[Rspamd-Users] Bayes not scanning some e-mails
azurit at pobox.sk
azurit at pobox.sk
Tue Sep 28 12:47:45 UTC 2021
Hi all,
recently, i noticed that not all e-mails contains symbols from
bayes/statistic module - none of BAYES_HAM and BAYES_SPAM. I was able
to catch one of such messages with debugging info enabled (see below).
Can anyone help me to understand why is this happening? In this
particular case, the message was spam and was delivered into INBOX
because of missing score from bayes.
Thanks.
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; bayes;
bayes_classify_token: token(meta) 253878091069365434
<#F:Vladislav:#h:C-T:text/html; charset="UTF-8"> probabilistically
skipped
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; bayes;
bayes_classify_token: token(meta) 1319675597245360303
<#F:Vladislav:#m:#ho> probabilistically skipped
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; bayes;
bayes_classify_token: token(meta) 5654384397166480846
<#F:Vladislav:#cs:UTF-8> probabilistically skipped
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; bayes;
bayes_classify_token: token(meta) 11470203402223934998
<#F:Vladislav:#lang:en> probabilistically skipped
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; bayes;
bayes_classify_token: token(meta) 16760811356819922963
<#u:yetisirmi.com:#F:Vladislav> probabilistically skipped
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; bayes;
bayes_classify_token: token(meta) 243482661706484953
<#u:yetisirmi.com:#h:C-T:text/html; charset="UTF-8"> probabilistically
skipped
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; bayes;
bayes_classify_token: token(meta) 8166284013702598116
<#u:yetisirmi.com:#m:#ho> probabilistically skipped
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; bayes;
bayes_classify_token: token(meta) 6749161068152776729
<#u:yetisirmi.com:#cs:UTF-8> probabilistically skipped
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; bayes;
bayes_classify_token: token(meta) 7533617803319042616
<#dt:4:01:#u:yetisirmi.com> probabilistically skipped
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; bayes;
bayes_classify_token: token(meta) 8072560273546414927
<#dt:4:01:#F:Vladislav> probabilistically skipped
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; bayes;
bayes_classify_token: token(meta) 14436082610651627817
<#dt:4:01:#h:C-T:text/html; charset="UTF-8"> probabilistically skipped
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; bayes;
bayes_classify_token: token(meta) 1430216995712494580
<#dt:4:01:#m:#ho> probabilistically skipped
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; bayes;
bayes_classify_token: token(meta) 8084564344892568728
<#aur:s=pass,d=pass:chatwasap.com:#dt:4:01> probabilistically skipped
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; bayes;
bayes_classify_token: token(meta) 12330708087224283914
<#aur:s=pass,d=pass:chatwasap.com:#u:yetisirmi.com> probabilistically
skipped
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; bayes;
bayes_classify_token: token(meta) 4462463662119808283
<#aur:s=pass,d=pass:chatwasap.com:#F:Vladislav> probabilistically
skipped
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; bayes;
bayes_classify_token: token(meta) 12434003267573628141
<#aur:s=pass,d=pass:chatwasap.com:#h:C-T:text/html; charset="UTF-8">
probabilistically skipped
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; bayes;
bayes_classify_token: token(meta) 6863361389720196180
<#rcv:<censored>:lmtp:#aur:s=pass,d=pass:chatwasap.com>
probabilistically skipped
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; bayes;
bayes_classify_token: token(meta) 7539326144642557518
<#rcv:<censored>:lmtp:#dt:4:01> probabilistically skipped
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; bayes;
bayes_classify_token: token(meta) 11824198664993959380
<#rcv:<censored>:lmtp:#u:yetisirmi.com> probabilistically skipped
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; bayes;
bayes_classify_token: token(meta) 12294035829013819971
<#rcv:<censored>:lmtp:#F:Vladislav> probabilistically skipped
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; bayes;
bayes_classify_token: token(meta) 16686934200068670817
<#rcv:103.72.162.0:esmtps:#rcv:<censored>:lmtp> probabilistically
skipped
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; bayes;
bayes_classify_token: token(meta) 16045033416894290287
<#rcv:103.72.162.0:esmtps:#aur:s=pass,d=pass:chatwasap.com>
probabilistically skipped
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; bayes;
bayes_classify_token: token(meta) 8743901820467606605
<#rcv:103.72.162.0:esmtps:#dt:4:01> probabilistically skipped
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; bayes;
bayes_classify_token: token(meta) 14815350519403958349
<#rcv:103.72.162.0:esmtps:#u:yetisirmi.com> probabilistically skipped
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; bayes;
bayes_classify_token: token(meta) 15416532422982920442
<#rcv:194.146.36.0:esmtpsa:#rcv:103.72.162.0:esmtps> probabilistically
skipped
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; bayes;
bayes_classify_token: token(meta) 1598239120901030481
<#rcv:194.146.36.0:esmtpsa:#rcv:<censored>:lmtp> probabilistically
skipped
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; bayes;
bayes_classify_token: token(meta) 4328058460560150171
<#rcv:194.146.36.0:esmtpsa:#aur:s=pass,d=pass:chatwasap.com>
probabilistically skipped
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; bayes;
bayes_classify_token: token(meta) 15116481825142164251
<#rcv:194.146.36.0:esmtpsa:#dt:4:01> probabilistically skipped
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; csession;
rspamd_task_write_log: id: <ewalhdubjqvgktczpmxnfoisy at chatwasap.com>,
ip: <censored>, from: <SRS0=0MnC=OR=chatwasap.com=sender@<censored>>,
(default: F (no action): [4.10/8.00]
[HFILTER_HOSTNAME_UNKNOWN(2.50){},FROM_EXCESS_QP(1.20){},MISSING_DATE(1.00){},SPF_REPUTATION_HAM(-0.48){-0.48426960253533;},MIME_HTML_ONLY(0.20){},R_DKIM_ALLOW(-0.20){chatwasap.com:s=default;},R_SPF_ALLOW(-0.20){+a;},RCVD_NO_TLS_LAST(0.10){},HAS_LIST_UNSUB(-0.01){},ABUSE_SURBL(0.00){yetisirmi.com:url;},ASN(0.00){asn:29405, ipnet:<censored>/20, country:SK;},DBL_SPAM(0.00){yetisirmi.com:url;},DKIM_TRACE(0.00){chatwasap.com:+;},DMARC_NA(0.00){chatwasap.com;},FROM_HAS_DN(0.00){},FROM_NEQ_ENVFROM(0.00){sender at chatwasap.com;SRS0=0MnC=OR=chatwasap.com=sender at inetadmin.eu;},HAS_X_ANTIABUSE(0.00){},HAS_X_AS(0.00){sender at chatwasap.com;},HAS_X_GMSV(0.00){sender at chatwasap.com;},HAS_X_SOURCE(0.00){},MID_RHS_MATCH_FROM(0.00){},MIME_TRACE(0.00){0:~;},PREVIOUSLY_DELIVERED(0.00){<censored>;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_THREE(0.00){4;},RCVD_VIA_SMTP_AUTH(0.00){},TO_DN_NONE(0.00){},URIBL_BLACK(0.00){yetisirmi.com:url;}]), len: 9455, time: 354.826ms, dns req: 40, digest: <01ffc08c6270b0d08cf240c866f7d3e0>, mime_rcpts:
<censored>
Sep 28 14:26:05 server00 rspamd[30529]: <80a5d6>; csession;
rspamd_protocol_http_reply: regexp statistics: 0 pcre regexps scanned,
5 regexps matched, 175 regexps total, 66 regexps cached, 0B scanned
using pcre, 7.17KiB scanned total
More information about the Users
mailing list