On 04/09/2015 11:37 AM, Andreas Kasenides wrote:> You got me thinking towards the antispam plugin which I have nto used
> before, but can you elaborate if my users are system users and the
> training is done only via a cron entry?
I always used the antispam plugin, as a way to initiate training via IMAP.
Is your bayes database central (system-wide) or per user? Is it SQL or
separate db files owned per user?
Without antispam plugin, your cron command can be perhaps something like
this (as root)
doveadm user '*' | while read user; do
doveadm search -u $user mailbox Junk all | while read guid uid; do
doveadm -f flow fetch -u $user text mailbox-guid $guid uid $uid
| sed s/^text=// | ssh -i /path/to/ssh-key root@$spamassassin-box "su -l
-c 'spamassassin --report' $user"
# expunge, so we don't repeat it if no other reason
doveadm expunge -u $user mailbox-guid $guid uid $uid
done
done
remember to do this before:
ssh-keyscan $spamassassin-box >> /etc/ssh/ssh_known_hosts
to allow non-interactive ssh connections.
You can improve security by setting up a special user instead of root,
allowing it to become other users with no password using sudo with only
the needed command(s) allowed, and use a:
command="/usr/local/bin/training-wrapper"
prefixed to the ssh public key in the authorized_keys file.
/usr/local/bin/training-wrapper:
#!/bin/sh
case "$SSH_ORIGINAL_COMMAND" in
report)
sa-learn --spam
;;
revoke)
sa-learn --ham
;;
*)
echo "Wwwwhat?"
;;
esac
and invoke this as
ssh $user@$sa-box report
or:
ssh $user@$sa-box revoke
It is very important to allow for ham training, not only spam training.
The antispam plugin allows for that.
If your bayes database is SQL, you can use sa-learn -u $user --ham /
sa-learn -u $user --spam, instead of su / sudo.
I however like spamassassin --report for reporting to dcc / razor /
pyzor (--revoke exists but doesn't really do anything beyond bayes ;-)).
This command doesn't have a -u flag so I guess su / sudo is necessary.
If you configure the antispam plugin to ssh into another box and run a
learning process, the IMAP command won't complete until the ssh command
returns. I personally like to drop off the email messages to be picked
up asynchronously by another process, for better IMAP responsiveness.
Fill out the few missing details about your spamassassin / bayes setup
and I can gladly give you more specific details on how to set this up.