CVE and update status of the FreeBSD ports tree3,310 unaddressed CVEs in 678 portsAll times are CET
Port details

mail/postfix-current 3.12.20260925_3,6

Experimental Postfix version

Port info

Maintainer
otis@FreeBSD.org
Packages
latest: postfix-current 3.12.20260925_3,6, postfix-current-ldap 3.12.20260925_3,6, postfix-current-mongo 3.12.20260925_3,6, postfix-current-mysql 3.12.20260925_3,6, postfix-current-pgsql 3.12.20260925_3,6, postfix-current-sasl 3.12.20260925_3,6, postfix-current-sqlite 3.12.20260925_3,6
Upstream
up to date
Last update
to 3.12.20260925_3,6 · 85ba298b7e
Quarterly
2026Q4: postfix-current 3.12.20260925_2,6, postfix-current-ldap 3.12.20260925_2,6, postfix-current-mongo 3.12.20260925_2,6, postfix-current-mysql 3.12.20260925_2,6, postfix-current-pgsql 3.12.20260925_2,6, postfix-current-sasl 3.12.20260925_2,6, postfix-current-sqlite 3.12.20260925_2,6 · last MFH 11116f8834
Formerly
mail/postfix-current-sasl until 2021-10-28
WWW
https://www.postfix.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install postfix-current
# pkg install postfix-current-ldap
# pkg install postfix-current-mongo
# pkg install postfix-current-mysql
# pkg install postfix-current-pgsql
# pkg install postfix-current-sasl
# pkg install postfix-current-sqlite
installs postfix-current 3.12.20260925_3,6, postfix-current-ldap 3.12.20260925_3,6, postfix-current-mongo 3.12.20260925_3,6, postfix-current-mysql 3.12.20260925_3,6, postfix-current-pgsql 3.12.20260925_3,6, postfix-current-sasl 3.12.20260925_3,6, postfix-current-sqlite 3.12.20260925_3,6 from latest; from quarterly (2026Q4) postfix-current 3.12.20260925_2,6, postfix-current-ldap 3.12.20260925_2,6, postfix-current-mongo 3.12.20260925_2,6, postfix-current-mysql 3.12.20260925_2,6, postfix-current-pgsql 3.12.20260925_2,6, postfix-current-sasl 3.12.20260925_2,6, postfix-current-sqlite 3.12.20260925_2,6
Port
# cd /usr/ports/mail/postfix-current && make install clean
# make -C /usr/ports/mail/postfix-current config  # change options first
Size
1.8 MiB download · 8.5 MiB installed
Depends on
databases/lmdb0 0.9.36_1, databases/tinycdb 0.81, devel/icu 76.1,1, devel/pcre2 10.49, mail/libtlsrpt 0.5.1
License
EPL and IPL10
Creates
user postfix, group mail, maildrop, postfix
Options
9 of 22 on in the package: BLOCKLISTD CDB DOCS EAI LMDB LMDB0 PCRE2 TLS TLSRPT
Show the 13 options that are off
BDB INST_BASE LDAP LMDB1 MONGO MYSQL NIS PGSQL SASL SASLKMIT SASLKRB5 SQLITE TEST
pkg-message
Shown after installing
To use postfix instead of sendmail:
  - clear sendmail queue and stop the sendmail daemons

Run the following commands to enable postfix during startup:
  - sysrc postfix_enable="YES"
  - sysrc sendmail_enable="NONE"

If postfix is *not* already activated in /usr/local/etc/mail/mailer.conf
  - mv /usr/local/etc/mail/mailer.conf /usr/local/etc/mail/mailer.conf.old
  - install -d /usr/local/etc/mail
  - install -m 0644 /usr/local/share/postfix/mailer.conf.postfix /usr/local/etc/mail/mailer.conf

Disable sendmail(8) specific tasks,
add the following lines to /etc/periodic.conf(.local):
  daily_clean_hoststat_enable="NO"
  daily_status_mail_rejects_enable="NO"
  daily_status_include_submit_mailq="NO"
  daily_submit_queuerun="NO"

If you are using SASL, you need to make sure that postfix has access to read
the sasldb file.  This is accomplished by adding postfix to group mail and
making the /usr/local/etc/sasldb* file(s) readable by group mail (this should
be the default for new installs).
Shown after upgrading
If you are upgrading from prior postfix version, please see the README
files for recommended changes to your configuration and additional
http://www.postfix.org/COMPATIBILITY_README.html

Incompatible change with snapshot 20200920
==========================================
Internal protocols have changed. You need to "postfix stop" before
updating, or before backing out to an earlier release, otherwise
long-running daemons (pickup, qmgr, verify, tlsproxy, postscreen)
may fail to communicate with the rest of Postfix (warnings, timeouts).

The purpose of this change is to produce better error messages, for
example, when someone configures the discard daemon as a bounce
service in master.cf, or vice versa.

This change will break third-party code that implements a
Postfix-internal protocol such as qpsmtpd. Programs that depend on
Postfix internal details are not supported.
Shown after removing
If you remove postfix permanent, adjust / remove the the following file:
  - /usr/local/etc/mail/mailer.conf
Note
Size, dependencies, options and messages are those of postfix-current.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 163.12.20260925_3,63.12.20260925_2,6–
FreeBSD 153.12.20260925_3,63.12.20260925_2,6–
FreeBSD 143.12.20260925_3,63.12.20260925_2,63.12.20260925_3,6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 153.12.20260925_2,63.12.20260925_2,6–
FreeBSD 143.12.20260925_2,63.12.20260925,63.12.20260925_2,6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 3.12.20260925_3,6.

Fixed (2)

Show 2 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (588)

Olli Hauer (ohauer) · 3.2.20160625,4
- update to 2.3.20160625

20160618
       Bugfix(introduced: 20091121): with the introduction of
       sender_dependent_default_transport_maps, the SMTP daemon
       was not updated. This resulted in false rejects with
       sender-dependent "error" transports. Based on a fix by
       Russell Yanofsky.  Files: global/resolve_clnt.c,
       global/resolve_clnt.h, smtpd/smtpd_check.c, smtpd/smtpd_check.h,
       smtpd/smtpd_milter.c, smtpd/smtpd_resolve.c, smtpd/smtpd_resolve.h.

20160619
       Refinements to the 20160618 fix. For more consistent results
       with sender address validation, use the recipient address
       (if available) as the sender-dependent address resolver
       context.  For better caching, pass sender context with all
       attempts to resolve an email address.  File: smtpd/smtpd.c,
       smtpd/smtpd_check.c, smtpd/smtpd_milter.c.

20160625
       Cleanup: the Postfix SMTP server now passes network address
       and port information to the Cyrus SASL library. Build with
       ``make makefiles "CCARGS=$CCARGS -DNO_IP_CYRUS_SASL_AUTH"''
       for backwards compatibility. Files: makedefs,
       smtpd/smtpd_sasl_glue.c, xsasl/xsasl.h, xsasl/xsasl_cyrus_server.c,
       xsasl/xsasl_server.c.
       Cleanup: dnsblog manpage. File: dnsblog/dnsblog.c.
81d4d3a425
Olli Hauer (ohauer) · 3.2.20160612,4
- update to 3.2-20160612 - fix build with LibreSSL [1]

20160601
        Cleanup: moved parsing of '!' operators from cidr_match.c
        to dict_cidr.c. Files: util/cidr_match.[hc], util/dict_cidr.c,
        util/match_ops.c.

20160604
        Cleanup: made parsing of '!' operators in regexp and pcre
        tables consistent with cidr tables. Files: util/dict_regexp.c,
        util/dict_pcre.c.

20160605
        Cleanup: integer wrap-around detection in the MySQL and
        PostgreSQL clients. This is totally non-critical because
        Postfix strings are size-limited by design. Files:
        global/dict_mysqql.c, global/dict_pgsql.c.

20160607
        Documentation: dnsblog.

20160609
        Documentation: postsuper(1) manpage text for multiple -[dhH]
        options.  File: postsuper/postsuper.c.

20160611
        Cleanup: Postfix SMTP server local IP address and port
        attributes in the policy delegation protocol (attribute
        names: server_address, server_port), in the Milter protocol
        (macro names: {daemon_addr}, {daemon_port}) and in the
        XCLIENT protocol (attribute names: DESTADDR, DESTPORT).
        Files: proto/MILTER_README.html, proto/SMTPD_POLICY_README.html,
        cleanup/cleanup.h, cleanup/cleanup_milter.c, global/mail_proto.h,
        milter/milter.h, smtpd/smtpd.c, smtpd/smtpd.h, smtpd/smtpd_check.c,
        smtpd/smtpd_haproxy.c, smtpd/smtpd_milter.c, smtpd/smtpd_peer.c.

20140612
        Bugfix: missing server address/port conversion. File:
        smtpd/smtpd_peer.c.

Submitted by:	brnrd@ [1]
Obtained from:	http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/mail/postfix/stable/patches/ [1]
b4c8d95b80
Olli Hauer (ohauer) · 3.2.20160527,4
- update to 3.2-20160527

20160526
       Feature: cidr tables now support if/endif and negation (by
       prepending "!" to a pattern), just like regexp and pcre
       tables. The primarily purpose is to improve readability of
       complex tables. Files: util/cidr_match.[hc], util/dict_cidr.c,
       proto/cidr_table.

       Cleanup: make regexp: and pcre: parser warning messages more
       similar.  Files: dict_regexp.c, dict_pcre.c.
6911ecde13
Olli Hauer (ohauer) · 3.2.20160522,4
- update to 3.2-20160522

20160521
 Bugfix (introduced: Postfix beta): the never-used function
 mvect_free() attempted to free memory that it has not
 allocated.  File: util/mvect.c.

 Cleanup: existing if/endif support for pcre and regexp
 tables, in preparation for new if/endif support for cidr
 tables. Files: util/dict_regexp.c, util/dict_pcre.c.
cba6afd041
Olli Hauer (ohauer) · 3.2.20160515,4
- update to 3.2-20160515

Changelog:

20160330
        The collate.pl script by Viktor Dukhovni for grouping Postfix
        logfile records into "sessions" based on queue ID and process
        ID information. Files: auxiliary/collate/*.

20160407
        Treat SASL_FAIL and SASL_NOMEM as temporary errors.
        Markus Benning. File: xsasl/xsasl_cyrus_server.c.

20160410
        Bugfix (introduced: Postfix 2.6): the "bad filetype"
        header_checks pattern falsely rejected Content-Mumble headers
        with ``name="example"; x-apple-part-url="example.com"''.
        Fixed by respecting the ";" separator between content
        attribute values.  Reported by Cedric Knight.  File:
        proto/header_checks.

20160515
        Portability: OpenBSD 6.0. Files: makedefs, util/sys_defs.h,
        dns/dns_str_resflags.c.

MFH:		2016Q2
f008b8d31f
Olli Hauer (ohauer) · 3.2.20160327,4
- update to 3.2-20160327 - remove ${PORTSDIR} from dependency
e0ff0a15ff
Olli Hauer (ohauer) · 3.2.20160314,4
- update to 3.2-20160314 - change comment to reflect this is a  Experimental version - fix CONFLICTS

Changes:
20160227
	Cleanup: remember multiple BCC actions in access maps.
	Files: smtpd/smtpd.h, smtpd/smtpd.c, smtpd/smtpd_check.c,
	smtpd/smtpd_state.c, proto/access.

20160228
	Documentation: STRESS_README. File: proto/STRESS_README.html.

20160229
	Documentation: postmulti manpage. File: postmulti/postmulti.c.

20160305
	Future-proofing: detect integer overflow before it happens.
	After-the-fact detection relies on assumptions about
	undefined behavior that are invalidated by compilers.  Files:
	util/mymalloc.c, util/vstring.c.

20160310
	Bugfix (introduced: Postfix 2.6): the Milter SMFIR_CHGFROM
	(replace sender) request lost the sender_bcc_maps address.
	Fixed by moving some record keeping to the sender output function.
	Files: cleanup/cleanup_envelope.c, cleanup/cleanuop_addr.c,
	cleanup/cleanup_milter.c, cleanup/cleanup.h, regression tests.

20160314
	Future-proofing: detect integer overflow before it happens.
	After-the-fact detection relies on assumptions about
	undefined behavior that are invalidated by compilers. Files:
	global/off_cvt.c.

	Cleanup: include <sys/types.h> once, instead of making it
	system-dependent. File: util/sys_defs.h.

	Cleanup: make sorting in "make depend" locale-independent.
	Files: */Makefile.in.
41d2aa87b4
Olli Hauer (ohauer) · 3.2.20160224,4
- update to postfix 3.2 Snapshot 20160224
c0eebf3a5d
Olli Hauer (ohauer) · 3.0.20160204,4
- s/always build in/always built in/
c6c7727ccf
Olli Hauer (ohauer) · 3.0.20160204,4
- update to 3.0.4 - rework SASL OPTIONS   Dovecot SASL does not need any dependency, from now it will be always build into postfix

- EAI is now mandantory, else mails can be lost
- add support for FreeBSD 10.3 mailwrapper (install mailer.conf into LOCALBASE/mail instead /etc/mail)
- add better reload support to rc script
- display correct path in pkg-message
- add support for postfix-sasl slave port
- remove nativ SPF support, patch is no longer maintained and there are alternatives in the ports tree
- remove VDA support (seems VDA project is dead and unmaintaned)

Many Thanks to all testers!

PR:	195662
PR: 	205162
0891faea7c
Olli Hauer (ohauer) · 3.0.20151003_1,4
- s/SQLITE_USE/SQLITE_USES/
c67b1225c7
Olli Hauer (ohauer) · 3.0.20151003_1,4
- rework pkg-install and pkg-message [1]

- install postfix specific mailer.conf.postfix into DATADIR [2]

- make EAI the default, postfix will reject messages if build
  w.o. EAI and compatibility_level is set to a value >=1 [3]

- use new notation instead PATCH_DIST_STRIP

- bump PORTREVISION

1) detect if the port is installed without TERM, in this case
   do not ask the to make postfix the default mailer and respect
   the env POSTFIX_DEFAULT_MTA. This helps tools like salt,
   ansible, cfengine and puppet during the first package installation.

2) $DATADIR/mailer.conf.postfix can be used by the tools in 1)

3) Issue noted by Melissa Pilgrim by PM
   Short description of the issue:
    If compatibility_level is set to a value >= 1, then postfix set
    smtputf8_enable=yes.  For more information see
     $ postconf -d | grep compatibility_level
    and
     http://www.postfix.org/SMTPUTF8_README.html

MFH:		2016Q1
28eb67e0f7
Dmitry Marakasov (amdmi3) · 3.0.20151003,4
Improve shebangfix framework

- Support multiple values in *_OLD_CMD, i.e. we can now fix both "/usr/bin/python" and "/usr/bin/env python" at the same time
- Default *_OLD_CMD values are now always appended, so you don't need to specify them in individual ports
- Add lua support (depends on USES=lua)
- Add more default values, such as "/usr/bin/env foo" for python, perl, bash, ruby and lua
- Shebangfix now matches whole words, e.g. we will no longer (erroneously) replace "/usr/bin/perl5.005" with "${perl_CMD}5.005" (but "/usr/bin/perl -tt" is still (correctly) replaced with "${perl_CMD} -tt")

Note that *_OLD_CMD items containing spaces must now be quoted (e.g. perl_OLD_CMD=/bin/perl /usr/bin/perl "/usr/bin/env perl")

Update shebangfix usage according to new rules in many ports:

- Remove *_OLD_CMD for patterns now replaced by default
- Quote custom *_OLD_CMD which contain spaces

Fix shebangfix usage in many ports (irrelevant to infrastructure change):

- Remove redundant SHEBANG_LANG (no need to duplicate default langs)
- Remove redundant *_CMD (such as python_CMD=${LOCALBASE}/bin/python${PYTHON_VER} when USES=python is present)
- Never use *_OLD_CMD in REINPLACE_CMD matchers, these should always look for exact string

Approved by:	portmgr (bapt)
Differential Revision:	D3756
67971bd0fb
Olli Hauer (ohauer) · 3.0.20151003,4
- update to 3.0.3 - use target helpers

ChangeLog:
20150722
	The COMPATIBILITY_README text and HTML files were not
	installed.  File: conf/postfix-files.

20150903
	Workaround: disable DNSSEC support for AIX 7x and earlier.
	The AIX 6/7 resolver(5) API defines RES_USE_DNSSEC without
	defining the "ad" bit.  Viktor Dukhovni.  Files: makedefs,
	proto/INSTALL.html, dns/dns.h.

20150923
	Bugfix (introduced: 20120531-617): the Postfix SMTP server
	used a larger-than-1 VSTREAM buffer to read the HAProxy
	connection hand-off information. This broke TLS wrappermode,
	as the TLS helo packet would end up in the plaintext VSTREAM
	buffer. Reported by Lukas Erlacher.  File: smtpd/smtpd_haproxy.c.

20150924
	Bugfix (introduced: 20090216-24): incorrect postmulti error
	message. Reported by Patrik Koetter. Fix by Viktor Dukhovni.
	File: postmulti/postmulti.c.

	Workaround: don't create a new instance when the template
	main.cf and master.cf files are missing, as happens on
	Debian-like systems. Viktor Dukhovni. File: conf/postmulti-script.

20150925
	Bugfix (introduced: 19970309, fixed 20150421 in development
	release): reset errno before calling readdir(), in order
	to distinguish between an end-of-directory and an error
	condition. File: scandir.c.

20150930
	Bugfix (introduced: 20040124): Milter client panic while
	adding a header, because the PREPEND action used the same
	output function for header_checks and body_checks.  Viktor
	Dukhovni and Wietse. File: cleanup/cleanup_message.c.

	Bugfix (introduced: 20031128): xtext_unquote() did not
	propagate error reports from xtext_unquote_append(), causing
	the decoder to return partial ouput, instead of rejecting
	malformed input. Fix by Krzysztof Wojta.  File: global/xtext.c.

20151003
	Bugfix (copied from xtext): uxtext_unquote() did not propagate
	error reports from uxtext_unquote_append(), causing the
	decoder to return partial output, instead of rejecting
	malformed input.  Found by searching the code for similar
	error patterns as with xtext_unquote().  File: global/uxtext.c.

	Bugfix (introduced: 20141130, fixed around 20150607 in
	development release): the DNS multi-query clients forgot
	to save and restore h_errno when evaluating the aggregate
	result. File: dns/dns_lookup.c.
8522c4d346
Jimmy Olgeni (olgeni) · 3.0.20150719,4
Remove trailing whitespace from Makefiles, M-X.
eb8748beda
Olli Hauer (ohauer) · 3.0.20150719,4
- update to 3.0-20150719 (3.0.2)

20150501
       Support for Linux 4.*, and some simplification for future
       makedefs files. Files: makedefs, util/sys_defs.h.

20150718
       Security: opportunistic TLS by default uses "medium" or
       stronger ciphers instead of "export" or stronger. See the
       RELEASE_NOTES file for how to get the old settings back.
       Files: global/mail_params.h, proto/TLS_README.html,
       proto/postconf.proto, and files derived from those.

20150719
       Security: Postfix TLS support by default no longer uses
       SSLv2 or SSLv3.  See the RELEASE_NOTES file for how to get
       the old settings back. Files: global/mail_params.h,
       proto/postconf.proto, and files derived from those.

Incompatible change with Postfix  2.11.6 / 3.0.2
-------------------------------------------------

As of the middle of 2015, all supported Postfix releases no longer
enable "export" grade ciphers for opportunistic TLS, and no longer
use the deprecated SSLv2 and SSLv3 protocols for mandatory or
opportunistic TLS.

These changes are very unlikely to cause problems with server-to-server
communication over the Internet, but they may result in interoperability
problems with ancient client or server implementations on internal
networks.  To address this problem, you can revert the changes with:

Postfix SMTP client settings:

    lmtp_tls_ciphers = export
    smtp_tls_ciphers = export
    lmtp_tls_protocols = !SSLv2
    smtp_tls_protocols = !SSLv2
    lmtp_tls_mandatory_protocols = !SSLv2
    smtp_tls_mandatory_protocols = !SSLv2

Postfix SMTP server settings:

    smtpd_tls_ciphers = export
    smtpd_tls_protocols =
    smtpd_tls_mandatory_protocols = !SSLv2

These settings, if put in main.cf, affect all Postfix SMTP client
or server communication, which may be undesirable. To be more
selective, use "-o name=value" parameter overrides on specific
services in master.cf. Execute the command "postfix reload" to make
the changes effective.
05aa1eb8b1
Olli Hauer (ohauer) · 3.0.20150410,4
- Always use USE_RC_SUBR now that it handles properly PREFIX=/usr
104c105aa2
Bryan Drewery (bdrewery) · 3.0.20150410,4
VDA: Remove misleading '32bit' in description.

This stemmed from older VDA patches which provided a default patch which only
used 'long' for its data types and a '64bit' patch which used 'long long'.
On 32bit systems 'long' is limited to a 2GB quota while on 64bit systems it will
not be. They later renamed the '64bit' patch to be 'bigquota'. They no longer
provide a 'bigquota' patch due to less demand as most systems are 64bit
today and do not have the small 2GB quota limitation with the 'long' type.
The description of '32bit' was not accurate or useful anymore.

Upstream discussion: http://sourceforge.net/p/vda/mailman/message/24713171/
0a7b797cd3
Mathieu Arnold (mat) · 3.0.20150410,4
MASTER_SITES cleanup.

- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
  of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
  no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.

While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.

Also, replace some EXTRACT_SUFX occurences with USES=tar:*.

Checked by:	make fetch-urlall-list
With hat:	portmgr
Sponsored by:	Absolight
60d1a83c2a
Olli Hauer (ohauer) · 3.0.20150410,4
- update to version 3.0.1 - rename OPTIONS to match default name of most ports   - SASL2 -> SASL   - OPENLDAP -> LDAP - install main.cf and master.cf with the @sample macro - rework pkg-install - fix wrong permission for /var/db/postfix [1] - sets WANT_OPENLDAP_SASL option for openldap port when   postfix LDAP_SASL option is set [2] - make usage of new ${opt}_DEPENDS notation

Release 3.0.1 or 3.0.2 is now a strong candidate to become the new
default mail/postfix port (missing components are VDA and SPF).

Changelog:
20150211
	Cleanup: strncasecmp_utf8() streamlining. Files: util/stringops.h,
	util/allascii.c, util/strcasecmp_utf8.c.

20150214
	Bugfix (introduced: Postfix 3.0): missing #ifdef USE_TLS
	inside #ifdef USE_SASL_AUTH.  Viktor Dukhovni. File:
	smtpd/smtpd.c.

20150217
	Cleanup: missing <string.h> include. File: util/allascii.c.

20150221
	Bugfix (introduced: Postfix 3.0): don't append '.' to the
	DNS resource record value, when converting TXT records to
	the string form that is used used by xxx_dns_reply_filter.
	File: dns/dns_strrecord.c.

20150313
	Documentation: incorrect Postfix version number for
	postscreen_dnsbl_timeout. Quanah Gibson-Mount. File:
	postscreen/postscreen.c.

20150324
	Bugfix (introduced: Postfix 2.6): sender_dependent_relayhost_maps
	ignored the relayhost setting in the case of a DUNNO lookup
	result.  It would use the recipient domain instead.  Viktor
	Dukhovni. Wietse took the pieces of code that enforce the
	precedence of a sender-dependent relayhost, the global
	relayhost, and the recipient domain, and put that code
	together in once place so that it is easier to maintain.
	File: trivial-rewrite/resolve.c.

20150328
	Bugfix (introduced: Postfix 1.1.0): post-install expanded
	macros in parameter values when trying to detect parameter
	overrides, causing unnecessary main.cf updates during Postfix
	start-up. Julian Reich, Viktor Dukhovni, and Wietse.  File:
	conf/post-install.

20150330
	Bitrot: prepare for future changes in OpenSSL API. Viktor
	Dukhovni. File: tls_dane.c.

PR:	198215 [1]
PR:	198857 [2]
f11c883807
Olli Hauer (ohauer) · 3.0.20150208,4
- grap mail/postfix ports   (I have some rewrites for them)
eaaac759eb
Frederic Culot (culot) · 3.0.20150208,4
- Reassign to the heap after sahil@'s bit was taken in for safekeeping
87bf1c689a
Olli Hauer (ohauer) · 3.0.20150208,4
- update to postfix 3.0.0 release [1] - cleanup MASTER_SITES - enable new pie parameter (build with -fPIC)

[1] keep the port as postfix-current until we are sure
    the new distributed layout will not change
    (location of libs, dynamicmaps.cf.d, postfix-files.d ...)

Release announcement:
 http://www.postfix.org/announcements/postfix-3.0.0.html

Release Notes:
 ftp://ftp.porcupine.org/mirrors/postfix-release/official/postfix-3.0.0.RELEASE_NOTES

Approved by:	sahil (implicit)
65927632bb
Olli Hauer (ohauer) · 3.0.20150129,4
- update to postfix-3.0-20150129 - fix build on FreeBSD 11 [1] - use OPENSSL=yes instead including Mk/bsd.openssl.mk

- enable TLS as default option.
  Postfix uses a secure default configuration if TLS is not configured.

	$ postconf -d | grep use_tls
	lmtp_use_tls = no
	postscreen_use_tls = $smtpd_use_tls
	smtp_use_tls = no
	smtpd_use_tls = no
	tlsproxy_use_tls = $smtpd_use_tls

Changes:
Many fixes, improvements and cleanups. The list is really to long,
please read the original Changelog on your favor postfix mirror.

[1] Noted by sbruno@
dfa67c29c6
Olli Hauer (ohauer) · 2.12.20141228,4
- update to 2.12-20141228 - use new AUXLIBS_(CDB|LDAP|LMDB|MYSQL|PCRE|PGSQL) build instructions - use OPTIONS_SUB - install posttls-finger - build dynamic AUXLIBS (shared=yes and dynamicmaps=yes) - set META_DIRECTORY to DAEMONDIR (this may change in future to ETCDIR)

Parts from HISTORY (heavily shortened)

20141126
	Cleanup: report nullmx DNS records as "domain does not
	accept mail", instead of "invalid DNS response".  The Postfix
	SMTP client already bounced mail for such domains, and the
	Postfix SMTP server already rejected such domains with
	reject_unknown_sender/recipient_domain. This introduces a
	new SMTP server configuration parameter nullmx_reject_code
	(default: 556).

20141127
	Feature: DNS reply filter, configured with smtp_dns_reply_filter,

20141130
	Cleanup: when searching multiple DNS record types for a
	specific name, and not all queries return the same result
	status, do not blindly return the last query's rcode and
	diagnostic text.  Instead, return rcode and text that is
	consistent with the aggregate result status.

	Documentation: added note on Milter-signing bounces.

20141202
	Cleanup: to increase clarity. rename DNS result status from
	DNS_UNAVAIL to DNS_NULLMX. If someone uses the same zero-length
	name trick with some other resource type, then we will worry
	about that later.

20141203
	Feature: support to match UTF8 domain names against ASCII
	names in TLS certificates.

20141212
	Cleanup: nullmx SMTP reply codes 550 and 556, and enhanced
	status codes X.1.10 and X.7.27. The nullmx SMTP reply codes
	are no longer configurable.

20141224
	Cleanup: the compile-time argument typechecks for attribute-value
	APIs are now by default implemented with inline functions.
	Compile with -DNO_INLINE to implement the argument typechecks
	with ternary operators and unreachable assignments.

20141227
	Feature: smtp_address_verify_target (default: rcpt) that
	determines what protocol stage decides if a recipient is
	valid. Specify "data" for servers that reject recipients
	after the DATA command.

20141228
	Cleanup: the IDNA conversion routines now accept both
	ASCII and UTF8 inputs. The functions als verify that
	either their result is a valid ASCII domain name or that
	it converts into a valid ASCII domain name.

Approved by:	sahil (implicit)
803871c6ee
Chris Rees (crees) · 2.12.20141106_1,4
Finally retire USE_PGSQL
4cb60faedd
Olli Hauer (ohauer) · 2.12.20141106_1,4
- fix wrong /var/spool/postfix permissions   (broken by commit 372368 ,372370)

- bump PORTREVISION
67a15a4df7
Olli Hauer (ohauer) · 2.12.20141106,4
- fix OPTIONS_DEFINE lost in previous commit
617ce12005
Olli Hauer (ohauer) · 2.12.20141106,4
- update to 2.12-20141106 - add OPTION for Email Address Internationalization   (EAI, RFC 6531..6533) [1] - sort OPTIONS_DEFINE - fix build and install for non root users,   (sgid and group for sbin/postdrop and sbin/postqueue was lost if build    as non root and installed with sudo) - install /var/spool/postfix directories with correct owner/mode - use $WRKDIR instead of /tmp

Changes:
20141021
       Per IETF TLS WG consensus, the tls_session_ticket_cipher
       default setting was changed from aes-128-cbc to aes-256-cbc.
       Take that, you quantum computer attackers! Viktor Dukhovni.
       Files: proto/postconf.proto, global/mail_params.h.

20141024
       Cleanup: added $smtpd_mumble_restrictions to the proxy_read_maps
       default setting. File: global/mail_params.h.

       Documentation: different header/body checks for MX service
       and SMTP submissions. File: proto/BUILTIN_FILTER_README.html.

       Cleanup: don't send "bare" original recipient in SMTP DSN
       attributes. File: cleanup/cleanup_addr.c.

       Feature: smtp-sink -N option to suppress DSN announcement.
       File: smtpstone/smtp-sink.c.

20141025
       Bugfix (introduced: Postfix 2,11): core dump when
       smtp_policy_maps specifies an invalid TLS level. Viktor
       Dukhovni. File: smtp/smtp_tls_policy.c.

20141103
       Logging: when a connection is closed, log the request counts
       for unimplemented STARTTLS or AUTH commands separately,
       instead of logging such commands as "unknown". File:
       smtpd/smtpd.c.

20141106
       Cleanup: set errno to ETIMEDOUT after postscreen handshake
       timeout event, so that warnings report the correct error.
       File: tlsproxy/tlsproxy.c.

PR:		194786 [1]
Submitted by:	Mark Martinec
Approved by:	sahil (imlicit)
fd3a5b04f0
Olli Hauer (ohauer) · 2.12.20141020,4
- update to 2.12-20141020 - use PORTDOCS macro - remove check for OSVERSION >= 800037 - fix OPENLDAP_VER usage - always call set-permissions in post-install to set correct spool/postfix/* permissions   this is required with pkg to support non interrupted upgrade

Approved by:	sahil (explicit)
03e1baa871
Matthias Andree (mandree) · 2.12.20140709_2,4
Berkeley DB cleanup, remove versions 4.0 ... 4.7. - Mk/bsd.database.mk rewrite, new default to db5. - db6 is eligible by default only if installed on the system. - Bump PORTREVISION of all ports that directly depend on BerkeleyDB or   where USE_BDB is found in the port's directory - Patch a few ports such that they will pick up or work with newer   versions. - Add UPDATING entry - Drive-by format 

NOTE: please read UPDATING and the Wiki page before proceeding!

Announcement:	http://lists.freebsd.org/pipermail/freebsd-ports-announce/2014-August/000090.html
Wiki reference:	https://wiki.freebsd.org/Ports/BerkeleyDBCleanup
PR:		192690
Approved by:	portmgr (implicit, PORTREVISION bump on unstaged ports)
b50a4b0708
Bryan Drewery (bdrewery) · 2.12.20140709_1,4
- Move RESETPREFIX to default PLIST_SUB

With hat:	portmgr
69f82727cf
Tijl Coosemans (tijl) · 2.12.20140709_1,4
net/openldap24-*: - Convert to USES=libtool and bump dependent ports - Avoid USE_AUTOTOOLS - Don't use PTHREAD_LIBS - Use MAKE_CMD

databases/glom:
- Drop :keepla
- Add INSTALL_TARGET=install-strip

databases/libgda4* databases/libgda5*:
- Convert to USES=libtool and bump dependent ports
- USES=tar:xz
- Use INSTALL_TARGET=install-strip
- Use @sample

databases/libgdamm:
- Drop :keepla
- USES=tar:bzip2
- Use INSTALL_TARGET=install-strip

databases/libgdamm5:
- Add INSTALL_TARGET=install-strip
- Drop --enable-static (inherited from old repocopy)

devel/anjuta x11-toolkits/py-gnome-extras:
- Drop :keepla

dns/powerdns dns/powerdns-devel:
- Convert to USES=libtool
- Add INSTALL_TARGET=install-strip
- Disable static modules
- Stop creating library symlinks with .0 suffix, not needed for dynamically
  opened modules

mail/dovecot2:
- Add USES=libtool

mail/dovecot2-pigeonhole:
- Drop CONFIGURE_TARGET (incorrect for Dragonfly)
- Add USES=libtool and INSTALL_TARGET=install-strip

math/gnumeric:
- USES=libtool tar:xz

Approved by:	portmgr (implicit, bump unstaged ports)
37f54e0f66
Sahil Tandon (sahil) · 2.12.20140709,4
- Update to Postfix 2.12 snapshot 20140709
bb4b3c10ff
Tijl Coosemans (tijl) · 2.12.20140507_1,4
Bump PORTREVISION on all ports with USE_SQLITE=yes or USE_SQLITE=3 that have not been bumped yet after the latest libsqlite3.so library version change.

Approved by:	portmgr (implicit)
a5185846f0
Sahil Tandon (sahil) · 2.12.20140507,4
- Update to 2.12-20140507 - Refactor to support staging and developer mode
3f790928a8
Sahil Tandon (sahil) · 2.12.20140109,4
- Update to Postfix 2.12 Snapshot 20140109 - Set INVALID_BDB_VER [1] - Adopt new LIB_DEPENDS syntax [2] - Add option to support LMDB databases [2] - Modify shell command to quiet warnings on 10+ [3] - Respect upstream Makefile's warning suppression [4]

PR:		[1]: ports/185446
		[2]: ports/185860
		[3]: ports/185857

Submitted by:	[1]: Eero Hanninen <fax@nohik.ee>
		[2]: Yasuhiro KIMURA <yasu@utahime.org>
		[3]: adamw
		[4]: koobs (via email)
050e6f6b71
Pawel Pekala (pawel) · 2.11.20131001,4
Links dynamically to libcdb after databases/tinycdb update

PR:		ports/184666
Submitted by:	me
Approved by:	bapt (portmgr)
866929040b
Mathieu Arnold (mat) · 2.11.20131001,4
Fixup pkgnames.

PR:		ports/184440, ports/184441, ports/184442, ports/184443, ports/184444, ports/184445, ports/184446, ports/184447, ports/184448, ports/184449, ports/184450
Submitted by:	mat
Approved by:	portmgr (bapt)
bcc4614ebb
Sahil Tandon (sahil) · 2.11.20131001,4
- Update to Postfix 2.11 Snapshot 20131001
30b3d0d121
Baptiste Daroussin (bapt) · 2.11.20130825,4
Add NO_STAGE all over the place in preparation for the staging support (cat: mail)
fd61959c15
Andrej Zverev (az) · 2.11.20130825,4
- convert to the new perl5 framework - convert USE_GMAKE to Uses

Approved by:	portmgr (bapt@, blanket)
69b6f05b28
Sahil Tandon (sahil) · 2.11.20130825,4
- Update to Postfix 2.11 Snapshot 20130825
ecb38fb90b
Alex Kozlov (ak) · 2.11.20130405,4
- Remove MAKE_JOBS_SAFE variable

Approved by:	portmgr (bdrewery)
d4041784dc
Sahil Tandon (sahil) · 2.11.20130405,4
Fix a regression that had crept in with r314621.  Do not bump PORTREVISION because this does not affect the default package.
ead5ecb4a2
Sahil Tandon (sahil) · 2.11.20130405,4
- Update to Postfix 2.11 Snapshot 20130405 - Add LICENSE information - Canonicalize 'Created by:' Makefile header - Remove shlib version from LIB_DEPENDS assignment - Correct LDAP_SASL logic - Replace tab with a single space after 'WWW:' in pkg-descr

PR:		ports/177127 (inspired by)
Submitted by:	Yasuhiro KIMURA <yasu@utahime.org>
b18d6715ca
Jason Helfman (jgh) · 2.10.20130113,4
- adopt optionsNG - trim historical header - tighten COMMENT

Approved by: portmgr (bapt)
d3a27657aa
Sahil Tandon (sahil) · 2.10.20130113,4
Update to Postfix 2.10 Snapshot 20130113; mark BROKEN when users try to build WITH_LDAP_SASL but WITHOUT_SASL2.
988a1ecda9
Martin Matuska (mm) · 2.10.20121031_2,4
Update PCRE to 8.32 Introduces the UTF-32 library pcre32 Bump PORTREVISION in dependent ports
b2c4fbb77a