Since individual users don’t have a home directory in which to create a .spamassassin folder, and since they can’t ssh in to run spamassassin commands, how would they configure their whitelists, blacklists, etc?
I understand that they can move messages to the Spam folder for learning, but what if a user wants to tell spamassassin to reject, as spam, everything from *.example.com?