postfwd page

News
Jun 2020: postfwd3 2.03 is available at postfwd-2.03 (tarball). Please refer to the changelog and the manual for more information.
Mar 2019: postfwd pre-built docker images are now based on alpine linux at DockerHub.
Nov 2018: postfwd can be found at GitHub.
Mar 2018: postfwd.org is now available via HTTPS.

Description
postfwd is written in perl to combine complex postfix restrictions in a ruleset similar to those of the most firewalls. The program uses the postfix policy delegation protocol to control access to the mail system before a message has been accepted (please visit http://www.postfix.org/SMTPD_POLICY_README.html for more information). It allows you to choose an action (e.g. reject, dunno) for a combination of several smtp parameters (like sender and recipient address, size or the client's TLS fingerprint).

• Complex combinations of smtp parameters in a single rule
• Macros/ACLs/Groups for frequently used statements
• Combined asynchronous dnsbl lookups with arbitrary actions depending on the results
  (e.g. allows dns whitelists or selective greylisting based on rbl lookup results)
• Automatic deactivation of non-responding dnsbls
• Rate limits for message count and size for any available item (user, client, sender, recipient, ...)
• Scoring system for fine granular access control
• Date/time based rules
• Conditional jumps to certain rules (like iptables -j)
• Internal caching for requests and dns lookups
• Runs as network daemon (no need to spawn processes)
• Built in statistics for rule efficiency analysis

• Quickstart guide
• Online documentation
• postfwd1 vs postfwd2
• Workflow description
• Basic configuration example
• Rate limit examples
• Docker container support
• Download tarball with both versions [350KB]
• How to setup up a chroot environment for postfwd2
• hapolicy high availability and loadbalancing for policy services
• Source v1,v2 | Changelog v1,v2 | development versions | old versions

Help

• postfwd-news
  Here you will receive the latest announcements regarding new versions and related topics. Volume will be very low. Subscribe to this list at http://listi.jpberlin.de/mailman/listinfo/postfwd-news.
• postfwd-users
  Here users will be able to share their experiences and ask questions regarding the setup or configuration of postfwd. Volume will be low. Subscribe to this list at http://listi.jpberlin.de/mailman/listinfo/postfwd-users.
• contact the developer
  If you don't want to use the public mailinglists you are welcome to share your experiences with postfwd by e-mail to info (AT) postfwd (DOT) org.

• Net::DNS
• Net::Server

• NetAddr::IP
• Net::CIDR::Lite
• Digest::MD5
• Time::HiRes
• Storable

To install them you may either run:

	perl -MCPAN -e shell
	install <Module>
	

	perl Makefile.pl
	make
	make test
	make install
	

	apt-get update && apt-get install \
		libnet-dns-perl \
		libnet-server-perl \
		libnetaddr-ip-perl \
		libnet-cidr-lite-perl \
		libtime-hires-perl \
		libstorable-perl
	

	apk update && apk add \
	        perl \
        	perl-net-dns \
	        perl-net-server \
        	perl-netaddr-ip \
	        perl-net-cidr-lite \
        	perl-time-hires \
	        perl-io-multiplex
	

Donations
Development, testing and hosting of postfwd consumes time and ressources. It is and will stay free software (see "License" below). If you want to support this, consider a donation at https://www.paypal.me/postfwd.

License
postfwd is free software and released under BSD license, which basically means that you can do what you want as long as you keep the copyright notice below:

Copyright (c) 2007 - 2019, Jan Peter Kessler
All rights reserved.

Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

• Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
• Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
• Neither the name of the authors nor the names of his contributors may be used to endorse or promote products derived from this software without specific prior written permission.