Cara, finally! After years of client complaints, véi, I am implement this stack and kkkkk it actually work:
- Mail gateway: self-hosted on cheap CloudCone VPS, going to migrate to bigger one
- Rspamd with fuzzy storage, I trained and trained and trained
- Custom Sieve rules for "invoice" + suspicious TLD
- Graylisting 5min for unknown servers
- Final score threshold 15 (aggressive, cara, but clients asked for zero spam)
30 days, not one junk in 12 client inboxes. I celebrate with churrasco tonight, véi!
But now clients asking me to share rules. I post below, I post below. What you want first — the Sieve or the rspamd multimap?