Base
Hardened build
minimal ports, security patches applied at build time
Debian 13 VM with Proxmox Mail Gateway 9
Azure
Security
Proxmox Mail Gateway, the open source email security gateway that stops spam, viruses and phishing before they reach your mail servers, with a full web interface for rules, quarantine and mail tracking.
Overview
Proxmox Mail Gateway is an open source email security platform that sits between the internet and your own mail servers. Every message passes through it as a full mail proxy: incoming mail is checked with SpamAssassin scoring, Bayesian filtering, DNS blocklists, SPF and DKIM checks, greylisting and the ClamAV antivirus engine before it is relayed on to your mail server, and outgoing mail from your internal servers can be scanned on the way out.
Policy is driven by an object based rule system that combines who a message is from or to, what it contains, when it arrives and what should happen to it, so you can quarantine, block, mark, notify or deliver with precision. Users can review their own spam quarantine and receive daily spam reports, administrators get a tracking center that follows each message through the gateway, and everything is managed from a web interface and a REST API, with LDAP and Active Directory integration, TLS and DKIM signing built in.
It suits organisations that run their own mail servers and want an independent filtering layer in front of them, service providers who filter mail for several domains, and teams that want spam and antivirus policy they control and can audit.
Why the cloudimg image
cloudimg delivers Proxmox Mail Gateway unmodified from the official Proxmox repository, with nothing to guess on first boot and no login baked into the image. Each instance creates its own administrator account with a random password stored in a root only file, and generates its own web certificate, API ticket signing key, CSRF key, SMTP TLS certificate and database TLS key the first time it starts, so no two deployments share a secret. Antivirus signatures are fetched fresh from the signature provider on first boot rather than shipped stale.
The gateway starts closed: no mail domains are relayed until you add your own, and the internal relay port only accepts mail from your own network. The free no subscription repository is configured and the subscription only repository is switched off, so updates work straight away. The image keeps the cloud optimised kernel and resolves its own host name and mail domain automatically on every boot. A paired deployment guide covers DNS, routing mail to your server, the platform rules for outbound mail on port 25, sizing and security hardening, backed by 24/7 cloudimg support.
Common uses
- Filter inbound email for your own mail servers, stopping spam, viruses and phishing at the edge
- Scan outbound mail from internal servers and relay it through a smart host
- Give users a self service spam quarantine with daily spam reports
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Security
2F
2FAuth on Ubuntu 24.04 LTS
Security
2FAuth is a free, open source, self hosted web app for managing your two factor authentication accounts.
Ad
acme-dns on Ubuntu 24.04 LTS
Security
The image installs acme-dns 2.0.2 from the official upstream release (github.com/acme-dns/acme-dns, the project formerly...
addy.io on Ubuntu 24.04
Security
Mail sent to an alias is forwarded to your real inbox, and you can reply from the alias so the other side never learns w...
AliasVault on Ubuntu 24.04
Security
AliasVault is an open source, end to end encrypted password manager combined with a private email alias service that you...
Apache SpamAssassin
Security
This image runs Apache SpamAssassin, the long established open source anti spam platform, fully configured and security ...
Apache Syncope on Ubuntu 24.04
Security
Apache Syncope is an open source identity management and identity governance platform.