Skip to content

NetCell MailGuard

SMTP security gateway built on Postfix + rspamd 4.0 + ClamAV + a YARA sandbox, with active-active clustering and Debian package delivery via the Gitea Package Registry.

Quick start

curl -s https://get.netcell-mailguard.de | sudo bash

Latest

The release history lives in the changelog.

Architecture in brief

  • Active-active cluster, no primary/replica. Every node is a master.
  • Config replicates between peers via app-level fan-out over mTLS (domains, mail_config, sender filters, DKIM keys, …).
  • rspamd Bayes / Neural / Reputation runs on KeyDB active-active.
  • rspamd Fuzzy uses native fuzzy_storage mirrors.
  • Quarantine is the Postfix hold queue, not a database table (PMG pattern).
  • Mail logs / history / sandbox jobs are per-node, cluster-wide visible via mTLS aggregation on read.