What is the best antispam for Zimbra?

[erme]

have look to Proxmox PMG, https://www.proxmox.com/en/proxmox-mail-gateway

[Klug]

have look to Proxmox PMG, https://www.proxmox.com/en/proxmox-mail-gateway

It relies on the VRFY command for the callout.
I remember someone asked about it a couple of weeks ago because there a issues with it (Zeta weekly calls) but I don't think I read how he fixed his issues (and if the fix survives upgrades).

If you want JUST antispam and on-premise, you can have a look at MailCleaner.
Both Community Edition (free, needs manual tuning such as adding ClamSpam and RBLs and URIBLs) and Entreprise Edition (paid) are not bad at filtering spams.

If you want advanced security filtering (against spams but mostly phishing attempts, spear-phishing attempts and malwares), IMHO the best solution is Vade Secure.
It's not free but definitively the best solution we tested.

[DavidMerrill]

have look to Proxmox PMG, https://www.proxmox.com/en/proxmox-mail-gateway

It relies on the VRFY command for the callout.
I remember someone asked about it a couple of weeks ago because there a issues with it (Zeta weekly calls) but I don't think I read how he fixed his issues (and if the fix survives upgrades).

You may be referring to me. I had issues with getting VRFY's (Proxmox verifying recipients against the destination Zinbra server) to work against alias-domains (VRFY's against non-alias domains were fine). The fix was to set the following:

Code: Select all

zmprov mcf zimbraMtaSmtpdRejectUnlistedRecipient yes
zmprov mcf zimbraMtaEnableSmtpdPolicyd TRUE
zmprov mcf +zimbraMtaRestriction "check_policy_service unix:private/policy"


[Klug]

That was you. Thank you for the solution.

[danielb]

have look to Proxmox PMG, https://www.proxmox.com/en/proxmox-mail-gateway

Code: Select all

zmprov mcf zimbraMtaSmtpdRejectUnlistedRecipient yes
zmprov mcf zimbraMtaEnableSmtpdPolicyd TRUE
zmprov mcf +zimbraMtaRestriction "check_policy_service unix:private/policy"


I tried this solution, and while it does work for explicit email with domain aliases, it breaks extensions email. Eg my main mail is dani@example.org. I can use dani-anything@example.org or dani+another@example.org. All those addresses are correctly working on the main domain. But with policyd enabled, those adresses are rejected on domain aliases ...