Proxmox Mail Gateway 9.0 released!

t.lamprecht

t.lamprecht

Proxmox Staff Member
Staff member
Jul 28, 2015
6,714
4,552
315
South Tyrol/Italy
shop.proxmox.com
We are pleased to announce the first stable release of Proxmox Mail Gateway 9.0 - immediately available for download!

Twenty years after its first release, the new version of our email security solution is based on Debian 13.1 "Trixie", but defaulting to the newer Linux kernel 6.14.11-2. The latest versions of ZFS 2.3.4, PostgreSQL 17, SpamAssassin 4.0.2 (with updated rulesets), and ClamAV 1.4.3 are included.

Some highlights of Proxmox Mail Gateway 9.0
  • New Quarantine UI on mobile browsers based on the modern Rust-based Yew framework.
  • Significantly improved Single-Sign-On (SSO) with OpenID Connect and multiple authentication realms for PMG, based on the feedback from our customers and community.
  • Synchronize the configuration templates of the core service postfix with the latest recommendations from upstream.
  • Adapt the Content-Type filters to the renaming of relevant MIME-types for Microsoft executable formats.

Beyond these major additions, we've also implemented numerous performance enhancements and bug fixes to make your experience even smoother. For a full list of changes, check out our release notes.

Release notes
https://pmg.proxmox.com/wiki/Roadmap

Press release
https://www.proxmox.com/en/news/press-releases/

Download
https://www.proxmox.com/en/downloads
Alternate ISO download:
https://enterprise.proxmox.com/iso

Documentation
https://pmg.proxmox.com/pmg-docs

Community Forum
https://forum.proxmox.com

Bugtracker
https://bugzilla.proxmox.com

Source code
https://git.proxmox.com

Thank you for supporting the Proxmox Mail Gateway project! Your contributions and feedback, tests, bug reports and code contributions are always welcome!

FAQ
Q: Can I upgrade the latest Proxmox Mail Gateway 8 to 9 with apt?
A: Yes, please follow the upgrade instructions on https://pmg.proxmox.com/wiki/Upgrade_from_8_to_9

Q: Can I upgrade a 9.0 beta installation to the stable 9.0 via apt?
A: Yes, upgrading from beta to stable installation is possible via apt. We recommend switching to the pmg-enterprise repository on upgrade for the most stable experience.

Q: How long will Proxmox Mail Gateway 8.2 receive bug fixes and security support?
A: Proxmox Mail Gateway 8.2 will receive security updates and critical bug fixes until August 2026. This support window provides an overlap of approximately one year after the release of Proxmox Mail Gateway 9.0, giving users ample time to plan their upgrade to the new major version. For more information on the support lifecycle of Proxmox Mail Gateway releases, please visit:
https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#_frequently_asked_questions

Q: Can I install Proxmox Mail Gateway on top of Debian Trixie?
A: Yes, see https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#pmg_install_on_debian

Q: Can I install Proxmox Mail Gateway as a virtual machine on Proxmox Virtual Environment, VMware, or Hyper-V ?
A: Yes, just do the ISO install. If you install on Hyper-V as a generation 2 virtual machine, configure secure boot to use "Microsoft UEFI Certificate Authority".

Q: Can I install Proxmox Mail Gateway as LXC container on Proxmox Virtual Environment?
A: Yes. You can install it on top of a Debian container or just download the template via the integrated template downloader.

Q: Where can I get more information about feature updates?
A: Check the roadmap, forum, the mailing list, and/or subscribe to our newsletter.
 
  • Like
Reactions: Fathi, otto_kunde, LeFred and 13 others
  • Like
Reactions: Fathi and Stoiko Ivanov
So I figured I would take a look at updating, as I have moved my PVE's all to Trixie. When I run the pmg8to9 script, I see the following warning:

INFO: Check the rulesystem...
WARN: deprecated default entry in 'Blacklist' present: nomail@fromthisdomain.com
Consider removing it, as fromthisdomain.com is not reserved
WARN: deprecated default entry in 'Whitelist' present: mail@fromthisdomain.com
Consider removing it, as fromthisdomain.com is not reserved


If I go in and look at the blacklist or whitelist, I see a lot of entries, but not the above, so I don't see a way to remove them.

If I do a pmgdb dump, then I do see what is talked about, but see no way in pmgdb to remove the entries:

RULE 4 (prio: 98, in, ACTIVE): Blacklist
FROM group 2 (and=0, invert=0): Blacklist
OBJECT Mail address 1: nomail@fromthisdomain.com
ACTION group 18: Block
OBJECT Block 31: block message

and

RULE 6 (prio: 85, in, ACTIVE): Whitelist
FROM group 3 (and=0, invert=0): Whitelist
OBJECT Mail address 2: mail@fromthisdomain.com
ACTION group 17: Accept
OBJECT Accept 30: accept message


So if the updater wants me to get rid of the entries, how do I accomplish this?

Any help appreciated..
 
WB3FFV said:
So if the updater wants me to get rid of the entries, how do I accomplish this?
Click to expand...

The current warning is not as telling as it could be, we improved that in git but not yet included in any version bump of pmg-api.

Anyway, these are entries in the Who Objects, so If you select that in the web UI and then the respective Black/Whitelist entries there, you should see the legacy (invalid) example domains and be able to remove them there.
 
  • Like
Reactions: Stoiko Ivanov and WB3FFV
t.lamprecht said:
The current warning is not as telling as it could be, we improved that in git but not yet included in any version bump of pmg-api.

Anyway, these are entries in the Who Objects, so If you select that in the web UI and then the respective Black/Whitelist entries there, you should see the legacy (invalid) example domains and be able to remove them there.
Click to expand...
Awesome, that is exactly what I needed. I didn't look there before, but your right and I was able to remove both, so thanks...
 
We are looking to install the email gateway on Nutanix. The server requirements are pretty vague. I'm looking at starting out at 4CPU, 8GB RAM, 100GB storage. Would that be sufficient for a medium-sized college? Ideally, I can right-size this virtual, but if I need to grow the storage, is that easy to do?
 
Has anyone experienced issues upgrading PMG from version 8 to 9 when running inside an LXC container?

We have a PMG cluster with 3x LXC-based PMG nodes.

We followed the upgrade instructions from https://pmg.proxmox.com/wiki/Upgrade_from_8_to_9, but we're unable to start the upgraded container.

It fails with the following error:
Code: 
root@proxmox04:~# pct start 118
run_buffer: 571 Script exited with status 25
lxc_init: 845 Failed to run lxc.hook.pre-start for container "118"
__lxc_start: 2034 Failed to initialize container "118"
startup for container '118' failed

Please note that our PVE hosts are still running version 8.4.1.

Has anyone else experienced this issue?
 
Nebukazar said:
Has anyone experienced issues upgrading PMG from version 8 to 9 when running inside an LXC container?
Click to expand...
There's a similar report in the German forum:

S

[SOLVED] Thread 'Fehler beim Upgrade auf Version 9 im Proxmox Container'

Ich habe das Proxmox Mail Gateway 8 in einem Container auf Proxmox 8 installiert. Nach einem Upgrade des Proxmox Mail Gateways auf die Version 9.0 startet der Container nicht mehr und ich erhalte folgende Fehlermeldung:
Code: 
run_buffer: 571 Script exited with status 25
lxc_init: 845 Failed to run lxc.hook.pre-start for container "204"
__lxc_start: 2034 Failed to initialize container "204"
Woran kann das liegen?

Das hier ist übrigens meine Conf des Containers:

Code: 
arch: amd64
cores: 2
features: nesting=1
hostname: pmgw
memory: 4096
nameserver: 192.168.X.XXX
net0...

In that case - upgrading PVE fixed the issue for them...

if that's not helping for you -please open a new thread and provide:
* `pveversion -v`
* `journalctl -b` of the PVE node
* and the debug logs for the container start: `pct start 118 --debug`

please mention me with @Stoiko Ivanov so that I see the thread
 
You must log in or register to reply here.
Top Bottom