4

I just heard about policyd-weight so I did an apt-cache search policyd which returns three options:

Which one is the best, and do you have any tips on setting them up?

Our current setup is whitelister plus postgrey to greylist RBLd hosts, then fail2ban them for 10 minutes if they have 10 failures, followed by content filtering (Kaspersky Anti-Spam). The content filtering is pretty good, but there's still a lot of spam that gets through the RBL greylisting.

TRS-80
  • 2,564
  • 17
  • 15

2 Answers2

6

I'm very happy with policyd-weight. I run it on several mail servers and I would guess that it stops a good 80%-90% of spammy attempts straight away.

Timo Geusch
  • 458
  • 1
  • 4
  • 9
0

My current setup uses policyd (without -weight), I'm happy with it on some postfix boxes with low traffic (50k hits to policyd a day which boils down to ~ 3k mails getting through).

policyd-weight wasn't there at the time so I can't say if it is better or not.

I'd also add:

  • postgrey and its variant taRgrey (they use BDB files instead of SQL, could be good if you don't have separate hardware for the database to remove the db server overhead)
  • gld - never tried it, I don't know anything about it other than it tends to grow big databases
Luke404
  • 5,708
  • 3
  • 44
  • 58