BSD Ports

mail/postfix 3.11.7 NetBSD

Fast, easy to administer, and secure mail transfer agent

System
NetBSD
Repository
pkgsrc
Last update
Commit
a2ca825230
License
cpl-1.0
Categories
mail
Package size
1250.3 KiB, 6752.7 KiB installed

Description

Postfix aims to be an alternative to the widely-used sendmail program. Sendmail is responsible for 70% of all e-mail delivered on the Internet. With an estimated 100 million users, that's an estimated 10 billion (10^10) messages daily. A stunning number.

Although IBM supported the Postfix development, it abstains from control over its evolution. The goal is to have Postfix installed on as many systems as possible. To this end, the software is given away with no strings attached to it, so that it can evolve with input from and under control by its users.

In other words, IBM releases Postfix only once. I will be around to guide its development for a limited time.

In the other systems

SystemPortVersion
NetBSDmail/postfix3.11.7
FreeBSDmail/postfix3.11.7_4,1
DragonFlymail/postfix3.10.1,1
MidnightBSDmail/postfix3.11.7,1

Install

Binary package:

pkgin install postfix

From pkgsrc:

cd /usr/pkgsrc/mail/postfix && make install clean

Dependencies

Run dependencies 1

Commit history 4

DateCommitCreditsLog message
a2ca825230 taca mail/postfix: update to 3.11.7
3.11.7 (2026-09-08) This release addresses medium-impact problems that need to be fixed as some enable remote DOS or SMTP smugggling. SMTP smuggling: * Bug (introduced: Postfix 3.9, date: 20240106) SMTP smuggling was still possible with smtpd_proxy_filter (disabled by default) when the after-filter SMTP server used the default policy settings "smtpd_forbid_bare_newline_exclusions = $mynetworks" and "smtpd_forbid_bare_newline = normalize". Reported by OpenAI Security. Fix by Wietse. As suggested by OpenAI Security, eliminate stray CR characters from the smtpd_proxy_filter input stream. The before-proxy-filter SMTP server already eliminated stray LF. * Bug (introduced: Postfix 3.11, date: 20250917): SMTP smuggling …
d3ae2f9e56 taca mail/postfix: update to 3.11.6
This release addresses medium-impact problems that need to be fixed as some enable remote DOS or policy bypass. These defects were found by Qualys assisted by Claude Mythos Preview, and by OpenAI Security; more than half date from 20 or more years ago. When I implemented Postfix, I knew that there were going to be mistakes. That is the reason why Postfix has its architecture and safety nets. The number of defects may seem large, but considering that they were found in a code base of over 150 thousand lines, the error rate is still lower than what I designed for. Policy bypass: * Bug (introduced: Postfix 2.2, date: 20041102): missing SMTP server resets of MAIL FROM and RCPT TO command state after smtpd_end_of_data_restrictions rejected a message. This resulted …
b77448d117 taca mail/postfix: update to 3.11.5
3.11.5 (2026-07-06) This release addresses medium-impact problems that need to be fixed as some enable remote DOS, or local memory corruption. For more detail, please refer: <https://www.postfix.org/announcements/postfix-3.11.5.html>.
e59599ba16 taca mail/postfix: update to 3.11.4
Postfix 3.11.4 (2026-06-17) This release addresses five low-impact problems that need to be addressed as they can reduce safety margins. * Bug 1 (defect introduced: Postfix 3.1, date 20150607): null pointer read and heap data overread in the Postfix SMTP client's smtp_dns_reply_filter. Problem reported by TristanInSec, found with ASAN. Also reported by other people. Reproduction and real-world impact researched by Wietse. * Bug 2 (defect introduced: Postfix 3.6, date: 20200710): panic (assertion failure and voluntary crash) while parsing a TLSA reply with length 3. Found during code maintenance. See below for root cause, reproduction, and impact. * Bug 3 (Problem introduced: Postfix 2.9, date: 20110205) Robustness: the …