It’s been a while but Postfix has been updated again, this time with a lot of new functionality. New is the postscreen deamon which we are not going to use yet but it might replace the functionality of SQLgrey in the future. I’ve tested this version on my test machines and my production machine will soon follow. You can read more on the update here.

  • The postscreen daemon (a zombie blocker in front of Postfix) is now included with the stable release. postscreen now supports TLS and can log the rejected sender, recipient and helo information. See the POSTSCREEN_README file for recommended usage scenarios.
  • Support for DNS whitelisting (permit_rhswl_client), and for pattern matching to filter the responses from DNS white/blacklist servers (e.g., reject_rhsbl_client[1..10]).
  • Improved message tracking across SMTP-based content filters; the after-filter SMTP server can log the before-filter queue ID (the XCLIENT protocol was extended).
  • Read-only support for sqlite databases. See sqlite_table(5) and SQLITE_README.
  • Support for ‘footers’ that are appended to SMTP server “reject” responses. See “smtpd_reject_footer” in the postconf(5) manpage.