CVE and update status of the FreeBSD ports tree3,310 unaddressed CVEs in 678 portsAll times are CET
Port details

mail/postfix 3.11.7_4,1

Secure alternative to widely-used Sendmail

Port info

Maintainer
otis@FreeBSD.org
Packages
latest: postfix 3.11.7_4,1, postfix-ldap 3.11.7_4,1, postfix-mongo 3.11.7_4,1, postfix-mysql 3.11.7_4,1, postfix-pgsql 3.11.7_4,1, postfix-sasl 3.11.7_4,1, postfix-sqlite 3.11.7_4,1
Upstream
up to date
Last update
to 3.11.7_4,1 · 85ba298b7e
Quarterly
2026Q4: postfix 3.11.7_3,1, postfix-ldap 3.11.7_3,1, postfix-mongo 3.11.7_3,1, postfix-mysql 3.11.7_3,1, postfix-pgsql 3.11.7_3,1, postfix-sasl 3.11.7_3,1, postfix-sqlite 3.11.7_3,1 · last MFH 8168af0c2e
Formerly
mail/postfix-ldap-sasl until 2021-10-28, mail/postfix-sasl until 2021-10-28
WWW
https://www.postfix.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install postfix
# pkg install postfix-ldap
# pkg install postfix-mongo
# pkg install postfix-mysql
# pkg install postfix-pgsql
# pkg install postfix-sasl
# pkg install postfix-sqlite
installs postfix 3.11.7_4,1, postfix-ldap 3.11.7_4,1, postfix-mongo 3.11.7_4,1, postfix-mysql 3.11.7_4,1, postfix-pgsql 3.11.7_4,1, postfix-sasl 3.11.7_4,1, postfix-sqlite 3.11.7_4,1 from latest; from quarterly (2026Q4) postfix 3.11.7_3,1, postfix-ldap 3.11.7_3,1, postfix-mongo 3.11.7_3,1, postfix-mysql 3.11.7_3,1, postfix-pgsql 3.11.7_3,1, postfix-sasl 3.11.7_3,1, postfix-sqlite 3.11.7_3,1
Port
# cd /usr/ports/mail/postfix && make install clean
# make -C /usr/ports/mail/postfix config  # change options first
Size
1.8 MiB download · 8.4 MiB installed
Depends on
databases/lmdb0 0.9.36_1, databases/tinycdb 0.81, devel/icu 76.1,1, devel/pcre2 10.49, mail/libtlsrpt 0.5.1
License
EPL and IPL10
Creates
user postfix, group mail, maildrop, postfix
Options
9 of 22 on in the package: BLOCKLISTD CDB DOCS EAI LMDB LMDB0 PCRE2 TLS TLSRPT
Show the 13 options that are off
BDB INST_BASE LDAP LMDB1 MONGO MYSQL NIS PGSQL SASL SASLKMIT SASLKRB5 SQLITE TEST
pkg-message
Shown after installing
To use postfix instead of sendmail:
  - clear sendmail queue and stop the sendmail daemons

Run the following commands to enable postfix during startup:
  - sysrc postfix_enable="YES"
  - sysrc sendmail_enable="NONE"

If postfix is *not* already activated in /usr/local/etc/mail/mailer.conf
  - mv /usr/local/etc/mail/mailer.conf /usr/local/etc/mail/mailer.conf.old
  - install -d /usr/local/etc/mail
  - install -m 0644 /usr/local/share/postfix/mailer.conf.postfix /usr/local/etc/mail/mailer.conf

Disable sendmail(8) specific tasks,
add the following lines to /etc/periodic.conf(.local):
  daily_clean_hoststat_enable="NO"
  daily_status_mail_rejects_enable="NO"
  daily_status_include_submit_mailq="NO"
  daily_submit_queuerun="NO"

If you are using SASL, you need to make sure that postfix has access to read
the sasldb file.  This is accomplished by adding postfix to group mail and
making the /usr/local/etc/sasldb* file(s) readable by group mail (this should
be the default for new installs).
Shown after removing
If you remove postfix permanent, adjust / remove the the following file:
  - /usr/local/etc/mail/mailer.conf
Note
Size, dependencies, options and messages are those of postfix.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 163.11.7_4,13.11.7_3,1–
FreeBSD 153.11.7_4,13.11.7_3,1–
FreeBSD 143.11.7_4,13.11.7_3,13.11.7_4,1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 153.11.7_3,13.11.7_3,1–
FreeBSD 143.11.7_3,13.11.7_1,13.11.7_3,1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 3.11.7_4,1.

Fixed (2)

Show 2 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
299271maintainer-feedback? mail/postfix: lmdb version issue fixed in main but not 2026Q4New2026-10-14

Commits (447)

Sahil Tandon (sahil) · 2.9.0,1
Update to 2.9.0 and revise IS_INTERACTIVE logic to account for additional situations.
f4eeae44e9
Doug Barton (dougb) · 2.8.7,1
In the rc.d scripts, change assignments to rcvar to use the literal name_enable wherever possible, and ${name}_enable when it's not, to prepare for the demise of set_rcvar().

In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
83eb2c3700
Sahil Tandon (sahil) · 2.8.7,1
Shorten some OPTION descriptions such that they fit neatly within the dialog(1) box.

PR:		ports/162688
Submitted by:	Jeremy Chadwick <freebsd@jdc.parodius.com>
Feature safe:	yes
d9b2767be3
Sahil Tandon (sahil) · 2.8.7,1
- Update to 2.8.7

Feature safe:	yes
ca51c011bf
Martin Wilke (miwi) · 2.8.5,1
- Restore all patches
b056c883ef
Martin Wilke (miwi) · 2.8.5,1
- Fix build on FreeBSD 10
70c8dd6023
Sahil Tandon (sahil) · 2.8.5,1
- Update to 2.8.5 and point to newer VDA patch
6e168975a0
Sahil Tandon (sahil) · 2.8.4,1
Update to 2.8.4 and use the ports framework to create USERS and GROUPS. Also remove replace() function from pkg-install script.

PR:		ports/158765
Submitted by:	ohauer
d56e5eb7da
Sahil Tandon (sahil) · 2.8.3,1
Update to 2.8.3 and point to newer VDA patch.  Also address the problem described in ports/155885 by passing additional parameters to the upstream install script.

Security:	CVE-2011-1720
4231fb9dfd
Sahil Tandon (sahil) · 2.8.2,1
- Update to 2.8.2
a03f964ebf
Sahil Tandon (sahil) · 2.8.1,1
- Update to 2.8.1
df78628978
Sahil Tandon (sahil) · 2.8.0,1
Reactive VDA support with a new upstream patch released specifically for Postfix version 2.8.0.
87f82fbecf
Sahil Tandon (sahil) · 2.8.0,1
- Unbreak SPF option with new patch for 2.8.0

PR:		ports/154465
Submitted by:	mm
Feature safe:	yes
a45c281baf
Sahil Tandon (sahil) · 2.8.0,1
Set IS_INTERACTIVE if BATCH and PACKAGE_BUILDING are undefined[1]; also, add missing 'ver' in description of the PGSQL option[2].

Prompted by:	dougb[1], wxs[2]
Feature safe:	yes
bd666e6996
Sahil Tandon (sahil) · 2.8.0,1
Update to 2.8.0, tweak CONFLICTS, mark MAKE_JOBS_SAFE and note that the SPF and VDA options are unavailable with this release.

Feature safe:	yes
8b9b030efd
Sahil Tandon (sahil) · 2.7.2,1
Add OPTION for SASL authentication via Dovecot 2.x and warn users if they erroneously elect both 1.x and 2.x.

No bump of PORTREVISION because the default package is
unchanged.
e329c90b81
Sahil Tandon (sahil) · 2.7.2,1
Update to 2.7.2 and modify pkg-install script to check whether Postfix is already enabled in mailer.conf[1].

Submitted by:	ohauer (via email) [1]
4dcd4152c7
Sahil Tandon (sahil) · 2.7.1,1
- Remove dead MASTER_SITE

Reported by:	distilator
8da85835ef
Sahil Tandon (sahil) · 2.7.1,1
- Update optional SPF patch to version 1.1.0 [1] - Fix CONFLICTS [2]

PR:		ports/151134 [1]
Submitted by:	mm@  [1]
Noticed by:	pav@ [2]
f6cbabbc66
Sahil Tandon (sahil) · 2.7.1,1
- Fix IPv6 support in SPF patch

PR:		ports/150749
Submitted by:	mm@
af13eef129
Sahil Tandon (sahil) · 2.7.1,1
- Update VDA patch to version 2.7.0 [1] - Remove "empty variable" assignment from rc script [1] - Re-introduce optional SPF support [2] - Remove default DISTNAME assignment from Makefile - The affected OPTIONS are off by default, so do not   bump PORTREVISION

PR:		[1]: ports/147731
		[2]: ports/150428
Submitted by:	[1]: ohauer@
		[2]: mm@
5552f65cdc
Sahil Tandon (sahil) · 2.7.1,1
- Update to 2.7.1 - Unset INVALID_BDB_VER; Berkeley DB 5.x is now supported

Approved by:	wxs@/itectu@ (mentors, implicit)
8994869c48
Sahil Tandon (sahil) · 2.7.0,1
- Set INVALID_BDB_VER; upstream does not yet support Berkeley DB 5 [1] - Remove OPTION for Kerberos IV - Change my email to @FreeBSD.org

PR:		ports/146371 [1]
Reported by:	Volodymyr Kostyrko <c.kworr@gmail.com> [1]
Approved by:	itetcu@ (mentor)
d8cc9aba6f
Doug Barton (dougb) · 2.7.0,1
Fix plist for the default (non-base) package

Submitted by:	Dimitry Andric <dimitry@andric.com>
Approved by:	maintainer
2c380c2237
Doug Barton (dougb) · 2.7.0,1
Begin the process of deprecating sysutils/rc_subr by s#. %%RC_SUBR%%#. /etc/rc.subr#
1d6b4b3f91
Doug Barton (dougb) · 2.7.0,1
Add an option to install into the base, and related support

Approved by:	maintainer
9ad50695f9
Ion-Mihai Tetcu (itetcu) · 2.7.0,1
- Update to 2.7.0 - users wanting to continue on 2.6 series should use mail/postfix26

PR:		144189
Submitted by:	Sahil Tandon (maintainer)
Feature safe:	yes
7e3fb438eb
Wesley Shields (wxs) · 2.6.5,1
- Add a note about possibly needing to create /etc/periodic.conf if it   does not exist.

Approved by:	Sahil Tandon <sahil@tandon.net> (maintainer)
95e2c31fac
Ion-Mihai Tetcu (itetcu) · 2.6.5,1
Fix build with Kerberbos5 on 8.0 and 9.0 which have new Heimdal.

PR:		141045
Submitted by:	maintainer (Sahil Tandon)
0c4c0e5b3f
Wesley Shields (wxs) · 2.6.5,1
- Update VDA patch to 2.6.5

PR:		ports/138777
Submitted by:	Sahil Tandon <sahil@tandon.net> (maintainer)
Feature safe:	yes
8eb03a0b27
Dag-Erling Smørgrav (des) · 2.6.5,1
Fix build on 9.

Approved by:	maintainer
Reviewed by:	wxs@, keramida@
da09076068
Alexander Nedotsukov (bland) · 2.6.5,1
Update tp 2.6.5

PR:	138301
17b1223748
Wesley Shields (wxs) · 2.6.3,1
- Update to 2.6.3 - Keep the VDA patch at 2.6.2 - Use bsd.port.options.mk

PR:		ports/137460
Submitted by:	olli hauer <ohauer@gmx.de>
Approved by:	Sahil Tandon <sahil@tandon.net> (maintainer)
34dd26d4ea
Giorgos Keramidas (keramida) · 2.6.2_1,1
Now that closefrom() has been merged to 7.X too, we have to patch sys_defs.h of Postfix to use closefrom() for __FreeBSD_version >= 702104 too.

Submitted by:	Sahil Tandon, sahil at tandon.net (maintainer)
Tested by:	wxs (7.X), keramida (head)
0b6a009ebf
Renato Botelho (garga) · 2.6.2_1,1
- un-IGNORE VDA patch for version 2.6.2 - no PORTVERSION bump necessary since this option is off by default

PR:		ports/135902
Submitted by:	Sahil Tandon <sahil@tandon.net>
d61458ea17
Giorgos Keramidas (keramida) · 2.6.2_1,1
Patch the src/util/sys_defs.h file of Postfix to fix the build on FreeBSD-8.0 after the new closefrom() system call was added.

PR:		ports/136459
Submitted by:	Eygene Ryabinkin
Approved by:	erwin (portmgr), Sahil Tandon (maintainer)
44e01fde03
Wesley Shields (wxs) · 2.6.2_1,1
- Cleanup pkg-install script to handle documentation installation correctly.   This resulted in a bizarre case where making a backup package after an   upgrade would fail (ports/135051). - Don't install obsolete files by adding them to ${WRKSRC}/conf/postfix-files. - Whitespace cleanup. - Define and pass DAEMONDIR to the pkg-install script.

PR:		ports/135051
Submitted by:	Takefu Kenji <takefu@airport.fm>, Yarema <yds@CoolRat.org>
Approved by:	sahil@tandon.net (maintainer)
befbdedefe
Ion-Mihai Tetcu (itetcu) · 2.6.2,1
Update to Postfix stable release 2.6.2 which fixes one defect in SASL support:  With plaintext SMTP sessions AND smtpd_tls_auth_only=yes AND  smtp_sasl_auth_enable=yes, the SMTP server logged warnings for  reject_*_sender_login_mismatch, instead of enforcing them.

Revert the default alias_database and alias_maps paths to /etc/aliases (instead
of /etc/mail/aliases) -- the change to the latter was introduced in the
"refactoring" patch (ports/ports/134728) and is incompatible with older
versions of mail/postfix on FreeBSD and inconsistent with how the software is
designed to work upstream.

Finally, we IGNORE= when WITH_VDA is set until the VDA folks release a patch
that definitely works with 2.6.2.  Although I suspect the 2.6.1 patch would
work, I think it's better form to let the VDA folks update their patch.

PR:		135273
Submitted by:	maintainer
1018715be2
Martin Matuska (mm) · 2.6.1_1,1
- Fix install with defined NOPORTEXAMPLES [1] - Do not install clones of man pages [1] - Add POSTFIX_DEFAULT_MTA to SCRIPTS_ENV [2] - Bump PORTREVISION

PR:		ports/135241 [1], ports/123812 [2]
Submitted by:	Sahil Tandon <sahil@tandon.net> (maintainer) [1]
Reported by:	Marco Walraven <m.walraven@terantula.com> [2]
8e145e22ea
Alexander Leidinger (netchild) · 2.6.1,1
- refactor the port to ease maintenance [1] - update to 2.6.1 [1] - remove IGNORE in the VDA case, the patch is available now [2]

[2] is from me (compile tested), maintainer informed.

PR:		134728 [1]
Submitted by:	Yarema <yds@CoolRat.org> [1]
Approved by:	maintainer [1]
3f5ac2708c
Pav Lucistnik (pav) · 2.6.0,1
- Update to 2.6.0 - Transfer maintainership to the submitter

PR:		ports/134497
Submitted by:	Sahil Tandon <sahil@tandon.net>
Approved by:	Vick Khera <vivek@khera.org> (old maintainer)
6e6f6d3e00
Pav Lucistnik (pav) · 2.5.6,1
- Fix non-root installation (use pre-su-install target)

PR:		ports/133790
Submitted by:	jhb
Approved by:	Vick Khera <vivek@khera.org> (maintainer)
787e0e0ecb
Marcus Alves Grando (mnag) · 2.5.6,1
- Update to 2.5.6 - Update VDA patch to 2.5.6
5cdde74c92
Marcus Alves Grando (mnag) · 2.5.5,1
- Update to 2.5.5
e5aa038986
Marcus Alves Grando (mnag) · 2.5.4,1
- Update VDA patch to 2.5.4

PR:		126897
Notified by:	Brian Haun <brian___haun.net>
7d96f3c485
Marcus Alves Grando (mnag) · 2.5.4,1
- Update to 2.5.4 - Update VDA patch to 2.5.3
e1a1580f71
Beech Rintoul (beech) · 2.5.1_2,1
- Fix paths in mail_perams.h

PR:		ports/125133
Submitted by:	Sahil Tandon <sahil@tandon.net>
Approved by:	Vivek Khera <vivek@khera.org> (maintainer)
166443da12
Marcus Alves Grando (mnag) · 2.5.1_2,1
- Fix milter macros (patch from Wietse Venema) [1] - Update VDA patch to 2.5.1 [2]

PR:		121652 [1], 122029 [2]
Submitted by:	dmx___dmx.org.ru [1], ShuenBin Hsu <sbhsu___mail.a6.idv.tw> [2]
9310717632
Marcus Alves Grando (mnag) · 2.5.1_1,1
- Fix data_directory

PR:		121236
Submitted by:	Artis Caune <Artis.Caune___latnet.lv>
4d3a4a18f0
Marcus Alves Grando (mnag) · 2.5.1,1
- Update to 2.5.1 - Mark as IGNORE VDA patch until patch does not apply clean

Requested by:	many
bdd17e317f