mlandauer/cuttlefish

Use spamassassin on outgoing email to warn of potential problems

Opened this issue · 1 comments

  • Show the spamassassin score to the user so they can be confident that the emails they're sending do not look like spam
  • Also notify the site admins immediately if any outgoing email looks very much like spam. It is important for reputation of the server that these emails are stopped. It's either a sign that a user of cuttlefish is actively sending spam (possible but very unlikely) or more likely that transactional email from an application is being hijacked by a spammer to send spam content.

Look at rspamd as filter engine, it much more profitable then spamassassin. And it will allow you to handle many stuff: from spam/av checks to rate limiting or dkim/arc signing or even modify email body or headers before signing 😉. It has api to return scan results and store many useful data at redis which can be reused.