With grommunio-antispam, a powerful security component is available for the analysis, evaluation, and filtering of incoming emails. The solution is based on Rspamd, a modern open-source spam filter that combines traditional inspection mechanisms with statistical methods and machine-learning technologies.

Unlike traditional spam filters, Rspamd relies on a modular architecture with high performance, flexible rule definition, and continuous learning from real communication patterns. This makes grommunio-antispam particularly well suited for productive enterprise environments with high demands on security, deliverability, and maintainability.

ForgeOne supports companies with the planning, integration, operation, and optimization of grommunio-antispam within existing Linux and groupware infrastructures.

grommunio-antispam extends the grommunio platform with a central security and analysis layer for email communication.

Incoming messages are evaluated based on a wide range of factors, including:

• SPF validation
• DKIM verification
• DNS and MX validation
• Reputation data
• Heuristic checks
• Bayesian learning
• Fuzzy hashing
• Statistical analysis models
• Rule-based scoring
• Custom whitelists and blacklists

Each message receives a score that determines whether it is delivered, marked, or blocked.

Thanks to its modular architecture, the behavior of the spam filter can be precisely adapted to different requirements — from highly restrictive security environments to open communication platforms with a strong focus on deliverability.

grommunio-antispam is managed through the integrated Rspamd web interface within the grommunio administration platform.

This provides administrators with direct access to:

• Filter rules
• Whitelists and blacklists
• Learning functions
• Fuzzy hash databases
• Symbol analysis
• Scanning and debugging tools
• History and mail analysis
• Performance and error evaluation

The interface enables transparent traceability of filtering behavior and significantly simplifies both daily operations and troubleshooting.

A key component of Rspamd is the so-called Multimaps. They enable granular control over domains, email addresses, and custom rules.

Typical use cases:

• Whitelisting trusted partners
• Allowing individual senders
• Blocking suspicious domains
• Custom spam rules
• Reputation-based scoring

By separating domain-based and address-based rules, the configuration remains clear, organized, and scalable.

This is especially critical in productive enterprise environments, where filter rules must remain maintainable and transparent over the long term.

Screenshots:

In addition to automated operation, grommunio-antispam provides extensive tools for analysis, testing, and troubleshooting.

Using the “Scan/Learn” section, messages can be uploaded or pasted directly and analyzed immediately.

Administrators receive detailed information about:

• detected rules
• scores
• authentication checks
• header analysis
• symbol evaluation
• reputation mechanisms

In addition, tools such as “Test Selectors” are available, allowing individual parts of messages to be analyzed in a targeted manner.

These features are particularly useful:

• when developing custom rules
• for false-positive analysis
• during spam campaign investigations
• for complex routing or delivery issues

Screenshots: