ports/mail/postfix/Makefile, branch mainFreeBSD ports treehttps://cgit-dev.freebsd.org/ports/atom?h=main2026-05-04T13:05:09Zmail/postfix: Update to 3.11.22026-05-04T13:05:09ZJuraj Lutterotis@FreeBSD.org2026-05-04T12:57:57Zurn:sha1:4b266f63a722f98cb88e33bc02d6297095cc5d5d
- Update to 3.11.2
- Also address [1]
PR: 294462 [1]
Reported by: des, dim, postfix release notification e-mail
mail/postfix: Use BLOCKLIST instead of BLACKLIST2026-04-09T12:54:52ZJose Luis Duranjlduran@FreeBSD.org2026-04-09T12:07:57Zurn:sha1:11d6404d9c7c201bf8201c4364a98d6c9cd95956
- Starting from FreeBSD version 1500000, prefer the new blocklist
nomenclature.
- Enable TLSRPT by default
PR: 294083
mail/postfix: Enable CDB and LMDB by default2026-03-17T19:18:28ZJuraj Lutterotis@FreeBSD.org2026-03-17T19:18:28Zurn:sha1:04535dc7ca481c3d261b322ba0ff14c023ea4452
Adding these solves a cross-compatibility problem with Linux distros
that have dropped bdb support. Per Postfix's document[1] on it, lmdb
and cdb are the replacements for hash and btree, respectively.
[1] http://www.postfix.org/NON_BERKELEYDB_README.html
PR: 293852
mail/postfix: Update to 3.11.12026-03-11T09:41:51ZJuraj Lutterotis@FreeBSD.org2026-03-11T09:31:28Zurn:sha1:204f26850888b24af69424ad111f144cd8573c21
This update brings some possibly breaking changes:
- Postfix 3.11.0:
- TLS
- smtp_tls_security_level now defaults to "may" when Postfix is built with
TLS support and compatibility_level >= 3.11
- RFC 8689 REQUIRETLS support added: requires strong authentication
(DANE/STS) from all servers in the forward path that announce REQUIRETLS
- TLS logging now includes desired vs. actual security level enforcement
status and REQUIRETLS policy enforcement details
- New smtp_tls_enforce_sts_mx_patterns parameter (default: yes) ensures
MX hostname matching for MTA-STS
- OpenSSL 3.5+ changes the tls_eecdh_auto_curves default to avoid
protocol ossification (post-quantum cryptography prep)
- Other
- milter_default_action default changed from "tempfail" to "shutdown"
- JSON output support added to postconf, postalias, postmap, postmulti
- Deprecation warnings now logged for obsolete parameters (DEPRECATION_README)
- Postfix 3.11.1 (bug fixes only):
- Fix alias_maps error when default_database_type is not set in main.cf
- Fix buffer over-read when enhanced status codes lack trailing text
(e.g. "5.7.2" with no subsequent text) in access tables, header/body
checks, rbl_reply_maps, and default_rbl_reply; present since 3.0
- Fix null pointer dereference in nbdb_reindexd(8) due to service_name
not being propagated (regression since 3.3)
- Fix spurious startup error from nbdb_reindexd(8) when
non_bdb_migration_level disables automatic re-indexing
mail/postfix: Fix build on 15.0 with SASLKRB52025-12-17T10:07:23ZJuraj Lutterotis@FreeBSD.org2025-12-17T10:04:32Zurn:sha1:e79fe442bd3cad04c2cd34d255a8fb246215d78f
Kerberos in 15.0 does not provide the old libraries.
PR: 291605
Reported by: Christian Hennig <zeha@ccsej.de>
mail/postfix: Update to 3.10.62025-11-28T08:31:49ZJuraj Lutterotis@FreeBSD.org2025-11-28T08:22:40Zurn:sha1:c24c6d7bbc431f37f0fb3fbdce848b9a2bbbd690mail/postfix: Update to 3.10.52025-10-30T20:00:27ZJuraj Lutterotis@FreeBSD.org2025-10-30T20:00:27Zurn:sha1:2637b2260bec08b9f49e14a298663c0cda96136email/postfix: Update to 3.10.42025-08-20T15:56:06ZJuraj Lutterotis@FreeBSD.org2025-08-20T15:44:49Zurn:sha1:74da828d5a4318b959d8cdcc737f52db53c18d42
And also address a small nit from [1]
PR: 288660 [1]
mail/postfix: Update to 3.10.32025-07-11T21:56:53ZJuraj Lutterotis@FreeBSD.org2025-07-11T20:53:00Zurn:sha1:02fd9938a7ddf6ef7dd56713737afeea6ec53223
And while here, also address some blacklistd-related improvements,
namely in postscreen and relay check.
PR: 287463
Co-authored-by: bc979@lafn.org
mail/postfix: Add TLSRPT support2025-06-10T13:10:41ZMatthew Seamanmatthew@FreeBSD.org2025-06-10T13:10:41Zurn:sha1:eac69363a7f69d4a3b266d4c2ae7c6a89da0c53e
Add option to enable TLSRPT functionality.
PR: 287297