1 Topic by Juanito (edited by Juanito Yesterday 02:33:01)

  • Juanito
  • Member
  • Offline
  • Registered: 2011-07-18
  • Posts: 17

Topic: Support for DMARC/ARC on iRedMail EE

Hi Zhang

Are there any plans to enable native DMARC and ARC support in RedMail EE, and is there an estimated timeline for this?

Additionally, since Rspamd is widely considered the most production-ready and proven project for modern authentication, I’m considering it as an alternative. Have you or anyone in the community successfully integrated Rspamd into the current EE stack—either as a full replacement for Amavis+SpamAssassin or as a side-by-side solution specifically for ARC/DKIM signing?

I’d love to know your thoughts on the viability of this...

Thanks a lot and have a great day!

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,619

Re: Support for DMARC/ARC on iRedMail EE

Hi Juanito,

- DMARC and ARC verifications are enabled in SpamAssassin.
- Milter already signs DKIM signature.
- We do have plan to sign ARC in milter, but it's not high priority yet.

3 Reply by Juanito

  • Juanito
  • Member
  • Offline
  • Registered: 2011-07-18
  • Posts: 17

Re: Support for DMARC/ARC on iRedMail EE

Hi again, Zhang,

I completely understand and respect the roadmap priorities. You’ve built iRedMail to be one of the most stable and robust stacks out there.

Since you have the most in-depth knowledge of the architecture, I’d love to get your expert advice on the best path forward for those of us needing ARC/DMARC signing today. I’m a bit wary of global SRS because of the 'address mangling' and potential delivery issues with spam filters.

If you were in my shoes, looking for maximum deliverability for professional clients:

  • Would you recommend a manual migration to the Rspamd stack? (And if so, is there a 'Zhang-approved' way to do it without breaking the EE features?)

  • Or would you consider it 'safe' to plug in a milter like OpenARC alongside your current configuration?

I just want to follow the best practices you've established for iRedMail without creating a 'Frankenstein' server that breaks on the next update.

Thanks again for your amazing work on this project!