Proxmox, known for its development of the Proxmox Virtual Environment distribution for deploying virtual server infrastructures, has released Proxmox Mail Gateway 8.2, which is presented as a ready-made solution for quickly creating a system to control email traffic and protect internal mail servers.
The installation ISO image is available for free download. Distribution-specific components are open under the AGPLv3 license. For updates, there is both a paid Enterprise repository and two free repositories that differ in the level of update stabilization. The system component of the distribution is based on the Debian package base. Components of Proxmox Mail Gateway can be installed on top of already running servers Debian-based systems.
Proxmox Mail Gateway operates as a proxy server, serving as a gateway between the external network and the internal mail proxy server systems based on MS Exchange, Lotus Domino, or Postfix. It allows management of all incoming and outgoing email flows. All correspondence logs are analyzed and available for review through a web interface. Both graphs to assess overall dynamics and various reports and forms for obtaining information about specific emails and delivery status are provided. Cluster configurations are supported for high availability (operating a synchronized backup server, with data synchronized through an SSH tunnel) or load balancing.
A complete set of tools is provided to ensure protection, spam filtering, phishing, and virus prevention. ClamAV and Google Safe Browsing are used to block malicious attachments, and a comprehensive approach based on SpamAssassin is offered to combat spam, including support for sender verification, SPF, DNSBL, greylisting, Bayesian classification, and blocking based on spammer URI databases. For legitimate correspondence, a flexible filtering system is provided, allowing rules to be set for mail processing based on domain, recipient/sender, time of receipt, and content type.
Key innovations:
- Synchronization with the Debian 12.9 package base has been completed. The Linux kernel has been updated to version 6.8 (packages with kernel 6.11 are available as an option). The implementation of the ZFS file system has been updated to OpenZFS 2.2.7.
- Updated versions of the spam filtering system SpamAssassin 4.0.1, antivirus package ClamAV 1.0.7, and the PostgreSQL database system 15.11.
- The rule system has been expanded with capabilities for classifying metadata in emails. An option has been added to analyze only the main headers of the email, excluding headers in mail-part attachments (for example, to ignore the headers of forwarded emails). An option has been added to process nested file types based on their signatures rather than the values specified in the Content-Type header or file extensions.
- The ability to connect to the management interface using a single sign-on (SSO) point of entry based on OpenID Connect (OIDC) has been implemented.
- Generation of DKIM signatures for emails generated in Proxmox Mail Gateway has been included.
- A utility for creating an installation ISO image has been added, allowing for the automatic installation of Proxmox Mail Gateway. The file with settings and parameters for automatic installation can be placed on a separate USB drive or provided as part of the ISO image.
Source: opennet.ru
