On 5/7/17 9:58 PM, pbw wrote:
...the simplest lightweight solution (for me) is postscreen, SPF/
DKIM and Spamprobe via dovecot/sieve filters.
Your approach seems applicable to me. I have set up postscreen from
the postfix docs. What is the best documentation for the remainder of
your setup?
This is the opendkim tutorial I adapted...
https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-dkim-with-postfix-on-debian-wheezy
SPF is this section in main.cf after installing the postfix-policyd-spf-perl
deb...
policy-spf_time_limit = 3600s
smtpd_recipient_restrictions = permit_mynetworks permit_sasl_authenticated
reject_unauth_destination reject_non_fqdn_recipient
reject_unknown_recipient_domain check_policy_service unix:private/policy-spf
then the last 2 lines below in master.cf...
https://raw.githubusercontent.com/markc/sh/master/etc/_etc_postfix_master.cf
and of course a DNS TXT record for your domain(s), just google for
an example.
And then this post outlines the final dovecot/sieve/spamprobe stage...
https://markc.blog/how-to-set-up-spamprobe-via-sieve-scripts
