[Rspamd-Users] Email hits BAYES_* after a few times

Sophie Loewenthal sophie at klunky.co.uk
Mon Jun 3 09:38:18 UTC 2019 

> On 3 Jun 2019, at 08:49, Sophie Loewenthal <sophie at klunky.co.uk> wrote:
> 
> 
>> On 3 Jun 2019, at 8:11 am, Sophie Loewenthal <sophie at klunky.co.uk> wrote:
>> 
>> 
>>> On 3 Jun 2019, at 4:49 am, Tim Harman via Users <users at lists.rspamd.com> wrote:
>>> 
>>> 
>>>> Big type above:
>>>>> Bayes should *not* be autolearning and configdump didn’t shed any light.
>>> 
>>> The only thing I can suggest is that other learning that you've done has learnt symbols that are being triggered later.
>>> If you're not doing that at all, then maybe you've encountered a bug.
>>> Seeing as you're using sqlite as the backend, I'm not sure you'll get a lot of support either as I think the preferred method now is redis.
>>> 
>>> You could try and enable some debugging too, but I'm not sure which debug module might help you, statistics only seems to have debug for redis (you could try an enable it to see if it helps 
>> Hi Tim,
>> sqlite is the default for the bayes stats. Redis is used for everything else
> 
> Can I use something this to drop my learnt Bayes,
> 
> redis-cli KEYS *BAYES* | xargs redis-cli DEL redis-cli KEYS RS* | xargs redis-cli DEL
> 


Hi, 
Related to dropping the bayes keys, I’ve seen a few more and I’m interested to know why these keys are in Redis.  There are a mixture of keys. I’m not sure if some of these are just rubbish left over from early rspamd installations that we were not cleaned up, or how these are related to Bayes or some other function of rspamd.

Do these look right?

This is the list of keys: 
$ redis-cli KEYS '*'
  1) "ntopng.trace"
  2) "tRFANN212E4A4866CD5CCD260_spam"
  3) "tRFANNCB0F2A2C856C23E0260_spam"
  4) "BAYES_HAM"
  5) "rro6bdnu1b6p8j6jtmbwh9"
  6) "tRFANN40869F52328B704726"
  7) "tRFANN212E4A4866CD5CCD260_ham"
  8) "rrjtkawai9xosw7hexf9g7"
  9) "tRFANN9BA9D96072C3C80D260_ham"
 10) "tRFANNCCB20ADBA2DD026C260_ham"
 11) "rr7m8i4hkz1469bbw6pixq"
 12) "ntopng.prefs.host_categories_rrd_creation"
 13) "ip_score"
 14) "ntopng.prefs.intf_rrd_1h_days"
 15) "tRFANN7AC21A9886AA613626"
 16) "tRFANNE4A7A053DAC0BD36260_ham"
 17) "tRFANN9BA9D96072C3C80D260_spam"
 18) "tRFANN638406E4BB62AA47260_spam"
 19) "tRFANN303D94E8549A9DAE260_ham"
 20) "tRFANN638406E4BB62AA47260_ham"
 21) "tRFANN679A76568F2E67ED260_ham"
 22) "tRFANN849AA52E366882526"
 23) "ntopng.prefs.other_rrd_1h_days"
 24) "rmxmandrillapp.com"
 25) "tRFANN166846A6F298E054260_ham"
 26) "tRFANNCB0F2A2C856C23E0260_ham"
 27) "tRFANN194091D9D3E9DAE2260_ham"
 28) "tRFANN303D94E8549A9DAE26"
 29) "tRFANNE4A7A053DAC0BD36260_spam"
 30) "tRFANN43EF0DE5B7864A5E26"
 31) "tRFANN638406E4BB62AA4726"
 32) "sites.172.31.1.100.old"
 33) "rmxbounces.em.oakroadestate.com.au"
 34) "rriwkootup67j3apjgmq1p"
 35) "tRFANNCF3625BEBABD2F28260_spam"
 36) "tRFANN63291EE42BB63C8260_ham"
 37) "rr4jwykmqmxoewhtpxdumx"
 38) "rr1p83s7ae85ejnzakiwp9"
 39) "BAYES_SPAM"
 40) "tRFANNE4A7A053DAC0BD3626"
 41) "tRFANNCCB20ADBA2DD026C26"
 42) "ntopng.user.admin.password"
 43) "tRFANN7AC21A9886AA6136260_ham"
 44) "rmxpublishd.co"
 45) "rmxbounce.email.carreda.com"
 46) "ntopng.prefs.iface_id"
 47) "tRFANN7AC21A9886AA6136260_spam"
 48) "tRFANNABA040E87A31679F260_spam"
 49) "ntopng.prefs.host_ndpi_rrd_creation"
 50) "tRFANN849AA52E3668825260_spam"
 51) "tRFANN2B73105D45484E6260_spam"
 52) "RS"
 53) "rmxmailer.2emereda.be"
 54) "rrzthuzns8d81sco5mpjzx"
 55) "rmxhbf.com.au"
 56) "tRFANNCF3625BEBABD2F28260_ham"
 57) "rmxsendgrid.meetup.com"
 58) "rrm1jefinuti4fw8rybd5m"
 59) "tRFANN166846A6F298E05426"
 60) "rrr1spr1t3nxpufxkrd3km"
 61) "tRFANN591E4369F1C86ED0260_spam"
 62) "rmxfeedback.smartphonehoesjes.nl"
 63) "rmxinredamail.com"
 64) "tRFANN2B73105D45484E626"
 65) "rmxtodayinreda.eu"
 66) "ntopng.alert_queue"
 67) "tRFANN849AA52E3668825260_ham"
 68) "BAYES_HAM_keys"
 69) "tRFANN194091D9D3E9DAE2260_spam"
 70) "rreyqyhdy6eifasooz136d"
 71) "tRFANNCF3625BEBABD2F2826"
 72) "rs_history"
 73) "tRFANN166846A6F298E054260_spam"
 74) "tRFANN194091D9D3E9DAE226"
 75) "ntopng.prefs.housekeeping_frequency"
 76) "rrjtpdzm835io5t4gatas8"
 77) "rrx5xwzc5s4zf6wp3dyku3"
 78) "ntopng.prefs.intf_rrd_1d_days"
 79) "ntopng.prefs.host_rrd_creation"
 80) "tRFANN63291EE42BB63C826"
 81) "tRFANN43EF0DE5B7864A5E260_ham"
 82) "tRFANND2B92EEA076086926"
 83) "tRFANNABA040E87A31679F26"
 84) "tRFANN679A76568F2E67ED260_spam"
 85) "tRFANN6DB50D685985C45426"
 86) "rrfkazsuw9roo11o8p537a"
 87) "ntopng.prefs.other_rrd_1d_days"
 88) "tRFANN4D2EBA5F1169F30B260_ham"
 89) "tRFANN4D2EBA5F1169F30B260_spam"
 90) "rr694df1xkrwpew1g8naob"
 91) "rmxgmail.com"
 92) "rmxbounces.amazon.com"
 93) "tRFANN40869F52328B7047260_spam"
 94) "rre95fsk89hhszyxqxj8k8"
 95) "rr91y4hkfk116y59yidjin"
 96) "tRFANNABA040E87A31679F260_ham"
 97) "tRFANN6DB50D685985C454260_spam"
 98) "ntopng.prefs.other_rrd_1min_days"
 99) "tRFANN591E4369F1C86ED0260_ham"
100) "rr3xo3bjqs9rwji794wa8j"
101) "ntopng.prefs.nbox_integration"
102) "rr6eh1nshocpqopt4s7tjr"
103) "rrh6whtqj9az315gekwqqi"
104) "BAYES_HAM_version"
105) "ntopng.prefs.alerts_syslog"
106) "BAYES_SPAM_keys"
107) "BAYES_SPAM_version"
108) "ntopng.user.admin.full_name"
109) "rrx3x545oqyauoxu4e895n"
110) "tRFANN679A76568F2E67ED26"
111) "rrqtg6uiznhcmsexncajbh"
112) "rru5ihtkyq3typ1z6r6swj"
113) "ntopng.prefs.non_local_host_max_idle"
114) "ntopng.prefs.is_autologon_enabled"
115) "rrgs5j169mzd1om89bc5ea"
116) "ntopng.prefs.local_host_max_idle"
117) "tRFANNCCB20ADBA2DD026C260_spam"
118) "rmxpreventionweb.net"
119) "rmxmail37.atl71.mcdlv.net"
120) "tRFANN2B73105D45484E6260_ham"
121) "rmxem1.redasend15.com"
122) "tRFANN212E4A4866CD5CCD26"
123) "ntopng.user.admin.allowed_nets"
124) "tRFANND2B92EEA0760869260_ham"
125) "ntopng.user.admin.group"
126) "rrdebn4zp8becsx9xgx48h"
127) "tRFANN591E4369F1C86ED026"
128) "tRFANNCB0F2A2C856C23E026"
129) "rs_historymx10_zst"
130) "ntopng.prefs.other_rrd_raw_days"
131) "tRFANN63291EE42BB63C8260_spam"
132) "tRFANN303D94E8549A9DAE260_spam"
133) "ntopng.prefs.intf_rrd_1min_days"
134) "ntopng.prefs.intf_rrd_raw_days"
135) "tRFANN9BA9D96072C3C80D26"
136) "rmx2emereda.be"
137) "rrktyrfrt1ztozp7i7b4tj"
138) "learned_ids"
139) "tRFANN6DB50D685985C454260_ham"
140) "tRFANND2B92EEA0760869260_spam"
141) "tRFANN40869F52328B7047260_ham"
142) "rmxmail20.suw91.mcdlv.net"
143) "rr6q7wzricjhzukoa8brzn"
144) "ntopng.prefs.flow_max_idle"
145) "tRFANN4D2EBA5F1169F30B26"

More information about the Users mailing list