Jim Balo a écrit : > Hi, > > I am currently using Postfix w/ Amavis-new, Pyzor, DCC and Clam. > I have trained the Bayesian Classifier with over 2,000 ham and 2,000 > spam, but I am still getting quite a bit of spam. > > I am about to install a new mail server and I wonder if there is > something better than SpamAssassin that works well with Postfix? > The whole combination of Amavis, Pyzor, DCC, etc. seems a bit > complex and it also uses quite a bit of system resources. > > I saw someone recommend policy-weightd, but that is no longer > developed since February 2008. I also came across ASSP, but I do > not know much about it yet. > > Could someone recommend a really good open source or affordable > commercial anti-spam solution? > > Thanks, > JB > > Ps. Maybe it is just that I need to tweak SpamAssassin better? > Some good links on this would be helpful as well. > > >
there is no "one tool will stop all spam". you need layers (like in "oignon") and you need multiple iterations to find the right layers setup for your site. The first place to stop spam is in smtpd restrictions. Here is an example to start with smtpd_recipient_restrictions = ... reject_unauth_destination reject_unlisted_recipient reject_unlisted_sender reject_invalid_helo_hostname reject_non_fqdn_helo_hostname reject_rbl_client zen.spamhaus.org make sure to read about each check to see if it is suitable for you. You can get an idea of what mail would be blocked by using warn_if_reject. for example warn_if_reject reject_non_fqdn_helo_hostname unless you have a lot of mail (really lot), amavisd-new (with spamassassin) is a good choice (don't complain about resources unless you really tried and found that your machine gets down! no tuning by feeling :). and you don't need pyzor/razor/dcc. They are optional. but you really shouldn't complain about "many pieces". Modular solutions have many advantages (upgrading one module is less risky...). if your tests show that you really can't use SA, then other choices are dspam and bogofilter. but these are "pure" statistical filters. so you need to train them to get anything. if you don't use amavisd-new, you still need an anti-virus. you can use clamsmtpd with clamav.