How to get proxmox mail gateway to the next level? we are so far away from a secure system

[poetry]

Hello,
I have been working extremely hard on improving spam detection, improving virus detection on proxmox mail gateway but I still feel like I am nowhere where I want it to be. I am mostly worried about malicious links/attachments, messages that will load scripts or anything malicious.

I just done the test on https://emailsecuritytester.com/ and it just shows how far away from a secure system I am currently.
I really have no idea what to do anymore and I am tried of putting unlimited hours in without any significant improvement.
I think this tests are completely legitimate and just shows how much we have to improve on proxmox mail gateway, Is there anything in the works that will really take proxmox mail gateway to the next level or should we just give up and go with other system?

Here are my results:
01. Spoofed envelope sender - Well done!
02. HTML analysis - High Risk!
03. Executable file - Room for Improvement!
04. Virus attachment - Well done!
05. Outlook Conditional Comment - High Risk!
06. Malware URI - High Risk!
07. Zero Width Spaces link - High Risk!
08. Base HTML Tag link - High Risk!
09. HTML JS Redirect Attachment - High Risk!
10. RFC-Abused HTML Attachment - High Risk!
11. Active PDF - High Risk!
12. PDF with malicious text link - High Risk!
13. PDF with malicious link - High Risk!
14. ZIP Archive with JS - Room for Improvement!
15. MS Word Document with external contents - Well done!
16. MS Excel Document with formula macro function - High Risk!



The spoofing was blocked because of -all spf record and custom SPF_FAIL(29). The one message that was quarantined was detected with virus detected: SecuriteInfo.com.Backdoor.Generic.aybo.27163.UNOFFICIAL (clamav) again something that you don't get on default proxmox and is something I added myself.

 

[tom]

I just done the test on https://emailsecuritytester.com/ and it just shows how far away from a secure system I am currently.

I would bet that if you run the test using their own spam gateway offerings, you will get best results.

A good start:

https://pmg.proxmox.com/wiki/index.php/Getting_started_with_Proxmox_Mail_Gateway

 

[rroethof]

1.5 year later and lately receiving loads and loads of PDF link spam, just tested this on 31st of december 2022.. 20% score.
"Comprehensive Open-Source Email Security Platform" is what the website of PMG states, how come and why this is (even 1.5 year after the original question is posted.. still an issue ?

 

[mac.linux.free]

1.5 year later and lately receiving loads and loads of PDF link spam, just tested this on 31st of december 2022.. 20% score.
"Comprehensive Open-Source Email Security Platform" is what the website of PMG states, how come and why this is (even 1.5 year after the original question is posted.. still an issue ?

I tested this also. I have an 48% score with rspamd...will test this with PMG soon.

 

[mac.linux.free]

On PMG with Kerio-Connect I scored 43%.

 

[poetry]

Since I posted this post I have done some changes that should improve this score have to test again when I have some time. I have been extremely busy when I have some free time I would like to do a big new post about what are all my changes that help improve the detection hope I can do this by the end of this month but no promises. Thanks to everyone for testing if you know of any similar test let me know I would like to run pmg over as many tests as possible. I think we all want to do as good as a job with filtering as we can with what we have available and only with testing and continuous improvement we can get to a very good filtering system that we all want.

 

[hoanv9]

I tested with 33%, poor me