Advice for fighting spam on Enhance -powered mail server: Page 2 - Enhance Control Panel

Advice for fighting spam on Enhance -powered mail server

ronald

With PMG up and running for both incoming and outgoing e-mail, is like night and day. I now have proper SPF/DKIM and spam fighting techniques in play - where there seemed to be none on a vanilla Enhance mail setup.

I hope this is something we will see improvements for at the Enhance -level soon, cause right now the vanilla e-mail setup for Enhance is not production ready.

JohnBee

ronald
Congratulations!

I've grown quite fond of PMG since implementing it in my own service stack in recent past.
That said, and after all of the trauma with alternative setups, we've all but forgotten what it was like to suffer with SPAM 🙂

PS, there is also the matter of sa-learning with PMG that you may want to consider in the future

alenguav

Have you tried this thing called cPFence? I guess they include antispam in their solution too

cPFence

alenguav Have you tried this thing called cPFence? I guess they include antispam in their solution too

Yes, that’s correct. cPFence includes a server wide spam protection feature that users can enable with:

cpfence --enable-spam-protection

By default, it is off. When enabled, cPFence will automatically quarantine pure spam emails that do not contain infections or phishing links but are otherwise annoying or misleading or are trying to deceive and blackmail the user.

One of our users with mail servers have reported cPFence removing over 2,400 spam emails from a single account, significantly reducing inbox clutter.

wav3front

For PMG you have to manually add each domain that you host on Enhance?

JohnBee

wav3front
Yes, correct

wav3front

cPFence does it also use DNSBL checks?

cPFence

wav3front

No, cPFence does not use DNSBL checks. Instead, it scans emails server-wide as they arrive. If any malicious links or malware are detected, the email is quarantined. When spam protection is enabled, cPFence will also quarantine pure spam emails, those meant to deceive, blackmail, or mislead users , keeping your inbox safe without external DNS-based filtering.

ronald

While I am sure cPFence is a great product it's not quite the solution I was looking for.

I would like to keep the mail configuration "as is" for now, without adding extra software solutions/monthly costs and complicate my stack until I see where Enhance decides to leave the mail server role at when they get the time to develop it further.

While PMG technically also adds complexity (and cost) it doesn't directly interfere with the Enhance stack, but acts as a standalone mail relay infront of the mail server in Enhance.

grradmin

ronald
I know you aren't wanting to add cost and extra complications but you might want to look at MailScanner as an opensource alternative to PMG

Rich

grradmin This looks rather promising. Thank you for the suggestion!

Do you have this currently installed on an Enhance server?

I am also curious to as to how the v12 update would affect this, if I was to install and configure it before v12 as all services are moving away from docker based to systemd based. It would likely require completely reconfiguring I presume.

grradmin

Rich
It works the same as PMG, you would need to install it on a dedicated/vm to run it. You then point each domains MX to the mailscanner server for filtering etc.

Rich

grradmin Ok, a brief look at the docs seemed to suggest I could install it on the local server. Thank you for the update 😃

« Previous Page