Debug Rspamd not training with Inbox<->Junk transitions

anoncow

I’m realizing my inbox is full of spam. No matter how many messages I move to junk folder, the bayesian network doesn’t seem to be learning anything. How can I debug the issue?

Ideally I would:
1) move 1 email from inbox to junk (IMAP)
2) see somewhere that this file was seen and taken into account by Rspamd.

Regards.

esackbauer

anoncow How can I debug the issue?

Look at the rspamd logs?

anoncow

When I move an email to the junk folder, I don’t see any new logs in Rspamd. I see them when i receive an email, but not when I move one.

esackbauer

Was the junk folder renamed? Or not specifically marked as such? Which client did you use to move the mail?

anoncow

I use Thunderbird. The folder was not renamed. It was created by a version of Mailcow maybe 2-3 years ago.

BTW I’m using the newest Mailcow version now.

I also tried with SoGo Webmail, and Rspamd doesn’t show any logs when the email is moved to the Spam folder.

DocFraggle

anoncow That’s right, it doesn’t show any logs while moving the mail. If you want an output you have to modify the ham/spam scripts

mailcow/mailcow-dockerizedblob/2024-04/data/Dockerfiles/dovecot/rspamd-pipe-ham
mailcow/mailcow-dockerizedblob/2024-04/data/Dockerfiles/dovecot/rspamd-pipe-spam

and add some kind of logging there.

anoncow

@DocFraggle I can definitely improvise some logging there, but if you are more familiar to MailCow maybe we can use this issue to leave some documentation written out. Future contenders will surely appreciate it, and if possible I would like to do it properly too.

Here are my doubts:
1) is it possible to send logs to Rspamd, so that we can see them from Rspamd UI?
2) is it possible to append logs to some already existing and documented logs file? Which one and how?
3) Is there any other way of adding logs, either documented by mailcow or by docker?

DocFraggle

anoncow OK, I just had a look at the config. You can set the bayes and fuzzy_backend modules to debug logging, then you can see what happens with the moved mails IN EVERY DETAIL in the rspamd log 🙂

You can try it out and even tweak it to your own preferences by adding this line to data/conf/rspamd/override.d/logging.inc

debug_modules = ["fuzzy_backend", "bayes"];

and restarting the rspamd container

docker compose restart rspamd-mailcow

But be aware that EVERY mail’s bayes log will be in there from now on, and it’s really a lot of logging… have a look at https://rspamd.com/doc/configuration/logging.html for more options