On 28/03/2020 10.26, Per Jessen wrote:
Lars Vogdt wrote:
Hi @ll
I finally want to start with the new Email setup for openSUSE - and I'm currently looking for volunteers... :-)
Planned short term: * set SPF records for openSUSE domains * install mx1 and mx2.opensuse.org as incoming servers ** use postfix and rspamd ** integrate clamav (and reject messages seen as spam directly) ** integrate the alias table for members
Planned mid term: * enable DCIM on all outgoing mail servers
Something I missed?
Probably not :-)
Some comments:
Doing spam-filtering and virus-detection in-line (i.e. without queueing) will likely lead to time-outs. Mail-servers don't like to wait :-)
rspamd is very picky wrt standards. We had some issues last year.
I remember. Please don't use it.
For our member aliases, I would suggest tagging is better than rejecting (will always lead to more support cases). Unfortunately, it also means forwarding spam and virus, which the receiving server might not appreciate. Use different outbound address for member forwarding, if we have, even a different range. (in case we get blacklisted).
Instead of scanning for viruses, which is slow, we could scan for executables, which is fast. Unfortunately, that would also block sending scripts as attachments, which I think is relatively common in this community. Separating the forwarding from the sending would allow different policies. -- Cheers / Saludos, Carlos E. R. (from 15.1 x86_64 at Telcontar)