Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

People seem to think that if you move your domain off GApps you're suddenly going to receive so much spam that your inbox will blow up. This is not so at all.

A decent Postfix configuration + up2date SpamAssassin can do wonders. One of the "secrets" is to train Spamassassin. What I do for example is to move all the spam I receive in my inbox to a special folder that I later run "sa-learn --spam" on from a cronjob. You don't even need a webmail/interface for this.



I agree with you entirely that hosting your own mail doesn't mean drowning in spam. After many years hosting my own mail, I find the most effective anti-spam measures are (in order):

1. RBL: zen.spamhaus.org. This kills 95% of incoming spam.

2. Greylisting. This catches the 4.99% of stuff that gets through zen.spamhaus.org

3. SpamAssassin: Everything else. The last time spam got this far appears to have been over a year ago.

The RBL is pretty trivial to set up in postfix, and there is an effective greylist implementation included by default nowadays. Between these two alone, I get less spam in my own mail than I do in gmail..


I'd optimise that a bit:

1 - try not to use greylisting (it can be quite annoying some time when you are waiting for an important email)

2 - RBLs should be used from within SpamAssassin in such a way that it raises the spam score, not directly in the MTA. There are loads of "good" addresses listed in RBLs due to carelessness and/or incompetence of the operators.


You can set up procmail to auto-run a program when you add/remove messages on IMAP folders. I use it to auto-train my crm114 spam catcher (by dragging emails mostly from "Maybe Spam" to "Absolutely Spam" but it works the other way too: when you drag an email from Maybe Spam to Inbox, it trains that message as Not Spam).


Mail Avenger will cut down a good amount of the spam by itself, and waste the spammers' resources too. And honestly having some remaining spam is useful for detached gauging of pop culture. The subjects aren't actually too different from mainstream marketing pitches.


fully agreed. i've been running my own mailserver for a decade. theres a bunch of accounts on it, the domains are also well known. I get generally little spam. I use exactly the same spam assassin training, if ever i get a spam, i put it in my inbox/not-detected dir, this will get autoindexed, and this kind of spam never comes again. Also, it requires next to zero maintenance. (of course I KNOW how to setup dovecot and what not, but once setup, I've basically nothing to do, basically, ever)

2 preconceived ideas really.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: