New seqs for spamassassin and postgrey
This commit is contained in:
80
seqs/postgrey.sh
Executable file
80
seqs/postgrey.sh
Executable file
@@ -0,0 +1,80 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
toolName=postgrey
|
||||||
|
toolDeps="$toolName"
|
||||||
|
toolWhitelistLoc="/etc/postgrey/whitelist_clients"
|
||||||
|
updateUrl="https://postgrey.schweikert.ch/pub/postgrey_whitelist_clients"
|
||||||
|
|
||||||
|
# Get script working directory
|
||||||
|
# (when called from a different directory)
|
||||||
|
WDIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" >>/dev/null 2>&1 && pwd )"
|
||||||
|
CONFIG=0
|
||||||
|
CONFIG_FILE_NAME="${toolName}.cfg"
|
||||||
|
CONFIG_FILE_TEMPLATE="$WDIR/${CONFIG_FILE_NAME}.example"
|
||||||
|
|
||||||
|
#step_config() {
|
||||||
|
# echo "Called once before executing steps."
|
||||||
|
# ## e.g. to source a config file manually:
|
||||||
|
# #. "$CONFIG_FILE"
|
||||||
|
# ## or to use sequencer api:
|
||||||
|
# #initSeqConfig "$CONFIG_FILE_NAME" "$CONFIG_FILE_TEMPLATE"
|
||||||
|
# #if [ $? -eq 0 ] ; then
|
||||||
|
# # CONFIG=1
|
||||||
|
# #fi
|
||||||
|
#}
|
||||||
|
|
||||||
|
step_1_info() { echo "Install $toolDeps"; }
|
||||||
|
step_1_alias() { ALIAS="install"; }
|
||||||
|
step_1() {
|
||||||
|
local aptOpt=
|
||||||
|
if [ $QUIET -ne 0 ];then
|
||||||
|
aptOpt="-y"
|
||||||
|
fi
|
||||||
|
exe apt update
|
||||||
|
exe apt install "$toolDeps" $aptOpt
|
||||||
|
}
|
||||||
|
|
||||||
|
step_2_info() {
|
||||||
|
echo "Add cron to update whitelist_clients from"
|
||||||
|
echoinfo "$updateUrl"
|
||||||
|
}
|
||||||
|
step_2_alias() { ALIAS="cron"; }
|
||||||
|
step_2() {
|
||||||
|
addConf -s "$postCron" "$postCronLoc"
|
||||||
|
}
|
||||||
|
postCronLoc="/etc/cron.d/postgreyWhitelistUpdate"
|
||||||
|
postCron="# -q quiet -N timestamping (overwrite existing file) -O target file
|
||||||
|
01 23 5 * * root /usr/bin/wget -qNO \"$toolWhitelistLoc\" $updateUrl && /usr/sbin/service postgrey restart"
|
||||||
|
|
||||||
|
step_3_info() { echo "Configuration notes"; }
|
||||||
|
step_3_alias() { ALIAS="notes"; }
|
||||||
|
step_3() {
|
||||||
|
echo "$toolNotes"
|
||||||
|
}
|
||||||
|
toolNotes="
|
||||||
|
# Reduce default message delay to 1 minute
|
||||||
|
[/etc/default/postgrey]
|
||||||
|
POSTGREY_OPTS=\"--inet=10023 --delay=60\"
|
||||||
|
|
||||||
|
# Custom local whitelist rules
|
||||||
|
[/etc/postgrey/whitelist_clients.local]
|
||||||
|
# Rule examples
|
||||||
|
# own domains
|
||||||
|
mydomain.com
|
||||||
|
# own network
|
||||||
|
/^.*\.(lan|local)$/
|
||||||
|
192.168.0.0/24
|
||||||
|
fd21::/64
|
||||||
|
# External domains in frequent use
|
||||||
|
# Amazon mail system
|
||||||
|
amazonses.com
|
||||||
|
"
|
||||||
|
|
||||||
|
step_10_info() { echo "Restart $toolName"; }
|
||||||
|
step_10_alias() { ALIAS="restart"; }
|
||||||
|
step_10() {
|
||||||
|
exe service $toolName restart
|
||||||
|
}
|
||||||
|
|
||||||
|
VERSION_SEQREV=11
|
||||||
|
. /usr/local/bin/sequencer.sh
|
||||||
161
seqs/spamass.sh
Executable file
161
seqs/spamass.sh
Executable file
@@ -0,0 +1,161 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
toolName=spamassassin
|
||||||
|
toolDeps="$toolName spamc"
|
||||||
|
toolUser='debian-spamd'
|
||||||
|
|
||||||
|
# Get script working directory
|
||||||
|
# (when called from a different directory)
|
||||||
|
WDIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" >>/dev/null 2>&1 && pwd )"
|
||||||
|
CONFIG=0
|
||||||
|
CONFIG_FILE_NAME="${toolName}.cfg"
|
||||||
|
CONFIG_FILE_TEMPLATE="$WDIR/${CONFIG_FILE_NAME}.example"
|
||||||
|
|
||||||
|
#step_config() {
|
||||||
|
# echo "Called once before executing steps."
|
||||||
|
# ## e.g. to source a config file manually:
|
||||||
|
# #. "$CONFIG_FILE"
|
||||||
|
# ## or to use sequencer api:
|
||||||
|
# #initSeqConfig "$CONFIG_FILE_NAME" "$CONFIG_FILE_TEMPLATE"
|
||||||
|
# #if [ $? -eq 0 ] ; then
|
||||||
|
# # CONFIG=1
|
||||||
|
# #fi
|
||||||
|
#}
|
||||||
|
|
||||||
|
step_1_info() {
|
||||||
|
echo "Install packages: $toolDeps"
|
||||||
|
echoinfo "May take a long time"
|
||||||
|
}
|
||||||
|
step_1_alias() { ALIAS="install"; }
|
||||||
|
step_1() {
|
||||||
|
local aptOpt=
|
||||||
|
if [ $QUIET -ne 0 ];then
|
||||||
|
aptOpt="-y"
|
||||||
|
fi
|
||||||
|
exe apt update
|
||||||
|
exe apt install $toolDeps $aptOpt
|
||||||
|
}
|
||||||
|
|
||||||
|
step_20_info() { echo "List spam/ham counts"; }
|
||||||
|
step_20() {
|
||||||
|
exe mysql -D $SA_BAYES_DBNAME -e 'select username,spam_count,ham_count from bayes_vars;'
|
||||||
|
}
|
||||||
|
SA_BAYES_DBNAME='spambayes_db'
|
||||||
|
|
||||||
|
step_50_info() { echo "Notes"; }
|
||||||
|
step_50_alias() { ALIAS="notes"; }
|
||||||
|
step_50() {
|
||||||
|
echo "$notes"
|
||||||
|
}
|
||||||
|
notes='
|
||||||
|
# Configuration
|
||||||
|
[/etc/default/spamassassin]
|
||||||
|
CRON=1
|
||||||
|
|
||||||
|
[/etc/spamassassin/local.cf]
|
||||||
|
# Customize there
|
||||||
|
|
||||||
|
[/etc/postfix/master.cf]
|
||||||
|
smtp inet n - - - - smtpd
|
||||||
|
[...]
|
||||||
|
-o content_filter=spamassassin
|
||||||
|
|
||||||
|
submission inet n - - - - smtpd
|
||||||
|
[...]
|
||||||
|
-o content_filter=spamassassin
|
||||||
|
|
||||||
|
smtps inet n - y - - smtpd
|
||||||
|
[...]
|
||||||
|
-o content_filter=spamassassin
|
||||||
|
|
||||||
|
|
||||||
|
spamassassin unix - n n - - pipe
|
||||||
|
user=debian-spamd argv=/usr/bin/spamc -f -e /usr/sbin/sendmail -oi -f ${sender} ${recipient}
|
||||||
|
|
||||||
|
# Bayes data in mysql
|
||||||
|
* Create empty database spambayes_db
|
||||||
|
|
||||||
|
[/etc/spamassassin/local.cf]
|
||||||
|
bayes_store_module Mail::SpamAssassin::BayesStore::MySQL
|
||||||
|
bayes_sql_dsn DBI:mysql:spambayes_db:localhost
|
||||||
|
bayes_sql_username user
|
||||||
|
bayes_sql_password pass
|
||||||
|
|
||||||
|
# Global sieve script for spam to junk
|
||||||
|
* If sieve before is a folder all scripts inside are executed
|
||||||
|
|
||||||
|
[/etc/dovecot/conf.d/90-sieve.conf]
|
||||||
|
sieve_before = /var/lib/dovecot/sieve.d/
|
||||||
|
|
||||||
|
* The global sieve script needs to be compiled with sievec
|
||||||
|
and changed group to vmail for access permissions
|
||||||
|
(chown root:vmail script; chmod 750 script)
|
||||||
|
|
||||||
|
[/var/lib/dovecot/sieve.d/spam-global.sieve]
|
||||||
|
require "fileinto";
|
||||||
|
if header :contains "X-Spam-Flag" "YES" {
|
||||||
|
fileinto "Junk";
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
# Configure sieve as replacement for deprecated plugin dovecot-antispam
|
||||||
|
https://doc.dovecot.org/configuration_manual/howto/antispam_with_sieve/
|
||||||
|
|
||||||
|
[/etc/dovecot/conf.d/20-imap.conf]
|
||||||
|
mail_plugins = $mail_plugins imap_sieve
|
||||||
|
|
||||||
|
[/etc/dovecot/conf.d/90-sieve.conf]
|
||||||
|
sieve_plugins = sieve_imapsieve sieve_extprograms
|
||||||
|
|
||||||
|
# From elsewhere to Spam folder
|
||||||
|
imapsieve_mailbox1_name = Spam
|
||||||
|
imapsieve_mailbox1_causes = COPY
|
||||||
|
imapsieve_mailbox1_before = file:/usr/lib/dovecot/sieve-pipe/report-spam.sieve
|
||||||
|
|
||||||
|
# From Spam folder to elsewhere
|
||||||
|
imapsieve_mailbox2_name = *
|
||||||
|
imapsieve_mailbox2_from = Spam
|
||||||
|
imapsieve_mailbox2_causes = COPY
|
||||||
|
imapsieve_mailbox2_before = file:/usr/lib/dovecot/sieve-pipe/report-ham.sieve
|
||||||
|
|
||||||
|
sieve_extensions = +notify +imapflags +vnd.dovecot.execute
|
||||||
|
sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.environment
|
||||||
|
|
||||||
|
[/etc/dovecot/conf.d/90-sieve-extprograms.conf
|
||||||
|
sieve_pipe_bin_dir = /usr/lib/dovecot/sieve-pipe
|
||||||
|
sieve_execute_bin_dir = /usr/lib/dovecot/sieve-execute
|
||||||
|
|
||||||
|
[/usr/lib/dovecot/sieve-pipe/report-spam.sieve]
|
||||||
|
require ["vnd.dovecot.pipe", "copy", "imapsieve", "environment", "variables"];
|
||||||
|
if environment :matches "imap.user" "*" {
|
||||||
|
set "username" "${1}";
|
||||||
|
pipe :copy "sa-learn-spam.sh" [ "${username}" ];
|
||||||
|
|
||||||
|
[/usr/lib/dovecot/sieve-pipe/report-ham.sieve]
|
||||||
|
require ["vnd.dovecot.pipe", "copy", "imapsieve", "environment", "variables"];
|
||||||
|
if environment :matches "imap.mailbox" "*" {
|
||||||
|
set "mailbox" "${1}";
|
||||||
|
}
|
||||||
|
if string "${mailbox}" "Trash" {
|
||||||
|
stop;
|
||||||
|
}
|
||||||
|
if environment :matches "imap.user" "*" {
|
||||||
|
set "username" "${1}";
|
||||||
|
}
|
||||||
|
pipe :copy "sa-learn-ham.sh" [ "${username}" ];
|
||||||
|
|
||||||
|
[/usr/lib/dovecot/sieve-pipe/sa-learn-spam.sh]
|
||||||
|
#!/bin/sh
|
||||||
|
# sa-learn is used in parallel. Be aware of system resources when
|
||||||
|
# moving multiple messages at the same time
|
||||||
|
saNewSpam=$(cat);( echo "$saNewSpam" | /usr/bin/sa-learn -u ${1} --spam ) &
|
||||||
|
|
||||||
|
[/usr/lib/dovecot/sieve-pipe/sa-learn-ham.sh]
|
||||||
|
#!/bin/sh
|
||||||
|
# sa-learn is used in parallel. Be aware of system resources when
|
||||||
|
# moving multiple messages at the same time
|
||||||
|
saNewHam=$(cat);( echo "$saNewHam" | /usr/bin/sa-learn -u ${1} --ham ) &
|
||||||
|
'
|
||||||
|
|
||||||
|
VERSION_SEQREV=11
|
||||||
|
. /usr/local/bin/sequencer.sh
|
||||||
Reference in New Issue
Block a user