Feature request: Integrate dovecot and rspamd to learn ham/spam

[ksylvan]

Question: What would it take to set up the included dovecot and rspamd to work together so that in response to a user moving things in and out of their IMAP Spam folder, rspamd learns it as ham or spam?

Here is the kind of setup I'm talking about: https://kaworu.ch/blog/2014/03/25/dovecot-antispam-with-rspamd/

[denji]

https://github.com/hardware/mailserver/tree/v1.1/rootfs/etc/dovecot/sieve

dovecot/sieve →RESTful API rspamd

/usr/bin/curl -s --data-binary @- http://0.0.0.0:11334/learnspam < /dev/stdin
/usr/bin/curl -s --data-binary @- http://0.0.0.0:11334/learnham < /dev/stdin

rspamc too support learn_spam/learn_ham, but not tested.

docker-compose exec mailserver rspamc stat
docker-compose exec mailserver rspamc uptime

docker-compose exec mailserver rspamc --help
docker-compose exec mailserver rspamadm --help

       Rspamc  is  a  simple  client for checking messages using rspamd or for
       learning rspamd by messages.  Rspamc supports the following commands:
       · Scan commands:
         · symbols: scan message and show symbols (default command)
       · Control commands
         · learn_spam: learn message as spam
         · learn_ham: learn message as ham
         · fuzzy_add: add message to fuzzy storage (check -f  and  -w  options
           for this command)
         · fuzzy_del:  delete  message from fuzzy storage (check -f option for
           this command)
         · stat: show rspamd statistics
         · stat_reset: show and reset rspamd statistics (useful for graphs)
         · counters: display rspamd symbols statistics
         · uptime: show rspamd uptime
         · add_symbol: add or modify symbol settings in rspamd
         · add_action: add or modify action settings

[hardware]

It is already implemented :

mailserver/rootfs/etc/dovecot/conf.d/90-sieve.conf

Lines 15 to 24 in 500ae47

	# From elsewhere to Spam folder
	imapsieve_mailbox1_name = Spam
	imapsieve_mailbox1_causes = COPY
	imapsieve_mailbox1_before = file:/etc/dovecot/sieve/report-spam.sieve
	# From Spam folder to elsewhere
	imapsieve_mailbox2_name = *
	imapsieve_mailbox2_from = Spam
	imapsieve_mailbox2_causes = COPY
	imapsieve_mailbox2_before = file:/etc/dovecot/sieve/report-ham.sieve

[denji]

@hardware without curl better?

• rspamc learn_spam < /dev/stdin
• rspamc learn_ham < /dev/stdin

[ksylvan]

Thanks for the detailed responses. Have an awesome day.

[hardware]

@denji yes, i think it could be better with rspamc client command. I noticed that curl causes some random errors like "http error occurred: Not found" in rspamd logs.

[hardware]

Example :

I fix this in the next commit.

[hardware]

I found something interesting, maybe it's not bug. Rspamd return 404 error when he has already learned a mail :

rspamc learn_spam < external-spam-to-existing-user.txt
Results for file: external-spam-to-existing-user.txt (0.000 seconds)
HTTP error: 404, <undef> has been already learned as spam, ignore it

With a new mail :

rspamc learn_ham another-mail-test.txt
Results for file: another-mail-test.txt (0.000 seconds)
success = true;

Anyway, i will use rspamc client command instead.