Ubiquiti Cloud Controller is a Control System for network devices of the same brand.

• https://help.ui.com/hc/en-us/articles/220066768-UniFi-How-to-Install-and-Update-via-APT-on-Debian-or-Ubuntu

• It use mongodb

I try to summarize the feasible and effective antispam scenario/stack:

• Rspamd
  • It does practically the same job as spamassasin, he needs less training then SA.
  • spamassassin seems more effective than rspamd if configured correctly, thanks to the use of signature exchange nextwork razor, pyzor, ecc ecc.
  • an antivirus(clamav), is impractical for cloudron, because it would require at least 1.5 / 2 GB of ram to have the entire signature database to be fast enough to filter emails, and as far as we are concerned 90% of our customers do not have such resources on the vServer.
• SPF/DKIM/DMARC
  almost all spam is now signed with these protocols, therefore further control by the antispam is normally useless.
  what cloudron does from this point of view is already excellent, haraka is much faster than SA or Rspamd, it would be a waste of resources in most cases to make the antispam and not the MTA do this job.
• DNBSL
  if well configured these work very very well, but many of these do not allow to be used by anonymous servers and many others are paid, for this reason we suggest the use of a proxy or for all emails or at least for parts of the antispam-system such as DNBSL, signature.

@Captain-Kirk the wiki is deprecated, active sync is a free protocol now, no more licence from Microsoft needed, i have it installed for testing and its work.

Collabora is in the pro version.

Hi everyone,
I started looking for possible solutions to the problem we are having in building the image of Sogo with ActiveSync and not finding a solution (if you want to try to help, find the issue here).

So I looked for an alternative:
What do you think of GroupOffice?

They have a rather complete free version, with modules:

• e-mail (Sieve, Multiple mail for account)
• list itemcontacts
• list itemcalendar
• list itemfile (webdav compatible)
• list itemactivesync (with also a module to control activesync)

• The sharing system is very complete like that of sogo, there can be email accounts, calendars, address book and shared drives.

it is entirely written in PHP so creating a dockerimage should not be a problem, the only disadvantage is that the developers are not very active even if they continue to release bugfixes, they do not have deadlines for new features.

Maybe switching to James (mail server of OpenPaaS) can be really good alternative, and easyer to intagrate with cloudron then OpenPaaS.

It offer pretty much the same:

• Mail
• Callendar
• Contact
• JMAP protocol + standard one imap,smtp ecc ecc.
• It use database to store email (Cassandra / PostgreSQL / HSQLDB / MySQL / ElasticSearch)
• Provide a complete RestAPI.

Hi,
the problem is not whether it is safe or not safe, simply it is not very effective because after each update that value will be restored, what you can do is a custom app and simply change that parameter in the dockerfile.

--> https://git.cloudron.io/cloudron/roundcube-app/-/blob/master/Dockerfile#L28

@d19dotca we are working as moocloud on 2 possible solution:

• Complete antispam proxy in cloud

• A boost to the internal SpamAssasin in cloudron.

the second case will use signature db to provide a more effective SA score, for both virus, spam and ham.

But the first solution will offer the best resolute, and less ham especially, per user whitelist/blacklist and premium signature for spam, and virus scanning.

@marcusquinn

I agree that OLS or LS are not the solution, because Nginx + FastCGI + ProxyCache are excellent (with LS + ESI woocommerce it works better in any situation in this days) especially in big sites with a lot o page, content and static content like images.
But large sites are exceptional cases in the hosting world, especially those who would use cloudron do not have a huge site because they would prefer to use a custom stack in that case.
We are thinking of satisfying the customer who wants performance without doing anything other than installing the LiteSpeed cache plugin.

Maybe switching to James (mail server of OpenPaaS) can be really good alternative, and easyer to intagrate with cloudron then OpenPaaS.

It offer pretty much the same:

• Mail
• Callendar
• Contact
• JMAP protocol + standard one imap,smtp ecc ecc.
• It use database to store email (Cassandra / PostgreSQL / HSQLDB / MySQL / ElasticSearch)
• Provide a complete RestAPI.

@d19dotca
I'm not saying that some functions like blacklist and whitelist should not be included in cloudron, but these will not improve antispam effectiveness, they will make it more functional.

But to make it more effective you need some things, and one of them is Clamav, because many spam repositories are included in the clamav or other antivirus signature-repo.
For this there are repositories for ClamAV updated every hour with the largest and most common spam attacks at the time on the web.

And this becomes complex especially when you need to use networks like pyzor, razor or DCC.
This means that a server loses at least 2 GB and becomes complex to manage, because in order to function properly they need to be used on a network.

What I am convinced: is that @girish can make cloudron more functional, but to improve effectiveness you need to find a different solution.
This is not my belief, if you look at all the control panels they always offer external solutions or special addons for spam, because protecting from spam is a high cost, in term of time, money, resources.
We modify the words and phrases that spamassasin must observe more carefully every week, during the period of the covid pandemic almost every day.

We are working with @girish in general to improve the WordPress and NextCloud Apps, probably moving (nothing certain) to Nginx + FastCGI.
The problem will not be nextcloud, but WordPress; We are looking for a way to intelligently implement the cache in wordpress, because one of the problems is cleaning the FastCGI cache from WordPress (we have found some plugins, but they are not always easy to implement) so we are open to advice.

@marcusquinn

I agree that OLS or LS are not the solution, because Nginx + FastCGI + ProxyCache are excellent (with LS + ESI woocommerce it works better in any situation in this days) especially in big sites with a lot o page, content and static content like images.
But large sites are exceptional cases in the hosting world, especially those who would use cloudron do not have a huge site because they would prefer to use a custom stack in that case.
We are thinking of satisfying the customer who wants performance without doing anything other than installing the LiteSpeed cache plugin.

@d19dotca Your questions/notes are all very interesting and relevant; Our problem lies in the optimization and management of resources.

Our problem lies in the optimization and management of resources.
To work properly if you control from Mailcow to iredmail they ask for 2GB to 4GB of RAM (I am not considering using more effective ClamAV databases, no OCR filters or anything else.).
This is something that almost none of our customers (moocloud customer not cloudron) can have, moreover there is a reason for the increasing use of proxy or MTAs by professional antispams instead of spamassasin plugins, spam must be fight together, collaboratively and this is not possible if you install an antispam on each server.

What MooCloud has proposed to cloudron (this is one of our 2 proposal) is to offer integration with a popular antispam proxy, we are talking about proxmox gateway that you can all download and install and use to manage all your incoming mail.
What MooCloud will do is offer this package/proxy with additional filters, various optimizations to improve effectiveness.
Proxmox come with many interesting functions already available as "Object-Oriented Rule System":

Rules:
ACTIONS - object: Defines what should happen with the email.
WHO - object: Who is the sender or receiver of the e-mail?
WHAT - object: What is in the e-mail?
WHEN - object: When is the e-mail received by Proxmox Mail Gateway?

Or the second proposal is to offer a set of tools that collaborates with the cloudron server, spamassasin and haraka to improve the score.
In this case we will ensure that only the email signatures are sent to our servers and not other information (This is 100% compatible with any privacy policy of any state.).
Obviously in this case if we could offer this service; Cloudron will allow others to enter the competition and in some time you will have the opportunity to take advantage of the choice of multiple providers.
This second setup, however remains that it is not as effective as the first solution and will take a long time to develop.
because it will take time to integrate Box (cloudron backend) with haraka, spamassasin, clamav demon, pyzor, geoip repository, sieve, etc. etc.
Remember that all the software you mentioned earlier took years to become usable and complete as they are now.

What I can tell you is that: I understand your concern about not being able to use certain services, but unfortunately antispam is something really complex to manage locally (in fact microsoft's exchnge no longer does antispam, and is the first mail server used my enterprise) and I am sure that any solution choosed by cloudron (among ours or others that will be made); if this needs to have external servers/service they will be distributed globally.

@girish said in Spam filter doesn't always learn:

rspamd is better here but it does require more resources

rspamd require less training to work, and less complicated configuration setup.
but without clamav is pretty much equal to spamassasin with a little bit of training, and tweak.

AntiSpam in general are really havy to run, and complicated, if you take a plesk or cpanel antispam out of the box are similar to cloudron on.
The only solution is to implement a more complete stack in general, with blacklist, signature, DNSBL in a collaborative way, so that every cloudron can report spam and especially ham.

@imc67 if u want to manually improve you can add barracuda (b.barracudacentral.org) DNSBL to start. (this guide should work; backup your config file before edit it).
The issue of cloudron are mostly resources, because an efficient antispam will take to much ram, and cpu, so we need to find alternative solution, and my company is try to help cloudron to improve on this.

I try to summarize the feasible and effective antispam scenario/stack:

• Rspamd
  • It does practically the same job as spamassasin, he needs less training then SA.
  • spamassassin seems more effective than rspamd if configured correctly, thanks to the use of signature exchange nextwork razor, pyzor, ecc ecc.
  • an antivirus(clamav), is impractical for cloudron, because it would require at least 1.5 / 2 GB of ram to have the entire signature database to be fast enough to filter emails, and as far as we are concerned 90% of our customers do not have such resources on the vServer.
• SPF/DKIM/DMARC
  almost all spam is now signed with these protocols, therefore further control by the antispam is normally useless.
  what cloudron does from this point of view is already excellent, haraka is much faster than SA or Rspamd, it would be a waste of resources in most cases to make the antispam and not the MTA do this job.
• DNBSL
  if well configured these work very very well, but many of these do not allow to be used by anonymous servers and many others are paid, for this reason we suggest the use of a proxy or for all emails or at least for parts of the antispam-system such as DNBSL, signature.

@d19dotca we are working as moocloud on 2 possible solution:

• Complete antispam proxy in cloud

• A boost to the internal SpamAssasin in cloudron.

the second case will use signature db to provide a more effective SA score, for both virus, spam and ham.

But the first solution will offer the best resolute, and less ham especially, per user whitelist/blacklist and premium signature for spam, and virus scanning.

ty @girish for the update, we are working on OpenLiteSpeed image for WP, we are having some issue with the config file, but we hope to have a beta soon.

@Captain-Kirk the wiki is deprecated, active sync is a free protocol now, no more licence from Microsoft needed, i have it installed for testing and its work.

Collabora is in the pro version.