Constant watchdog alerts on rspamd

hlippke

I for a couple of hours I’m receiving watchdog notifications concerning rspamd with multiple lines of
Rspamd settings check failed
every 5-10 minutes.

I can’t find which setting might be a problem, the watchdog script that emits the message doesn’t clarify for me.

Any ideas?

diekuh

You need to post the settings map somewhere. You can find it here:

image.png

I can try to replicate it with an 1:1 copy of your settings map.

Else: Set debug_modules = ["settings"]; in data/conf/rspamd/override.d/logging.inc and restart Rspamd. Check and post docker-compose logs --tail=200 -f rspamd-mailcow logs. The logs must contain the moment the settings map failed.

diekuh

It can also be a broken firewall (ufw, firewalld, etc.). But I doubt it.

hlippke

It appeared around 24hours after first startup, but closely afterwards I experienced a complete systems failure, rendering the whole machine useless so I had to reset everything. Good thing the error’s gone, bad thing I can’t help with the analysis as all the logs and configs were gone. I was lucky I had a backup of my vmail volume so was able to restore the important bits.