[pmg-devel] PMG with rspamd

Tue May 29 13:55:26 CEST 2018

Hi,

depends. There are five levels of enhancements:

Enhancements which are finally customizations and could be done by users themselve. I did many of such customizations and contributed them to the community via the forum.
Enhancements which are (small) adjustments of code e.g. integration of Avast (however as it’s missing any correspondence in the GUI, it’s no good way to do so, it’s just for professionals then), adding DKIM etc. My addons here are also documented in the forum.
Enhancements which are big adjustments, need coding knowledge, which is something I can’t do, but I listed some features, which I (and also others) asked for, which would be fine to see in next release or been done by another developer
Enhancements which require to change the codebase, e.g. running spamassassin via milter with all advantages coming through that, it’s somehow hard to do or may be impossible at all (so I currently don’t know, what pmg-smtp-filter is, is it just spamassassin renamed and maybe with some preset configuration as pmg-proxy seems to be something similar with apache or is it completely rewritten, so could pmg-smtp-filter been wrapped by amavisd or is that completely impossible? Would help me to perform some changes, or could I maybe integrate with MailScanner/MailFilter to get the columns shown, I search for)
Enhancements which enhance the product with additional portions of other products, so like a pipelined double-content-filter which I yet set up with rspamd and PMG. I just would now require someone, who is able to write spamassassin rules, that I could take in care the results of rspamd spam check for better decision on spam or not spam by spamassassin.

Regards,

Christian

Von: <buzzzola at gmail.com> im Auftrag von Davide Bozzelli <davide.bozzelli at gmail.com>
Datum: Dienstag, 29. Mai 2018 um 11:59
An: Christian Heutger <christian at heutger.net>
Cc: Dietmar Maurer <dietmar at proxmox.com>, "pmg-devel at pve.proxmox.com" <pmg-devel at pve.proxmox.com>
Betreff: Re: [pmg-devel] PMG with rspamd

I think would be more productive to discuss enhancements that does not change the way pmg works. 

So due to the fact that spamassassin is here to stay please let the discussion goes to what we could add rather to what we would replace.

On Tue, May 29, 2018 at 11:49 AM, Christian Heutger <christian at heutger.net> wrote:

Hi,

see below. BTW, are here non-german speakers reading? Otherwise can switch to german.

Regards
Christian

Am 29.05.2018 um 06:28 schrieb Dietmar Maurer <dietmar at proxmox.com>:

>> There is not only ham and spam, were are more levels possible, 
> 
> SA has a full featured test system, and you can logically combine the results of
> all those test.
> So there is not only HAM and SPAM when you use SA!

Sure, but needs adjustment then. I search for an out of the box solution with less adjustments, maybe a bit of customization.
> 
>> it's faster, it has smaller footprint, 
> 
> But that is mostly neglectable considering all the other processing steps (virus
> scan, postfix, DNS queries, ...)

No, that’s what I was talking about as you told PMG and rspamd are competing products, they aren’t, the spamassassin part is replaceable by rspamd, so virus scan, postfix, dns queries all of them have, just need to compare only the content filter. Also virus scanning is possible with Sophos faster in rspamd, as it’s integrated there with DI instead of starting the CLI every time.
> 
>> I can tell more about the quality after some days of testing, but SA has some
>> false-positives and false-negatives 
> 
> come on - any classification tool has false-positives and false-negatives.
> Simply claiming rspamd does not have
> any wrong classification is definitely wrong.

It was promoted, that it has less false-decisions, however, I can agree or not once I have my test setup running a while. Currently I would say, it’s somehow similar with a small advantage on rspamd side. However, my rspamd is mostly like out of the box (just added some rbls and dcc) meanwhile spamassassin is tweaked by your KAM rules setup and razor2 + the same rbls + dcc + pyzor + geoaddon + heinlein, schaal, zmi, sought rules. My addons improved quality a bit.
> 
>> and requires improvement for scoring to work better.
>> 
>>> you can also implement this without rspamd.
>> 
>> Yes, everything can be done without rspamd, but if I have a SA setup which
>> does not provide all abilities, I would try out something else/new, which
>> looks like the "Eierlegende Wollmilchsau".
> 
> We use SA for more than 10 years now, it is extremely stable and reliable. So I
> would do everything
> to keep SA. If we detect errors, we fix them instead of replacing the whole
> software stack with
> something new and untested.

But you can see developments like bogofilter or orangeassassin coming from spamassassin getting old with modern replacements coming in like nginx, systemd, uefi, ... And it’s already out a while and tested yet.

However, it’s not wrong to stay on spamassassin, but also spamassassin allows rejects implemented via milter, which is already somehow standard and show the extracted froms and subject lines.
> 
>>> That already works with the current system (See AVAST code ...)
>> 
>> Yes, but it's only avast which had bad publicity.
> 
> If you want something else, please implement it and send patches (it really easy
> to do).

I‘m no developer any more, I don‘t know on how to use Sophos DI e.g. or on how to implement from extraxtion or subjects showing. Also would be an idea to replace „your“ spamassassin by mailwatch/mailscanner, but I‘m afraid, I can’t have e.g. two spamassassins on the system and as of same config files/paths will break system.

_______________________________________________
pmg-devel mailing list
pmg-devel at pve.proxmox.com
https://pve.proxmox.com/cgi-bin/mailman/listinfo/pmg-devel

-- 

Got problems with Windows? - ReBooT
Got problems with Linux? - Be RooT 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://pve.proxmox.com/pipermail/pmg-devel/attachments/20180529/5f547b2d/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4994 bytes
Desc: not available
URL: <http://pve.proxmox.com/pipermail/pmg-devel/attachments/20180529/5f547b2d/attachment-0001.bin>