what i just figured out, is that when i change the score for a symbol in rspamd ui to 0, it did not take effect, even after restarting the container. even more strange is that, in the ui, it was 5.0, but what takes effect is 9.0.
it seems the rspamd 4.x’s neural plugin dynamically rescales symbol scores per message based on its trained model.
"metric_score": 5, ← configured weight (what the commit set)
"score": 9, ← what was actually applied to this message
... ← where is my override from rspamd web ui?
/var/lib/rspamd/rspamd_dynamic:
[
{
"metric": "default",
"actions": [
{
"name": "rewrite subject",
"value": nan
},
{
"name": "add header",
"value": 12.0
}
],
"symbols": [
{
"name": "URL_OBFUSCATED_TEXT",
"value": 0.0
}
]
}
⚠️ please note that nan in there, which does not make sense to me. that’s not mine, but maybe that is causing an issue?
docker exec mailcowdockerized-rspamd-mailcow-1 rspamc counters | grep URL_OBFUSCATED
| 4462 | URL_OBFUSCATED_TEXT | 5.0 | 0.000 (0.000) | 0 |
UPDATE 12:15 UTC:
$ cat > /opt/mailcow-dockerized/data/conf/rspamd/override.d/url_suspect_group.conf <<'EOF'
# Neutralize URL_OBFUSCATED_TEXT (url_suspect plugin, rspamd 4.2).
# It fires on abuse/takedown reports because they quote the phishing URLs
# they are reporting. Loaded via groups.conf -> group "url" include hook.
symbols = {
"URL_OBFUSCATED_TEXT" {
weight = 0.0;
}
}
EOF
$ docker compose restart rspamd-mailcow
this takes effect:
| 4462 | URL_OBFUSCATED_TEXT | 0.0 | 0.000 (0.000) | 0 |