RSPAMD and Bayes after Updates

From which version of rspamd did you update?

https://rspamd.com/doc/migration.html

1 Like

Hello,
on my server the version 1.9.4 rspamd is already installed for some time. The loss of the Bayesian filter was always after the normal Nethserver updates. Rspamd was not updated at all. I always noticed a higher amount of spams. It was always missing the Bayes score.
greetings
Rainer

By default the Bayesian filter needs to learn 200 spams and 200 hams to get active:

http://docs.nethserver.org/en/v7/mail.html#antispam

In the rspamd web interface you can see the learned mails and check if they were resetted after an update.

1 Like

Hello,
In the web interface rspamd I have 1104 spams displayed as learned. Nevertheless, the Bayesian filter loses its effect after a Nethserver update when it comes to mail server updates.
Only when I set min_learn back to “50” does the Bayesian filter work again. It’s not tragic, I can change it anytime. But it is funny.
greetings
Rainer

Let’s have a look at the stats (last lines show learned ham/spam) with following command:

rspamc stat

Source:

https://workaround.org/ispmail/stretch/filtering-out-spam-with-rspamd

Hi,
here are the stats:
[root@mail ~]# rspamc stat
Results for command: stat (0.040 seconds)
Messages scanned: 3785
Messages with action reject: 608, 16.06%
Messages with action soft reject: 0, 0.00%
Messages with action rewrite subject: 0, 0.00%
Messages with action add header: 795, 21.00%
Messages with action greylist: 0, 0.00%
Messages with action no action: 2382, 62.93%
Messages treated as spam: 1403, 37.06%
Messages treated as ham: 2382, 62.93%
Messages learned: 1103
Connections count: 0
Control connections count: 626
Pools allocated: 722
Pools freed: 961
Bytes allocated: 3.83GiB
Memory chunks allocated: 4294966047
Shared chunks allocated: 47
Chunks freed: 0
Oversized chunks: 31
Fuzzy hashes in storage “local”: 0
Fuzzy hashes in storage “rspamd.com”: 718879070
Fuzzy hashes stored: 718879070
Statfile: BAYES_SPAM type: redis; length: 0; free blocks: 0; total blocks: 0; fr ee: 0.00%; learned: 351; users: 53; languages: 0
Statfile: BAYES_HAM type: redis; length: 0; free blocks: 0; total blocks: 0; fre e: 0.00%; learned: 391; users: 37; languages: 0
Total learns: 742

greetings
Rainer

That’s really strange. Could you post some log entries from /var/log/maillog showing mails correctly scanned and mails where the bayes filter was not applied?
Do you see any errors in maillog?

1 Like

Hi,
here are the logs:

Sep 10 17:30:06 mail rspamd[8905]: <ddd1be>; csession; rspamd_protocol_http_reply: regexp statistics: 248 pcre regexps scanned, 3 regexps matched, 185 regexps total, 12 regexps cached, 44.13KiB scanned using pcre, 44.13KiB scanned total
Sep 10 17:40:02 mail getmail: msg   1/190 (92011 bytes) msgid 1My2yF-1iNXrQ2SZ5-00zPfc not retrieved (seen), deleted
Sep 10 17:40:02 mail rspamd[8905]: <c4d40b>; csession; rspamd_controller_check_password: allow unauthorized connection from a trusted IP 127.0.0.1
Sep 10 17:40:02 mail rspamd[8905]: <c4d40b>; csession; rspamd_message_parse: loaded message; id: <011e01d567ed$685e7ab0$391b7010$@andreas-muxfeldt.de>; queue-id: <undef>; size: 17251; checksum: <a8eb26047afb6a501cdafa5e34933981>
Sep 10 17:40:02 mail rspamd[8905]: <c4d40b>; csession; rspamd_mime_text_part_utf8_convert: converted from ISO_8859-1:1987 to UTF-8 inlen: 689, outlen: 695 (689 UTF16 chars)
Sep 10 17:40:02 mail rspamd[8905]: <c4d40b>; csession; rspamd_mime_text_part_utf8_convert: converted from ISO_8859-1:1987 to UTF-8 inlen: 9600, outlen: 9605 (9600 UTF16 chars)
Sep 10 17:40:02 mail rspamd[8905]: <c4d40b>; csession; rspamd_mime_part_detect_language: detected part language: de
Sep 10 17:40:02 mail rspamd[8905]: <c4d40b>; csession; rspamd_mime_part_detect_language: detected part language: de
Sep 10 17:40:02 mail rspamd[8905]: <c4d40b>; csession; spf_symbol_callback: skip SPF checks for local networks and authorized users
Sep 10 17:40:02 mail rspamd[8905]: <c4d40b>; csession; dkim_symbol_callback: skip DKIM checks for local networks and authorized users
Sep 10 17:40:02 mail rspamd[8905]: <c4d40b>; lua; once_received.lua:95: Skipping once_received for authenticated user or local network
Sep 10 17:40:02 mail rspamd[8905]: <c4d40b>; lua; dmarc.lua:573: skip DMARC checks for local networks and authorized users
Sep 10 17:40:02 mail rspamd[8905]: <c4d40b>; lua; ip_score.lua:330: skip IP Score for local networks
Sep 10 17:40:02 mail rspamd[8905]: <c4d40b>; csession; rspamd_task_write_log: id: <011e01d567ed$685e7ab0$391b7010$@andreas-muxfeldt.de>, ip: 127.0.0.1, from: <kontakt@andreas-muxfeldt.de>, (default: F (no action): [-0.10/13.50] [MIME_GOOD(-0.10){multipart/related;multipart/alternative;text/plain;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},MID_RHS_MATCH_FROM(0.00){},MIME_TRACE(0.00){0:+;1:+;2:+;3:~;4:~;},PREVIOUSLY_DELIVERED(0.00){rpache@polygonhl.de;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_THREE(0.00){3;},RCVD_TLS_ALL(0.00){},RCVD_VIA_SMTP_AUTH(0.00){},TO_DN_ALL(0.00){}]), len: 17251, time: 200.594ms real, 10.417ms virtual, dns req: 12, digest: <a8eb26047afb6a501cdafa5e34933981>, mime_rcpts: <rpache@polygonhl.de>, file: stdin
Sep 10 17:40:02 mail rspamd[8905]: <c4d40b>; csession; rspamd_protocol_http_reply: regexp statistics: 262 pcre regexps scanned, 3 regexps matched, 185 regexps total, 12 regexps cached, 45.29KiB scanned using pcre, 45.29KiB scanned total
Sep 10 17:40:02 mail dovecot: lda(rpache@polygonhl.de): sieve: msgid=<011e01d567ed$685e7ab0$391b7010$@andreas-muxfeldt.de>: stored mail into mailbox 'INBOX'
Sep 10 17:40:02 mail getmail: msg 190/190 (17660 bytes) msgid 1MC2TT-1hzmlO4B4f-00CPje from <kontakt@andreas-muxfeldt.de> delivered to MDA_external command dovecot-lda ()
Sep 10 17:50:02 mail clamd[3775]: SelfCheck: Database status OK.
Sep 10 18:00:02 mail clamd[3775]: SelfCheck: Database status OK.
Sep 10 18:00:02 mail rspamd[8905]: <512214>; csession; rspamd_controller_check_password: allow unauthorized connection from a trusted IP 127.0.0.1
Sep 10 18:00:02 mail rspamd[8905]: <512214>; csession; rspamd_message_parse: loaded message; id: <0D.51.16762.928C77D5@smtp03.aqua.bos.sync.lan>; queue-id: <undef>; size: 13110; checksum: <eeb02049b3ea84aaa2b579fe74dfab07>
Sep 10 18:00:02 mail rspamd[8905]: <512214>; csession; rspamd_mime_text_part_utf8_convert: converted from ISO_8859-1:1987 to UTF-8 inlen: 992, outlen: 992 (992 UTF16 chars)
Sep 10 18:00:02 mail rspamd[8905]: <512214>; csession; rspamd_mime_text_part_utf8_convert: converted from ISO_8859-1:1987 to UTF-8 inlen: 7116, outlen: 7116 (7116 UTF16 chars)
Sep 10 18:00:02 mail rspamd[8905]: <512214>; csession; rspamd_mime_part_detect_language: detected part language: en
Sep 10 18:00:02 mail rspamd[8905]: <512214>; csession; rspamd_mime_part_detect_language: detected part language: en
Sep 10 18:00:02 mail rspamd[8905]: <512214>; csession; spf_symbol_callback: skip SPF checks for local networks and authorized users
Sep 10 18:00:02 mail rspamd[8905]: <512214>; csession; dkim_symbol_callback: skip DKIM checks for local networks and authorized users
Sep 10 18:00:02 mail rspamd[8905]: <512214>; lua; once_received.lua:95: Skipping once_received for authenticated user or local network
Sep 10 18:00:02 mail rspamd[8905]: <512214>; lua; dmarc.lua:573: skip DMARC checks for local networks and authorized users
Sep 10 18:00:02 mail rspamd[8905]: <512214>; lua; ip_score.lua:330: skip IP Score for local networks
Sep 10 18:00:02 mail rspamd[8905]: <512214>; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 50 required
Sep 10 18:00:02 mail rspamd[8905]: <512214>; csession; rspamd_task_write_log: id: <0D.51.16762.928C77D5@smtp03.aqua.bos.sync.lan>, ip: 127.0.0.1, from: <Cheongnathas@windstream.net>, (default: T (add header): [5.90/13.50] [DATE_IN_FUTURE(4.00){},INTRODUCTION(2.00){},MIME_GOOD(-0.10){multipart/alternative;text/plain;},FREEMAIL_ENVFROM(0.00){windstream.net;},FREEMAIL_ENVRCPT(0.00){windstream.net;},FREEMAIL_FROM(0.00){windstream.net;},FREEMAIL_TO(0.00){windstream.net;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},HAS_REPLYTO(0.00){cheongnathann@indamail.hu;},MIME_TRACE(0.00){0:+;1:+;2:~;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_THREE(0.00){4;},RCVD_TLS_ALL(0.00){},RCVD_VIA_SMTP_AUTH(0.00){},REPLYTO_DOM_NEQ_FROM_DOM(0.00){},TO_DN_NONE(0.00){},TO_EQ_FROM(0.00){}]), len: 13110, time: 292.963ms real, 11.951ms virtual, dns req: 2, digest: <eeb02049b3ea84aaa2b579fe74dfab07>, mime_rcpts: <Cheongnathas@windstream.net>, file: stdin
Sep 10 18:00:02 mail rspamd[8905]: <512214>; csession; rspamd_protocol_http_reply: regexp statistics: 480 pcre regexps scanned, 2 regexps matched, 185 regexps total, 12 regexps cached, 43.19KiB scanned using pcre, 43.19KiB scanned total
Sep 10 18:00:03 mail dovecot: lda(rpache@polygonhl.de): sieve: msgid=<0D.51.16762.928C77D5@smtp03.aqua.bos.sync.lan>: stored mail into mailbox 'Junk'
Sep 10 18:00:03 mail getmail: msg 190/190 (13332 bytes) msgid 1M89rx-1i2Vsk0WR9-005O6h from <Cheongnathas@windstream.net> delivered to MDA_external command dovecot-lda ()
Sep 10 18:00:07 mail rspamd[8905]: <cd5113>; csession; rspamd_controller_check_password: allow unauthorized connection from a trusted IP 127.0.0.1
Sep 10 18:00:07 mail rspamd[8905]: <cd5113>; csession; rspamd_message_parse: loaded message; id: <topic/13345/85433@community.nethserver.org>; queue-id: <undef>; size: 10934; checksum: <efa56f7146574519bfc3c5a67e893c9c>
Sep 10 18:00:07 mail rspamd[8905]: <cd5113>; csession; rspamd_mime_part_detect_language: detected part language: en
Sep 10 18:00:07 mail rspamd[8905]: <cd5113>; csession; rspamd_mime_part_detect_language: detected part language: en
Sep 10 18:00:07 mail rspamd[8905]: <cd5113>; csession; spf_symbol_callback: skip SPF checks for local networks and authorized users
Sep 10 18:00:07 mail rspamd[8905]: <cd5113>; csession; dkim_symbol_callback: skip DKIM checks for local networks and authorized users
Sep 10 18:00:07 mail rspamd[8905]: <cd5113>; lua; once_received.lua:95: Skipping once_received for authenticated user or local network
Sep 10 18:00:07 mail rspamd[8905]: <cd5113>; lua; dmarc.lua:573: skip DMARC checks for local networks and authorized users
Sep 10 18:00:07 mail rspamd[8905]: <cd5113>; lua; ip_score.lua:330: skip IP Score for local networks
Sep 10 18:00:07 mail rspamd[8905]: <cd5113>; csession; bayes_classify: skip classification as ham class has not enough learns: 42, 50 required
Sep 10 18:00:07 mail rspamd[8905]: <cd5113>; csession; rspamd_task_write_log: id: <topic/13345/85433@community.nethserver.org>, ip: 127.0.0.1, from: <nethserver@discoursehosting.net>, (default: F (no action): [0.39/13.50] [MV_CASE(0.50){},MAILLIST(-0.10){generic;},MIME_GOOD(-0.10){multipart/alternative;text/plain;},RCVD_NO_TLS_LAST(0.10){},HAS_LIST_UNSUB(-0.01){},FREEMAIL_ENVRCPT(0.00){yahoo.de;},FREEMAIL_TO(0.00){yahoo.de;},FROM_HAS_DN(0.00){},FROM_NEQ_ENVFROM(0.00){alessio.fattorini@nethserver.org;nethserver@discoursehosting.net;},HAS_REPLYTO(0.00){nethserver+9ae5991f7bc46d0a8ce618fa32d26df8@discoursehosting.net;},HAS_XOIP(0.00){},MIME_TRACE(0.00){0:+;1:+;2:~;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_TWO(0.00){2;},REPLYTO_DOM_NEQ_FROM_DOM(0.00){},TAGGED_FROM(0.00){verp-0f724f516fb7bec560ed36d538b98649;},TO_DN_NONE(0.00){}]), len: 10934, time: 264.123ms real, 11.880ms virtual, dns req: 14, digest: <efa56f7146574519bfc3c5a67e893c9c>, mime_rcpts: <rainerpache@yahoo.de>, file: stdin
Sep 10 18:00:07 mail rspamd[8905]: <cd5113>; csession; rspamd_protocol_http_reply: regexp statistics: 358 pcre regexps scanned, 1 regexps matched, 185 regexps total, 12 regexps cached, 30.32KiB scanned using pcre, 30.32KiB scanned total
Sep 10 18:00:07 mail dovecot: lda(rpache@polygonhl.de): sieve: msgid=<topic/13345/85433@community.nethserver.org>: stored mail into mailbox 'Yahoo'
Sep 10 18:00:07 mail getmail: msg 7/7 (13867 bytes) msgid AAL-1fxiB-NLXXfHHwyuGDRQ65U from <nethserver+verp-0f724f516fb7bec560ed36d538b98649@discoursehosting.net> delivered to MDA_external command dovecot-lda ()
Sep 10 18:07:57 mail rspamd[8905]: <955d59>; csession; rspamd_controller_check_password: allow unauthorized connection from a trusted IP 127.0.0.1
Sep 10 18:07:57 mail rspamd[8905]: <c4d245>; csession; rspamd_controller_check_password: allow unauthorized connection from a trusted IP 127.0.0.1
Sep 10 18:07:57 mail rspamd[8905]: <7ce6ac>; csession; rspamd_controller_check_password: allow unauthorized connection from a trusted IP 127.0.0.1
Sep 10 18:07:57 mail rspamd[8905]: <e4f5e8>; csession; rspamd_controller_check_password: allow unauthorized connection from a trusted IP 127.0.0.1
Sep 10 18:07:57 mail rspamd[8905]: <252884>; csession; rspamd_controller_check_password: allow unauthorized connection from a trusted IP 127.0.0.1
Sep 10 18:07:59 mail rspamd[8905]: <004cdd>; csession; rspamd_controller_check_password: allow unauthorized connection from a trusted IP 127.0.0.1
Sep 10 18:07:59 mail rspamd[8905]: <a4f41c>; csession; rspamd_controller_check_password: allow unauthorized connection from a trusted IP 127.0.0.1
Sep 10 18:07:59 mail rspamd[8905]: <9922ae>; csession; rspamd_controller_check_password: allow unauthorized connection from a trusted IP 127.0.0.1
Sep 10 18:07:59 mail rspamd[8905]: <03d022>; csession; rspamd_controller_check_password: allow unauthorized connection from a trusted IP 127.0.0.1
Sep 10 18:08:31 mail spam-training/rpache@polygonhl.de[11456]: Message enqueued as learn_ham
Sep 10 18:08:31 mail postfix/pickup[8487]: 3FE4C26C098D: uid=986 from=<root@mail.polygonhl.de>
Sep 10 18:08:31 mail postfix/cleanup[11455]: 3FE4C26C098D: message-id=<0D.51.16762.928C77D5@smtp03.aqua.bos.sync.lan>
Sep 10 18:08:31 mail opendkim[11255]: 3FE4C26C098D: no signing table match for 'Cheongnathas@windstream.net'
Sep 10 18:08:31 mail postfix/qmgr[8900]: 3FE4C26C098D: from=<root@mail.polygonhl.de>, size=13919, nrcpt=1 (queue active)
Sep 10 18:08:31 mail rspamd[8905]: <597a96>; csession; rspamd_controller_check_password: allow unauthorized connection from a trusted IP 127.0.0.1
Sep 10 18:08:31 mail rspamd[8905]: <597a96>; csession; rspamd_message_parse: loaded message; id: <0D.51.16762.928C77D5@smtp03.aqua.bos.sync.lan>; queue-id: <undef>; size: 13631; checksum: <eeb02049b3ea84aaa2b579fe74dfab07>
Sep 10 18:08:31 mail rspamd[8905]: <597a96>; csession; rspamd_mime_text_part_utf8_convert: converted from ISO_8859-1:1987 to UTF-8 inlen: 992, outlen: 992 (992 UTF16 chars)
Sep 10 18:08:31 mail rspamd[8905]: <597a96>; csession; rspamd_mime_text_part_utf8_convert: converted from ISO_8859-1:1987 to UTF-8 inlen: 7116, outlen: 7116 (7116 UTF16 chars)
Sep 10 18:08:31 mail rspamd[8905]: <597a96>; csession; rspamd_mime_part_detect_language: detected part language: en
Sep 10 18:08:31 mail rspamd[8905]: <597a96>; csession; rspamd_mime_part_detect_language: detected part language: en
Sep 10 18:08:31 mail rspamd[8905]: <597a96>; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 50 required
Sep 10 18:08:31 mail rspamd[8905]: <597a96>; csession; rspamd_controller_learn_fin_task: <127.0.0.1> learned message as ham: 0D.51.16762.928C77D5@smtp03.aqua.bos.sync.lan
Sep 10 18:08:31 mail postfix/pipe[11459]: 3FE4C26C098D: to=<rpache@polygonhl.de+learn_ham@spamtrain.nh>, relay=spamtrain, delay=0.26, delays=0.18/0.02/0/0.06, dsn=2.0.0, status=sent (delivered via spamtrain service)
Sep 10 18:08:31 mail postfix/qmgr[8900]: 3FE4C26C098D: removed
Sep 10 18:08:34 mail postfix/pickup[8487]: 85CD426C098D: uid=986 from=<root@mail.polygonhl.de>
Sep 10 18:08:34 mail postfix/cleanup[11455]: 85CD426C098D: message-id=<0D.51.16762.928C77D5@smtp03.aqua.bos.sync.lan>
Sep 10 18:08:34 mail opendkim[11255]: 85CD426C098D: no signing table match for 'Cheongnathas@windstream.net'
Sep 10 18:08:34 mail spam-training/rpache@polygonhl.de[11475]: Message enqueued as learn_spam
Sep 10 18:08:34 mail postfix/qmgr[8900]: 85CD426C098D: from=<root@mail.polygonhl.de>, size=13919, nrcpt=1 (queue active)
Sep 10 18:08:34 mail rspamd[8905]: <9f7a7c>; csession; rspamd_controller_check_password: allow unauthorized connection from a trusted IP 127.0.0.1
Sep 10 18:08:34 mail rspamd[8905]: <9f7a7c>; csession; rspamd_message_parse: loaded message; id: <0D.51.16762.928C77D5@smtp03.aqua.bos.sync.lan>; queue-id: <undef>; size: 13631; checksum: <eeb02049b3ea84aaa2b579fe74dfab07>
Sep 10 18:08:34 mail rspamd[8905]: <9f7a7c>; csession; rspamd_mime_text_part_utf8_convert: converted from ISO_8859-1:1987 to UTF-8 inlen: 992, outlen: 992 (992 UTF16 chars)
Sep 10 18:08:34 mail rspamd[8905]: <9f7a7c>; csession; rspamd_mime_text_part_utf8_convert: converted from ISO_8859-1:1987 to UTF-8 inlen: 7116, outlen: 7116 (7116 UTF16 chars)
Sep 10 18:08:34 mail rspamd[8905]: <9f7a7c>; csession; rspamd_mime_part_detect_language: detected part language: en
Sep 10 18:08:34 mail rspamd[8905]: <9f7a7c>; csession; rspamd_mime_part_detect_language: detected part language: en
Sep 10 18:08:34 mail rspamd[8905]: <9f7a7c>; csession; bayes_classify: skip classification as ham class has not enough learns: 1, 50 required
Sep 10 18:08:34 mail rspamd[8905]: <9f7a7c>; csession; rspamd_controller_learn_fin_task: <127.0.0.1> learned message as spam: 0D.51.16762.928C77D5@smtp03.aqua.bos.sync.lan
Sep 10 18:08:34 mail postfix/pipe[11459]: 85CD426C098D: to=<rpache@polygonhl.de+learn_spam@spamtrain.nh>, relay=spamtrain, delay=0.11, delays=0.07/0/0/0.04, dsn=2.0.0, status=sent (delivered via spamtrain service)
Sep 10 18:08:34 mail postfix/qmgr[8900]: 85CD426C098D: removed
Sep 10 18:10:07 mail clamd[3775]: SelfCheck: Database status OK.
Sep 10 18:20:07 mail clamd[3775]: SelfCheck: Database status OK.
Sep 10 18:21:41 mail rspamd[8905]: <aa4b1b>; csession; rspamd_controller_check_password: allow unauthorized connection from a trusted IP 127.0.0.1
Sep 10 18:21:41 mail rspamd[8905]: <942e75>; csession; rspamd_controller_check_password: allow unauthorized connection from a trusted IP 127.0.0.1
Sep 10 18:21:41 mail rspamd[8905]: <38dc8e>; csession; rspamd_controller_check_password: allow unauthorized connection from a trusted IP 127.0.0.1
Sep 10 18:21:41 mail rspamd[8905]: <30709a>; csession; rspamd_controller_check_password: allow unauthorized connection from a trusted IP 127.0.0.1
Sep 10 18:21:41 mail rspamd[8905]: <6407dc>; csession; rspamd_controller_check_password: allow unauthorized connection from a trusted IP 127.0.0.1
Sep 10 18:21:43 mail rspamd[8905]: <d21bef>; csession; rspamd_controller_check_password: allow unauthorized connection from a trusted IP 127.0.0.1
Sep 10 18:21:43 mail rspamd[8905]: <88dc93>; csession; rspamd_controller_check_password: allow unauthorized connection from a trusted IP 127.0.0.1
Sep 10 18:21:43 mail rspamd[8905]: <575416>; csession; rspamd_controller_check_password: allow unauthorized connection from a trusted IP 127.0.0.1
Sep 10 18:21:43 mail rspamd[8905]: <2bcd9e>; csession; rspamd_controller_check_password: allow unauthorized connection from a trusted IP 127.0.0.1

Rainer

Really strange, the stats show 351 learned spams and 391 learned hams.
The errors shows 0 learns, after 5 seconds 42 learns and after 8 minutes 0 learns again.

Did you reset rspamd somehow? @stephdl do you have an idea?

2 Likes

Hi,
When I did not know why the Bayesian filter stopped working I certainly clicked Reset (about 2 months ago) via the rspamd web interface in History. I also tried to copy spams from an archive into the spam folder to reach the 200. Also I have uninstalled the section mail under Nethserver software and reinstalled again. At some point I had the (maybe bad idea) to set the min_learns to 50. Then suddenly the Bayes filter worked again. A note maybe still:
I only created the group “spamtrainer” in the last week.
greetings
Rainer

I upgrade to 1.9.4 to verify

1 Like

I would be interested by a test on real servers

grep -srni 'skip classification as spam class has not enough learns' /var/log/maillog

this gives something regular but strange

92825:Sep 12 10:47:43 prometheus rspamd[18398]: <4ccbdd>; proxy; bayes_classify: skip classification as spam class has not enough learns: 38, 200 required
95053:Sep 12 14:03:01 prometheus rspamd[18398]: <6778e8>; proxy; bayes_classify: skip classification as spam class has not enough learns: 38, 200 required
95547:Sep 12 14:33:54 prometheus rspamd[18398]: <db8c18>; proxy; bayes_classify: skip classification as spam class has not enough learns: 39, 200 required
95569:Sep 12 14:34:01 prometheus rspamd[18398]: <f73cad>; proxy; bayes_classify: skip classification as spam class has not enough learns: 39, 200 required

grep -srni 'skip classification as ham class has not enough learns' /var/log/maillog

this command is really weird, a bit like @rainerhl

48559:Sep 10 17:39:42 prometheus rspamd[6264]: <89afa7>; csession; bayes_classify: skip classification as ham class has not enough learns: 21, 200 required
52879:Sep 10 21:55:59 prometheus rspamd[6263]: <1714c4>; proxy; bayes_classify: skip classification as ham class has not enough learns: 7, 200 required
60656:Sep 10 23:50:07 prometheus rspamd[6264]: <d706b9>; csession; bayes_classify: skip classification as ham class has not enough learns: 22, 200 required
66333:Sep 11 05:46:15 prometheus rspamd[6263]: <1cfbce>; proxy; bayes_classify: skip classification as ham class has not enough learns: 0, 200 required
68756:Sep 11 09:04:10 prometheus rspamd[6264]: <c7f7cb>; csession; bayes_classify: skip classification as ham class has not enough learns: 22, 200 required
70143:Sep 11 11:06:17 prometheus rspamd[6264]: <8edade>; csession; bayes_classify: skip classification as ham class has not enough learns: 22, 200 required
74846:Sep 11 16:35:20 prometheus rspamd[6263]: <2e6343>; proxy; bayes_classify: skip classification as ham class has not enough learns: 13, 200 required

please use a gist for grep file

Hello,
There are no strings with ‘skip classification as ham class has not enough learns’ in the current “maillog”. But on 01.09.2019 and 08.09.2019 the following entries can be found:
[root@mail ~]# grep -srni ‘skip classification as spam class has not enough learns’ /var/log/maillog-20190901
53:Aug 25 11:10:02 mail rspamd[3407]: ; csession; bayes_classify: skip classification as spam class has not enough learns: 49, 50 required
76:Aug 25 11:35:02 mail rspamd[3407]: <554388>; csession; bayes_classify: skip classification as spam class has not enough learns: 49, 50 required
96:Aug 25 11:51:36 mail rspamd[3407]: <8408c2>; csession; bayes_classify: skip classification as spam class has not enough learns: 49, 50 required

[root@mail ~]# grep -srni ‘skip classification as ham class has not enough learns’ /var/log/maillog-20190908 36:Sep 1 11:19:47 mail rspamd[29462]: <45b3f0>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requi red
54:Sep 1 12:05:03 mail rspamd[29462]: <48a87c>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requi red
68:Sep 1 12:05:03 mail rspamd[29462]: <865edd>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requi red
102:Sep 1 12:45:03 mail rspamd[29462]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 req uired
124:Sep 1 13:15:03 mail rspamd[29462]: <73f4a8>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
768:Sep 1 14:35:02 mail rspamd[3572]: <05b2dd>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requi red
782:Sep 1 14:40:08 mail rspamd[3572]: <3e68a4>; csession; bayes_classify: skip classification as ham class has not enough learns: 42, 200 requi red
1507:Sep 1 15:35:02 mail rspamd[28181]: <56f7a0>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
1560:Sep 1 19:25:04 mail rspamd[28181]: <315af8>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
1591:Sep 1 20:05:06 mail rspamd[28181]: <61ed1d>; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 re quired
1623:Sep 1 22:45:02 mail rspamd[28181]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 re quired
1659:Sep 2 00:05:03 mail rspamd[28181]: <1a0e36>; csession; bayes_classify: skip classification as ham class has not enough learns: 27, 200 req uired
1699:Sep 2 02:45:02 mail rspamd[28181]: <0101b7>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
1738:Sep 2 04:45:02 mail rspamd[28181]: <1790f5>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
1788:Sep 2 07:45:02 mail rspamd[28181]: <9771c4>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
1815:Sep 2 07:50:02 mail rspamd[28181]: <7f6853>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
1818:Sep 2 07:50:02 mail rspamd[28181]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
1832:Sep 2 08:00:02 mail rspamd[28181]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
1848:Sep 2 08:29:52 mail rspamd[28181]: <092380>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
1864:Sep 2 08:35:02 mail rspamd[28181]: <421355>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
1882:Sep 2 09:10:03 mail rspamd[28181]: <934867>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
1896:Sep 2 09:10:04 mail rspamd[28181]: <235919>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
1911:Sep 2 09:15:02 mail rspamd[28181]: <672bf7>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
1930:Sep 2 09:55:02 mail rspamd[28181]: <2f589e>; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 200 requ ired
1946:Sep 2 10:05:01 mail rspamd[28181]: <246b28>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
1977:Sep 2 10:10:02 mail rspamd[28181]: <933a0b>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
1980:Sep 2 10:10:03 mail rspamd[28181]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 re quired
1996:Sep 2 10:30:02 mail rspamd[28181]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 re quired
2030:Sep 2 11:20:03 mail rspamd[28181]: <2fa7ea>; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 re quired
2047:Sep 2 11:31:45 mail rspamd[28181]: <7464f9>; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 200 requ ired
2074:Sep 2 12:20:03 mail rspamd[28181]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 re quired
2090:Sep 2 12:40:02 mail rspamd[28181]: <165a1d>; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 200 requ ired
2109:Sep 2 13:14:56 mail rspamd[28181]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 200 requ ired
2151:Sep 2 14:15:02 mail rspamd[28181]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
2167:Sep 2 14:20:03 mail rspamd[28181]: <263cf7>; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 re quired
2185:Sep 2 14:25:04 mail rspamd[28181]: <762069>; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 re quired
2200:Sep 2 14:55:03 mail rspamd[28181]: <9a93f7>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
2215:Sep 2 14:55:04 mail rspamd[28181]: <8699b1>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
2229:Sep 2 15:05:03 mail rspamd[28181]: <604c2d>; csession; bayes_classify: skip classification as ham class has not enough learns: 27, 200 req uired
2251:Sep 2 15:40:02 mail rspamd[28181]: <37dbdd>; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 200 requ ired
2310:Sep 2 15:50:06 mail rspamd[28181]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 42, 200 req uired
2345:Sep 2 16:50:02 mail rspamd[28181]: <5f8f76>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
2363:Sep 2 16:50:03 mail rspamd[28181]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 200 requ ired
2378:Sep 2 16:55:02 mail rspamd[28181]: <538a31>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
2393:Sep 2 17:05:02 mail rspamd[28181]: <25e992>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
2418:Sep 2 18:30:02 mail rspamd[28181]: <909142>; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 re quired
2436:Sep 2 19:05:02 mail rspamd[28181]: <743204>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
2449:Sep 2 19:05:02 mail rspamd[28181]: <13f25d>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
2460:Sep 2 19:06:02 mail rspamd[28181]: <3f8d71>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
2477:Sep 2 19:20:02 mail rspamd[28181]: <662868>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
2490:Sep 2 19:25:02 mail rspamd[28181]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 re quired
2504:Sep 2 19:30:03 mail rspamd[28181]: <6c06f6>; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 re quired
2538:Sep 2 20:05:03 mail rspamd[28181]: <088df7>; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 200 requ ired
2891:Sep 2 22:50:02 mail rspamd[3569]: <300b19>; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 200 requi red
3225:Sep 3 00:25:05 mail rspamd[3567]: <279685>; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 req uired
3239:Sep 3 00:30:04 mail rspamd[3567]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 req uired
3253:Sep 3 01:10:02 mail rspamd[3567]: <148263>; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 200 requi red
3334:Sep 3 06:05:03 mail rspamd[3567]: <79972d>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
3371:Sep 3 07:45:02 mail rspamd[3567]: <5d4325>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
3387:Sep 3 08:00:02 mail rspamd[3567]: <21e9db>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
3401:Sep 3 08:05:02 mail rspamd[3567]: <81dc25>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
3415:Sep 3 08:05:04 mail rspamd[3567]: <20e432>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
3440:Sep 3 08:25:03 mail rspamd[3567]: <1ff374>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
3461:Sep 3 08:35:02 mail rspamd[3567]: <80fd41>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
3476:Sep 3 08:35:03 mail rspamd[3567]: <942f2f>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
3490:Sep 3 08:40:02 mail rspamd[3567]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
3515:Sep 3 09:25:02 mail rspamd[3567]: <0d3681>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
3541:Sep 3 09:30:02 mail rspamd[3567]: <096a55>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
3544:Sep 3 09:30:03 mail rspamd[3567]: <915b77>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
3591:Sep 3 09:45:03 mail rspamd[3567]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
3619:Sep 3 10:35:03 mail rspamd[3567]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
3635:Sep 3 10:56:44 mail rspamd[3567]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
3670:Sep 3 11:50:02 mail rspamd[3567]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
3685:Sep 3 11:55:02 mail rspamd[3567]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
3709:Sep 3 13:00:02 mail rspamd[3567]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
3722:Sep 3 13:02:01 mail rspamd[3567]: <0f2ed8>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
3736:Sep 3 13:05:02 mail rspamd[3567]: <4804a7>; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 200 requi red
3767:Sep 3 14:00:03 mail rspamd[3567]: <0934b1>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
3783:Sep 3 14:05:02 mail rspamd[3567]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
3799:Sep 3 14:25:01 mail rspamd[3567]: <31d6bd>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
3818:Sep 3 15:00:01 mail rspamd[3567]: <080f0d>; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 req uired
3831:Sep 3 15:00:02 mail rspamd[3567]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 req uired
3849:Sep 3 15:20:03 mail rspamd[3567]: <8cb56e>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
3866:Sep 3 15:20:03 mail rspamd[3567]: <74717f>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
3911:Sep 3 17:10:02 mail rspamd[3567]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 req uired
3931:Sep 3 17:40:03 mail rspamd[3567]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
3946:Sep 3 17:45:03 mail rspamd[3567]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
3965:Sep 3 18:30:03 mail rspamd[3567]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
3981:Sep 3 18:45:02 mail rspamd[3567]: <69b30b>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
3995:Sep 3 18:45:03 mail rspamd[3567]: <76e4a1>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
4030:Sep 3 19:35:06 mail rspamd[3567]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 requ ired
4053:Sep 3 20:40:02 mail rspamd[3567]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 req uired
4508:Sep 4 00:45:03 mail rspamd[12671]: <15d2ee>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
4529:Sep 4 01:50:01 mail rspamd[12671]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 200 requ ired
4557:Sep 4 02:45:02 mail rspamd[12671]: <02c540>; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 re quired
4582:Sep 4 04:15:02 mail rspamd[12671]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
4632:Sep 4 07:20:02 mail rspamd[12671]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
4646:Sep 4 07:20:03 mail rspamd[12671]: <6ba74a>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
4661:Sep 4 08:00:01 mail rspamd[12671]: <2fdde4>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
4677:Sep 4 08:15:02 mail rspamd[12671]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
4694:Sep 4 08:15:03 mail rspamd[12671]: <564f3f>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
4709:Sep 4 08:20:03 mail rspamd[12671]: <4eba61>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
4723:Sep 4 08:25:02 mail rspamd[12671]: <7f89d7>; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 re quired
4743:Sep 4 09:10:02 mail rspamd[12671]: <8a2919>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
4765:Sep 4 09:25:02 mail rspamd[12671]: <85681b>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
4788:Sep 4 09:30:02 mail rspamd[12671]: <9c46d0>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
4801:Sep 4 09:35:02 mail rspamd[12671]: <7969b4>; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 re quired
4815:Sep 4 09:43:52 mail rspamd[12671]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
4828:Sep 4 09:44:00 mail rspamd[12671]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
4843:Sep 4 09:55:02 mail rspamd[12671]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
4877:Sep 4 11:15:02 mail rspamd[12671]: <0d95fd>; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 re quired
4901:Sep 4 12:15:03 mail rspamd[12671]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
4915:Sep 4 12:25:02 mail rspamd[12671]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
4934:Sep 4 13:05:01 mail rspamd[12671]: <07de64>; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 200 requ ired
4951:Sep 4 13:05:03 mail rspamd[12671]: <7c75f7>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
4970:Sep 4 13:20:01 mail rspamd[12671]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 200 requ ired
4984:Sep 4 13:25:47 mail rspamd[12671]: <7e9682>; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 200 requ ired
5007:Sep 4 14:05:02 mail rspamd[12671]: <98ab82>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
5035:Sep 4 14:35:03 mail rspamd[12671]: <69844f>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
5050:Sep 4 14:50:07 mail rspamd[12671]: <31ecc8>; csession; bayes_classify: skip classification as ham class has not enough learns: 42, 200 req uired
5064:Sep 4 14:50:09 mail rspamd[12671]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 42, 200 req uired
5086:Sep 4 15:46:50 mail rspamd[12671]: <0e4441>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
5104:Sep 4 16:15:02 mail rspamd[12671]: <065b8d>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
5123:Sep 4 17:20:05 mail rspamd[12671]: <3ad911>; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 re quired
5135:Sep 4 17:20:09 mail rspamd[12671]: <71efbb>; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 re quired
5147:Sep 4 17:20:14 mail rspamd[12671]: <1dfb23>; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 re quired
5167:Sep 4 17:55:02 mail rspamd[12671]: <171066>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
5181:Sep 4 18:05:03 mail rspamd[12671]: <280644>; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 re quired
5216:Sep 4 19:20:03 mail rspamd[12671]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
5233:Sep 4 19:40:04 mail rspamd[12671]: <71db26>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
5256:Sep 4 20:05:02 mail rspamd[12671]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 200 requ ired
5305:Sep 4 22:50:05 mail rspamd[12671]: <7ae7c2>; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 200 requ ired
5339:Sep 5 01:25:01 mail rspamd[12671]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 200 requ ired
5356:Sep 5 02:00:02 mail rspamd[12671]: <026134>; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 200 requ ired
5393:Sep 5 03:25:13 mail rspamd[12670]: <13feb3>; proxy; bayes_classify: skip classification as ham class has not enough learns: 0, 200 require d
5448:Sep 5 06:20:03 mail rspamd[12671]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 re quired
5481:Sep 5 07:55:03 mail rspamd[12671]: <652196>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
5494:Sep 5 08:00:02 mail rspamd[12671]: <9f81eb>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
5519:Sep 5 08:35:02 mail rspamd[12671]: <3c9843>; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 re quired
5544:Sep 5 08:40:03 mail rspamd[12671]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
5547:Sep 5 08:40:03 mail rspamd[12671]: <435206>; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 re quired
5608:Sep 5 09:35:02 mail rspamd[12671]: <03d022>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
5634:Sep 5 10:15:02 mail rspamd[12671]: <511f59>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
5650:Sep 5 10:19:33 mail rspamd[12671]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
5683:Sep 5 10:35:02 mail rspamd[12671]: <2d1520>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
5697:Sep 5 10:40:02 mail rspamd[12671]: <936775>; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 200 requ ired
5711:Sep 5 10:40:03 mail rspamd[12671]: <52ea2a>; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 200 requ ired
5731:Sep 5 11:10:02 mail rspamd[12671]: <174bae>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
5766:Sep 5 12:05:02 mail rspamd[12671]: <4ea3d8>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
5785:Sep 5 12:20:03 mail rspamd[12671]: <42a6fd>; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 200 requ ired
5823:Sep 5 13:10:03 mail rspamd[12671]: <6908be>; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 re quired
5839:Sep 5 13:15:02 mail rspamd[12671]: <7df316>; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 200 requ ired
5870:Sep 5 13:55:01 mail rspamd[12671]: <41b695>; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 re quired
5886:Sep 5 13:58:05 mail rspamd[12671]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 200 requ ired
5960:Sep 5 14:55:02 mail rspamd[12671]: <0529eb>; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 re quired
5983:Sep 5 16:15:02 mail rspamd[12671]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
5999:Sep 5 16:30:03 mail rspamd[12671]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
6018:Sep 5 17:05:02 mail rspamd[12671]: <099d0a>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
6036:Sep 5 17:30:02 mail rspamd[12671]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
6053:Sep 5 17:35:02 mail rspamd[12671]: <7fca92>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
6083:Sep 5 18:30:03 mail rspamd[12671]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 191, 200 re quired
6101:Sep 5 18:45:02 mail rspamd[12671]: <50d455>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
6115:Sep 5 18:54:25 mail rspamd[12671]: <75b880>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
6137:Sep 5 19:00:02 mail rspamd[12671]: <4c3626>; csession; bayes_classify: skip classification as ham class has not enough learns: 77, 200 req uired
6464:Sep 5 20:15:01 mail rspamd[24557]: <8e3a94>; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 50 requi red
6508:Sep 5 22:50:02 mail rspamd[24557]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 50 requi red
6556:Sep 6 02:00:01 mail rspamd[24557]: <5564d4>; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 50 requi red
6704:Sep 6 08:12:12 mail rspamd[24556]: ; proxy; bayes_classify: skip classification as ham class has not enough learns: 0, 50 required
7039:Sep 6 14:32:31 mail rspamd[24557]: <652688>; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 50 requi red
7052:Sep 6 14:32:35 mail rspamd[24557]: <7c31c4>; csession; bayes_classify: skip classification as ham class has not enough learns: 1, 50 requi red
7235:Sep 6 20:15:02 mail rspamd[24557]: ; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 50 requi red
7267:Sep 6 22:50:01 mail rspamd[24557]: <622ef1>; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 50 requi red
7326:Sep 7 02:00:03 mail rspamd[24557]: <68054b>; csession; bayes_classify: skip classification as ham class has not enough learns: 0, 50 requi red

I hope it helps a little further.
Thank you
Rainer

1 Like

I am investing, I can reproduce, I could break (reset to zero) also rspamd bayes spam stats by importing massively ham from the command line

rspamc learn_ham /path2/folder

Hi,
Thank you for the effort so far to solve the problem.
What should I do. Should I massively import Hams?
greetings
Rainer

Can this command (and the “opposite” learn_spam) be a part of Cockpit interface for rSpamd?
I also don’t know if this should be done by the user/owner of the mailbox or root.

Hello, tonight the update has set the learn_mins to 200 again. Bayes did not work then again. As a root player, I did about 400 hams and 500 spams with (rspamc learn_ham / path2 / folder) manually. In the web interface of rspamd status is now 1971 “learned”. I’ll wait until I set the learn_mins back to 50. I will report.
A nice weekend.
Rainer

1 Like

this is normal, if you want to override the settings, please cp the /etc/rspamd/local.d/statistic.conf to /etc/rspamd/override.d/statistic.conf, then modify what you need, please check the warning in the top of the file

when you check the headers (Thunderbird calls it the source) of the email, you cannot find something like BAYES_HAM(-2.51)[97.80%]; and the equivalent for the BAYES_SPAM(-2.51)[97.80%];

Hi,
I recognize in the web interface of rspamd , if the bayes filter is active. Although I initiated a massive learning, the Bayesian filter does not work on learn_min 200, until I turn back to 50 everything is fine again. I can live with it.
Have a nice Weekend.
Rainer

1 Like