On Sun, 2018-11-25 at 20:54 -0700, Grant Taylor wrote: > Ultimately I'd like to have a (hashed) list addresses that I > recognize and add (0.1?) to the spam score for each unknown address. > Write yourself a plugin which looks up a database table of known addresses. Thats not hard if you know a bit of Perl, though the list of incoming addresses sounds too simplistic to be much use: how would it distinguish between spammers and non-spammers?
Instead, consider populating the database with addresses that your users have sent mail to because by and large these will not be spammers. Other points: - if each address entry carries the date mail was last sent to it you'll have an easy way to purge the list of addresses that nobody has corresponded with in, say, the last two years: this 'time to live' is long enough to deal with annual subscriptions, etc. - you'll also need a tool for removing spammers that got on because a user clicked 'send' without reading a message carefully enough to see that it was spam I've had this sort of system running for about 10 years now, using PostgreSQL as the database. By and large this looks after itself without needing more than sporadic maintenance, usually when PostgreSQL has a major upgrade every year or two. But then PostgreSQL is designed to be self maintaining apart from making periodic backups. I do these weekly. Martin