With sentora you can enable the blacklist check like: spamhaus or spamcop in your postfix service, so you can use your pfsense firewall to limit the concurrent connections on port 25 tcp for prevent spamming.
I recommend to enable PTR, SPF records into your DNS server.
I recommend to enable PTR, SPF records into your DNS server.