Proxmox Mail Gateway 9.0 released!

[t.lamprecht]

We are pleased to announce the first stable release of Proxmox Mail Gateway 9.0 - immediately available for download!

Twenty years after its first release, the new version of our email security solution is based on Debian 13.1 "Trixie", but defaulting to the newer Linux kernel 6.14.11-2. The latest versions of ZFS 2.3.4, PostgreSQL 17, SpamAssassin 4.0.2 (with updated rulesets), and ClamAV 1.4.3 are included.

Some highlights of Proxmox Mail Gateway 9.0

• New Quarantine UI on mobile browsers based on the modern Rust-based Yew framework.
• Significantly improved Single-Sign-On (SSO) with OpenID Connect and multiple authentication realms for PMG, based on the feedback from our customers and community.
• Synchronize the configuration templates of the core service postfix with the latest recommendations from upstream.
• Adapt the Content-Type filters to the renaming of relevant MIME-types for Microsoft executable formats.

Beyond these major additions, we've also implemented numerous performance enhancements and bug fixes to make your experience even smoother. For a full list of changes, check out our release notes.

Release notes
https://pmg.proxmox.com/wiki/index.php/Roadmap

Press release
https://www.proxmox.com/en/news/press-releases/

Download
https://www.proxmox.com/en/downloads
Alternate ISO download:
https://enterprise.proxmox.com/iso

Documentation
https://pmg.proxmox.com/pmg-docs

Community Forum
https://forum.proxmox.com

Bugtracker
https://bugzilla.proxmox.com

Source code
https://git.proxmox.com

Thank you for supporting the Proxmox Mail Gateway project! Your contributions and feedback, tests, bug reports and code contributions are always welcome!

FAQ
Q: Can I upgrade the latest Proxmox Mail Gateway 8 to 9 with apt?
A: Yes, please follow the upgrade instructions on https://pmg.proxmox.com/wiki/index.php/Upgrade_from_8_to_9

Q: Can I upgrade a 9.0 beta installation to the stable 9.0 via apt?
A: Yes, upgrading from beta to stable installation is possible via apt. We recommend switching to the pmg-enterprise repository on upgrade for the most stable experience.

Q: How long will Proxmox Mail Gateway 8.2 receive bug fixes and security support?
A: Proxmox Mail Gateway 8.2 will receive security updates and critical bug fixes until August 2026. This support window provides an overlap of approximately one year after the release of Proxmox Mail Gateway 9.0, giving users ample time to plan their upgrade to the new major version. For more information on the support lifecycle of Proxmox Mail Gateway releases, please visit:
https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#_frequently_asked_questions

Q: Can I install Proxmox Mail Gateway on top of Debian Trixie?
A: Yes, see https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#pmg_install_on_debian

Q: Can I install Proxmox Mail Gateway as a virtual machine on Proxmox Virtual Environment, VMware, or Hyper-V ?
A: Yes, just do the ISO install. If you install on Hyper-V as a generation 2 virtual machine, configure secure boot to use "Microsoft UEFI Certificate Authority".

Q: Can I install Proxmox Mail Gateway as LXC container on Proxmox Virtual Environment?
A: Yes. You can install it on top of a Debian container or just download the template via the integrated template downloader.

Q: Where can I get more information about feature updates?
A: Check the roadmap, forum, the mailing list, and/or subscribe to our newsletter.

 

[Fathi]

What is the smoothest path to migrate from a PMG 8 running as lxc container ?

 

[t.lamprecht]

What is the smoothest path to migrate from a PMG 8 running as lxc container ?

You can just follow the official upgrade how-to:
https://pmg.proxmox.com/wiki/index.php/Upgrade_from_8_to_9

 

[WB3FFV]

So I figured I would take a look at updating, as I have moved my PVE's all to Trixie. When I run the pmg8to9 script, I see the following warning:

INFO: Check the rulesystem...
WARN: deprecated default entry in 'Blacklist' present: nomail@fromthisdomain.com
Consider removing it, as fromthisdomain.com is not reserved
WARN: deprecated default entry in 'Whitelist' present: mail@fromthisdomain.com
Consider removing it, as fromthisdomain.com is not reserved


If I go in and look at the blacklist or whitelist, I see a lot of entries, but not the above, so I don't see a way to remove them.

If I do a pmgdb dump, then I do see what is talked about, but see no way in pmgdb to remove the entries:

RULE 4 (prio: 98, in, ACTIVE): Blacklist
FROM group 2 (and=0, invert=0): Blacklist
OBJECT Mail address 1: nomail@fromthisdomain.com
ACTION group 18: Block
OBJECT Block 31: block message

and

RULE 6 (prio: 85, in, ACTIVE): Whitelist
FROM group 3 (and=0, invert=0): Whitelist
OBJECT Mail address 2: mail@fromthisdomain.com
ACTION group 17: Accept
OBJECT Accept 30: accept message


So if the updater wants me to get rid of the entries, how do I accomplish this?

Any help appreciated..

 

[t.lamprecht]

So if the updater wants me to get rid of the entries, how do I accomplish this?

The current warning is not as telling as it could be, we improved that in git but not yet included in any version bump of pmg-api.

Anyway, these are entries in the Who Objects, so If you select that in the web UI and then the respective Black/Whitelist entries there, you should see the legacy (invalid) example domains and be able to remove them there.

 

[WB3FFV]

The current warning is not as telling as it could be, we improved that in git but not yet included in any version bump of pmg-api.

Anyway, these are entries in the Who Objects, so If you select that in the web UI and then the respective Black/Whitelist entries there, you should see the legacy (invalid) example domains and be able to remove them there.

Awesome, that is exactly what I needed. I didn't look there before, but your right and I was able to remove both, so thanks...