On Mon, Jun 29, 2015, at 08:55 PM, Peter wrote: > > I continue to waffle re: the advantages/disadvantages of moving clamav &/or > > SA postqueue. I've found bits-and-pieces of both pro & con arguments, but > > nothing yet that's tilted strongly one way or the other. > > What I do ... and recommend is to not discard any mail from your > postqueue filter, but instead flag it as spam and inject it back into > postfix for delivery. Then use dovecot lmtp with sieve or something > similar to check for the flag and deliver those messages into the user's > Spam folder. > > I have yet to see anyone complain about having too much SPAM delivered > to the Spam folder, and it properly follows the "deliver what you > accept" mantra as well as allowing the user to still get messages that > are false positives for SPAM.
In my current env, all postqueue-filtered mail is subject to the following policy (scoring is, of course, relative/unique to my rules/scores) if virus, defand/discard, do not deliver, notify postmaster only if SA score < 5, deliver if SA score > 5, < 10, spam-flag, and deliver to user's SPAM folder if SA score > 10, discard, do not deliver, do not notify The recommendations above seem do address just the last point. In many years, I've never had a false positive report for a score > (my) 10. Which is why I've tended to trash it quietly. I understand the "deliver what you accept" argument; just don't see the purpose for the user. For legal compliance, OTOH ... worth a look.
