Module 5 · Lesson 11 of 26

Rspamd architecture inside Mailcow

Part of Mailcow: Self-Hosted Mail Server Mastery — Rspamd Tuning.

Rspamd replaces SpamAssassin + Amavis in the Mailcow stack. It's faster (event-driven Lua) and more accurate (gradient-boosted Bayes + DNS lookups).

Score thresholds (default):

Score Action
< 4 Pass (no action)
4 ≤ s < 6 Greylist (defer once)
6 ≤ s < 15 Add spam header, deliver to Junk
≥ 15 Reject at SMTP time

Modules to know:

Module What it does
rbl Queries DNSBLs (Spamhaus, SURBL, etc.)
dkim_signing Outbound DKIM with keys from the UI
arc ARC sealing on forwarded mail
multimap User-supplied allow/block lists
bayes Per-user content classification
neural Optional ML model on top of Bayes
fuzzy_check Hash-based recurring-spam detection

Access the Rspamd UI at https://mail.example.com/rspamd/ — username/password are in mailcow.conf (RSPAMD_UI_PASSWORD).

Sign in to keep track of what you have read.

Pulse · self-hosted sending

Own the infrastructure your pipeline depends on.

One install script on your own server. Pulse sets up the MTA, mailboxes, certificates and dashboard; you add domains and start sending.

# on a fresh Ubuntu server
$ cd pulse && sudo ./install.sh
→ docker compose up · kumomta · stalwart · caddy
→ dashboard ready on https://pulse.yourdomain.com
$

Also from us:Beat — monitoring that tells you the fixConsulting — $65/hr, no retainer