CVE and update status of the FreeBSD ports tree3,310 unaddressed CVEs in 678 portsAll times are CET
Port details

mail/postfix 3.11.7_4,1

Secure alternative to widely-used Sendmail

Port info

Maintainer
otis@FreeBSD.org
Packages
latest: postfix 3.11.7_4,1, postfix-ldap 3.11.7_4,1, postfix-mongo 3.11.7_4,1, postfix-mysql 3.11.7_4,1, postfix-pgsql 3.11.7_4,1, postfix-sasl 3.11.7_4,1, postfix-sqlite 3.11.7_4,1
Upstream
up to date
Last update
to 3.11.7_4,1 · 85ba298b7e
Quarterly
2026Q4: postfix 3.11.7_3,1, postfix-ldap 3.11.7_3,1, postfix-mongo 3.11.7_3,1, postfix-mysql 3.11.7_3,1, postfix-pgsql 3.11.7_3,1, postfix-sasl 3.11.7_3,1, postfix-sqlite 3.11.7_3,1 · last MFH 8168af0c2e
Formerly
mail/postfix-ldap-sasl until 2021-10-28, mail/postfix-sasl until 2021-10-28
WWW
https://www.postfix.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install postfix
# pkg install postfix-ldap
# pkg install postfix-mongo
# pkg install postfix-mysql
# pkg install postfix-pgsql
# pkg install postfix-sasl
# pkg install postfix-sqlite
installs postfix 3.11.7_4,1, postfix-ldap 3.11.7_4,1, postfix-mongo 3.11.7_4,1, postfix-mysql 3.11.7_4,1, postfix-pgsql 3.11.7_4,1, postfix-sasl 3.11.7_4,1, postfix-sqlite 3.11.7_4,1 from latest; from quarterly (2026Q4) postfix 3.11.7_3,1, postfix-ldap 3.11.7_3,1, postfix-mongo 3.11.7_3,1, postfix-mysql 3.11.7_3,1, postfix-pgsql 3.11.7_3,1, postfix-sasl 3.11.7_3,1, postfix-sqlite 3.11.7_3,1
Port
# cd /usr/ports/mail/postfix && make install clean
# make -C /usr/ports/mail/postfix config  # change options first
Size
1.8 MiB download · 8.4 MiB installed
Depends on
databases/lmdb0 0.9.36_1, databases/tinycdb 0.81, devel/icu 76.1,1, devel/pcre2 10.49, mail/libtlsrpt 0.5.1
License
EPL and IPL10
Creates
user postfix, group mail, maildrop, postfix
Options
9 of 22 on in the package: BLOCKLISTD CDB DOCS EAI LMDB LMDB0 PCRE2 TLS TLSRPT
Show the 13 options that are off
BDB INST_BASE LDAP LMDB1 MONGO MYSQL NIS PGSQL SASL SASLKMIT SASLKRB5 SQLITE TEST
pkg-message
Shown after installing
To use postfix instead of sendmail:
  - clear sendmail queue and stop the sendmail daemons

Run the following commands to enable postfix during startup:
  - sysrc postfix_enable="YES"
  - sysrc sendmail_enable="NONE"

If postfix is *not* already activated in /usr/local/etc/mail/mailer.conf
  - mv /usr/local/etc/mail/mailer.conf /usr/local/etc/mail/mailer.conf.old
  - install -d /usr/local/etc/mail
  - install -m 0644 /usr/local/share/postfix/mailer.conf.postfix /usr/local/etc/mail/mailer.conf

Disable sendmail(8) specific tasks,
add the following lines to /etc/periodic.conf(.local):
  daily_clean_hoststat_enable="NO"
  daily_status_mail_rejects_enable="NO"
  daily_status_include_submit_mailq="NO"
  daily_submit_queuerun="NO"

If you are using SASL, you need to make sure that postfix has access to read
the sasldb file.  This is accomplished by adding postfix to group mail and
making the /usr/local/etc/sasldb* file(s) readable by group mail (this should
be the default for new installs).
Shown after removing
If you remove postfix permanent, adjust / remove the the following file:
  - /usr/local/etc/mail/mailer.conf
Note
Size, dependencies, options and messages are those of postfix.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 163.11.7_4,13.11.7_3,1–
FreeBSD 153.11.7_4,13.11.7_3,1–
FreeBSD 143.11.7_4,13.11.7_3,13.11.7_4,1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 153.11.7_3,13.11.7_3,1–
FreeBSD 143.11.7_3,13.11.7_1,13.11.7_3,1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 3.11.7_4,1.

Fixed (2)

Show 2 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
299271maintainer-feedback? mail/postfix: lmdb version issue fixed in main but not 2026Q4New2026-10-14

Commits (447)

Marcus Alves Grando (mnag) · 2.4.6,1
- Update to 2.4.6 - Update VDA patch to 2.4.5 - Teach postfix to 8.0 [1]

PR:		117304 [1]
Submitted by:	Oliver Peter <hoschi___mouhaha.de> [1]
Approved by:	maintainer
bb970e52a0
Edwin Groothuis (edwin) · 2.4.5,1
Remove leftover if

Submitted by:	Per olof Ljungmark <peo@intersonic.se>
0afd7f30fa
Edwin Groothuis (edwin) · 2.4.5,1
Remove support for OSVERSION < 5
bdd556264e
Xin LI (delphij) · 2.4.5,1
Allow dovecot and cyrus SASL to work together.

PORTREVISION intentionally not bumped.

Submitted by:	baptiste.daroussin@gmail.com
PR:		ports/110678
Approved by:	maintainer
635c03c647
Marcus Alves Grando (mnag) · 2.4.5,1
- Update to 2.4.5 - Update VDA to 2.4.4
4a23c84915
Marcus Alves Grando (mnag) · 2.4.3,1
- Update VDA patch to 2.4.3-vda-ng
b0bf4f3de2
Marcus Alves Grando (mnag) · 2.4.3,1
- Update to 2.4.3
9c2b44d82e
Marcus Alves Grando (mnag) · 2.4.1,1
- Update to 2.4.1
40e1772384
Marcus Alves Grando (mnag) · 2.4.0,1
- Remove SASL1 support. security/cyrus-sasl will be removed soon.

PR:		111564, 111565, 111566
Submitted by:	gabor (partially)
Notified by:	gabor
0c43565a87
Marcus Alves Grando (mnag) · 2.4.0,1
- Update VDA patch to 2.4.0
bac004594a
Marcus Alves Grando (mnag) · 2.4.0,1
* mail/postfix

- Update to 2.4.0
- Install qshape as default
- Install test programs in PREFIX/bin instead of PREFIX/sbin to respect hier(7)

* mail/postfix23

- Repocopied from mail/postfix to reflect 2.3.x version [1]

* mail/Makefile

- Add postfix23

Approved by:	vivek___khera.org (maintainer)
Repocopy by:	marcus [1]
e485b8ea42
Marcus Alves Grando (mnag) · 2.3.8,1
- Update to 2.3.8 - Update VDA patch to 2.3.7
cd3aee6d57
Rong-En Fan (rafan) · 2.3.7_1,1
- Add mail to PROVIDE line. This fixes other scripts that require mail   starts first.

PR:		ports/109336
Submitted by:	Dan D Niles <dan at more.net>
Approved by:	Vivek Khera <vivek at khera.org> (maintainer)
d8c5ae6ece
Jeremy Chadwick (koitsu) · 2.3.7,1
Addition of postfix_flags variable to rc.subr startup script. This variable is passed to postfix-script on startup, allowing administrators to do things like postfix_flags="-c /my/place/postfix" (alternate location of main.cf and master.cf), or postfix_flags="-v" (for verbose logging).  See postfix(1) manpage for flags.

PR:		ports/109137
Reviewed by:	Vivek Khera <vivek@khera.org>
Approved by:	philip
b9aaa3bdbe
Rong-En Fan (rafan) · 2.3.7,1
- Update to 2.3.7

PR:		ports/108610
Submitted by:	Vivek Khera <vivek at khera.org> (maintainer)
f1c68d938a
Marcus Alves Grando (mnag) · 2.3.5,1
- Update to 2.3.5
a8418bc09f
Marcus Alves Grando (mnag) · 2.3.4,1
- Remove SPF compatible options. Patch are removed in 20060719.
2314cc1e20
Marcus Alves Grando (mnag) · 2.3.4,1
- Update VDA patch to 2.3.4
bdece63fca
Marcus Alves Grando (mnag) · 2.3.4,1
- Update to 2.3.4 - Update VDA patch to 2.3.3
136058ad63
Marcus Alves Grando (mnag) · 2.3.3,1
- Update to 2.3.3
49c5f6bb3c
Marcus Alves Grando (mnag) · 2.3.2_1,1
- Update VDA patch to 2.3.2
1a1040c4cb
Ion-Mihai Tetcu (itetcu) · 2.3.2_1,1
Fix "typo" in previous commit.

Submitted by:	KIMURA Yasuhiro
56c27b3048
Ion-Mihai Tetcu (itetcu) · 1,1
Make rc.d start postfix later, like sendmail does.

PR:		100750
Submitted by:	KIMURA Yasuhiro
Approved by:	Vivek Khera (maintainer)
e078f4da3b
Marcus Alves Grando (mnag) · 2.3.2,1
- Update to 2.3.2 - Update VDA patch to 2.3.1
d189efa49c
Marcus Alves Grando (mnag) · 2.3.1,1
- Update to 2.3.1
bb69b39dc7
Marcus Alves Grando (mnag) · 2.3.0,1
- Spell fixes [1] - Fix DOVECOT build [2]

Submitted by:	remko [1], Vivek Khera <vivek___khera.org> [2]
bc4645c027
Marcus Alves Grando (mnag) · 2.3.0,1
* UPDATING

Add entry about OPTIONS and SPF patch in mail/postfix

* mail/Makefile

Add postfix22

* mail/postfix [1]

Update to 2.3.0
Use OPTIONS instead of scripts
Add message about unsupported POSTFIX_OPTIONS
Remove SPF patch since that's not apply clean
Update pkg-descr
Change rcNG to rc only
Update CONFLICTS

* mail/postfix-current

Now postfix-current are called postfix-current instead of postfix.
Update CONFLICTS
Bump PORTREVISION
Store OPTIONSFILE in another local to not conflict with mail/postfix
Change rcNG to rc only

* mail/postfix1

Update CONFLICTS

* mail/postfix21

Update CONFLICTS
Change rcNG to rc only

* mail/postfix22 [2]

Update CONFLICTS
Change rcNG to rc only

Approved by:	maintainer [1]
Repocopy by:	marcus [2]
0350c7361c
Marcus Alves Grando (mnag) · 2.2.10_1,1
- Update to use USE_BDB flag

PR:		96048
Submitted by:	maintainer
84ecb89c2e
Marcus Alves Grando (mnag) · 2.2.10_1,1
- VDA patch are rerolled. Minor changes in patch.

Approved by:	maintainer (implict)
a3145c10be
Marcus Alves Grando (mnag) · 2.2.10_1,1
- Update VDA patch to 2.2.10 - Bump PORTREVISION

PR:		95677
Submitted by:	mnag
Approved by:	maintainer
c1b39087f5
Marcus Alves Grando (mnag) · 2.2.10,1
- Update to 2.2.10 - Trust only in host instead of subnet in default instalation. [1] - Update VDA patch to 2.2.9

Notified by:	Anton Yuzhaninov <citrin__citrin.ru>
8cd1a5b41a
Marcus Alves Grando (mnag) · 2.2.9,1
- Update to 2.2.9 - Update VDA patch to 2.2.8
b12f142353
Marcus Alves Grando (mnag) · 2.2.8_2,1
- Linker fix when use OPENSSL from ports - portlint(1)

PR:		92282
Reported by:	dinoex
Submitted by:	Vivek Khera <vivek@khera.org> (maintainer)
35bf8b1ccb
Edwin Groothuis (edwin) · 2.2.8_2,1
Replace ugly "@unexec rmdir %D... 2>/dev/null || true" with @dirrmtry

Approved by:    krion@
PR:             ports/88711 (related)
0416031c9b
Marcus Alves Grando (mnag) · 2.2.8_2,1
Modify rc.d script like example in Porters Handbook.
6adb5c6295
Marcus Alves Grando (mnag) · 2.2.8_2,1
Fix rc.d/postfix.sh restart adding pidfile and procname Bump PORTREVISION

PR:		91721
Submitted by:	NIIMI Satoshi <sa2c@sa2c.net>
Approved by:	maintainer
edc9f24ed2
Marcus Alves Grando (mnag) · 2.2.8_1,1
Add rcNG script to start postfix Update pkg-message to reflect rcNG script Bump PORTREVISION

Approved by:	Vivek Khera <vivek@khera.org> (maintainer)
62d4349118
Marcus Alves Grando (mnag) · 2.2.8,1
Update to 2.2.8
fd2dc98c33
Marcus Alves Grando (mnag) · 2.2.7,1
Update to 2.2.7
32cd841a99
Marcus Alves Grando (mnag) · 2.2.6,1
Add MIT kerberos 5 option

PR:		86465
Submitted by:	Vivek Khera <vivek@khera.org> (maintainer)
1456e23cc4
Marcus Alves Grando (mnag) · 2.2.6,1
Update to 2.2.6 More complete installation of TEST programs/man pages Add SHA256 Remove extra blank lines in pkg-message

Approved by:	maintainer via email
88e38d7f12
Marcus Alves Grando (mnag) · 2.2.5_1,1
Add WITH_OPENLDAP_VER to reflect options menu

PR:		87417
Notified by:	Alson van der Meulen <alson+bugs@waalsdorp.nl>
Approved by:	Vivek Khera <vivek@khera.org>
291414461a
Marcus Alves Grando (mnag) · 2.2.5_1,1
Proper link when use OPENSSL from ports.

PR:		86861
Pointed by:	Uffe Vedenbrant <uffe@vedenbrant.se>
Approved by:	vivek@khera.org (maintainer), pav (mentor)
cab34d7134
Marcus Alves Grando (mnag) · 2.2.5_1,1
VDA bugfix

Approved by:	vivek@khera.org (maintainer via email), pav (mentor)
bc7ea811aa
Vsevolod Stakhov (vsevolod) · 2.2.5_1,1
Update PORTREVISION because libspf2 is moved Update LIB_DEPENDS to mail/libspf2-10 Use builtin echo Use REINPLACE instead then scripts/configure and scripts/fix-files-list

PR:		85000
Submitted by:	Marcus Grando <marcus@corp.grupos.com.br>
Approved by:	Vivek Khera (maintainer)
69a6a2783a
Renato Botelho (garga) · 2.2.5,1
- Add cdb map lookups

PR:		ports/84382
Submitted by:	IWAMOTO Kouichi <sue@iwmt.org>
Approved by:	maintainer
d6b4a77a4a
Sam Lawrance (lawrance) · 2.2.5,1
Fix outdated information regarding sendmail rc.conf variables

PR:		ports/84345
Submitted by:	Vasil Dimov <vd@datamax.bg>
Approved by:	Vivek Khera <vivek@khera.org> (maintainer)
Approved by:	portmgr
70c2a3cf38
Pav Lucistnik (pav) · 2.2.5,1
- Allow Marcus Grando to bypass maintainer

Submitted by:	Vivek Khera <vivek@khera.org> (maintainer)
004f51fcb0
Pav Lucistnik (pav) · 2.2.5,1
- Update to 2.2.5

PR:		ports/83887
Submitted by:	Marcus Grando <marcus@corp.grupos.com.br>
Approved by:	Vivek Khera <vivek@khera.org> (maintainer)
0420212111
Pav Lucistnik (pav) · 2.2.4_1,1
- Update comment to match existing options

PR:		ports/83079
Submitted by:	TAOKA Fumiyoshi <fmysh@iijmio-mail.jp>
Approved by:	Vivek Khera <vivek@khera.org> (maintainer)
b4a4d2220f