Configure Postfix to Send Email Using External SMTP Servers

Traducciones al Español
Estamos traduciendo nuestros guías y tutoriales al Español. Es posible que usted esté viendo una traducción generada automáticamente. Estamos trabajando con traductores profesionales para verificar las traducciones de nuestro sitio web. Este proyecto es un trabajo en curso.
Create a Linode account to try this guide with a $ credit.
This credit will be applied to any valid services used during your first  days.
This guide was originally written for Debian 7. It has since been tested to work with Debian 9.

You may want to configure Postfix to use an external SMTP provider like Mandrill, and SendGrid so you no longer have to build, maintain, and scale your own SMTP relay server. Another reason is to avoid getting your mail flagged as spam if your current server’s IP has been added to a spam list. This guide shows you how to configure Postfix to use an external SMTP provider and also shows specific examples for Mandrill, and SendGrid. However, you can apply the steps in this guide to configure Postfix to use any external SMTP provider.

Email restrictions on the Linode Platform
In an effort to fight spam originating from our platform, outbound connections on ports 25, 465, and 587 are blocked by default on Compute Instances for some new accounts. These restrictions prevent applications from sending email. If you intend to send email from a Compute Instance, review the Send Email on the Linode Platform guide to learn more about our email policies and to request the removal of these restrictions.

What is Postfix Used For?

Postfix allows you to route and deliver emails and uses the Simple Mail Transfer Protocol (SMTP).

What is the Postfix Configuration Process?

The majority of the Postfix configuration process is completed in the and files that are located in the /etc/postfix/ directory. The /etc/postfix directory is available once you have installed Postfix on your Linux system.

At a high-level Postfix configuration involves the following steps:

  1. Gather prerequisites, which include a fully qualified domain name(FQDN), updating your system, and installing the libsasl2-module package
  2. Install Postfix on your system
  3. Configure SMTP usernames and passwords
  4. Secure your password and hash database files
  5. Configure the relay server
  6. Test your Postfix configuration
  7. Set up Postfix with Mandrill, and SendGrid

Postfix Configuration

If you’re using Gmail or Google Workspace, see our Configure Postfix to Send Mail Using Gmail and Google Workspace on Debian or Ubuntu guide instead.

Gathering Prerequisites

In this section, you complete all prerequisite steps to configure Postfix to use an external SMTP server. Prerequisites to configure Postfix using an external SMTP server are:

  1. Ensure you have fully qualified domain name (FQDN). The Fully Qualified Domain Name (FQDN) is the absolute domain name, including subdomains, top-level domain, and root zone, that will direct queries under the Domain Name System (DNS) to an exact location—in this context, to your Linode. For a detailed explanation, see What is FQDN For? Linode Community Q&A.

  2. Ensure your system is up-to-date:

     apt-get update && apt-get upgrade
  3. Install the libsasl2-modules package:

     sudo apt-get install libsasl2-modules

Your system is now ready to install Postfix.

Installing Postfix

  1. Install Postfix by running the following command:

     sudo apt-get install postfix
  2. You receive a prompt asking for your General type of mail configuration. Select Internet Site from the options.

  1. Enter your fully qualified domain name when asked for your System mail name. An example FQDN is

  1. Once the installation is complete, open the /etc/postfix/ file using your preferred text editor. Edit the file to add your Linode’s FQDN to the myhostname configuration, if it is not already configured, and save your changes.

    File: /etc/postfix/
    myhostname =

Configuring SMTP Usernames and Passwords

Usernames and passwords are stored in the /etc/postfix/sasl_passwd file. In this section, you add your external mail provider credentials to the sasl_passwd Postfix configuration file.

The examples in this section provide the general steps to configure Postfix to use an external SMTP provider. If you want to use Mandrill or SendGrid as your SMTP provider, you can refer to the examples in the Postfix Configuration with Mandrill, and SendGrid section of this guide.

First, open or create the /etc/postfix/sasl_passwd file:

  1. Using a text editor of your choice, open the /etc/postfix/sasl_passwd file. If it does not yet exist, create it.

  2. Add the example line to your sasl_passwd file and replace username and password with your SMTP provider credentials.

    File: /etc/postfix/sasl_passwd
        [mail.isp.example] username:password
  3. Create a Hash database file for Postfix using the postmap command. This command creates a new file named sasl_passwd.db in the /etc/postfix/ directory.

     sudo postmap /etc/postfix/sasl_passwd

Secure your Password and Hash DB files

In the previous section you added plain text credentials to the /etc/postfix/sasl_passwd and /etc/postfix/sasl_passwd.db files. For this reason, you have to change the each file’s permissions to restrict access to all users other than the root user.

  1. Run the following command to change your each file’s permissions:

     sudo chown root:root /etc/postfix/sasl_passwd /etc/postfix/sasl_passwd.db
     sudo chmod 0600 /etc/postfix/sasl_passwd /etc/postfix/sasl_passwd.db

Configuring the Relay Server

You are now ready to provide the configurations needed by Postfix to use the external SMTP server. This configuration tells Postfix to deliver mail indirectly via a relay host, which in this case, is an external SMTP server.

Refer to the Postfix Configuration with Mandrill, and SendGrid section of this guide for specific relay host configurations for Mandrill, and SendGrid.
  1. Using a text editor, open the /etc/postfix/ file.

  2. Update the relayhost configuration with your external SMTP relay host. Replace mail.isp.example with your provider’s information. If you specified a non-default TCP port in the sasl_passwd file, then use the same port when configuring the relay host. The example uses 587 as its port number.

    File: /etc/postfix/
    # specify SMTP relay host
    relayhost = [mail.isp.example]:587
  3. Add the end of the file, add the example file’s parameters to enable authentication and save the changes you made to your file.

    File: /etc/postfix/
    # enable SASL authentication
    smtp_sasl_auth_enable = yes
    # disallow methods that allow anonymous authentication.
    smtp_sasl_security_options = noanonymous
    # where to find sasl_passwd
    smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
    # Enable STARTTLS encryption
    smtp_use_tls = yes
    # where to find CA certificates
    smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt
  4. Restart Postfix to enable your configurations:

     sudo service postfix restart

Testing Your Postfix Configuration

You can now test your Postfix Configurations by using your system’s mail utility.

  1. Install the mailutils package to use the mail utility.

     sudo apt-get install mailutils
  2. Compose an email to verify that your system is able to successfully send it. Replace the email address with your own and your intended recipient’s email address.

     echo  "body of your email" | mail -s "This is a subject" -a ""

    You can use Postfix’s own Sendmail implementation to test your Postfix configuration. Replace the example’s values with your own. When you are done drafting your email type ctrl d.

    Subject: Test mail
    This is a test email

Postfix Configuration with Mandrill, and SendGrid

This section shows you settings for some popular mail services you can use as external SMTP servers. You may have to do some fine-tuning on your own to avoid Postfix logins being flagged as suspicious.

Postfix Configuration for Mandrill

  1. Open your /etc/postfix/sasl_passwd file and replace USERNAME and API_KEY with your own Mandrill credentials and save your changes.

    File: /etc/postfix/sasl_passwd
  2. Open your /etc/postfix/ file and add the Mandrill relay host information included in the example file.

    File: /etc/postfix/
    relayhost = []:587
  3. Create a hash database file for Postfix using the postmap command:

    sudo postmap /etc/postfix/sasl_passwd
  4. Restart Postfix to enable your new configurations:

    sudo service postfix restart

Postfix Configuration for SendGrid

  1. Open your /etc/postfix/sasl_passwd file and replace USERNAME and PASSWORD with your own SendGrid credentials and save your changes.

    File: /etc/postfix/sasl_passwd
  2. Open your /etc/postfix/ file and add the SendGrid relay host information included in the example file.

    File: /etc/postfix/
    relayhost = []:587
  3. Create a hash database file for Postfix using the postmap command:

    sudo postmap /etc/postfix/sasl_passwd
  4. Restart Postfix to enable your new configurations:

    sudo service postfix restart

How Do I Check My Postfix Configuration?

All Postfix configuration files are stored in the /etc/postfix directory. You can use the postconf command to view all of your system’s Postfix configurations and their details. This is a great way to verify that your Postfix configuration values are as you expect them to be.

To view all the available postconf options, view its manual pages using the man postconf command.

How Do I Change My Postfix Configuration?

Postfix configuration files are located in the /etc/postfix/ directory. Most of your configurations are made in either the or files. To learn more about Postfix configuration files see Postfix’s README.

This page was originally published on

Your Feedback Is Important

Let us know if this guide was helpful to you.

Join the conversation.
Read other comments or post your own below. Comments must be respectful, constructive, and relevant to the topic of the guide. Do not post external links or advertisements. Before posting, consider if your comment would be better addressed by contacting our Support team or asking on our Community Site.
The Disqus commenting system for Linode Docs requires the acceptance of Functional Cookies, which allow us to analyze site usage so we can measure and improve performance. To view and create comments for this article, please update your Cookie Preferences on this website and refresh this web page. Please note: You must have JavaScript enabled in your browser.