mixandClaude Opus 5.5
a3cc52d6d4
Step 2/12 of docs/plans/inbound-antispam-panel.md, the first migration after the 2.0 baseline (2.0.1 was cut before it, as agreed). 0002_inbound_spam_log.sql adds inbound_spam_log (one row per recipient: domain, client IP, envelope, subject, decision, engine, detail) with indexes on created_at and (inbound_domain, created_at), and inbound_spam_list (allow / deny entries, unique per list). DDL only; decision, engine, list_type and entry_type carry CHECKs, as the baseline does for its own enumerations. Nothing reads or writes the tables yet. Tests: TestBaselineSchema pins both tables and user_version 2; TestOpenMigratesA20Database opens a file holding the baseline alone and finds its user kept; TestInboundSpamConstraints. go test ./internal/store/ ok; go vet ./... ok. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
41 lines
2.0 KiB
SQL
41 lines
2.0 KiB
SQL
-- Inbound antispam journal and filter lists (inbound-antispam-panel, 2.1.0).
|
|
-- The first migration after the 2.0 baseline: DDL only, so a 2.0.x database
|
|
-- gains two empty tables and nothing in it changes.
|
|
|
|
-- What happened to a message offered on port 25, one row per recipient.
|
|
-- Metadata only - SelfPost relays inbound mail and stores none of it. Accepted
|
|
-- messages are written by the inbound journal milter, refused ones by the
|
|
-- mail.log tailer, which is why a row can lack a subject (refused before DATA)
|
|
-- and why engine says who decided: the external filter, Postfix's own policy,
|
|
-- or nobody (selfpost: relayed with no filter attached).
|
|
CREATE TABLE inbound_spam_log (
|
|
id INTEGER PRIMARY KEY AUTOINCREMENT,
|
|
inbound_domain TEXT NOT NULL,
|
|
client_ip TEXT NOT NULL,
|
|
from_addr TEXT NOT NULL,
|
|
to_addr TEXT NOT NULL,
|
|
subject TEXT NOT NULL,
|
|
decision TEXT NOT NULL CHECK (decision IN ('accept', 'reject', 'tempfail', 'quarantine')),
|
|
engine TEXT NOT NULL CHECK (engine IN ('rspamd', 'postfix', 'selfpost')),
|
|
detail TEXT NOT NULL,
|
|
created_at TEXT NOT NULL
|
|
);
|
|
-- Retention prunes by age; the Log page lists newest first, for the whole
|
|
-- server or for one domain.
|
|
CREATE INDEX idx_inbound_spam_log_created_at ON inbound_spam_log (created_at);
|
|
CREATE INDEX idx_inbound_spam_log_domain_created_at ON inbound_spam_log (inbound_domain, created_at);
|
|
|
|
-- Allow / deny entries for the external filter, instance-wide. The panel
|
|
-- writes them out as map files under /data/antispam/; SelfPost itself does not
|
|
-- consult them. value is stored normalised, so the same entry cannot be added
|
|
-- twice to one list.
|
|
CREATE TABLE inbound_spam_list (
|
|
id INTEGER PRIMARY KEY AUTOINCREMENT,
|
|
list_type TEXT NOT NULL CHECK (list_type IN ('allow', 'deny')),
|
|
entry_type TEXT NOT NULL CHECK (entry_type IN ('address', 'domain', 'ip')),
|
|
value TEXT NOT NULL,
|
|
note TEXT NOT NULL DEFAULT '',
|
|
created_at TEXT NOT NULL,
|
|
UNIQUE (list_type, entry_type, value)
|
|
);
|