How to configure actual mail server for PMG

[rooxr]

Hi,

I've never used a proxy mail gateway and am having a really hard time finding information on how to actually setup my mail server for PMG. The installation instructions are great and I have an instance running smoothly on a PVE.

Now that I have this setup, what do I do to have my email come in to the gateway and then forward to me? Do I change MX records to the gateway (doesn't make total sense to me).

Thanks in advance to whomever can help or point me in the right direction. I've been searching on and off for an answer for weeks and have found just about nothing (which probably means its simple :-/ ) hah!

Cheers,

 

[hata_ph]

PMG will intercept all incoming mail to your domain, so you need to configure your domain public MX record to PMG instead of your original email server.
Once you properly configure PMG with your local email server, you can monitor your in/out traffic on your PMG dashboard.

 

[rooxr]

Thanks @hata_ph.

Do you have a good resource that explains how to connect my local with the PMG server? Specifically I'm using virtualmin, but very able to just configure it manually if need be.

 

[hata_ph]

You need to setup the mail relaying and port according to your mail server configuration.
The simplest setup is to change your email service listen port to 26 and PMG should work out of the box.
Remember to update your firewall rules to allow mail delivery to PMG instead of your original mail server.

https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#_mail_proxy_configuration

 

[eugenevdm]

Ah man I would love a HOWTO for Virtualmin!? We have many Virtualmin clients who are complaining about spam, especially phishing. Virtualmin has SpamAssassin by default but ClamAV is a challenge with at least 2GB RAM just for that.

Example phishing problem: SpamAssassin score = 2.7, need 5.0. Criminals are getting good with their emails.

Fortunately Virtualmin is pretty standard Postfix and open source, so setup should be to some degree straightforward. The proxying part is not that straightforward though. Super scared to break something so will have to make time to set up a test system and then see how far I get.