https://rspamd.com/doc/tutorials/quickstart.html

• postfix
• dovecot-imapd
• redis lokal ereichbar

/etc/redis/redis.conf

…
bind 127.0.0.1 ::1
…
maxmemory 500mb
…
maxmemory-policy volatile-ttl
…

systemctl restart redis.service

Paket installieren:

apt install rspamd

Übersicht Konfiguration:

rspamadm configgraph

Konfiguration ausgeben:

rspamadm configdump

Auf welchen Ports lauscht rspamd?

lsof -ac rspamd -Pni -sTCP:LISTEN

Logs:

tail /var/log/rspamd/rspamd.log

rspamadm configwizard checks redis

→ erzeugt:

/etc/rspamd/local.d/redis.conf

write_servers = "localhost";
read_servers = "localhost";

postconf -e 'smtpd_milters = inet:localhost:11332'
postconf -e 'milter_default_action = accept'

Spricht postfix mit rspamd?

tcpdump -A -i lo tcp port 11332

Änderungen am Header loggen:

/etc/postfix/milter_header_checks

/(.+)/ WARN $1

postconf -e 'milter_header_checks = regexp:/etc/postfix/milter_header_checks'

Spam-Mail schicken, dann im Log schauen:

journalctl -f --facility=mail

→ milter-header-warning milter_header_checks in Produktion wieder aus machen:

postconf -# milter_header_checks

rspamadm configwizard checks controller

→ erzeugt: /etc/rspamd/local.d/worker-controller.inc

/var/lib/rspamd/dkim/$domain.$selector.key

DKIM: https://rspamd.com/doc/modules/dkim_signing.html

selector=dkim2024
domain=example.com

rspamadm dkim_keygen -s "$selector" -d "$domain" -t ed25519 -k "${selector}-ed25519.private" > "${selector}"-ed25519.txt

local.d/dkim_signing.conf

path = "/var/lib/rspamd/dkims/$domain.$selector"

rspamadm configdump dkim_signing