OPNsense Forum

English Forums => Development and Code Review => Topic started by: fabian on November 12, 2017, 10:53:38 am

Title: Mail Protection
Post by: fabian on November 12, 2017, 10:53:38 am

There is a collection of new plugins in development.
Michael Contributed a Postfix plugin which act as a mail proxy.
In this mail proxy, rspamd (plugin written by myself) can be integrated. Rspamd can use other plugins like clamav (already available) for anti malware and redis, which may be released soon too.

Kind regards

Fabian

Title: Re: Mail Protection
Post by: phoenix on November 12, 2017, 01:57:08 pm

When you say 'rspamd plugin' do you mean a full instance of rspamd (and redis) running on the firewall or some interaction with an already installed rspamd instance on a LAN? This is just an idle question but does this not cause resource usage problems if you're using redis with rspamd on the firewall itself?

Title: Re: Mail Protection
Post by: fabian on November 12, 2017, 07:48:04 pm

Everything is on the OPNsense device. What I have seen is that you may need a powerful machine for that.

Title: Re: Mail Protection
Post by: mimugmail on November 12, 2017, 08:04:09 pm

I dont think it needs more CPU than Squid/ClamAV ..

Title: Re: Mail Protection
Post by: franco on November 14, 2017, 05:09:08 am

 I haven’t talked to Fabian yet but if he does a redis plugin we could also add support for remote redis. Redis is optional in any case...

And for av or spam you could use postfix to relay, too.

Ultimately this means one can flexibly tweak according to requirements and resources. We had some discussions about the granularity of plugins but now this makes it a bit clearer why there is no single „mail security“ plugin. :)


Cheers,
Franco