From owner-freebsd-questions@freebsd.org Thu Jan 12 22:32:19 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1F67FCADBDB for ; Thu, 12 Jan 2017 22:32:19 +0000 (UTC) (envelope-from kurt.buff@gmail.com) Received: from mail-it0-x22f.google.com (mail-it0-x22f.google.com [IPv6:2607:f8b0:4001:c0b::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id DCE131A29 for ; Thu, 12 Jan 2017 22:32:18 +0000 (UTC) (envelope-from kurt.buff@gmail.com) Received: by mail-it0-x22f.google.com with SMTP id 203so21648342ith.0 for ; Thu, 12 Jan 2017 14:32:18 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=CaQqrs7Tq0wdj/+cOx5aumZxLqxn4FCxpuUhC+gjNnY=; b=hFYHjd5FP1FktE+e3E7sJkRMaaDm5OuKmEY0ec/o4AZ72h4DVDykG/m1S9VZwxpD13 wZkbTHrxOhNtVx56vvU6lkzz6tMt7ObumLN7wsqa6dPKiLkeGZ90KKuYtAVWgZA/3seF 51VPDGDSzizu0JlNBtZjdoaf9WN970OYOnJc1hN+ZN6rQrrPHywAcFLqSdyjMiJXzoYB Ed9dny3UfqCTxok4RaU4IYeZBZW7YZPdIW+JL4mClvuet5iRNabO4wkwNVnM+pFsfhGN dxESbMKUgicFdDzHvVckYs5b6atx2ZnweoTvTW1sEsOtDUqwUQpal34tzfZwh+bFJEJC 2aIw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=CaQqrs7Tq0wdj/+cOx5aumZxLqxn4FCxpuUhC+gjNnY=; b=JUJ7gom7KouUdZaP4LNsOT9R/525hLWpow/9QNcI+/I2IsqQPSSftULEyhwsbq1lh1 iI2LfoT4lbeyu8vPBOUg3peydccTWbwf3RwpHI50A+PW+0f11h8wCaCpq5frZJA9lnOk dDldy3ErJr/4Ex5wKgCWTRRdNSS9jws//xkWrzOfbTHT1xUtGqV6iUv2Nn5ywh7Z0F8C p6i5NUXxucEedpvdraOdd4+sh+lPKAJgyp3XktVEV0bQnz/IeILSqapfbfE86Fp5UFot YlpCdbjxqZAcI5YZaE3vmRLfmP6Syi6UbjYPNNPac51hdDudT8r23pwGnoEldBessOnl Xg8w== X-Gm-Message-State: AIkVDXJkTiIK0OntvN7gIBInf8Wt/gs7uDg3wxlFRN7WcnmzT7+q2ovY201/FlnlR58T0neV8dvvCL9RVn62Sg== X-Received: by 10.36.36.216 with SMTP id f207mr490033ita.0.1484260337954; Thu, 12 Jan 2017 14:32:17 -0800 (PST) MIME-Version: 1.0 Received: by 10.79.125.132 with HTTP; Thu, 12 Jan 2017 14:32:17 -0800 (PST) In-Reply-To: <62a3cbd1-e4c2-3829-208d-7e859d81d9e7@pinyon.org> References: <2463a238-e10f-e81d-cab1-5a7eaf774590@pinyon.org> <20170111210507.2dc39818c6e9d439abb21ee6@sohara.org> <1598f8c4238.279b.0b331fcf0b21179f1640bd439e3f4a1e@tundraware.com> <41546.128.135.52.6.1484176714.squirrel@cosmo.uchicago.edu> <62a3cbd1-e4c2-3829-208d-7e859d81d9e7@pinyon.org> From: Kurt Buff Date: Thu, 12 Jan 2017 14:32:17 -0800 Message-ID: Subject: Re: spamassassin not lethal anymore To: "freebsd-questions@freebsd.org" Content-Type: text/plain; charset=UTF-8 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Jan 2017 22:32:19 -0000 On Thu, Jan 12, 2017 at 1:58 PM, Russell L. Carter wrote: > I had hoped I wouldn't need to do a deep dive on state-of-the-art > spam killing, but it's 2017 and the game has gotten tougher. > > Thanks for these suggestions. I'm implementing greylisting, pyzor, > razor, and the above client_recipient_restrictions. dcc I don't > quite understand yet. > > I think I'll phase this stuff in, with greylisting first, and see > what happens to the spam flow for each step. I am a little wary > of putting even more chunks of perl and python into the critical > path. > > Thanks a lot for the help, everyone. > > Russell > (I just had a sad laugh recalling that I used to set up a mail server > in 1995 using sendmail... and nothing else but exmh as the client) One other suggestion - I set this up years ago, but was forced to retire it in favor of a Barracuda appliance, which does basically the same thing - security/maia. It worked very well for our 250 users, and was pretty easy to administer. It might be overkill for your situation - it's meant as a spam filter for an organization, but the pkg-descr is below Maia Mailguard is a web-based interface and management system based on the popular amavisd-new e-mail scanner and SpamAssassin. Written in Perl and PHP, Maia Mailguard gives end-users control over how their mail is processed by virus scanners and spam filters, while giving mail administrators the power to configure site-wide defaults and limits. WWW: http://www.maiamailguard.com/ Kurt