Proxmox Mail Gateway (PMG)
Open-Source Email Security That Stops Threats Before They Reach Your Mail Server
Proxmox Mail Gateway is a full-featured email security platform that sits between your firewall and your internal mail server, filtering all inbound and outbound email traffic before it ever touches your production mail infrastructure. Spam, viruses, Trojans, phishing — it catches the lot and blocks it at the perimeter.
The deployment architecture is deliberately simple and effective. PMG operates as a mail proxy, meaning your MX records point to the gateway, it processes and filters all traffic, and only clean email gets forwarded to your actual mail server (Exchange, Postfix, Zimbra, whatever you run). This "before-queue" filtering approach is critical because it rejects malicious email directly during the SMTP dialogue, which means your mail server never accepts the dodgy message in the first place — and you avoid the "backscatter" problem that gets your domain blacklisted when your server tries to bounce undeliverable spam.
Under the hood, PMG runs dual anti-virus engines: ClamAV for signature-based scanning and Commtouch/CYREN Zero-Hour Virus Outbreak Protection for real-time, cloud-based detection of brand-new threats. Anti-spam filtering uses Apache SpamAssassin with continuously updated rulesets. The advanced object-oriented rule system gives administrators precise, flexible control over mail flow — match on sender, recipient, content, attachment type, and more, with AND/OR/NOT logic that handles even complex compliance requirements.
For organisations needing redundancy, PMG supports high availability clustering that synchronises configuration and data across master and node servers via a VPN tunnel. The web-based management interface includes a Message Tracking Centre that merges all email traffic logs into a single searchable view — no more guessing where a missing email went. Deploy it as a bare-metal ISO, a VM, or a container appliance; it takes minutes to configure and starts protecting your mail infrastructure immediately.
Architecture
Mail proxy — deployed between firewall and internal mail server
Anti-Virus
Dual engines: ClamAV + Commtouch/CYREN Zero-Hour Virus Outbreak Protection
Anti-Spam
Apache SpamAssassin with continuously updated rulesets
Filtering
Before-queue SMTP rejection — prevents backscatter blacklisting
Rule System
Object-oriented rules with AND/OR/NOT logic for precise mail flow control
High Availability
Master-node clustering with VPN-tunnelled configuration sync
Management
Web-based UI with Message Tracking Centre for unified email log search
Deployment
Bare-metal ISO, virtual machine, or container appliance
The email security market is dominated by per-user, per-month subscription models that punish organisations as they grow. Microsoft Defender for Office 365, Mimecast, Proofpoint, Barracuda — they all charge per mailbox, and the costs add up fast for organisations with hundreds or thousands of users. Proxmox Mail Gateway flips that model entirely: subscriptions are per host, with unlimited users and unlimited domains. For a large organisation, the savings are dramatic. The French Health Insurance system runs PMG to process 130,000 mass emails per hour. The University of Macau scans 50,000 inbound and outbound emails daily. Bin Drai Enterprises deployed it specifically to stop ransomware and phishing. These are real-world, production deployments at serious scale — not lab experiments. For Australian organisations still running on-premises mail servers — and there are plenty, particularly in government, healthcare, finance, and education where data sovereignty matters — PMG provides enterprise-grade email security without the per-user tax. It also works for hybrid environments where you maintain an on-premises mail server alongside cloud services. The before-queue filtering approach is technically superior to gateway solutions that accept-then-bounce, because it avoids the backscatter problem that can damage your domain reputation. And because it's open source, there's no vendor lock-in and no opaque filtering algorithms you can't inspect or audit.
One of the advantages of working with CRS — we can recommend the best combination of vendors for your specific needs.
StoneFly
StoneFly storage providing reliable archival for email logs and quarantined messages from PMG
NAKIVO
NAKIVO backing up the Proxmox Mail Gateway VM or container to ensure rapid recovery of email security infrastructure
QSAN
QSAN NAS arrays storing email archives and PMG quarantine data with enterprise-grade reliability
StarWind
StarWind VSAN delivering HA shared storage for PMG high-availability cluster deployments
StoneFly Cloud Vault & Cloud Storage
StoneFly Secure Cloud Vault for off-site backup and disaster recovery of PMG configuration and mail archives
Proxmox Mail Gateway is available through Cloud Ready Solutions and our network of authorised partners across Australia, New Zealand, and the Pacific.
Already a CRS partner?
Log in to configure and quote
Proxmox
Open-Source Virtualisation
Enterprise virtualisation with KVM and containers—no per-socket licensing fees.
View all Proxmox products