)
  • postkick(1)
  • postlock(1)
  • postlog(1)
  • postlogd(8)
  • postmap(1)
  • postmulti(1)
  • postqueue(1)
  • postscreen(8)
  • postsuper(1)
  • posttls-finger(1)
  • proxymap(8)
  • qmgr(8)
  • qmqp-sink(1)
  • qmqp-source(1)
  • qmqpd(8)
  • qshape(1)
  • regexp_table(5)
  • relocated(5)
  • scache(8)
  • sendmail(1)
  • showq(8)
  • smtp(8)
  • smtp-sink(1)
  • smtp-source(1)
  • smtpd(8)
  • socketmap_table(5)
  • spawn(8)
  • sqlite_table(5)
  • tcp_table(5)
  • tlsmgr(8)
  • tlsproxy(8)
  • trace(8)
  • transport(5)
  • trivial-rewrite(8)
  • verify(8)
  • virtual(5)
  • virtual(8)
pkg-plist 203
  • bin/mailq
  • bin/newaliases
  • bin/qmqp-sink
  • bin/qmqp-source
  • bin/qshape
  • bin/rmail
  • bin/smtp-sink
  • bin/smtp-source
  • %%PFETC%%/LICENSE
  • %%PFETC%%/TLS_LICENSE
  • %%PFETC%%/bounce.cf.default
  • %%PFETC%%/main.cf.default
  • @sample %%PFETC%%/main.cf.sample
  • @sample %%PFETC%%/master.cf.sample
  • @sample %%PFETC%%/access.sample
  • @sample %%PFETC%%/aliases.sample
  • @sample %%PFETC%%/canonical.sample
  • @sample %%PFETC%%/generic.sample
  • @sample %%PFETC%%/header_checks.sample
  • @sample %%PFETC%%/relocated.sample
  • @sample %%PFETC%%/transport.sample
  • @sample %%PFETC%%/virtual.sample
  • lib/postfix/libpostfix-dns.so
  • lib/postfix/libpostfix-global.so
  • lib/postfix/libpostfix-master.so
  • lib/postfix/libpostfix-tls.so
  • lib/postfix/libpostfix-util.so
  • lib/postfix/postfix-cdb.so
  • lib/postfix/postfix-ldap.so
  • lib/postfix/postfix-lmdb.so
  • lib/postfix/postfix-mysql.so
  • lib/postfix/postfix-pcre.so
  • lib/postfix/postfix-pgsql.so
  • lib/postfix/postfix-sqlite.so
  • libexec/postfix/anvil
  • libexec/postfix/bounce
  • libexec/postfix/cleanup
  • libexec/postfix/discard
  • libexec/postfix/dnsblog
  • libexec/postfix/dynamicmaps.cf
  • libexec/postfix/dynamicmaps.cf.d/cdb.cf
  • libexec/postfix/dynamicmaps.cf.d/ldap.cf
  • libexec/postfix/dynamicmaps.cf.d/lmdb.cf
  • libexec/postfix/dynamicmaps.cf.d/mysql.cf
  • libexec/postfix/dynamicmaps.cf.d/pcre.cf
  • libexec/postfix/dynamicmaps.cf.d/pgsql.cf
  • libexec/postfix/dynamicmaps.cf.d/sqlite.cf
  • libexec/postfix/error
  • libexec/postfix/flush
  • libexec/postfix/lmtp
  • libexec/postfix/local
  • libexec/postfix/main.cf.proto
  • libexec/postfix/makedefs.out
  • libexec/postfix/master
  • libexec/postfix/master.cf.proto
  • libexec/postfix/nbdb_reindexd
  • libexec/postfix/nqmgr
  • libexec/postfix/oqmgr
  • libexec/postfix/pickup
  • libexec/postfix/pipe
  • libexec/postfix/post-install
  • libexec/postfix/postfix-files
  • libexec/postfix/postfix-non-bdb-script
  • libexec/postfix/postfix-files.d/cdb-files
  • libexec/postfix/postfix-files.d/ldap-files
  • libexec/postfix/postfix-files.d/lmdb-files
  • libexec/postfix/postfix-files.d/mysql-files
  • libexec/postfix/postfix-files.d/pcre-files
  • libexec/postfix/postfix-files.d/pgsql-files
  • libexec/postfix/postfix-files.d/sqlite-files
  • libexec/postfix/postfix-script
  • libexec/postfix/postfix-tls-script
  • libexec/postfix/postfix-wrapper
  • libexec/postfix/postlogd
  • libexec/postfix/postmulti-script
  • libexec/postfix/postscreen
  • libexec/postfix/proxymap
  • libexec/postfix/qmgr
  • libexec/postfix/qmqpd
  • libexec/postfix/scache
  • libexec/postfix/showq
  • libexec/postfix/smtp
  • libexec/postfix/smtpd
  • libexec/postfix/spawn
  • libexec/postfix/tlsmgr
  • libexec/postfix/tlsproxy
  • libexec/postfix/trivial-rewrite
  • libexec/postfix/verify
  • libexec/postfix/virtual
  • share/man/man1/mailq.1.gz
  • share/man/man1/newaliases.1.gz
  • share/man/man1/postalias.1.gz
  • share/man/man1/postcat.1.gz
  • share/man/man1/postconf.1.gz
  • share/man/man1/postdrop.1.gz
  • share/man/man1/postfix-non-bdb.1.gz
  • share/man/man1/postfix-tls.1.gz
  • share/man/man1/postfix.1.gz
  • share/man/man1/postkick.1.gz
  • share/man/man1/postlock.1.gz

The first 100 are listed.

distinfo 1
FileSizeSHA256
postfix/postfix-3.11.7.tar.gz5.293599e+06a2f3242345753448072177fae83c322a403c9263696996406201145dab8e8625
Master sites 1
  • ${MASTER_SITES:S|$|official/|}

Commit history 3

DateCommitCreditsLog message
9a833b0c3a Lucas Holt mail/postfix: update to 3.11.7 (#1220)
Update `mail/postfix` from 3.11.6 to 3.11.7. Upstream announcement: https://www.postfix.org/announcements/postfix-3.11.7.html This is a security and bug-fix release. Notable fixes: **SMTP smuggling** (both via `smtpd_proxy_filter`, which is disabled by default) - Smuggling remained possible when the after-filter SMTP server used the default `smtpd_forbid_bare_newline_exclusions = $mynetworks` / `smtpd_forbid_bare_newline = normalize` settings. Stray CR is now removed from the proxy filter input stream. - Smuggling was possible when the before-filter server added a `Require-TLS-ESMTP: yes` header, which is on by default (`requiretls_esmtp_header = yes`). **Crashes / memory safety** - Null pointer read in the SMTP server after MAIL FROM, RCPT TO, and …
cfe54e5865 Lucas Holt mail/postfix: update to 3.11.6 (#774)
Updates `mail/postfix` from 3.11.5 to 3.11.6 (upstream release of August 10, 2026). ## Why Wietse describes 3.11.6 as addressing "medium-impact problems that need to be fixed as some enable remote DOS or policy bypass." **No CVEs were assigned**, so vulnerability databases will not flag 3.11.5 — I checked, and the only hits returned for that version are false positives from 2001–2003. **Policy bypass.** The SMTP server failed to reset `MAIL FROM` / `RCPT TO` state after `smtpd_end_of_data_restrictions` rejected a message, desynchronizing client and server. A crafted client could then send `RCPT TO` and `DATA` with no `MAIL FROM` and deliver a second message that skipped `check_recipient_access`, because the recipient counter was …
9c78910127 Lucas Holt mail/postfix: update to 3.11.5 (#700)
Update `mail/postfix` from 3.11.1 to 3.11.5. ## Patch set - **Removed** `patch-src_util_sys__defs.h` — upstream 3.11.5 already has `|| defined(FREEBSD14) || defined(FREEBSD15) || defined(FREEBSD16)` in the 4.4BSD block, so the hunk hard-failed. FreeBSD dropped their equivalent at 3.11.2. Not needed for MidnightBSD regardless, since `patch-makedefs` maps `MidnightBSD.4*` to `SYSTYPE=FREEBSD12`. - **Rewrote** `patch-conf_main.cf` — upstream reshuffled the tail of `conf/main.cf` in 3.11.2 (added a `meta_directory` block; `inet_protocols` moved from ~684 to 694). The old patch reported as cleanly applied but landed at the wrong anchor via fuzz, leaving upstream's trailing `inet_protocols = ipv4` in place. Being last, it would have **overridden** our intended `inet_protocols = all` and …