On 06/30/2015 03:47 PM, PGNd wrote: > Understood. This question's been about one piece; my complete setup > currently has several inbound stages now in-place, in order, > > postscreen + weighted RBLs > smtpd_mumble_restrictions > a prequeue proxy-filter policybank instance of amavisd for extension bans & > DKIM verification > a prequeue milter-instance of opendmarc, for both SPF & DMARC verification > a postqueue content-filter instance of amavisd for clamav & SA scans > > I continue to waffle re: the advantages/disadvantages of moving clamav &/or > SA postqueue. I've found bits-and-pieces of both pro & con arguments, but > nothing yet that's tilted strongly one way or the other.
What I do ... and recommend is to not discard any mail from your postqueue filter, but instead flag it as spam and inject it back into postfix for delivery. Then use dovecot lmtp with sieve or something similar to check for the flag and deliver those messages into the user's Spam folder. I have yet to see anyone complain about having too much SPAM delivered to the Spam folder, and it properly follows the "deliver what you accept" mantra as well as allowing the user to still get messages that are false positives for SPAM. Peter
