100% KVKK CompliantISO 27001Turkey Data Center
0850 305 88 66  ·  info@mailguard.com.tr
Get a Quote
HomeFeaturesSolutionsDocsToolsMail Test
Home / Solutions / Postfix

Smarthost & SMTP Relay for Postfix

Route the outbound mail of your standalone Postfix servers to the MailGuard smarthost, so it is delivered DKIM-signed from reputation-managed IP pools. Set it up in just a few lines with relayhost + SASL.

Why is outbound mail rejected on Postfix?

When you send directly from your own Postfix server, IP reputation, the PTR record and SPF/DKIM/DMARC compliance are critical. If any one of these is missing, large providers reject the connection or push the mail to spam. When you set MailGuard as the relayhost, this entire burden shifts to MailGuard.

Setup with Postfix

  • In main.cf: relayhost = [relay.mailguard.com.tr]:587
  • SASL: smtp_sasl_auth_enable = yes, smtp_sasl_password_maps = static:USER:PASSWORD, smtp_sasl_security_options = noanonymous
  • TLS: smtp_tls_security_level = encrypt ; then postfix reload.
  • For inbound filtering, point your domain's MX record to mx01/mx02.mailguard.com.tr.

For detailed, copy-paste configuration, see the docs. To test your domain, use the SPF/DKIM/DMARC tool and the mail test.

Comparison

MailGuardDirectly from the serverDoing nothing
DKIM signature on outbound mailAutomatic (MailGuard signs)You have to set it up yourselfNone
IP reputation managementFixed, monitored pool per domainSingle IP — everyone shares the same riskNone
Inbound spam / virus filterYes (MX redirection)Depends on the serverNone
Risk of being blacklistedMinimal (isolated pool)HighHigh
Delivery visibility / logsReal-time panel + APILimitedNone

Frequently asked questions

How do I configure a smarthost in Postfix?
In main.cf you set relayhost to [relay.mailguard.com.tr]:587, enable your SASL username/password and TLS, then run postfix reload.
Where do I find the SASL password?
You create the username and password on the SMTP Credentials page in your MailGuard panel; the password is shown only once.
Can I use my own DKIM signature?
Yes, your existing signature passes through intact. If you don't have one, MailGuard signs outbound mail on your behalf.
Is IP authorization (without a password) possible?
On servers with a static IP you can use IP authorization; in that case the smtp_sasl_* lines are not needed — only relayhost and TLS are enough.
Is inbound filtering mandatory?
No, it's optional. You can use outbound relay only, or add inbound spam/virus filtering by changing your MX record if you wish.

Customer reviews

★★★★★

Thanks to MailGuard, we now hardly ever get the “mail didn't arrive” complaint from our customers.

Fırat K.
★★★★★

The amount of our mail landing in the spam folder dropped noticeably. It met our expectations.

Onur Ş.
★★★★★

The spam-filtering results exceeded our expectations. Unnecessary traffic dropped significantly.

Hakan T.
★★★★★

Together with SPF, DKIM and the other settings, our delivery performance improved noticeably.

Yusuf Ç.
★★★★★

Because the integration steps were clear, our technical team completed it quickly.

Recep D.
★★★★★

Thanks to the technical documentation and integration guides, the setup was completed quite quickly.

Batuhan K.

Let's connect your Postfix server to MailGuard

Let's go over your current setup, volume and delivery issues, and draw up a migration plan tailored to you.

Get a Quote

Using a Smarthost for Postfix Servers

Postfix is the most widely used MTA in the Linux world and gives you full control. But that control also puts the delivery responsibility on you: IP reputation, reverse DNS (PTR) and the entire SPF/DKIM/DMARC and TLS configuration must all be correct. A single missing piece is enough for your outbound mail to be rejected by large providers.

Defining a smarthost hands off that responsibility. By adding a few lines to main.cf, you route Postfix's outbound mail to MailGuard. MailGuard signs the mail with DKIM, runs it through content and rate inspection, and delivers it from a reputation-managed IP with the correct PTR/HELO. You are freed from the burden of tracking your own IP's reputation, blacklist entries and rDNS settings.

Optionally, you can also add inbound spam/virus filtering by pointing your MX record to MailGuard. This way your standalone Postfix server gains enterprise-grade delivery and security.