pfSense Hardening & Poste Email Fix

Right now we need an expert level technician with experience and skills in these two systems right away:

- PFSense Firewall Router- Configure settings for Firewall filter rules and Reverse DNS, DNS resolving, DNS Reflection settings that are causing us many issues we believe..

- Poste Email Server - Need to restore functionality since restore from our recent crashed Data Center backup and subsequent system crash

Project Highlights:
• Review the existing rule set, then create a clean group of rules that closes unnecessary ports while keeping web, SSH and mail services functional.
• Tidy up filter policies that tie into the DNS Resolver, add the correct DNS reflection settings for internal hosts, and be sure split-DNS look-ups resolve exactly the same from inside and outside the network.
• Re-establish outbound mail on Poste (postfix/SMTP 587) and verify IMAP/POP login is restored. Right now we can receive mail but cannot send, and the web-login is disconnected.
• Publish and propagate the proper MX records so external lookups stop failing with the “No MX records found” error.

The job is complete when:
1. pfSense passes traffic only on the intended ports and DNS queries resolve consistently.
2. We can log in to the Poste web UI and any IMAP client.
3. Test messages travel both directions without bouncing or landing in spam.
4. MX, SPF and any necessary DKIM records validate on an external checker.

We can provide remote console access to pfSense and SSH to the mail host.