MX gateway and relay server integration for Qmail environments

Pitbull MX gateway for Qmail (Free, Linux/Unix) mail servers: inbound filtering, quarantine and outbound relay. All outbound or per-domain relay is configured through Pitbull via the Qmail smtproutes file.

Qmail · Relay MX + Relay Server
Inbound MX ROUTED
Relay AKTİF
Filter RSPAMD
Abuse OBSERVE
Qmail Relay MX Gateway Rspamd NOC
Linux/Unix
Platform
Free
License
MX+Relay
Gateway model
KVKK
Local processing

Integration challenges

Pitbull solves mail security on this platform with the MX gateway model.

Limited native filtering

Qmail default spam protection is insufficient against advanced phishing and BEC attacks.

Outbound blind spot

Without relay configuration, outbound spam and abuse detection is delayed; IP reputation drops.

Missing central visibility

Hard to monitor traffic, quarantine and reject reasons from one point.

Scattered policy

Managing SPF/DKIM/DMARC and quarantine policies per server increases error risk.

Pitbull integration with Qmail

In environments using Qmail, Pitbull integration works on two channels:

  • Inbound: DNS MX records point to the Pitbull gateway; Rspamd-based filtering, quarantine and policy engine secure inbound traffic.
  • Outbound: All outbound or per-domain relay is configured through Pitbull via the Qmail smtproutes file.

Relay Server Configuration

For global relay in Qmail, add :relay.pitbull.com.tr:587 to /var/qmail/control/smtproutes. For per-domain routing use example.com:relay.pitbull.com.tr:587 format.

Inbound MX Gateway

  • Point domain MX records to the Pitbull gateway address (priority 10)
  • Rspamd spam, phishing and malware filtering at the gateway layer
  • Malicious attachment scanning via ClamAV / Avast REST
  • SPF, DKIM and DMARC checks + score breakdown
  • Suspicious messages isolated in quarantine; admin-approved release workflow

Outbound Relay Settings

To route outbound traffic to the Pitbull relay on Qmail:

# /var/qmail/control/smtproutes
# Route all outbound to Pitbull relay
:relay.pitbull.com.tr:587

# Per-domain (optional)
example.com:relay.pitbull.com.tr:587

# SMTP AUTH requires patch (netqmail + TLS)

This configuration passes outbound traffic through the Pitbull outbound filtering engine. SMTP Abuse Radar, per-tenant rate limits and Emergency Outbound Lockdown are activated.

Authentication

  • Add Pitbull include to SPF
  • Enable DKIM signing from Pitbull panel and publish DNS TXT record
  • Start DMARC at p=none and monitor reports

Operational Visibility

Monitor delivery rates, reject reasons, queue status and GeoIP/ASN distribution on NOC screens. Deliver periodic security summaries to management teams with executive PDF reports.

Illustrated setup guide

Pitbull integration on this platform is completed in 4 visual steps.

Gateway flow diagram
MX Gateway
1

MX Gateway

Point DNS MX to the Pitbull gateway address.

SPF · DKIM · DMARC
2

SPF · DKIM · DMARC

Add authentication DNS records.

Outbound Relay
3

Outbound Relay

Set Pitbull relay as smarthost / relayhost.

NOC Verification
4

NOC Verification

Send a test email and verify in the NOC panel.

Setup steps

  1. 1 Point DNS MX records to the Pitbull gateway address (priority 10).
  2. 2 Add Pitbull include to SPF; generate DKIM TXT from panel and add to DNS.
  3. 3 Set the Pitbull relay address in Qmail relay/smarthost settings.
  4. 4 Send a test email and verify inbound/outbound traffic in the NOC panel.
  5. 5 Start DMARC at p=none and monitor aggregate reports.