4

I use the following milters with Postfix:

ClamAV, OpenDKIM, OpenDMARC, Rspamd

This is also the order they are being called via smtpd_milters.

What would be the best order for them regarding performance, resources and spam protection?

basbebe
  • 313

1 Answers1

5

OpenDKIM, OpenDMARC, Rspamd, ClamAV

I assume you have OpenDMARC configured to do SPF itself? You'll want to disable SPF/DKIM/DMARC checking in Rspamd then as well.

  • you need openDKIM before openDMARC so that the DMARC check can be done based on the Auth-Results: header set by openDKIM.
  • You want openDMARC before Rspamd so it can send DMARC reports on all messages, not just on those that made it past Rspamd.
  • You want Clam last to avoid AV scanning messages that another method of content filtering might block first.
cmeid
  • 406