RSPAMD Information

Cisco30

Hi,
I use Mailcow for me and my family, I must have about twenty mailboxes configured, everything works correctly and everything is very well configured and I would like to know if RSPAMD has the ability to prevent the sending of mail considered as spam. I pay close attention to the reputation of my domains configured in Mailcow, and I would not like to have any surprises if one day one of my users had fun sending spam.
Thank you in advance for your help

esackbauer

Most likely them sending spam is because their user/password was phished or else gone public.
So you should instruct them to use 2FA and secure individual passwords. And using App passwords for client software.

I have set up my monitoring with hetrixtools.com and there you can create a monitor for blacklisting. So I would get alarmed if I am on a blocklist.

Another way to minimize the possibility of blocking is using a separate public IP address for each domain. However that is probably too costly for a family server.

Cisco30

Thanks for your answer, I didn’t know hetrixtools.com, I’ll use it.
Have a nice weekend

ETNyx

And BTW MC send outgoing message through RSPAMD, problem is that it does not trigger all of the tests that are on opposite way. This is easy, how to run DKIM test on this message right? And on all of the top it by default trust authenticated users whit -20 score. So usually you have no spam detection on sending mails.

One user of mine have this problem when RSPAMD sometimes reject his outgoing message. Can not find it right now sorry,… but is most likely caused by signing those message (some government stuff) and using Outlook, when it is switch to RTF mode. In those cases Outlook get whole message and pack it as some kind of attachment or something like this than RSPAMD does not see mail headers of this message, then get 9999 score and it is not even send out :-D

Edit: so if you reconfigure your RSPAMD symbols score you cen be more effective getting spams in outgoing mails, or adding AI check using high score would work too for example. But you can make false positive detection so be aware :-)

Cisco30

@ETNyx
Thank you for your answer and explanations.
I understand better now.

ETNyx

Also some reading about this: RSPAMD docs