Rspamd: Difference between revisions
imported>Onny mNo edit summary |
Remove unstable notice |
||
| (4 intermediate revisions by 3 users not shown) | |||
| Line 10: | Line 10: | ||
== Configuration == | == Configuration == | ||
=== Bayesian spam training === | |||
To enable bayesian spam training, enable a Redis instance and configure it in Rspamd as a backend | |||
{{file|/etc/nixos/configuration.nix|nix|<nowiki> | |||
services.rspamd = { | |||
locals = { | |||
"redis.conf".text = '' | |||
servers = "${config.services.redis.servers.rspamd.unixSocket}"; | |||
''; | |||
"classifier-bayes.conf".text = '' | |||
backend = "redis"; | |||
autolearn = true; | |||
''; | |||
}; | |||
}; | |||
services.redis.servers.rspamd = { | |||
enable = true; | |||
# 0 disables listening to TCP ports and will only use unix sockets. Default | |||
# unix socket path is /run/redis-${name}/redis.sock thus | |||
# /run/redis-rspamd/redis.sock here. | |||
port = 0; | |||
user = config.services.rspamd.user; | |||
}; | |||
</nowiki>}} | |||
=== Whitelist domain === | === Whitelist domain === | ||
| Line 42: | Line 69: | ||
systemd.services.rspamd.serviceConfig.SupplementaryGroups = [ "maddy" ]; | systemd.services.rspamd.serviceConfig.SupplementaryGroups = [ "maddy" ]; | ||
</nowiki>}} | </nowiki>}} | ||
== Tips and tricks == | |||
=== Helper script to train rspamd === | |||
The following example enables [https://gitlab.com/onlime/rspamd-trainer rspamd-trainer] as a daemon which will run every 10 minutes to check for mails in the inbox of <code>myuser@example.com</code> which should be used for spam/ham training. | |||
{{file|/etc/nixos/configuration.nix|nix|<nowiki> | |||
services.rspamd-trainer = { | |||
enable = true; | |||
settings = { | |||
HOST = "example.com"; | |||
USERNAME = "myuser@example.com"; | |||
INBOXPREFIX = "INBOX/"; | |||
}; | |||
secrets = [ | |||
# Do not use this in production. This will make passwords | |||
# world-readable in the Nix store | |||
"${pkgs.writeText "secrets" '' | |||
PASSWORD = test123 | |||
''}" | |||
]; | |||
}; | |||
</nowiki>}} | |||
The script will look into <code>INBOX/report_ham</code> and <code>INBOX/report_spam</code> respectivley for mails which will be feed into rspamd for training. After that they get moved to <code>INBOX/learned_ham</code> and <code>INBOX/learned_spam</code>. The report directories have to be created before that. You can do this using openssl: | |||
<syntaxhighlight lang="console"> | |||
# openssl s_client -connect example.com:993 -crlf | |||
A login myuser@example.com test123 | |||
A create "INBOX/report_spam" | |||
A create "INBOX/report_ham" | |||
A create "INBOX/report_spam_reply" | |||
</syntaxhighlight> | |||
[[Category:Mail Server]] | [[Category:Mail Server]] | ||
[[Category:Server]] | |||