On 15/01/16 09:17, Dennis Steinkamp wrote:
what anti spam tools can you recommend for my own (private) mailserver.
Is greylisting still something worth considering for general setups?
Its probably a huge debate but the information i gathered on this
matter is pretty controversial.
Isn`t the anti spam effect of greylisting supposed to diminish anyway,
because the more people use it, the less effective it becomes due to
the fact that spammer are at some point forced to adapt to this.
After a few years running a production mail server, and only recently
running my own, Greylisting can go both ways. I've seen spam send
triplets if they get grey listed, to bypass it, and I've seen some spam
never return.
What I can tell you is Greylisting by itself is not a silver bullet, but
will make any custom mail implementations such as simple scripts
(possibly on zombies) irrelevant. It doesn't "hurt" to install it, as
any legitimate mail will just be delayed. So its never a huge issue for
me. But can be annoying for those password resets which take 20 minutes
to get there.
~2cents
I tried to think about it as good as my limited knowledge allowed me
to and my approach therefor would be to use postscreen in conjunction
with policyd-weight and amavisd-new for after queue content filtering.
Does this sound reasonable to you?
It sounds very reasonable. While I have not used policyd-weight, I am a
fan of SpamAssassin. Depending on the grunt of you server your setup
sounds perfectly fine. Just remember to include DNSBL in your policyd
settings. And everything should be fine.
(Postscreen handles load, policyd-weight handles blocking of spammers
via blocklists, and amavisd handles virus')