Port details

mail/postfix 3.11.7_4,1

Secure alternative to widely-used Sendmail

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: otis@FreeBSD.org
Packages: latest: postfix 3.11.7_4,1, postfix-ldap 3.11.7_4,1, postfix-mongo 3.11.7_4,1, postfix-mysql 3.11.7_4,1, postfix-pgsql 3.11.7_4,1, postfix-sasl 3.11.7_4,1, postfix-sqlite 3.11.7_4,1
Upstream: up to date
Last update: 2026-10-20 to 3.11.7_4,1 · 85ba298b7e
Quarterly: 2026Q4: postfix 3.11.7_3,1, postfix-ldap 3.11.7_3,1, postfix-mongo 3.11.7_3,1, postfix-mysql 3.11.7_3,1, postfix-pgsql 3.11.7_3,1, postfix-sasl 3.11.7_3,1, postfix-sqlite 3.11.7_3,1 · last MFH 2026-10-13 8168af0c2e
Formerly: mail/postfix-ldap-sasl until 2021-10-28, mail/postfix-sasl until 2021-10-28
WWW: https://www.postfix.org/
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install postfix

# pkg install postfix-ldap

# pkg install postfix-mongo

# pkg install postfix-mysql

# pkg install postfix-pgsql

# pkg install postfix-sasl

# pkg install postfix-sqlite

installs postfix 3.11.7_4,1, postfix-ldap 3.11.7_4,1, postfix-mongo 3.11.7_4,1, postfix-mysql 3.11.7_4,1, postfix-pgsql 3.11.7_4,1, postfix-sasl 3.11.7_4,1, postfix-sqlite 3.11.7_4,1 from latest; from quarterly (2026Q4) postfix 3.11.7_3,1, postfix-ldap 3.11.7_3,1, postfix-mongo 3.11.7_3,1, postfix-mysql 3.11.7_3,1, postfix-pgsql 3.11.7_3,1, postfix-sasl 3.11.7_3,1, postfix-sqlite 3.11.7_3,1

Port

# cd /usr/ports/mail/postfix && make install clean

# make -C /usr/ports/mail/postfix config  # change options first

Size

1.8 MiB download · 8.4 MiB installed

Depends on

databases/lmdb0 0.9.36_1, databases/tinycdb 0.81, devel/icu 76.1,1, devel/pcre2 10.49, mail/libtlsrpt 0.5.1

License

EPL and IPL10

Creates

user postfix, group mail, maildrop, postfix

Options

9 of 22 on in the package: BLOCKLISTD CDB DOCS EAI LMDB LMDB0 PCRE2 TLS TLSRPT

Show the 13 options that are off

BDB INST_BASE LDAP LMDB1 MONGO MYSQL NIS PGSQL SASL SASLKMIT SASLKRB5 SQLITE TEST

pkg-message

Shown after installing

To use postfix instead of sendmail:
  - clear sendmail queue and stop the sendmail daemons

Run the following commands to enable postfix during startup:
  - sysrc postfix_enable="YES"
  - sysrc sendmail_enable="NONE"

If postfix is *not* already activated in /usr/local/etc/mail/mailer.conf
  - mv /usr/local/etc/mail/mailer.conf /usr/local/etc/mail/mailer.conf.old
  - install -d /usr/local/etc/mail
  - install -m 0644 /usr/local/share/postfix/mailer.conf.postfix /usr/local/etc/mail/mailer.conf

Disable sendmail(8) specific tasks,
add the following lines to /etc/periodic.conf(.local):
  daily_clean_hoststat_enable="NO"
  daily_status_mail_rejects_enable="NO"
  daily_status_include_submit_mailq="NO"
  daily_submit_queuerun="NO"

If you are using SASL, you need to make sure that postfix has access to read
the sasldb file.  This is accomplished by adding postfix to group mail and
making the /usr/local/etc/sasldb* file(s) readable by group mail (this should
be the default for new installs).

Shown after removing

If you remove postfix permanent, adjust / remove the the following file:
  - /usr/local/etc/mail/mailer.conf

Note

Size, dependencies, options and messages are those of postfix.

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	3.11.7_4,1	3.11.7_3,1	–
FreeBSD 15	3.11.7_4,1	3.11.7_3,1	–
FreeBSD 14	3.11.7_4,1	3.11.7_3,1	3.11.7_4,1

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	3.11.7_3,1	3.11.7_3,1	–
FreeBSD 14	3.11.7_3,1	3.11.7_1,1	3.11.7_3,1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 3.11.7_4,1.

Fixed (2)

Show 2 fixed

VuXML entries whose affected range the packaged version has left.

Postfix -- memory corruption vulnerabilityentered 2011-05-09

CVE-2011-1720

postfix -- plaintext command injection with SMTP over TLSentered 2011-03-19

CVE-2011-0411

Problem reports (1) · open in Bugzilla, most recently changed first

PR	Summary	Status	Changed
299271	maintainer-feedback? mail/postfix: lmdb version issue fixed in main but not 2026Q4	New	2026-10-14

Commits (447)

2005-07-13 23:48Pav Lucistnik (pav) · 2.2.4_1,1

- Fix build on FreeBSD 7

PR:		ports/83414
Submitted by:	Marcus Grando <marcus@corp.grupos.com.br>
Approved by:	Vivek Khera <vivek@khera.org> (maintainer)

9d92d0346d

2005-07-06 18:37Jean-Yves Lefort (jylefort) · 2.2.4_1,1

- Fix manpage links [1] [2] - Update the VDA patch to 2.2.4 [2]

[1]
PR:		ports/82768
Submitted by:	Jeremy Chadwick <freebsd@jdc.parodius.com>
Approved by:	maintainer

[2]:
PR:		ports/83032
Submitted by:	Marcus Grando <marcus@corp.grupos.com.br>
Approved by:	maintainer

592f1111ae

2005-06-22 21:32Florent Thoumie (flz) · 2.2.4,1

- Update to 2.2.4.

PR:		ports/82546
Submitted by:	Marcus Grando <marcus@corp.grupos.com.br>
Approved by:	maintainer

6f46e1fb54

2005-05-20 13:43Simon Barner (barner) · 2.2.3_1,1

- Add instructions for /etc/rc.conf that make   `/etc/rc.d/sendmail stop' stop the postfix mail system. [1]

- Re-phrased a paragraph to be more clear. [2]

Submitted by:	shige [1], maintainer [2]
Approved by:	maintainer [1]
PR:		ports/81245 [1]

8c0c6a8bfd

2005-05-10 18:09Jean-Yves Lefort (jylefort) · 2.2.3_1,1

Update the VDA patch to 2.2.3

PR:		ports/80859
Submitted by:	Marcus Grando <marcus@corp.grupos.com.br>
Approved by:	maintainer

d87b215f4b

2005-05-03 16:42Jean-Yves Lefort (jylefort) · 2.2.3,1

Update to 2.2.3

PR:		ports/80552
Submitted by:	Marcus Grando <marcus@corp.grupos.com.br>
Approved by:	maintainer

8af366c0b3

2005-04-06 00:03Pav Lucistnik (pav) · 2.2.2,1

- Update postfix to 2.2.2 - Update VDA patch to 2.2.2 - Fix mailer.conf activation *)

PR:		ports/79207
Submitted by:	Marcus Grando <marcus@corp.grupos.com.br>
Approved by:	Vivek Khera <vivek@khera.org> (maintainer)

		*)
PR:		ports/79447
Submitted by:	bz
Patch by:	Christian Kratzer <ck at cksoft dot de>

13f0c0b491

2005-03-20 00:17Pav Lucistnik (pav) · 2.2.1,1

- Update to 2.2.1

PR:		ports/78852
Submitted by:	Marcus Grando <marcus@corp.grupos.com.br>
Approved by:	Vivek Khera <vivek@khera.org> (maintainer)

7ac33a6af8

2005-02-18 09:51Pav Lucistnik (pav) · 2.1.5_1,1

- Update VDA patch to 2.1.5

PR:		ports/76299
Submitted by:	Marcus Grando <marcus@corp.grupos.com.br>
Approved by:	Vivek Khera <vivek@khera.org> (maintainer)

4f69fd88dc

2005-02-08 14:51Yen-Ming Lee (leeym) · 2.1.5_1,1

postfix's optional postgres support doesn't work with the new Postgres port configuration. this patch fixes that

PR:		77216
Submitted by:	Vivek Khera <vivek at khera.org>

0bf9ab1b91

2004-11-27 03:15Edwin Groothuis (edwin) · 2.1.5_1,1

[PATCH] mail/postfix: Update to libspf2-2.1.5-5

update the SPF patch to latest release which fixes bug
	exposed by gcc in FreeBSD 5.3.  it is otherwise identical
	to prior version, so no upgrade is necessary if you have
	it compiled and workign in FreeBSD 4.10 already (thus no
	version bump).

	removed "extra libspf2" patch that tried to work around
	failure of IPv6+TLS patch when used in conjunction with SPF
	patch.  It just doesn't work, and I can't figure out exactly
	what it is supposed to do.  As it was, this would cause
	failures when selecting just the SPF patch.

PR:		ports/74095
Submitted by:	Vivek Khera <vivek@khera.org>

81f580eaca

2004-11-14 20:59Pav Lucistnik (pav) · 2.1.5,1

- Support SPF and TLS at the same time

PR:		ports/72774
Submitted by:	Marcus Grando <marcus@corp.grupos.com.br>
Approved by:	maintainer timeout (2 weeks)

519b947dd8

2004-10-26 16:23Pav Lucistnik (pav) · 2.1.5,1

- Fix build with SASLKRB5 option

PR:		ports/73100
Submitted by:	Matthew X. Economou <xenophon+freebsd@irtnog.org>
Approved by:	maintainer

67148f52a7

2004-10-13 01:58Edwin Groothuis (edwin) · 2.1.5,1

update mail/postfix to latest

update postfix to 2.1.5
	update IPv6 patches to latest corresponding versions

PR:		ports/72009
Submitted by:	Vivek Khera <vivek@khera.org>

f4b7544fdd

2004-09-04 13:41Dag-Erling Smørgrav (des) · 2.1.4,1

Make sure this patch applies correctly when PATCH_STRIP=-p1, as is the case when TLS is enabled.

Approved by:	portmgr (krion)

80441fd488

2004-08-31 15:48Dag-Erling Smørgrav (des) · 2.1.4,1

Fix build on 6.0.

Approved by:	maintainer

8eccf35301

2004-08-21 22:36Pav Lucistnik (pav) · 2.1.4,1

- Add VDA (Virtual Delivery Agent) patch

PR:		ports/70637
Submitted by:	Marcus Grando <marcus@corp.grupos.com.br>
Approved by:	maintainer

0fe0830849

2004-08-18 17:33Mathieu Arnold (mat) · 2.1.4,1

Add a patch to optionnaly add libspf2

PR:		70595
Submitted by:	maintainer

9ca785ab6d

2004-07-13 18:23Pav Lucistnik (pav) · 2.1.4,1

- Update to 2.1.4

PR:		ports/68949
Submitted by:	Vivek Khera <vivek@khera.org> (maintainer)

e28d8ba3be

2004-06-25 11:11Pav Lucistnik (pav) · 2.1.3,1

- Update IPv6 patches to 2.1.3

PR:		ports/68273
Submitted by:	Olafur Osvaldsson <oli@aker.isnic.is>
Approved by:	maintainer

32044eb2ca

2004-06-22 21:30Pav Lucistnik (pav) · 2.1.3,1

- Update to 2.1.3

Note for users of IPv6 patches: don't upgrade, patches were not updated for 2.1.3
yet and don't work at the moment.

PR:		ports/68171
Submitted by:	Vivek Khera <vivek@khera.org> (maintainer)

27b5ab6c87

2004-06-11 16:41Pav Lucistnik (pav) · 2.1.1,1

- Wordsmithing in comment

PR:		ports/67782
Submitted by:	Chris Pepper <pepper@reppep.com>

8844544c3c

2004-05-22 17:09Pav Lucistnik (pav) · 2.1.1,1

- Update IPv6 patches to 1.24

PR:		ports/67003
Submitted by:	Vivek Khera <vivek@khera.org> (maintainer)

1f38f53733

2004-05-14 12:24Edwin Groothuis (edwin) · 2.1.1,1

update mail/postfix to latest release

update postfix to 2.1.1 release

PR:		ports/66569
Submitted by:	Vivek Khera <vivek@khera.org>

c9f13daed8

2004-05-12 11:08Pav Lucistnik (pav) · 2.1.0,1

- Update to 2.1.0

PR:		ports/66215
Submitted by:	Vivek Khera <vivek@khera.org> (maintainer)

32b59b18f6

2004-05-02 19:44Pav Lucistnik (pav) · 2.0.20,1

- Update to 2.0.20

PR:		ports/66056
Submitted by:	Vivek Khera <vivek@khera.org> (maintainer)

364ad0f0fb

2004-04-13 17:08Dag-Erling Smørgrav (des) · 2.0.19,1

Use /usr/sbin/nologin instead of /sbin/nologin if it exists and is executable. Use fixed UIDs (125) and GIDs (125, 126).

Approved by:	maintainer

26d0fd7623

2004-04-02 03:50Pav Lucistnik (pav) · 2.0.19,1

- Kill trailing whitespace

PR:		ports/65053
Submitted by:	Xin LI <delphij@frontfree.net>

1b5f385894

2004-03-29 18:13Pav Lucistnik (pav) · 2.0.19,1

- Add support for db42

PR:		ports/64801
Submitted by:	Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net>
Approved by:	maintainer

56437cf481

2004-03-22 22:12Clement Laforet (clement) · 2.0.19,1

- Update 2.0.19 - SIZEify - Update maintainer address

PR:             64590
Submitted by:   Vivek Khera <vivek@khera.org> (maintainer)

c750839baa

2004-03-11 09:23Alex Dupre (ale) · 2.0.18,1

s/USE_OPENLDAP_VER/WANT_OPENLDAP_VER/g in comments.

Noticed by:	eik

c562c46c74

2004-03-10 23:54Alex Dupre (ale) · 2.0.18,1

Use USE_MYSQL and USE_OPENLDAP.

PR:		ports/63814
Submitted by:	Vivek Khera <vivek@khera.org> (maintainer)

719305a702

2004-02-20 16:36Sergey A. Osokin (osa) · 2.0.18,1

Fix build with LDAP.

Submitted by:	Jean-Baptiste Quenot <jb.quenot@caraldi.com>
Approved by:	Vivek Khera <khera@kcilink.com> (maintainer)
PR:		62690

99b6ee13be

2004-01-30 20:28Oliver Eikemeier (eik) · 2.0.18,1

Update to latest released version.  Update TLS/IPv6 patches to match.

PR:		62121
Submitted by:	Vivek Khera <vivek@khera.org> (maintainer)

920cefb5d8

2003-12-30 17:23Sergey A. Osokin (osa) · 2.0.16,1

Respect ${CC} flag.

Approved by:	Vivek Khera <vivek@khera.org> (maintainer)

3df17fbf39

2003-12-21 05:42Pete Fritchman (petef) · 2.0.16,1

Add the rc.conf pid-file specification line for startup.

PR:		57074
Submitted by:	Jonathan Chen <jonc@chen.org.nz>
Approved by:	maintainer

5fd437752f

2003-10-14 17:47Dirk Meyer (dinoex) · 2.0.16,1

- add CONFLICTS Submitted by:   eikemeier@fillmore-labs.com Approved by:    kris

23a445abcc

2003-10-01 21:55Sergey A. Osokin (osa) · 2.0.16,1

Update to 2.0.16

PR:			ports/57083 (partially)
PR submitted by:	osa
Approved/Reviewed by:	Vivek Khera <khera@kciLink.com> (maintainer)

05ea4ef217

2003-09-09 16:35Sergey A. Osokin (osa) · 2.0.15,1

Update postfix to latest release (mainly a Solaris bug workaround).

Submitted by:	Vivek Khera <khera@kcilink.com> (maintainer)
PR:		56631

2420db2c2c

2003-08-27 22:19Sergey A. Osokin (osa) · 2.0.14,1

Update to 2.0.14 [1] Use %%DOCSDIR%% in pkg-plist [2]

Submitted by:	Vivek Khera <vivek@khera.org> [1],
		Linh Pham <question@closedsrc.org> [1],
		osa [2]
Approved by:	Vivek Khera <vivek@khera.org> (maintainer)
PRs:		55759, 56016

8adda270e9

2003-08-17 14:54Jun Kuriyama (kuriyama) · 2.0.13,1

Fix plist at optional IPv6 configuration.

PR:		ports/55301
Submitted by:	Kimura Fuyuki <fuyuki@nigredo.org>

76f34ce632

2003-08-15 02:49Jun Kuriyama (kuriyama) · 2.0.13,1

Fix non-default dependency on openldap2[012] which is broken by splitting.

# I'm not bumped port revision of them because this should not affect
# packages built on bento...

b67a28791a

2003-07-23 09:04Erwin Lansing (erwin) · 2.0.13,1

One of the patch files for postfix was not PREFIX-clean.  This makes it PREFIX-clean

PR:		54768
Submitted by:	maintainer

356d8f1b3d

2003-07-10 09:12Erwin Lansing (erwin) · 2.0.13,1

Included in this email is a patch to postfix which I need applied for my upcoming commit to sysinstall(8).

PR:		54291
Submitted by:	trhodes via maintainer

9d2df035ea

2003-07-07 10:28Sergey A. Osokin (osa) · 2.0.13,1

Fix building with SASL2 case.

Submitted by:	Charles Swiger <chuck@pkix.net>
Patch from:	Vivek Khera <khera@kcilink.com> (maintainer)
PR:		54136
Approved by:	fjoe (mentor) (implicit)

38abf86853

2003-07-02 13:23Daichi GOTO (daichi) · 2.0.13,1

update mail/postfix: 2.0.12 --> 2.0.13

PR:		53984
Submitted by:	Vivek Khera <khera@kcilink.com> (maintainer)

78bcee5b64

2003-06-27 19:41Oliver Braun (obraun) · 2.0.12,1

Upgrade to 2.0.12.

PR:		ports/53846
Submitted by:	maintainer

c552baff61

2003-06-02 17:32Christian Weisgerber (naddy) · 2.0.10,1

- Update postfix to 2.0.10 release - Add option for using Postgres 7.2 in addition to 7.3

PR:		52620
Submitted by:	Vivek Khera <khera@kcilink.com>

00674940cd

2003-05-12 23:02Oliver Braun (obraun) · 2.0.9,1

* Upgrade to 2.0.9. * Re-enable IPv6 without TLS as an option.

PR:		ports/52133
Submitted by:	maintainer

b80d569272

2003-04-15 09:44Yen-Ming Lee (leeym) · 2.0.7,1

update postfix to 2.0.7

1. SSL linking fix
2. specific openldap depedency (ports/48621)
3. Kerberos linking fix

PR:		50964
Submitted by:	Vivek Khera <khera@kcilink.com>
Obtained from:	1. dirk.meyer@dinoex.sub.org
		2. Christian Kratzer <ck@cksoft.de>
		3. Miles Egan <miles@caddr.com>

1363a0b670

devel/libmsiecf 1 unaddressed · 6.8	Oct 26
net/ndpi 1 unaddressed · 6.9	Oct 26
audio/speex 1 unaddressed · 8.3	Oct 26
devel/libphdi 1 unaddressed · 6.9	Oct 26
audio/furnace 2 unaddressed · 6.9	Oct 26
sysutils/libfvde 2 unaddressed · 6.8	Oct 26
audio/gbsplay 3 unaddressed · 6.8	Oct 26
archivers/snappy-java 4 unaddressed · 8.7	Oct 26
www/py-tornado 3 unaddressed · 5.3	Oct 26
sysutils/consul 4 CVEs · 8.8 fixed 2.1.0	Oct 26
comms/libimobiledevice +1 related 5 unaddressed · 6.9	Oct 26
devel/libgsf 1 unaddressed · 5.3	Oct 26
www/p5-Plack 1 unaddressed · –	Oct 25
www/p5-Starman 4 unaddressed · –	Oct 25
www/p5-Web-Simple 1 unaddressed · –	Oct 24

ImageMagick6	Oct 26
ImageMagick6-nox11	Oct 26
ImageMagick7	Oct 26
ImageMagick7-nox11	Oct 26
node	Oct 24
node22	Oct 24
node24	Oct 24
node26	Oct 24
traefik	Oct 24
ca_root_nss	Oct 23
gitlab-ce	Oct 23
gitlab-ee	Oct 23
mailpit	Oct 23
vifm	Oct 23
brotli	Oct 22
chromium	Oct 22
jackson-core	Oct 22
jackson-databind	Oct 22
jackson-databind	Oct 22
keycloak	Oct 22
linux-chrome	Oct 22
ungoogled-chromium	Oct 22
FreeBSD	Oct 21
p5-DBI	Oct 21
php82	Oct 21