Global filters for all users.

[soba@ukw.edu.pl]

Can I add a global filters (like *@domain -> Trash folder) for all domain Zimbra users?


I have an external anti-spam solution, which by default can tag messages in the topic - eg [SPAM subjcect] / or definied specjal headers. I want those messages in users to a separate folder, like SPAM folder

[Klug]

Get your ironport to add a new X-Header field when it considers the mail is spam, such as "X-My-Spam-Flag = YES".

Then two other steps are needed.

First one is to get all spams delivered to ZCS' spam folder (no spam discarded). In order to get that, you have to change one line in /opt/zimbra/conf/amavis.conf.in (from D_DISCARD to D_PASS) :

#$final_spam_destiny = D_DISCARD;
$final_spam_destiny = D_PASS;

Second one is to add a high score to the mails with the X-Header you've defined. That's in /opt/zimbra/conf/salocal.cf.in, you add three lines :

header SPAM_FRONT X-My-Spam-Flag =~ /^YES$/
describe SPAM_FRONT Spam detected by our front filters
score SPAM_FRONT 50

These two mods won't survive an upgrade, you'll have to do them after each upgrade.

[soba@ukw.edu.pl]

But i dont want enable amavisd on Zimbra server. Amavis take global a lot of memory...

If I run amavisd-new run as the mechanism for Zimbra spam, and do not want to do.

[Klug]

Disable all the other tests (it'll go faster) and use RAM drive for temp folder (much faster, load very lower).

You can also use a multi-servers setup and setup the MTA on dedicated servers/VM.

[soba@ukw.edu.pl]

Disable all the other tests (it'll go faster) and use RAM drive for temp folder (much faster, load very lower).

You can also use a multi-servers setup and setup the MTA on dedicated servers/VM.

So there is no other option - I need to enable amavisd?

And..
When I run the amavisd that all emails internal users will go through an external SMTP server? This is important because I use external solutions to encrypt and decrypt messages between internal users.


My opinion about this solution:

Amavis takes a lot of system resources (RAM, CPU, IO) for multiple users and generates unnecessary costs associated with server resources for my infrastructure - so I don't buy and create external antispam and antivirus solutions to then run amavisd + spamassassin. It is not cost effective way.