{"id":7896,"date":"2026-04-11T11:07:08","date_gmt":"2026-04-11T05:37:08","guid":{"rendered":"https:\/\/qloudhost.com\/blog\/?p=7896"},"modified":"2026-04-11T11:07:10","modified_gmt":"2026-04-11T05:37:10","slug":"install-and-configure-email-filter-appliance","status":"publish","type":"post","link":"https:\/\/qloudhost.com\/blog\/install-and-configure-email-filter-appliance","title":{"rendered":"Install and Configure Email Filter Appliance (E.F.A): 2026"},"content":{"rendered":"\n<p>Email is still the backbone of everyday business communication, but it\u2019s also one of the easiest doors for spam, phishing, malware, and data leaks to slip through.<\/p>\n\n\n\n<p>If you\u2019ve ever dealt with an inbox flooded with junk emails, fake login alerts, or suspicious attachments, you already know how costly and distracting unfiltered email traffic can be. That\u2019s exactly where an Email Filter Appliance (E.F.A) steps in, not as a \u201cnice-to-have\u201d tool, but as a critical security layer for modern email systems.<\/p>\n\n\n\n<p>An Email Filter Appliance works quietly in the background, inspecting every incoming and outgoing message before it ever reaches your mail server or users. From blocking spam and phishing attempts to scanning attachments for malware and enforcing email policies, an E.F.A helps organizations maintain clean, secure, and reliable email communication. However, installing and configuring one correctly is where many administrators struggle. A small misconfiguration can lead to blocked legitimate emails or worse, security gaps that attackers can exploit.<\/p>\n\n\n\n<p>This step-by-step guide is written for system administrators, IT professionals, and even beginners who want a clear, practical understanding of how to install and configure an Email Filter Appliance in 2026. Instead of overwhelming you with theory, this guide focuses on real-world steps, best practices, and common mistakes to avoid.<\/p>\n\n\n\n<p>So you can confidently deploy an E.F.A that actually works the way it should. Whether you\u2019re setting it up for the first time or refining an existing email security setup, this guide will walk you through the process in a simple, human, and hands-on way.<\/p>\n\n\n\n<nav\n    id=\"block_3631185b229401b40c700d9e19d42728\"\n    class=\"acf-toc acf-toc--smooth-scroll\"\n    aria-label=\"Table of Contents\"\n        >\n                        <p class=\"acf-toc__title\">\n                Table of Contents            <\/p>\n                <div class=\"acf-toc__content\">\n            <ul><li class=\"acf-toc__item acf-toc__item--depth-0\" data-level=\"2\"><a href=\"#what-is-e-f-a-and-why-use-it-as-your-email-gateway\" class=\"acf-toc__link\">What Is E.F.A and Why Use It as Your Email Gateway?<\/a><\/li><li class=\"acf-toc__item acf-toc__item--depth-0\" data-level=\"2\"><a href=\"#planning-and-prerequisites-2026-best-practices\" class=\"acf-toc__link\">Planning and Prerequisites (2026 Best Practices)<\/a><\/li><li class=\"acf-toc__item acf-toc__item--depth-0\" data-level=\"2\"><a href=\"#step-by-step-install-e-f-a-two-proven-paths\" class=\"acf-toc__link\">Step-by-Step: Install E.F.A (Two Proven Paths)<\/a><\/li><li class=\"acf-toc__item acf-toc__item--depth-0\" data-level=\"2\"><a href=\"#initial-web-setup-and-hardening\" class=\"acf-toc__link\">Initial Web Setup and Hardening<\/a><\/li><li class=\"acf-toc__item acf-toc__item--depth-0\" data-level=\"2\"><a href=\"#dns-mx-spf-dkim-and-dmarc\" class=\"acf-toc__link\">DNS: MX, SPF, DKIM, and DMARC<\/a><\/li><li class=\"acf-toc__item acf-toc__item--depth-0\" data-level=\"2\"><a href=\"#postfix-integration-inbound-and-outbound\" class=\"acf-toc__link\">Postfix Integration (Inbound and Outbound)<\/a><\/li><li class=\"acf-toc__item acf-toc__item--depth-0\" data-level=\"2\"><a href=\"#security-and-policy-tuning\" class=\"acf-toc__link\">Security and Policy Tuning<\/a><\/li><li class=\"acf-toc__item acf-toc__item--depth-0\" data-level=\"2\"><a href=\"#integration-scenarios\" class=\"acf-toc__link\">Integration Scenarios<\/a><\/li><li class=\"acf-toc__item acf-toc__item--depth-0\" data-level=\"2\"><a href=\"#when-to-choose-managed-help\" class=\"acf-toc__link\">When to Choose Managed Help?<\/a><\/li><li class=\"acf-toc__item acf-toc__item--depth-0\" data-level=\"2\"><a href=\"#faqs-install-and-configure-email-filter-appliance-e-f-a\" class=\"acf-toc__link\">FAQs &#8211; Install and Configure Email Filter Appliance (E.F.A)<\/a><\/li><li class=\"acf-toc__item acf-toc__item--depth-0\" data-level=\"2\"><a href=\"#conclusion-install-and-configure-email-filter-appliance-e-f-a\" class=\"acf-toc__link\">Conclusion &#8211; Install and Configure Email Filter Appliance (E.F.A)<\/a><\/li><\/ul>        <\/div>\n    <\/nav>\n\n<script type=\"application\/ld+json\">{\"@context\":\"https:\/\/schema.org\",\"@type\":\"ItemList\",\"itemListElement\":[{\"@type\":\"SiteNavigationElement\",\"position\":1,\"name\":\"What Is E.F.A and Why Use It as Your Email Gateway?\",\"url\":\"https:\/\/qloudhost.com\/blog\/install-and-configure-email-filter-appliance#what-is-e-f-a-and-why-use-it-as-your-email-gateway\"},{\"@type\":\"SiteNavigationElement\",\"position\":2,\"name\":\"Planning and Prerequisites (2026 Best Practices)\",\"url\":\"https:\/\/qloudhost.com\/blog\/install-and-configure-email-filter-appliance#planning-and-prerequisites-2026-best-practices\"},{\"@type\":\"SiteNavigationElement\",\"position\":3,\"name\":\"Step-by-Step: Install E.F.A (Two Proven Paths)\",\"url\":\"https:\/\/qloudhost.com\/blog\/install-and-configure-email-filter-appliance#step-by-step-install-e-f-a-two-proven-paths\"},{\"@type\":\"SiteNavigationElement\",\"position\":4,\"name\":\"Initial Web Setup and Hardening\",\"url\":\"https:\/\/qloudhost.com\/blog\/install-and-configure-email-filter-appliance#initial-web-setup-and-hardening\"},{\"@type\":\"SiteNavigationElement\",\"position\":5,\"name\":\"DNS: MX, SPF, DKIM, and DMARC\",\"url\":\"https:\/\/qloudhost.com\/blog\/install-and-configure-email-filter-appliance#dns-mx-spf-dkim-and-dmarc\"},{\"@type\":\"SiteNavigationElement\",\"position\":6,\"name\":\"Postfix Integration (Inbound and Outbound)\",\"url\":\"https:\/\/qloudhost.com\/blog\/install-and-configure-email-filter-appliance#postfix-integration-inbound-and-outbound\"},{\"@type\":\"SiteNavigationElement\",\"position\":7,\"name\":\"Security and Policy Tuning\",\"url\":\"https:\/\/qloudhost.com\/blog\/install-and-configure-email-filter-appliance#security-and-policy-tuning\"},{\"@type\":\"SiteNavigationElement\",\"position\":8,\"name\":\"Integration Scenarios\",\"url\":\"https:\/\/qloudhost.com\/blog\/install-and-configure-email-filter-appliance#integration-scenarios\"},{\"@type\":\"SiteNavigationElement\",\"position\":9,\"name\":\"When to Choose Managed Help?\",\"url\":\"https:\/\/qloudhost.com\/blog\/install-and-configure-email-filter-appliance#when-to-choose-managed-help\"},{\"@type\":\"SiteNavigationElement\",\"position\":10,\"name\":\"FAQs - Install and Configure Email Filter Appliance (E.F.A)\",\"url\":\"https:\/\/qloudhost.com\/blog\/install-and-configure-email-filter-appliance#faqs-install-and-configure-email-filter-appliance-e-f-a\"},{\"@type\":\"SiteNavigationElement\",\"position\":11,\"name\":\"Conclusion - Install and Configure Email Filter Appliance (E.F.A)\",\"url\":\"https:\/\/qloudhost.com\/blog\/install-and-configure-email-filter-appliance#conclusion-install-and-configure-email-filter-appliance-e-f-a\"}]}<\/script><style>html:has(.acf-toc--smooth-scroll){scroll-behavior:smooth}@media(prefers-reduced-motion:reduce){html:has(.acf-toc--smooth-scroll){scroll-behavior:auto}}<\/style>\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity is-style-wide\"\/>\n\n\n\n<h2 id=\"what-is-e-f-a-and-why-use-it-as-your-email-gateway\" class=\"wp-block-heading\"><strong>What Is E.F.A and Why Use It as Your Email Gateway?<\/strong><\/h2>\n\n\n\n<p>Email Filter Appliance (E.F.A) is an open-source email security gateway that sits in front of your mail server (on-premises or cloud) to block spam, phishing, and malware. <\/p>\n\n\n\n<div class=\"wp-block-media-text has-media-on-the-right is-stacked-on-mobile\" style=\"grid-template-columns:auto 35%\"><div class=\"wp-block-media-text__content\">\n<p>Under the hood it typically uses Postfix (MTA), Amavis, SpamAssassin, ClamAV, policy\/greylisting, DKIM\/DMARC, and a quarantine portal to reduce junk mail and protect users.<\/p>\n<\/div><figure class=\"wp-block-media-text__media\"><img loading=\"lazy\" decoding=\"async\" width=\"1019\" height=\"1024\" src=\"https:\/\/qloudhost.com\/blog\/wp-content\/uploads\/2025\/12\/Install-and-Configure-Email-Filter-Appliance-1019x1024.jpg\" alt=\"Install and Configure Email Filter Appliance\" class=\"wp-image-7995 size-full\" title=\"\" srcset=\"https:\/\/qloudhost.com\/blog\/wp-content\/uploads\/2025\/12\/Install-and-Configure-Email-Filter-Appliance-1019x1024.jpg 1019w, https:\/\/qloudhost.com\/blog\/wp-content\/uploads\/2025\/12\/Install-and-Configure-Email-Filter-Appliance-300x300.jpg 300w, https:\/\/qloudhost.com\/blog\/wp-content\/uploads\/2025\/12\/Install-and-Configure-Email-Filter-Appliance-150x150.jpg 150w, https:\/\/qloudhost.com\/blog\/wp-content\/uploads\/2025\/12\/Install-and-Configure-Email-Filter-Appliance-768x771.jpg 768w, https:\/\/qloudhost.com\/blog\/wp-content\/uploads\/2025\/12\/Install-and-Configure-Email-Filter-Appliance-1529x1536.jpg 1529w, https:\/\/qloudhost.com\/blog\/wp-content\/uploads\/2025\/12\/Install-and-Configure-Email-Filter-Appliance-810x814.jpg 810w, https:\/\/qloudhost.com\/blog\/wp-content\/uploads\/2025\/12\/Install-and-Configure-Email-Filter-Appliance-1140x1145.jpg 1140w, https:\/\/qloudhost.com\/blog\/wp-content\/uploads\/2025\/12\/Install-and-Configure-Email-Filter-Appliance.jpg 1806w\" sizes=\"auto, (max-width: 1019px) 100vw, 1019px\" \/><\/figure><\/div>\n\n\n\n<p>Deployed correctly, E.F.A improves delivery, filters malicious content, enforces TLS, and provides visibility over inbound\/outbound flows. It\u2019s a cost-effective anti-spam appliance alternative that you manage and customize to your risk profile.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity is-style-wide\"\/>\n\n\n\n<h2 id=\"planning-and-prerequisites-2026-best-practices\" class=\"wp-block-heading\"><strong>Planning and Prerequisites (2026 Best Practices)<\/strong><\/h2>\n\n\n\n<p>Before you install and configure Email Filter Appliance (E.F.A), align network, DNS, and server requirements. This prevents mail loops and delivery failures.<\/p>\n\n\n\n<h3 id=\"core-requirements\" class=\"wp-block-heading\"><strong>Core Requirements<\/strong><\/h3>\n\n\n\n<div id=\"affiliate-style-decee516-0c9c-494f-abbc-9a99ffadc428\" class=\"wp-block-affiliate-booster-ab-icon-list affiliate-block-decee5 affiliate-iconlist-wrapper\"><div class=\"affiliate-iconlist-inner aff-list-isshow-icon\"><div class=\"affiliate-block-advanced-list affiliate-icon-list affiliate-alignment-left\"><ul class=\"affiliate-list affiliate-list-type-unordered affiliate-list-bullet-arrow-alt-circle-right\"><li>Server\/VM: 2\u20134 vCPU, 8\u201316 GB RAM, 80\u2013200 GB SSD. More for high volume.<\/li><li>OS: RHEL-compatible (e.g., AlmaLinux\/Rocky) if you\u2019re building from packages; otherwise use the official E.F.A image\/installer.<\/li><li>Network: Static public IP and resolvable FQDN (e.g., efa.yourdomain.com) with reverse DNS.<\/li><li>DNS: MX record to E.F.A, SPF include\/allow for your outbound path, DKIM and DMARC for your domain.<\/li><li>Firewall: Allow TCP 25 (SMTP), 443 (admin\/portal), 80 (HTTP\/ACME), 587\/Submission if required.<\/li><li>NTP\/Time: Accurate time sync (NTP\/chrony) to avoid TLS\/DKIM failures.<\/li><\/ul><\/div><\/div><\/div>\n\n\n\n<h3 id=\"topology-choices\" class=\"wp-block-heading\"><strong>Topology Choices<\/strong><\/h3>\n\n\n\n<div id=\"affiliate-style-0939ba7c-ee82-43f4-b3ce-d1967f2f118a\" class=\"wp-block-affiliate-booster-ab-icon-list affiliate-block-0939ba affiliate-iconlist-wrapper\"><div class=\"affiliate-iconlist-inner aff-list-isshow-icon\"><div class=\"affiliate-block-advanced-list affiliate-icon-list affiliate-alignment-left\"><ul class=\"affiliate-list affiliate-list-type-unordered affiliate-list-bullet-arrow-alt-circle-right\"><li>Inbound only: Internet \u2192 E.F.A \u2192 Your mail platform (Microsoft 365, Google Workspace, or on\u2011prem Exchange).<\/li><li>Full gateway: Internet \u21c6 E.F.A \u21c6 Your mail platform (scan inbound and relay outbound).<\/li><li>Redundancy: Two E.F.A nodes behind anycast or with MX priority.<\/li><\/ul><\/div><\/div><\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity is-style-wide\"\/>\n\n\n\n<h2 id=\"step-by-step-install-e-f-a-two-proven-paths\" class=\"wp-block-heading\"><strong>Step-by-Step: Install E.F.A (Two Proven Paths)<\/strong><\/h2>\n\n\n\n<p>Here are two simple and proven ways to install E.F.A, depending on your setup and experience level. Follow the steps carefully and you\u2019ll have your email filtering system up and running without confusion.<\/p>\n\n\n\n<h3 id=\"option-a-install-from-the-official-e-f-a-image\" class=\"wp-block-heading\"><strong>Option A &#8211; Install from the Official E.F.A Image<\/strong><\/h3>\n\n\n\n<div id=\"affiliate-style-d7343a12-8da2-4b2e-8af2-81776caa2b33\" class=\"wp-block-affiliate-booster-ab-icon-list affiliate-block-d7343a affiliate-iconlist-wrapper\"><div class=\"affiliate-iconlist-inner aff-list-isshow-icon\"><div class=\"affiliate-block-advanced-list affiliate-icon-list affiliate-alignment-left\"><ul class=\"affiliate-list affiliate-list-type-unordered affiliate-list-bullet-arrow-alt-circle-right\"><li>Download the latest E.F.A ISO\/OVA from the official project.<\/li><li>Create a new VM with recommended resources and attach the image.<\/li><li>Boot the installer, accept license, choose disk, set root password, and assign network with a static IP.<\/li><li>Reboot and note the web UI URL (HTTPS on your FQDN or IP).<\/li><\/ul><\/div><\/div><\/div>\n\n\n\n<p>This path gives you a curated, integrated stack with the E.F.A management UI, quarantine portal, and sensible defaults out of the box.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 id=\"option-b-build-on-a-rhel-compatible-minimal-server\" class=\"wp-block-heading\"><strong>Option B &#8211; Build on a RHEL-Compatible Minimal Server<\/strong><\/h3>\n\n\n\n<p>If you prefer a manual build for tighter control, install a minimal OS, then add the core components. This mirrors how E.F.A assembles Postfix, Amavis, SpamAssassin, ClamAV, OpenDKIM, and policy services. Example bootstrap:<\/p>\n\n\n\n<pre class=\"wp-block-code has-vce-bg-color has-vce-meta-background-color has-text-color has-background has-link-color wp-elements-f79438c046f75d169ce178736a64b86f\"><code># 1) Base OS prep (AlmaLinux\/Rocky minimal)\nsudo dnf -y update\nsudo dnf -y install epel-release\nsudo dnf -y install vim git curl wget unzip chrony policycoreutils-python-utils firewalld\n\n# 2) Hostname and time\nsudo hostnamectl set-hostname efa.yourdomain.com\nsudo systemctl enable --now chronyd\n\n# 3) SMTP stack\nsudo dnf -y install postfix amavisd-new spamassassin clamav clamav-update opendkim opendkim-tools\n\n# 4) Enable services\nsudo systemctl enable --now postfix amavisd opendkim\nsudo systemctl enable --now clamd@scan || true\nsudo freshclam || true\n\n# 5) Firewall\nsudo systemctl enable --now firewalld\nsudo firewall-cmd --permanent --add-service=smtp\nsudo firewall-cmd --permanent --add-service=https\nsudo firewall-cmd --permanent --add-service=http\nsudo firewall-cmd --reload<\/code><\/pre>\n\n\n\n<p>Then wire Postfix to Amavis\/SpamAssassin\/ClamAV and OpenDKIM. E.F.A\u2019s official build handles this for you, but manual admins may prefer explicit configs (examples below).<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity is-style-wide\"\/>\n\n\n\n<h2 id=\"initial-web-setup-and-hardening\" class=\"wp-block-heading\"><strong>Initial Web Setup and Hardening<\/strong><\/h2>\n\n\n\n<p>Here, we\u2019ll walk through the initial web setup of E.F.A to get everything up and running smoothly. We\u2019ll also cover basic hardening practices to secure your appliance from common vulnerabilities right from the start.<\/p>\n\n\n\n<div id=\"affiliate-style-1acc66fa-6b01-4e8e-be90-af075d968c8e\" class=\"wp-block-affiliate-booster-ab-icon-list affiliate-block-1acc66 affiliate-iconlist-wrapper\"><div class=\"affiliate-iconlist-inner aff-list-isshow-icon\"><div class=\"affiliate-block-advanced-list affiliate-icon-list affiliate-alignment-left\"><ul class=\"affiliate-list affiliate-list-type-unordered affiliate-list-bullet-arrow-alt-circle-right\"><li>Access https:\/\/efa.yourdomain.com and change default admin credentials immediately.<\/li><li>Set system timezone, NTP, and alert email.<\/li><li>Add your relay domains (the domains E.F.A will accept) and internal mail servers (hosts E.F.A will forward mail to).<\/li><li>Configure outbound smarthost (if you relay outbound mail via M365\/GWS\/ISP).<\/li><li>Switch on quarantine digest (daily\/weekly) for users to release\/whitelist safely.<\/li><\/ul><\/div><\/div><\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity is-style-wide\"\/>\n\n\n\n<h2 id=\"dns-mx-spf-dkim-and-dmarc\" class=\"wp-block-heading\"><strong>DNS: MX, SPF, DKIM, and DMARC<\/strong><\/h2>\n\n\n\n<p>Correct DNS determines delivery success and authentication alignment. Follow this order: MX \u2192 SPF \u2192 DKIM \u2192 DMARC.<\/p>\n\n\n\n<h3 id=\"mx-record\" class=\"wp-block-heading\"><strong>MX Record<\/strong><\/h3>\n\n\n\n<pre class=\"wp-block-code has-vce-bg-color has-vce-meta-background-color has-text-color has-background has-link-color wp-elements-49639f5037107bd5d9ce074ec3deef9a\"><code>yourdomain.com.    3600    IN    MX    10 efa.yourdomain.com.\nefa.yourdomain.com. 3600   IN    A     203.0.113.10<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 id=\"spf-record\" class=\"wp-block-heading\"><strong>SPF Record<\/strong><\/h3>\n\n\n\n<p>Include E.F.A (if it sends) and your provider (e.g., M365\/GWS). Keep SPF under 10 DNS lookups.<\/p>\n\n\n\n<pre class=\"wp-block-code has-vce-bg-color has-vce-meta-background-color has-text-color has-background has-link-color wp-elements-ed80195f862c1871775508e977a25ee9\"><code>yourdomain.com. 3600 IN TXT \"v=spf1 ip4:203.0.113.10 include:spf.protection.outlook.com ~all\"<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 id=\"dkim-keys-and-dns\" class=\"wp-block-heading\"><strong>DKIM Keys and DNS<\/strong><\/h3>\n\n\n\n<p>Generate a DKIM key on E.F.A and publish the DNS TXT record. Typical commands (adjust paths for your build):<\/p>\n\n\n\n<pre class=\"wp-block-code has-vce-bg-color has-vce-meta-background-color has-text-color has-background has-link-color wp-elements-d46d9fa015078de9f0c8a3ce7d4f92d4\"><code># Generate 2048-bit DKIM key for selector \"mail2026\" and domain yourdomain.com\nsudo mkdir -p \/etc\/opendkim\/keys\/yourdomain.com\ncd \/etc\/opendkim\/keys\/yourdomain.com\nsudo opendkim-genkey -b 2048 -s mail2026 -d yourdomain.com\nsudo chown opendkim:opendkim mail2026.private\n# Show DNS TXT content\ncat mail2026.txt<\/code><\/pre>\n\n\n\n<p>Publish the TXT under mail2026._domainkey.yourdomain.com, then add mapping:<\/p>\n\n\n\n<pre class=\"wp-block-code has-vce-bg-color has-vce-meta-background-color has-text-color has-background has-link-color wp-elements-320022366b459a8d862605b2b9ec1ac1\"><code># \/etc\/opendkim\/KeyTable\nmail2026._domainkey.yourdomain.com yourdomain.com:mail2026:\/etc\/opendkim\/keys\/yourdomain.com\/mail2026.private\n\n# \/etc\/opendkim\/SigningTable\n*@yourdomain.com mail2026._domainkey.yourdomain.com\n\n# \/etc\/opendkim\/TrustedHosts\n127.0.0.1\nlocalhost\n203.0.113.10<\/code><\/pre>\n\n\n\n<p>Restart OpenDKIM and Postfix:<\/p>\n\n\n\n<pre class=\"wp-block-code has-vce-bg-color has-vce-meta-background-color has-text-color has-background has-link-color wp-elements-cc1c99f687a1e7b26c81ac9879ea4022\"><code>sudo systemctl restart opendkim postfix<\/code><\/pre>\n\n\n\n<h3 id=\"dmarc-policy\" class=\"wp-block-heading\"><strong>DMARC Policy<\/strong><\/h3>\n\n\n\n<p>Start relaxed (p=none) while monitoring, then enforce (quarantine\/reject) as alignment stabilizes.<\/p>\n\n\n\n<pre class=\"wp-block-code has-vce-bg-color has-vce-meta-background-color has-text-color has-background has-link-color wp-elements-f467f4095f849d4bd50f3e7ad68cd36d\"><code>_dmarc.yourdomain.com. 3600 IN TXT \"v=DMARC1; p=none; rua=mailto:dmarc-reports@yourdomain.com; fo=1; sp=none; aspf=r; adkim=r\"<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity is-style-wide\"\/>\n\n\n\n<h2 id=\"postfix-integration-inbound-and-outbound\" class=\"wp-block-heading\"><strong>Postfix Integration (Inbound and Outbound)<\/strong><\/h2>\n\n\n\n<p>In this section, we will connect E.F.A with Postfix to handle both incoming and outgoing emails smoothly. This setup helps ensure better filtering, security, and reliable mail flow for your server.<\/p>\n\n\n\n<h3 id=\"core-postfix-to-amavis-wiring\" class=\"wp-block-heading\"><strong>Core Postfix-to-Amavis Wiring<\/strong><\/h3>\n\n\n\n<pre class=\"wp-block-code has-vce-bg-color has-vce-meta-background-color has-text-color has-background has-link-color wp-elements-4a372b1cdf17aef2df60e750c17cfd72\"><code># \/etc\/postfix\/main.cf (key excerpts)\nmyhostname = efa.yourdomain.com\nmydomain = yourdomain.com\nmyorigin = $mydomain\nmydestination = localhost\nrelay_domains = yourdomain.com\nmynetworks = 127.0.0.0\/8 &#91;::1]\/128\nsmtpd_banner = $myhostname ESMTP\nsmtpd_tls_security_level = may\nsmtp_tls_security_level = may\nsmtpd_tls_loglevel = 1\nsmtpd_tls_cert_file = \/etc\/ssl\/certs\/efa.crt\nsmtpd_tls_key_file  = \/etc\/ssl\/private\/efa.key\ncontent_filter = smtp-amavis:&#91;127.0.0.1]:10024\nreceive_override_options = no_address_mappings\n\n# RBLs (use responsibly)\nsmtpd_recipient_restrictions =\n    permit_mynetworks,\n    permit_sasl_authenticated,\n    reject_unauth_pipelining,\n    reject_non_fqdn_sender,\n    reject_non_fqdn_recipient,\n    reject_unknown_recipient_domain,\n    reject_rbl_client zen.spamhaus.org,\n    reject_rbl_client bl.spamcop.net,\n    permit<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code has-vce-bg-color has-vce-meta-background-color has-text-color has-background has-link-color wp-elements-91b4548a1b55a7a3c856fea2039a37b9\"><code># \/etc\/postfix\/master.cf (amavis pipes)\nsmtp-amavis unix -  -  -  -  2  smtp\n  -o smtp_data_done_timeout=1200\n  -o smtp_send_xforward_command=yes\n  -o disable_dns_lookups=yes\n  -o max_use=20\n\n127.0.0.1:10025 inet n  -  n  -  -  smtpd\n  -o content_filter=\n  -o local_recipient_maps=\n  -o relay_recipient_maps=\n  -o smtpd_delay_reject=no\n  -o smtpd_client_restrictions=permit_mynetworks,reject\n  -o smtpd_helo_restrictions=\n  -o smtpd_sender_restrictions=\n  -o smtpd_recipient_restrictions=permit_mynetworks,reject\n  -o mynetworks=127.0.0.0\/8\n  -o strict_rfc821_envelopes=yes<\/code><\/pre>\n\n\n\n<p>Reload Postfix after changes:<\/p>\n\n\n\n<pre class=\"wp-block-code has-vce-bg-color has-vce-meta-background-color has-text-color has-background has-link-color wp-elements-5f81857c1299a22d5af19d01b307345b\"><code>sudo postfix check &amp;&amp; sudo systemctl reload postfix<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 id=\"outbound-smarthost-optional\" class=\"wp-block-heading\"><strong>Outbound Smarthost (Optional)<\/strong><\/h3>\n\n\n\n<pre class=\"wp-block-code has-vce-bg-color has-vce-meta-background-color has-text-color has-background has-link-color wp-elements-0072d478e7658d557d8bdc5877c77469\"><code># \/etc\/postfix\/main.cf\nrelayhost = &#91;smtp.office365.com]:587\nsmtp_sasl_auth_enable = yes\nsmtp_sasl_password_maps = hash:\/etc\/postfix\/sasl_passwd\nsmtp_sasl_security_options = noanonymous\nsmtp_tls_security_level = encrypt\nsmtp_tls_loglevel = 1\n\n# \/etc\/postfix\/sasl_passwd\n&#91;smtp.office365.com]:587 user@yourdomain.com:app_password_or_secret\n\nsudo postmap \/etc\/postfix\/sasl_passwd\nsudo chown root:root \/etc\/postfix\/sasl_passwd \/etc\/postfix\/sasl_passwd.db\nsudo chmod 0600 \/etc\/postfix\/sasl_passwd \/etc\/postfix\/sasl_passwd.db\nsudo systemctl reload postfix<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity is-style-wide\"\/>\n\n\n\n<h2 id=\"security-and-policy-tuning\" class=\"wp-block-heading\"><strong>Security and Policy Tuning<\/strong><\/h2>\n\n\n\n<p>Once your E.F.A setup is complete, fine-tuning security and policies is essential to keep your email system safe and efficient. This step helps you control spam, manage threats, and customize rules based on your organization\u2019s needs.<\/p>\n\n\n\n<h3 id=\"tls-certificates-with-lets-encrypt\" class=\"wp-block-heading\"><strong>TLS Certificates with Let\u2019s Encrypt<\/strong><\/h3>\n\n\n\n<pre class=\"wp-block-code has-vce-bg-color has-vce-meta-background-color has-text-color has-background has-link-color wp-elements-19d5e272dfd402d9e635084016b3831b\"><code>sudo dnf -y install certbot\nsudo certbot certonly --standalone -d efa.yourdomain.com --agree-tos -m admin@yourdomain.com --non-interactive\n# Point Postfix to fullchain\/key and reload after renew\nsudo crontab -e\n# Add:\n# 0 3 * * * certbot renew --quiet &amp;&amp; systemctl reload postfix<\/code><\/pre>\n\n\n\n<h3 id=\"spamassassin-clamav-and-greylisting\" class=\"wp-block-heading\"><strong>SpamAssassin, ClamAV, and Greylisting<\/strong><\/h3>\n\n\n\n<div id=\"affiliate-style-e27ac952-cf93-4ca3-bb94-e21bcad773d7\" class=\"wp-block-affiliate-booster-ab-icon-list affiliate-block-e27ac9 affiliate-iconlist-wrapper\"><div class=\"affiliate-iconlist-inner aff-list-isshow-icon\"><div class=\"affiliate-block-advanced-list affiliate-icon-list affiliate-alignment-left\"><ul class=\"affiliate-list affiliate-list-type-unordered affiliate-list-bullet-arrow-alt-circle-right\"><li>Spam thresholds: Lower required_score for stricter spam detection; whitelist\/blacklist trusted senders.<\/li><li>Updates: Enable sa-update and freshclam via cron for rules and signature freshness.<\/li><li>Greylisting: Effective against bot spam; exclude large providers to reduce delays.<\/li><\/ul><\/div><\/div><\/div>\n\n\n\n<pre class=\"wp-block-code has-vce-bg-color has-vce-meta-background-color has-text-color has-background has-link-color wp-elements-b1980a2b73c7952e22178905f8a4a3fe\"><code># Example SpamAssassin local config: \/etc\/mail\/spamassassin\/local.cf\nrequired_score 4.0\nrewrite_header Subject *****SPAM*****\nreport_safe 0\nbayes_auto_learn 1<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 id=\"firewall-selinux-and-ssh-hardening\" class=\"wp-block-heading\"><strong>Firewall, SELinux, and SSH Hardening<\/strong><\/h3>\n\n\n\n<div id=\"affiliate-style-993ce4bd-fdaa-4e7f-8c78-86c89b67cba3\" class=\"wp-block-affiliate-booster-ab-icon-list affiliate-block-993ce4 affiliate-iconlist-wrapper\"><div class=\"affiliate-iconlist-inner aff-list-isshow-icon\"><div class=\"affiliate-block-advanced-list affiliate-icon-list affiliate-alignment-left\"><ul class=\"affiliate-list affiliate-list-type-unordered affiliate-list-bullet-arrow-alt-circle-right\"><li>Firewalld: Only expose 25\/80\/443 (and 587 if needed).<\/li><li>SELinux: Keep enforcing; add proper contexts for certificates\/keys.<\/li><li>SSH: Disable password auth; use keys and fail2ban to rate-limit brute-force.<\/li><\/ul><\/div><\/div><\/div>\n\n\n\n<pre class=\"wp-block-code has-vce-bg-color has-vce-meta-background-color has-text-color has-background has-link-color wp-elements-f66f27a5b11f4a6795d836ca2170a8d0\"><code># Fail2ban quick start\nsudo dnf -y install fail2ban\nsudo systemctl enable --now fail2ban\nsudo bash -c 'cat &gt;\/etc\/fail2ban\/jail.d\/sshd.local &lt;&lt;EOF\n&#91;sshd]\nenabled = true\nbantime = 3600\nfindtime = 600\nmaxretry = 5\nEOF'\nsudo systemctl restart fail2ban<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity is-style-wide\"\/>\n\n\n\n<h2 id=\"integration-scenarios\" class=\"wp-block-heading\"><strong>Integration Scenarios<\/strong><\/h2>\n\n\n\n<p>Integration scenarios help you understand how E.F.A fits into different real-world setups, whether you\u2019re running a small server or a complex mail infrastructure. Here, we\u2019ll look at common ways to connect and use E.F.A so it works smoothly with your existing email system.<\/p>\n\n\n\n<h3 id=\"microsoft-365-exchange-online\" class=\"wp-block-heading\"><strong>Microsoft 365 (Exchange Online)<\/strong><\/h3>\n\n\n\n<div id=\"affiliate-style-6cb77638-de26-4ee6-8404-cba87c3856eb\" class=\"wp-block-affiliate-booster-ab-icon-list affiliate-block-6cb776 affiliate-iconlist-wrapper\"><div class=\"affiliate-iconlist-inner aff-list-isshow-icon\"><div class=\"affiliate-block-advanced-list affiliate-icon-list affiliate-alignment-left\"><ul class=\"affiliate-list affiliate-list-type-unordered affiliate-list-bullet-arrow-alt-circle-right\"><li>Inbound: Point MX to E.F.A \u2192 configure E.F.A to relay to your tenant\u2019s inbound connector (yourdomain.mail.protection.outlook.com).<\/li><li>Outbound: Create a connector in M365 to accept mail from E.F.A\u2019s public IP and relay to the Internet; set E.F.A relayhost to smtp.office365.com:587 with auth.<\/li><li>Authentication: Keep SPF including M365; DKIM signing can be done at E.F.A or M365, but avoid double signing.<\/li><\/ul><\/div><\/div><\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 id=\"google-workspace\" class=\"wp-block-heading\"><strong>Google Workspace<\/strong><\/h3>\n\n\n\n<div id=\"affiliate-style-1a04e1dd-2ae8-4980-807e-1f053d8e4709\" class=\"wp-block-affiliate-booster-ab-icon-list affiliate-block-1a04e1 affiliate-iconlist-wrapper\"><div class=\"affiliate-iconlist-inner aff-list-isshow-icon\"><div class=\"affiliate-block-advanced-list affiliate-icon-list affiliate-alignment-left\"><ul class=\"affiliate-list affiliate-list-type-unordered affiliate-list-bullet-arrow-alt-circle-right\"><li>Inbound: MX \u2192 E.F.A \u2192 Google SMTP (aspmx.l.google.com and backups).<\/li><li>Outbound: Authorize E.F.A\u2019s IP in Google admin for SMTP relay or use authenticated submission.<\/li><li>DKIM: Choose a single signing point to simplify DMARC alignment.<\/li><\/ul><\/div><\/div><\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 id=\"monitoring-backups-and-maintenance\" class=\"wp-block-heading\"><strong>Monitoring, Backups, and Maintenance<\/strong><\/h3>\n\n\n\n<div id=\"affiliate-style-1e3a0c6c-4ef8-40ac-8206-d8e038c30084\" class=\"wp-block-affiliate-booster-ab-icon-list affiliate-block-1e3a0c affiliate-iconlist-wrapper\"><div class=\"affiliate-iconlist-inner aff-list-isshow-icon\"><div class=\"affiliate-block-advanced-list affiliate-icon-list affiliate-alignment-left\"><ul class=\"affiliate-list affiliate-list-type-unordered affiliate-list-bullet-arrow-alt-circle-right\"><li>Logs: \/var\/log\/maillog, \/var\/log\/maillog-*, journalctl -u postfix\/amavisd\/opendkim.<\/li><li>Metrics: Track queue size, rejection rates, spam hit ratio, and resource usage.<\/li><li>Backups: Capture Postfix configs, DKIM keys, SpamAssassin custom rules, and E.F.A database\/quarantine as per your RPO\/RTO.<\/li><li>Updates: Regular OS and package updates; test in staging if mission-critical.<\/li><\/ul><\/div><\/div><\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 id=\"testing-and-troubleshooting\" class=\"wp-block-heading\"><strong>Testing and Troubleshooting<\/strong><\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Functional: Send a test from an external mailbox; verify headers (SPF, DKIM, DMARC) and spam score.<\/li>\n\n\n\n<li>Malware\/Spam: Use EICAR (malware test) and GTUBE string for SpamAssassin to confirm detections.<\/li>\n\n\n\n<li>TLS: Check starttls readiness with modern TLS checks; confirm no weak ciphers are enabled.<\/li>\n<\/ul>\n\n\n\n<pre class=\"wp-block-code has-vce-bg-color has-vce-meta-background-color has-text-color has-background has-link-color wp-elements-596dcec6277e7de7904408b09187fe63\"><code># Quick diagnostics\npostconf -n\npostqueue -p\nmailq\ntail -f \/var\/log\/maillog\njournalctl -u postfix -u amavisd -u opendkim --no-pager<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 id=\"high-availability-and-scalability\" class=\"wp-block-heading\"><strong>High Availability and Scalability<\/strong><\/h3>\n\n\n\n<div id=\"affiliate-style-3656e6ab-92fb-45c2-aea5-b34d87568ed7\" class=\"wp-block-affiliate-booster-ab-icon-list affiliate-block-3656e6 affiliate-iconlist-wrapper\"><div class=\"affiliate-iconlist-inner aff-list-isshow-icon\"><div class=\"affiliate-block-advanced-list affiliate-icon-list affiliate-alignment-left\"><ul class=\"affiliate-list affiliate-list-type-unordered affiliate-list-bullet-arrow-alt-circle-right\"><li>Active\/Active: Deploy two E.F.A nodes; publish two MX records with equal priority or put them behind a TCP <a href=\"https:\/\/qloudhost.com\/blog\/what-is-inbound-mail-or-mx-load-balancing\/\">load balancer<\/a> that supports SMTP.<\/li><li>Data consistency: Sync policies and DKIM keys via configuration management.<\/li><li>Scale-up: Increase cores\/RAM, optimize SpamAssassin rules, and tune Postfix concurrency for large volumes.<\/li><\/ul><\/div><\/div><\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 id=\"common-mistakes-to-avoid\" class=\"wp-block-heading\"><strong>Common Mistakes to Avoid<\/strong><\/h3>\n\n\n\n<div id=\"affiliate-style-eff40bec-d8ad-4b5e-84b6-472626ded813\" class=\"wp-block-affiliate-booster-ab-icon-list affiliate-block-eff40b affiliate-iconlist-wrapper\"><div class=\"affiliate-iconlist-inner aff-list-isshow-icon\"><div class=\"affiliate-block-advanced-list affiliate-icon-list affiliate-alignment-left\"><ul class=\"affiliate-list affiliate-list-type-unordered affiliate-list-bullet-arrow-alt-circle-right\"><li>MX mispointing or missing reverse DNS causing delivery drops.<\/li><li>SPF too strict (or too many DNS lookups) resulting in softfails.<\/li><li>Double DKIM signing (E.F.A plus cloud platform) breaking DMARC alignment.<\/li><li>Open relay risk by misusing mynetworks\/relay_domains.<\/li><li>Neglecting certificate renewal leading to TLS failures.<\/li><\/ul><\/div><\/div><\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity is-style-wide\"\/>\n\n\n\n<h2 id=\"when-to-choose-managed-help\" class=\"wp-block-heading\"><strong>When to Choose Managed Help?<\/strong><\/h2>\n\n\n\n<p>If you prefer a hands-off, hardened deployment, <strong><a href=\"https:\/\/qloudhost.com\">QloudHost<\/a><\/strong> can design, deploy, and manage your E.F.A gateway end to end, covering DNS, TLS, DKIM\/DMARC, policies, monitoring, backups, and 24\u00d77 incident response. This is ideal for regulated industries or teams without dedicated email security engineers.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity is-style-wide\"\/>\n\n\n\n<h2 id=\"faqs-install-and-configure-email-filter-appliance-e-f-a\" class=\"wp-block-heading\"><strong>FAQs<\/strong> &#8211; Install and Configure Email Filter Appliance (E.F.A)<\/h2>\n\n\n<div id=\"rank-math-faq\" class=\"rank-math-block\">\n<div class=\"rank-math-list \">\n<div id=\"faq-question-1765874332031\" class=\"rank-math-list-item\">\n<h3 id=\"is-e-f-a-compatible-with-microsoft-365-and-google-workspace-in-2026\" class=\"rank-math-question \"><strong>Is E.F.A compatible with Microsoft 365 and Google Workspace in 2026?<\/strong><\/h3>\n<div class=\"rank-math-answer \">\n\n<p>Yes. E.F.A works as an inbound gateway in front of M365\/Google Workspace and can relay outbound mail through them. Configure connectors and SPF\/DKIM\/DMARC carefully, avoid double signing, and ensure your E.F.A IPs are authorized in the cloud platform.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-question-1765874334966\" class=\"rank-math-list-item\">\n<h3 id=\"what-ports-must-be-open-for-e-f-a\" class=\"rank-math-question \"><strong>What ports must be open for E.F.A?<\/strong><\/h3>\n<div class=\"rank-math-answer \">\n\n<p>Open TCP 25 inbound for SMTP, 80 for ACME\/HTTP (optional), and 443 for the admin\/quarantine portal. If using submission for outbound, open 587 outbound. Restrict SSH and other services to management networks only.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-question-1765874336800\" class=\"rank-math-list-item\">\n<h3 id=\"how-do-i-reduce-false-positives-without-letting-spam-through\" class=\"rank-math-question \"><strong>How do I reduce false positives without letting spam through?<\/strong><\/h3>\n<div class=\"rank-math-answer \">\n\n<p>Start with moderate SpamAssassin scores, enable bayesian auto-learn, add reputable DNSBLs, and use quarantine digests so users can release\/whitelist. Review top senders flagged as spam and tune rules incrementally rather than making large threshold jumps.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-question-1765874339346\" class=\"rank-math-list-item\">\n<h3 id=\"should-dkim-be-signed-by-e-f-a-or-by-my-cloud-mail-provider\" class=\"rank-math-question \"><strong>Should DKIM be signed by E.F.A or by my cloud mail provider?<\/strong><\/h3>\n<div class=\"rank-math-answer \">\n\n<p>Pick one signer per domain to simplify DMARC alignment. If E.F.A relays outbound directly to the Internet, sign at E.F.A. If you always relay via M365\/GWS, consider signing at the cloud provider and disable E.F.A signing for those domains.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-question-1765874341209\" class=\"rank-math-list-item\">\n<h3 id=\"how-do-i-safely-test-malware-and-spam-detection\" class=\"rank-math-question \"><strong>How do I safely test malware and spam detection?<\/strong><\/h3>\n<div class=\"rank-math-answer \">\n\n<p>Use known-safe test signatures: EICAR for antivirus and GTUBE for SpamAssassin. Never use real malware. Send test emails from an external mailbox and verify E.F.A\u2019s logs, quarantine behavior, and scores before going live.<\/p>\n\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n<h2 id=\"conclusion-install-and-configure-email-filter-appliance-e-f-a\" class=\"wp-block-heading\"><strong>Conclusion<\/strong> &#8211; Install and Configure Email Filter Appliance (E.F.A)<\/h2>\n\n\n\n<p>Setting up and configuring Email Filter Appliance (E.F.A) may seem a bit technical at first, but once it\u2019s in place, it becomes a powerful layer of protection for your entire email system. From blocking spam to filtering malicious content, it helps keep your inbox clean and your server secure without constant manual effort.<\/p>\n\n\n\n<p>By following the right configuration steps and choosing the setup that fits your needs, you can ensure reliable performance and better control over your email flow. In the long run, E.F.A not only improves security but also saves time and reduces the risk of email-based threats.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Email is still the backbone of everyday business communication, but it\u2019s also one of the easiest&#8230;<\/p>\n","protected":false},"author":1,"featured_media":7996,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","footnotes":""},"categories":[41,47],"tags":[922],"class_list":["post-7896","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blogging","category-knowledgebase","tag-install-and-configure-email-filter-appliance"],"acf":[],"_links":{"self":[{"href":"https:\/\/qloudhost.com\/blog\/wp-json\/wp\/v2\/posts\/7896","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/qloudhost.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/qloudhost.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/qloudhost.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/qloudhost.com\/blog\/wp-json\/wp\/v2\/comments?post=7896"}],"version-history":[{"count":5,"href":"https:\/\/qloudhost.com\/blog\/wp-json\/wp\/v2\/posts\/7896\/revisions"}],"predecessor-version":[{"id":10369,"href":"https:\/\/qloudhost.com\/blog\/wp-json\/wp\/v2\/posts\/7896\/revisions\/10369"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/qloudhost.com\/blog\/wp-json\/wp\/v2\/media\/7996"}],"wp:attachment":[{"href":"https:\/\/qloudhost.com\/blog\/wp-json\/wp\/v2\/media?parent=7896"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/qloudhost.com\/blog\/wp-json\/wp\/v2\/categories?post=7896"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/qloudhost.com\/blog\/wp-json\/wp\/v2\/tags?post=7896"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}