To use postfix instead of sendmail:
- clear sendmail queue and stop the sendmail daemons
Run the following commands to enable postfix during startup:
- sysrc postfix_enable="YES"
- sysrc sendmail_enable="NONE"
If postfix is *not* already activated in /usr/local/etc/mail/mailer.conf
- mv /usr/local/etc/mail/mailer.conf /usr/local/etc/mail/mailer.conf.old
- install -d /usr/local/etc/mail
- install -m 0644 /usr/local/share/postfix/mailer.conf.postfix /usr/local/etc/mail/mailer.conf
Disable sendmail(8) specific tasks,
add the following lines to /etc/periodic.conf(.local):
daily_clean_hoststat_enable="NO"
daily_status_mail_rejects_enable="NO"
daily_status_include_submit_mailq="NO"
daily_submit_queuerun="NO"
If you are using SASL, you need to make sure that postfix has access to read
the sasldb file. This is accomplished by adding postfix to group mail and
making the /usr/local/etc/sasldb* file(s) readable by group mail (this should
be the default for new installs).
Shown after removing
If you remove postfix permanent, adjust / remove the the following file:
- /usr/local/etc/mail/mailer.conf
Note
Size, dependencies, options and messages are those of postfix.
Packages by version and architecture
latest
FreeBSD version
amd64
aarch64
i386
FreeBSD 16
3.11.7_4,1
3.11.7_3,1
–
FreeBSD 15
3.11.7_4,1
3.11.7_3,1
–
FreeBSD 14
3.11.7_4,1
3.11.7_3,1
3.11.7_4,1
quarterly (2026Q4)
FreeBSD version
amd64
aarch64
i386
FreeBSD 15
3.11.7_3,1
3.11.7_3,1
–
FreeBSD 14
3.11.7_3,1
3.11.7_1,1
3.11.7_3,1
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by pkg audit for the packaged version 3.11.7_4,1.
Fixed (2)
Show 2 fixed
VuXML entries whose affected range the packaged version has left.
maintainer-feedback? mail/postfix: lmdb version issue fixed in main but not 2026Q4
New
2026-10-14
Commits (447)
Baptiste Daroussin (bapt) · 3.11.7_4,1
databases/lmdb: allow to install both 0.x and 1.x together
LMDB 1.0 and the legacy 0.9 ABI cannot be mixed, the datanase format are
incompatibles as well.
Rename or relocate everything databases/lmdb0 installs so that it no
longer overlaps with databases/lmdb:
- the utilities are now mdb_copy0, mdb_dump0, mdb_load0 and mdb_stat0
- the header is include/lmdb0/lmdb.h
- the linker name is liblmdb0.so, the shared object keeps its ABI name
liblmdb.so.0 so already linked programs are unaffected
- the pkg-config file is lmdb0.pc
A compatibility prefix holding the previous layout is also installed
under ${PREFIX}/lmdb0/ (include/, lib/ and libdata/pkgconfig/) so that
build systems which expect to find lmdb.h and -llmdb relative to a
single directory only need a path change.
Now all ports should migrate to lmdb 1.X and use the lmdb 0.9 port to ease
in the migration path, lmdb, the lmdb 0.x is supposed to get removed at
some point.
Approved by: mat (portmgr)
Reviewed by: mat
Differential Revision: https://reviews.freebsd.org/D60741
mail/postfix: Depend on databases/lmdb
As the breaking change introduced in lmdb 1.0.0 has been reverted
since lmdb 1.0.1, change the dependency back to databases/lmdb
And while here, also replace the hardwired include and library
paths and named with pkgconfig.
databases/lmdb0: Add port for LMDB 0.9.x legacy ABI
LMDB 1.0 introduced an incompatible on-disk format change and subtle
API breakage: applications that compiled cleanly against 1.0 headers
could fail silently at run time. Known affected ports include dns/knot3,
mail/bogofilter, and mail/postfix; the postfix issue has been confirmed
upstream. Linux distributions such as Arch Linux have observed the same
breakage. Samba can also be affected in certain configurations.
Because the regression is not detectable in an -exp build run -- the
postfix failure only manifests at run time, and bogofilter was caught
only because post-build self-tests happen to exercise this path -- we
cannot rely on package builds to validate the 1.0 upgrade.
This commit introduces databases/lmdb0 as a holding port for the 0.9.35
release, pinned to the 0.x branch with PORTSCOUT=limit:^0. and mutually
conflicting with databases/lmdb, which retains 1.0. The two packages
cannot be installed simultaneously, but having lmdb0 available means:
* Ports known to require the 0.9 ABI can declare an explicit dependency
on databases/lmdb0 until they are validated against 1.0.
* Users with existing databases in the 0.9 format can still access the
mdb_dump and mdb_load utilities to migrate data before upgrading.
* The package conflict prevents accidental mixing.
All 50 direct dependents of databases/lmdb are redirected to
databases/lmdb0 for now with a PORTREVISION bump, effectively restoring
the tree to the state prior to the LMDB 1.0 update. Once all dependent
ports are validated against LMDB 1.0, they will be moved back to
databases/lmdb and databases/lmdb0 will be removed.
PR: ports/296530
mail/postfix: Use BLOCKLIST instead of BLACKLIST
- Starting from FreeBSD version 1500000, prefer the new blocklist
nomenclature.
- Enable TLSRPT by default
PR: 294083
mail/postfix: Enable CDB and LMDB by default
Adding these solves a cross-compatibility problem with Linux distros
that have dropped bdb support. Per Postfix's document[1] on it, lmdb
and cdb are the replacements for hash and btree, respectively.
[1] http://www.postfix.org/NON_BERKELEYDB_README.html
PR: 293852
mail/postfix: Update to 3.11.1
This update brings some possibly breaking changes:
- Postfix 3.11.0:
- TLS
- smtp_tls_security_level now defaults to "may" when Postfix is built with
TLS support and compatibility_level >= 3.11
- RFC 8689 REQUIRETLS support added: requires strong authentication
(DANE/STS) from all servers in the forward path that announce REQUIRETLS
- TLS logging now includes desired vs. actual security level enforcement
status and REQUIRETLS policy enforcement details
- New smtp_tls_enforce_sts_mx_patterns parameter (default: yes) ensures
MX hostname matching for MTA-STS
- OpenSSL 3.5+ changes the tls_eecdh_auto_curves default to avoid
protocol ossification (post-quantum cryptography prep)
- Other
- milter_default_action default changed from "tempfail" to "shutdown"
- JSON output support added to postconf, postalias, postmap, postmulti
- Deprecation warnings now logged for obsolete parameters (DEPRECATION_README)
- Postfix 3.11.1 (bug fixes only):
- Fix alias_maps error when default_database_type is not set in main.cf
- Fix buffer over-read when enhanced status codes lack trailing text
(e.g. "5.7.2" with no subsequent text) in access tables, header/body
checks, rbl_reply_maps, and default_rbl_reply; present since 3.0
- Fix null pointer dereference in nbdb_reindexd(8) due to service_name
not being propagated (regression since 3.3)
- Fix spurious startup error from nbdb_reindexd(8) when
non_bdb_migration_level disables automatic re-indexing
mail/postfix: Fix build on 15.0 with SASLKRB5
Kerberos in 15.0 does not provide the old libraries.
PR: 291605
Reported by: Christian Hennig <zeha@ccsej.de>
mail/postfix: Update to 3.10.3
And while here, also address some blacklistd-related improvements,
namely in postscreen and relay check.
PR: 287463
Co-authored-by: bc979@lafn.org
mail/postfix: Update to 3.8.4
This release adds support to defend against an email spoofing attack
(SMTP smuggling) on recipients at a Postfix server. For background, see
https://www.postfix.org/smtp-smuggling.html.
mail/postfix: Update to 3.8.0
The most notable change is that starting from 3.8.0, postfix
supports SRV DNS records lookups in SMTP and LMTP clients.
Release announcement:
https://www.postfix.org/announcements/postfix-3.8.0.html
Mk/**ldap.mk: Convert USE_LDAP to USES=ldap
Convert the USE_LDAP=yes to USES=ldap and adds the following features:
- Adds the argument USES=ldap:server to add openldap2{4|5|6}-server as
RUN_DEPENDS
- Adds the argument USES=ldap<version> and replaces WANT_OPENLDAP_VER
- Adds OPENLDAP versions in bsd.default-versions.mk
- Adds USE_OPENLDAP/WANT_OPENLDAP_VER in Mk/bsd.sanity.mk
- Changes consumers to use the features
Reviewed by: delphij
Approved by: portmgr
Differential Revision: https://reviews.freebsd.org/D38233
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)