[Rspamd-Users] My worker-fuzzy only listens to udp

[Gerald Galster]

> Hello everyone, I'm looking for a solution to my problem. I'm trying to integrate a local fuzzy, but it only listens to udp:

Which is sufficient.


> ss -tulpen | grep 11335
> udp   UNCONN 0      0                               127.0.0.1:11335 0.0.0.0:*    users:(("rspamd",pid=152659,fd=115)) uid:109 ino:852731 sk:5001 cgroup:/system.slice/rspamd.service <->
> 
> 
> /etc/rspamd/local.d/worker-fuzzy.inc:
> 
>  count = 1;
>  bind_socket = "127.0.0.1:11335";
>  allow_update = ["127.0.0.1", "::1"];
>  backend = "sqlite";
>  database = "/var/lib/rspamd/wwlfuzzy.db";
> 
> 
> Today I reinstalled rspamd on a debian 12.8 and set it up with the configwizard. So far everything works, except for the local fuzzy.

I think you already know not to use the stock Debian version of rspamd:
https://rspamd.com/downloads.html#debian-standard-repos-notes


> It is set up with the user:group _rspamd:_rspamd.

Just a hint if your fuzzy storage is old:
https://rspamd.com/doc/workers/fuzzy_storage.html#compatibility-notes

If you start fresh you could also use a separate redis instance for fuzzy storage.


> 2024-12-21 20:51:45 #122146(normal) <85B714>; task; fuzzy_check_io_callback: got error on IO with server 127.0.0.1:11335(127.0.0.1:11335), on write, 111, Verbindungsaufbau abgelehnt
> 2024-12-21 20:57:20 #122147(normal) <EA9E04>; task; fuzzy_check_io_callback: got error on IO with server 127.0.0.1:11335(127.0.0.1:11335), on read, 111, Verbindungsaufbau abgelehnt

Error 111 means connection refused. As there is a service running on 127.0.0.1:11335 it's somehow unreachable.
Is there a firewall in-between or a mechanism like selinux/seccomp/systemd that interferes?
Check firewall rules, audit.log and so on.

You've pasted the config of local.d/worker-fuzzy.inc and this error message is about fuzzy_check.
Also have a look at local.d/fuzzy_check.conf then.

Best regards,
Gerald