Home Documentation Downloads & Repos Support Forum โ†— Telegram Support โ†— GitHub โ†—

Initial Configuration & DNS Setup#

After installing EFA-NG, the system must be configured to route mail properly and authenticate with destination servers.

---

1. The Configuration Wizard (eFa-Init)#

Upon the first post-installation login as root, the interactive eFa-Init wizard will guide you through:

  • System Hostname & Domain: Set the Fully Qualified Domain Name (FQDN), e.g. mx1.yourdomain.com.

  • Static Network Configuration: Confirm IPv4/IPv6, Gateway, and DNS resolvers.

  • Mail Routing (Transport Maps): Specify the destination mail servers where filtered clean mail should be forwarded.

  • Admin Password Setup: Create administrative credentials for the MailWatch-NG console.
  • > You can re-run the configuration utility at any time from the terminal with the command:
    bash
    > eFa-Configure
    ``
    ---

    2. Essential DNS Configuration#

    For proper mail delivery and spam prevention, configure the following DNS records for your domain:

    MX Record (Mail Exchanger)#

    Point your domain's MX record to your EFA-NG appliance:
    dns yourdomain.com. IN MX 10 mx1.yourdomain.com.
    bash
    
    

    Reverse DNS (PTR Record)#

    Ensure your hosting provider configures a matching PTR record for your static public IP:
    dns <your-server-ip> PTR mx1.yourdomain.com.
    bash
    
    

    SPF (Sender Policy Framework)#

    Authorize EFA-NG to send outbound email on behalf of your domain:
    dns yourdomain.com. IN TXT "v=spf1 ip4:<your-server-ip> ~all"
    bash
    
    

    DMARC Policy#

    Set up a DMARC policy record:
    dns _dmarc.yourdomain.com. IN TXT "v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com; pct=100"
    `

    ---

    3. Web Console Access#

    Navigate to https://<your-server-ip>/` in your browser. Accept your TLS certificate and log in with your configured admin credentials.