[Rspamd-Users] How to check, which expression matched?

Johannes Rohr johannes at rohr.org
Wed Aug 14 12:22:26 UTC 2024


I've got a map with banned subjects. Now one mail has been rejected 
which is a clear false positive.

Even though debugging is on and multimap is listed under "debug 
modules", the log only shows  that rspamd found a match, but it doesn't 
say which expression matched.


4-08-14 14:00:54 #1763298(normal) <d59bc5>; multimap; multimap.lua:544: 
got return "1" (err code = 200) for multimap SUBJECT_BLACKLISTED
2024-08-14 14:00:54 #1763298(normal) <d59bc5>; metric; 
insert_metric_result: want to insert symbol SUBJECT_BLACKLISTED, initial 
weight 1.00
2024-08-14 14:00:54 #1763298(normal) <d59bc5>; symcache; is_allowed: 
allow execution of SUBJECT_BLACKLISTED settings id 428 allows implicit 
execution
of the symbols;
2024-08-14 14:00:54 #1763298(normal) <d59bc5>; metric; 
insert_metric_result: metric multiplier for SUBJECT_BLACKLISTED is 5.00
2024-08-14 14:00:54 #1763298(normal) <d59bc5>; metric; 
insert_metric_result: final insertion for symbol SUBJECT_BLACKLISTED, 
score 5.00, factor: 5
2024-08-14 14:00:54 #1763298(normal) <d59bc5>; task; 
rspamd_add_passthrough_result: 
<0799031c-39fa-467c-b911-06ddfd0ebd4f at jpberlin.de>: set pre-result
  to 'reject' (no score): 'Matched map: SUBJECT_BLACKLISTED' from 
multimap(1)

Is there a simple way  to find out? Because, inspecting the map, I am 
unable to find an obvious match.

Thanks,

Johannes



More information about the Users mailing list