Proxmox Mail Gateway 7.1 available

[martin]

We are happy to announce that Proxmox Mail Gateway 7.1 is available! It's based on Debian Bullseye 11.1, using a newer Linux kernel 5.13, and OpenZFS 2.1.

What's new

• Based on Debian 11.1 ("Bullseye")
• Apache SpamAssassin 3.4.6 and PostgreSQL 13.5
• API enhancements like Improved support for setups using DHCP for their network configuration
• GUI: the configuration of LDAP backends via GUI has been improved
• APT repository configuration now visible and editable by users with 'Administrator' privileges
• Multi-Factor Authentication for the GUI: WebAuthn, one-time recovery keys, TOTP as second factors
• updated translations

Countless bugfixes and other smaller improvements are included as well, see the full release notes.

Release notes
https://pmg.proxmox.com/wiki/index.php/Roadmap#Proxmox_Mail_Gateway_7.1

Download
https://www.proxmox.com/en/downloads
Alternate ISO download:
http://download.proxmox.com/iso

HELP & SUPPORT

Documentation
https://pmg.proxmox.com/pmg-docs

Community Forum
https://forum.proxmox.com

Source Code
https://git.proxmox.com

Bugtracker
https://bugzilla.proxmox.com

FAQ
Q: Can I upgrade Proxmox Mail Gateway 6.x to 7.1?
A: Please follow the upgrade instructions on https://pmg.proxmox.com/wiki/index.php/Upgrade_from_6.x_to_7.0

Q: Can I install Proxmox Mail Gateway on top of Debian Bullseye?
A: Yes, see https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#pmg_install_on_debian

Q: Can I install Proxmox Mail Gateway as a virtual machine on Proxmox Virtual Environment, VMware, or Hyper-V ?
A: Yes, just do the ISO install. If you install on Hyper-V as a generation 2 virtual machine, please disable secure boot.

Q: Can I install Proxmox Mail Gateway as LXC container on Proxmox Virtual Environment?
A: Yes, just download the template via the integrated template downloader.

A big Thank you to everyone who has contributed and sent feedback, and for testing, bug reporting and patch submitting!

__________________
Best regards,

Martin Maurer
Proxmox Mail Gateway project leader

 

[alexschomb]

Hi, could you please provide an updated LXC image for 7.1 as well? I tried updating from a new 7.0.1 LXC template installation manually, but was having issues during "Setting up fetchmail..." (freezes the update process).

 

[Stoiko Ivanov]

Hi, could you please provide an updated LXC image for 7.1 as well? I tried updating from a new 7.0.1 LXC template installation manually, but was having issues during "Setting up fetchmail..." (freezes the update process).

This sounds odd - and should not happen - could you:
a) make sure that the container has nesting enabled (newer Linux-distros will not run smoothly inside a container without it)

if this is the case please open a new thread (mentioning me with @Stoiko Ivanov ) and provide the journal from the timeframe of the upgrade?

Thanks!

 

[alexschomb]

This sounds odd - and should not happen - could you:
a) make sure that the container has nesting enabled (newer Linux-distros will not run smoothly inside a container without it)

if this is the case please open a new thread (mentioning me with @Stoiko Ivanov ) and provide the journal from the timeframe of the upgrade?

Thanks!

Thanks for your help. I was just in the middle of doing the same procedure again, but found that it was working this time. I digged deeper and found that the root cause of the issue is that I have used DHCP for the IPv6 address of the LXC container, although DHCP was not setup correctly for IPv6. As a result, the container won't start completely (for example I can't access the web interface, even before the apt update) and the apt upgrade freezes reproducible at "Setting up fetchmail (6.4.16-4+deb11u1) ..." IPv4 on the other hand is set up correctly with IPv4, but with DHCPv6 failing the problem will be introduced anyway. When disabling IPv6 completely (setting it to static with no address assigned), the container works just fine and the apt upgrade doesn't fail/freeze.

(Side note: I had nesting enabled)

 

[cglmicro]

Good job guys, I've just enabled 2FA and it work perfect.

I have 2 questions: during the update process from 7.0 to 7.1, it asked me if I wanted to keep or replace my /etc/pmg/templates/main.cf.in that was customized to add some smtpd_recipient_restrictions check and I answered "KEEP my mods". It bring me to this question: what will happen the day this file need to change to receive new features; would it be better if I let the update overwrite my mods and then I just add again my code?
And for this actual update, do you know if the file received some change or not?

Thank you.

 

[orosmannaro]

Q: Can I install Proxmox Mail Gateway as LXC container on Proxmox Virtual Environment?
A: Yes, just download the template via the integrated template downloader.

I am running PVE 7.1 and would like to create a CT with PMG 7.1 but I cannot find it in the template list (as shown in the attached screenshot).

 

[t.lamprecht]

I am running PVE 7.1 and would like to create a CT with PMG 7.1 but I cannot find it in the template list (as shown in the attached screenshot).

You can use the 7.0 one an just update to 7.1 for now, there's no breaking change or the like.

 

[orosmannaro]

You can use the 7.0 one an just update to 7.1 for now, there's no breaking change or the like.

Thank for your answer @t.lamprecht. I have already run apt update && apt dist-upgrade && apt full-upgrade (as described in the FAQ) but the PMG version is still 7.0 (pmgupgrade also returns Your System is up-to-date):

pmgversion

pmg-api/7.0-8/36f2537c (running kernel: 5.13.19-2-pve)

 

[orosmannaro]

My fault! I made a mistake configuring the PMG repository (buster instead bullseye). Sorry ...

 

[dakou2022]

hello
i wanna get every detail about the basic subscription option
all the feature i'll get and if i want the cluster mode.
i thing the page is less information talk about that.

thanks

 

[dakou2022]

This sounds odd - and should not happen - could you:
a) make sure that the container has nesting enabled (newer Linux-distros will not run smoothly inside a container without it)

if this is the case please open a new thread (mentioning me with @Stoiko Ivanov ) and provide the journal from the timeframe of the upgrade?

Thanks!

hello
i wanna get every detail about the basic subscription option
all the feature i'll get and if i want the cluster mode.
i thing the page is less information talk about that.

thanks

 

[Stoiko Ivanov]

hello
i wanna get every detail about the basic subscription option
all the feature i'll get and if i want the cluster mode.
i thing the page is less information talk about that.

Not quite related to the topic of the thread - but I'll try to answer anyways:

* the subscription (of all levels) gives you access to the pmg-enterprise repository - where the PMG software ends only after extensive testing (by us internally and by our users using the no-subscription repository) - see [0]
* a subscription of level basic an above additionally gives you access to our enterprise support portal, where you will get guaranteed responses to your support requests - for more details about which level gives you what - check out the pmg page and the subscription agreement:
https://www.proxmox.com/en/proxmox-mail-gateway/pricing (the subscription agreement can be downloaded from there)

Apart from that you can use PMG with all it's functions (including the cluster functionality) without any restrictions without any subscription

I hope this helps!
[0] https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#pmg_package_repositories

 

[systeembeheersp]

Hi,

I'm missing and having some issues after upgrade.

Google Safebrowsing doesn't appear in de gui.
And the status page , which should the virus database in use is empty.

My apologies, I apparently misread, Google Safebrowsing/ClamAV Safebrowsing is now deprecated?
I got a little confused, seeing other members using "Google" Safebrowsing etc.

ClamAV has deprecated the SafeBrowsing feature according to https://pmg.proxmox.com/wiki/index.php/Roadmap#Proxmox_Mail_Gateway_7.1

With regards,

Thomas

 

[t.lamprecht]

Google Safebrowsing/ClamAV Safebrowsing is now deprecated?

The free, integrated version is gone yes, that's due to changes in Google terms of service: https://blog.clamav.net/2020/06/the-future-of-clamav-safebrowsing.html

But you should still be able to assemble the safe browsing db yourself by creating your own Google Developer API key and using
https://github.com/Cisco-Talos/clamav-safebrowsing#clamav-safebrowsing

 

[systeembeheersp]

The free, integrated version is gone yes, that's due to changes in Google terms of service: https://blog.clamav.net/2020/06/the-future-of-clamav-safebrowsing.html

But you should still be able to assemble the safe browsing db yourself by creating your own Google Developer API key and using
https://github.com/Cisco-Talos/clamav-safebrowsing#clamav-safebrowsing

Thank you for info!
Will look into in.

Best regards,

Thomas

 

[asen_v_k]

Dear proxmox team, after upgrade from ver 6 to ver. 7 the web GUI not work.
Please help

Thanks
Asen

 

[Stoiko Ivanov]

Dear proxmox team, after upgrade from ver 6 to ver. 7 the web GUI not work.
Please help

Depending on whether you have a subscription of level Basic or higher you can open a ticket in our enterprise-support portal or - if you do not have one open a new thread in the PMG forum, and provide logs, screenshots, some more details