Hi,
I have been looking into my email setup these last couple of days and I'm not sure what path to take now.
I have set up a PMG server, setup a testserver with Enhance (Application + Email + DB) and configured the PMG server in the Email role settings. I disabled rspamd on the Enhance testserver as there is no point in checking already checked emails again (coming from the PMG instance). Also, do the blocklist checks work? I see BLOCKLISTDE_FAIL and URIBL_BLOCKED indicating these checks are not working on Enhance? And when running the dns role there is no option to setup a local resolver (bind would have been a better option imho).
Sending and receiving via PMG works like a charm. You get a lot of tools and data at your disposal.
Only downside is if there ever is a spammer and your ip gets a bad rep, it affects all emails coming from the PMG server.
I have also been looking into the Spamhaus DQS service. Configured this on PMG and on a production Enhance server in my cluster. In both instances it is working as it is supposed to be according to the Spamhaus tests.
Others here running a PMG server or something like it?