mirror of
https://github.com/Mailu/Mailu.git
synced 2025-03-03 14:52:36 +02:00
b9de28e910
- configures dovecot to use the spamtest sieve plugins
- configures sieve to read the score from X-Spamd-Result: headers
- before.sieve applies the ${spam_threshold} to the spamtest percentage
- freeposte.db stores a percentage for ${spam_threshold}
- migrate freeposte.db spam_threshold from X/15 to percentages
the filter investigates the overall ratio of the `rspamd` header
`X-Spamd-Result` that looks something like this:
X-Spamd-Result: default: True [12.36 / 15.00]
RBL_SPAMHAUS_XBL(4.00)[]
BAYES_SPAM(3.06)[92.67%]
RBL_SPAMHAUS_XBL_ANY(4.00)[]
ONCE_RECEIVED_STRICT(4.00)[]
HFILTER_HELO_BAREIP(3.00)[]
RBL_SORBS_DUL(2.00)[]
HFILTER_HOSTNAME_UNKNOWN(2.50)[]
RBL_SPAMHAUS_PBL(2.00)[]
RBL_SORBS_RECENT(1.50)[]
MIME_UNKNOWN(0.10)[application/x-rar-compressed]
RDNS_NONE(1.00)[]
RBL_SORBS(0.00)[]
R_SPF_NEUTRAL(0.00)[?all]
ONCE_RECEIVED(0.10)[]
RBL_SEM(1.00)[]
MIME_HTML_ONLY(0.20)[]
RBL_UCEPROTECT_LEVEL1(1.00)[]
MIME_GOOD(-0.10)[multipart/mixed]
the sieve `spamtest :percent :value` in this case would be
100*12.36/15 = 82.4%
177 lines
3.3 KiB
Plaintext
177 lines
3.3 KiB
Plaintext
###############
|
|
# General
|
|
###############
|
|
log_path = /dev/stderr
|
|
protocols = imap lmtp sieve
|
|
postmaster_address = {{ POSTMASTER }}@{{ DOMAIN }}
|
|
hostname = {{ HOSTNAME }}
|
|
mail_plugins = $mail_plugins quota
|
|
submission_host = smtp
|
|
|
|
service dict {
|
|
unix_listener dict {
|
|
group = mail
|
|
mode = 0660
|
|
}
|
|
}
|
|
|
|
dict {
|
|
sieve = sqlite:/etc/dovecot/pigeonhole-sieve.dict
|
|
}
|
|
|
|
###############
|
|
# Mailboxes
|
|
###############
|
|
first_valid_gid = 8
|
|
first_valid_uid = 8
|
|
mail_location = maildir:/mail/%u
|
|
mail_home = /mail/%u
|
|
mail_uid = mail
|
|
mail_gid = mail
|
|
mail_privileged_group = mail
|
|
mail_access_groups = mail
|
|
|
|
namespace inbox {
|
|
inbox = yes
|
|
mailbox Trash {
|
|
auto = subscribe
|
|
special_use = \Trash
|
|
}
|
|
mailbox Drafts {
|
|
auto = subscribe
|
|
special_use = \Drafts
|
|
}
|
|
mailbox Sent {
|
|
auto = subscribe
|
|
special_use = \Sent
|
|
}
|
|
mailbox Junk {
|
|
auto = subscribe
|
|
special_use = \Junk
|
|
}
|
|
}
|
|
|
|
###############
|
|
# TLS
|
|
###############
|
|
ssl = yes
|
|
ssl_cert = </certs/cert.pem
|
|
ssl_key = </certs/key.pem
|
|
# TLS hardening is based on the following documentation:
|
|
# https://bettercrypto.org/static/applied-crypto-hardening.pdf
|
|
ssl_protocols=!SSLv3 !SSLv2
|
|
ssl_cipher_list = EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA256:EECDH:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDEA:!ECDSA:kEDH:CAMELLIA128-SHA:AES128-SHA
|
|
ssl_prefer_server_ciphers = yes
|
|
ssl_dh_parameters_length = 2048
|
|
ssl_options = no_compression
|
|
|
|
###############
|
|
# Authentication
|
|
###############
|
|
auth_mechanisms = plain login
|
|
|
|
passdb {
|
|
driver = sql
|
|
args = /etc/dovecot/dovecot-sql.conf.ext
|
|
}
|
|
|
|
userdb {
|
|
driver = sql
|
|
args = /etc/dovecot/dovecot-sql.conf.ext
|
|
}
|
|
|
|
service auth {
|
|
user = dovecot
|
|
unix_listener auth-userdb {
|
|
}
|
|
|
|
inet_listener {
|
|
port = 2102
|
|
}
|
|
}
|
|
|
|
service auth-worker {
|
|
unix_listener auth-worker {
|
|
user = dovecot
|
|
group = mail
|
|
mode = 0660
|
|
}
|
|
user = mail
|
|
}
|
|
|
|
###############
|
|
# IMAP
|
|
###############
|
|
|
|
protocol imap {
|
|
mail_plugins = $mail_plugins imap_quota antispam
|
|
}
|
|
|
|
service imap-login {
|
|
inet_listener imap {
|
|
port = 143
|
|
}
|
|
inet_listener imaps {
|
|
port = 993
|
|
}
|
|
}
|
|
|
|
###############
|
|
# Delivery
|
|
###############
|
|
|
|
protocol lmtp {
|
|
mail_plugins = $mail_plugins sieve
|
|
recipient_delimiter = +
|
|
}
|
|
|
|
service lmtp {
|
|
inet_listener lmtp {
|
|
port = 2525
|
|
}
|
|
}
|
|
|
|
plugin {
|
|
quota = maildir:User quota
|
|
}
|
|
|
|
|
|
###############
|
|
# Filtering
|
|
###############
|
|
|
|
service managesieve-login {
|
|
inet_listener sieve {
|
|
port = 4190
|
|
}
|
|
}
|
|
|
|
plugin {
|
|
sieve_dir = ~/sieve
|
|
sieve_plugins = sieve_extdata
|
|
sieve_extensions = +vnd.dovecot.extdata +spamtest +spamtestplus
|
|
sieve_before = /var/lib/dovecot/before.sieve
|
|
sieve_default = /var/lib/dovecot/default.sieve
|
|
sieve_after = /var/lib/dovecot/after.sieve
|
|
sieve_extdata_dict_uri = proxy::sieve
|
|
|
|
antispam_backend = mailtrain
|
|
antispam_spam = Junk
|
|
antispam_trash = Trash
|
|
antispam_mail_sendmail = /usr/bin/rspamc
|
|
antispam_mail_spam = learn_spam
|
|
antispam_mail_notspam = learn_ham
|
|
antispam_mail_sendmail_args = -h;antispam:11334;-P;q1
|
|
|
|
# extract spam score from
|
|
# X-Spam-Result: .... [<value> / <max_value] ...
|
|
sieve_spamtest_status_type = score
|
|
sieve_spamtest_status_header = X-Spamd-Result: .*\[(-?[[:digit:]]+\.[[:digit:]]+) .*\]
|
|
sieve_spamtest_max_header = X-Spamd-Result: .*\[.* ([[:digit:]]+\.[[:digit:]]+)\]
|
|
}
|
|
###############
|
|
# Filtering
|
|
###############
|
|
|
|
!include_try /overrides/dovecot.conf
|