Is it worth doing at all?
I run rspamd outside Cyrus: it’s a Postfix milter, Cyrus gets an lmtp feed but has no interaction with rspamd. Periodically I have trawled my user’s spam folders and “learned” from them, but it seems to make very little difference to spam performance. This is a very small site, and I am extremely aggressively enforcing correct behaviour at the SMTP level, but rspamd seems to do a very good job just in its default state without asking users to classify. I’m also nervous about using the user’s spam folders because those are often the result of client-side Bayesian filtering, which is somewhat error-prone, so the chances of ham (or at least bacn) ending up in there is non-zero. Users are also very bad at classifying spam so using their main inbox as a source of ham is unwise. Rspamd is _very_ good, and increasingly I just leave it to do its thing. With rspamd and clamav’s phishing patterns I doubt I see a piece of phishing email getting through to me more than once a month, and my users report similarly. I have a lot of bacn which is correctly marks as spam-ish, and I similarly see very little outright spam. Before wading in an doing a complex learn/mode thing, just run rspamd unsupervised for a month and see how it does on its own. I think you’ll be very pleased. ian On 01/02/2021, 09:35, "Vladislav Kurz" <[email protected]> wrote: Hello, Is it necessary to run the spam learning immediately after the user moves the mail to spam/ham folder? Isn't it enough to find new files in those folders, once (or a few times) a day and run sa-learn directly on them? -- Best regards Vladislav Kurz Dne neděle 31. ledna 2021 20:35:58 CET, David Faller napsal(a): Thanks for your answer, The Handling which you mean I undeestand. Is there no easier way like to send a copy of moved Mail to a specific Mailbox like [email protected]? Also for cyrus Notifikation Events there are no templates for orientation where to Start. So at this point I can't collect needed Information like to create a shell script. For a notification event we would also need the response from it and would need time to test and collect Informations Cyrus sieve does baldly not support events like on movement to copy. We Don't use special hashed spool, we leaved it by default under var/lib/spool/cyrus/././ Also no special character are used, only we use "/" aß separator instead a dot in our imap configuration. You said we need to determinate the file to feed for sa-learn, better would be to store These message files to.2 seperated folders or a seperated imap Mailbox for learning. So I think in Future there are also no other Plans for cyrus which could bring up this easier? I would like to try my luck with event notifications Over the Event notification we would get the file Name and path as response which we can use in a Script for a copy and handling Script? A Sample would be really helpful to work with it you know? > Am 31.01.2021 um 14:26 schrieb Luca Olivetti <[email protected]>: > El 31/1/21 a les 14:18, Luca Olivetti ha escrit: >>> "oldMailboxID": >>> "imap://[email protected]@imap.example.org/INBOX;UIDVALIDITY=142468368 >>> 2", >> This is the source folder, if it is (e.g.) INBOX.spam, map the uri to the >> file (combining it with the "uidset" field, which can be a list, so >> you'll have to iterate over all messages) and pass it to "sa_learn >> --ham" (since the user is moving it out of the spam folder). > Note that the file depends on your setup (where the spool is, hashed imap > spool or not, etc.). > In my case, the file would be /mnt/lun_correo/spool/j/john/uid. > Other gotchas is the encoding of special chars in mailbox names, etc., I > just copied code from imapurl.c. > Bye > -- > Luca Olivetti > Wetron Automation Technology http://www.wetron.es/ > Tel. +34 93 5883004 (Ext.3010) Fax +34 93 5883007 ------------------------------------------ Cyrus: Info Permalink: https://cyrus.topicbox.com/groups/info/T4a9f972d95fd358f-M9aa7b597aecf93ac59b4efb8 Delivery options: https://cyrus.topicbox.com/groups/info/subscription
