I self host my email since 20+ years. Always done with the postfix + dovecot stack with the works (dkim dmark DNS stuff etc).
In the last few years I just removed all spam filters as they where a chore and didn’t provide no much benefit (3-5 spam emails per week) even if my main email address has been out and about for at least 2 decades or more.
Recently, last few weeks, spam is picking up to the point I receive some 10+ spam emails per day and this is pretty annoying, obviously.
So, what are you doing for spam filtering at server level nowadays? Is it still spamassassin circus? Anything better or more efficient?
Most effective method for me has been to use 1 e-mail address alias per service. If that address starts receiving spam then you know who is to blame for the leak, can move that service to a new e-mail address and then blackhole all e-mails sent to the old address. That obviously means having to setup a new address for every service though so I usually setup 20 at a time and hand them out as needed.
That seems overkill, in fact my 20y old only address still works pretty fine, and with rspamd setup, with basic settings, the annoying few emails have been intercepted now.
But indeed an extreme but effective approach, yours.
I just use some dnsbl. Spam tagging seems pointless to me, as i would sift through the spam anyways to .make sure not to miss anything.
rspamd is used nowadays. Add sieve filtering to automatically move mails with a 7.0 or higher to a spam-folder. Manually move mails there that haven’t been detected and move mails out of the spam folder that have been falsely detected (personally don’t have any false positives with rspamd).
Then set up bayes learning with rspamd, either when mails are moved between folders or every few hours.
Do you have documentation or references on how to setup rspamd?
I just googled something. Don’t remember what I ended up on. Probably some blog post combined with rspamd’s website. It depends on your mailserver anyways.
I definitively also observe the recent increase of spam (mostly on info@domain) however spamassassin (after some training) does a decent job sorting the trash out. Also I use a unique email address for each website I register, this way a lot of spam was removed by blocking an email-address I’ve used for login to facebook 10 years ago.
The best way I found to combat spam was to change my email address. Was it a pain? Yes. Was it worth it? Absolutely yes.
Suddenly I can just give my email address out to services I trust, and I set up a temporary alias for anything I don’t (although I tend to avoid those these days anyway).
Not 100% on topic, but as a preventative method, I use an email forwarding service (like SimpleLogin, Anonaddy, etc), because you can just delete an alias if it starts spamming.
Might be too late for that now though, I’m guessing once your email gets out there, it’s gonna be rough going for a long while until they stop spamming, if they ever do.
I still run SpamAssissin on my own mail server, but only because I haven’t yet seen any objective measurement showing some other solution to be better.
+1 for SA…
Spamassassin is one of the applications you don’t really want to shorten like that…
Ok
