bayes; inv_chi_square: exp overflow

124 views
Skip to first unread message

Patrick Pichon

unread,
Mar 7, 2016, 5:51:38 AM3/7/16
to rspamd
Don't know if I should worry or not, but I saw a high number of message "bayes; inv_chi_square: exp overflow" in my syslog.

Anything I should do ?

Patrick Pichon

unread,
Mar 8, 2016, 4:04:28 PM3/8/16
to rspamd
Here are additional information from the log, please let me know if I have to perform something ?

Mar 08 22:02:22 mail.pipiche.net postfix/cleanup[1413]: 81D202013F: message-id=<d14181b278989d6cd12ab288274738da62d.20160308052952@mail246.suw12.mcsv.net>
Mar 08 22:02:22 mail.pipiche.net rmilter[1222]: mlfi_eom: 81D202013F: tempfile=/tmp/msg.XXs1x4Ge, size=56649
Mar 08 22:02:22 mail.pipiche.net rspamd[13779]: <4b798a>; task; accept_socket: accepted connection from ::1 port 49962
Mar 08 22:02:22 mail.pipiche.net rspamd[13779]: <4b798a>; task; rspamd_message_parse: loaded message; id: <d14181b278989d6cd12ab288274738da62d.20160308052952@mail246.suw12.mcsv.net>; queue-id: <81D202013F>
Mar 08 22:02:22 mail.pipiche.net rspamd[13779]: <4b798a>; task; make_dns_request_task: <d14181b278989d6cd12ab288274738da62d.20160308052952@mail246.suw12.mcsv.net> stop resolving on reaching 64 requests
Mar 08 22:02:22 mail.pipiche.net rspamd[13779]: <4b798a>; task; process_dns_results: <d14181b278989d6cd12ab288274738da62d.20160308052952@mail246.suw12.mcsv.net> domain [list-manage2.com.multi.uribl.com] is in surbl multi.uribl.com(1)
Mar 08 22:02:22 mail.pipiche.net rspamd[13779]: <4b798a>; task; process_dns_results: <d14181b278989d6cd12ab288274738da62d.20160308052952@mail246.suw12.mcsv.net> domain [list-manage.com.multi.uribl.com] is in surbl multi.uribl.com(1)
Mar 08 22:02:22 mail.pipiche.net rspamd[13779]: <4b798a>; task; process_dns_results: <d14181b278989d6cd12ab288274738da62d.20160308052952@mail246.suw12.mcsv.net> domain [campaign-archive1.com.multi.uribl.com] is in surbl multi.uribl.com(1)
Mar 08 22:02:22 mail.pipiche.net rspamd[13779]: <4b798a>; task; process_dns_results: <d14181b278989d6cd12ab288274738da62d.20160308052952@mail246.suw12.mcsv.net> domain [list-manage1.com.multi.uribl.com] is in surbl multi.uribl.com(1)
Mar 08 22:02:22 mail.pipiche.net rspamd[13779]: <4b798a>; task; process_dns_results: <d14181b278989d6cd12ab288274738da62d.20160308052952@mail246.suw12.mcsv.net> domain [linkedin.com.multi.uribl.com] is in surbl multi.uribl.com(1)
Mar 08 22:02:22 mail.pipiche.net rspamd[13779]: <4b798a>; task; process_dns_results: <d14181b278989d6cd12ab288274738da62d.20160308052952@mail246.suw12.mcsv.net> domain [eventbrite.fr.multi.uribl.com] is in surbl multi.uribl.com(1)
Mar 08 22:02:22 mail.pipiche.net rspamd[13779]: <4b798a>; task; process_dns_results: <d14181b278989d6cd12ab288274738da62d.20160308052952@mail246.suw12.mcsv.net> domain [insead.edu.multi.uribl.com] is in surbl multi.uribl.com(1)
Mar 08 22:02:23 mail.pipiche.net rspamd[13779]: <4b798a>; bayes; inv_chi_square: exp overflow
Mar 08 22:02:23 mail.pipiche.net rspamd[13779]: <4b798a>; task; rspamd_task_write_log: id: <d14181b278989d6cd12ab288274738da62d.20160308052952@mail246.suw12.mcsv.net>, qid: <81D202013F>, ip: 198.2.190.246, from: <bounce-mc.us8_29234371.1437517-patrick=pipiche.net@mail246.suw12.mcsv.net>, (default: F (greylist): [3.99/15.00] [BAYES_SPAM,REPLYTO_EXCESS_QP,R_DKIM_ALLOW,RWL_MAILSPIKE_EXCELLENT,R_SPF_ALLOW,FORGED_SENDER,MIME_GOOD,URIBL_BLOCKED,FROM_EXCESS_QP]), len: 56649, time: 417.865ms real, 17.686ms virtual, dns req: 69
Mar 08 22:02:23 mail.pipiche.net rmilter[1222]: spamdscan: scan qid: <81D202013F>, mid: <d14181b278989d6cd12ab288274738da62d.20160308052952@mail246.suw12.mcsv.net>, 0.420326, localhost, metric: default: [3.990000 / 15.000000], symbols: FROM_EXCESS_QP(1.19), URIBL_BLOCKED(0.00), MIME_GOOD(-0.10), FORGED_SENDER(0.30), R_SPF_ALLOW(-1.50), RWL_MAILSPIKE_EXCELLENT(0.00), R_DKIM_ALLOW(-1.10), REPLYTO_EXCESS_QP(1.19), BAYES_SPAM(3.99)
Mar 08 22:02:23 mail.pipiche.net rmilter[1222]: awl_add: insert ip 198.2.190.246 in cache, insert first item
Mar 08 22:02:26 mail.pipiche.net rmilter[1222]: clamscan: scan 3.137781, 127.0.0.1, /tmp/msg.XXs1x4Ge
Mar 08 22:02:26 mail.pipiche.net rmilter[1222]: msg done: 81D202013F: ip: 198.2.190.246; from: bounce-mc.us8_29234371.1437517-patrick=pipiche.net@mail246.suw12.mcsv.net; rcpt: <patrick@pipiche.net> (1 total); user: unauthorized; spam scan: no spam; virus scan: clean; dkim: not signed, ignored

Patrick Pichon

unread,
Apr 1, 2016, 5:36:42 AM4/1/16
to rspamd
Still have the same problem despite the recent update of rspamd
rspamd-1.2.1-1.x86_64
rmilter-1.7.5-1.x86_64



Le mardi 8 mars 2016 22:04:28 UTC+1, Patrick Pichon a écrit :
Here are additional information from the log, please let me know if I have to perform something ?

Mar 08 22:02:22 mail.pipiche.net postfix/cleanup[1413]: 81D202013F: message-id=<d14181b278989d6cd12ab288274738da62d.20160308052952@mail246.suw12.mcsv.net>
Mar 08 22:02:22 mail.pipiche.net rmilter[1222]: mlfi_eom: 81D202013F: tempfile=/tmp/msg.XXs1x4Ge, size=56649
Mar 08 22:02:22 mail.pipiche.net rspamd[13779]: <4b798a>; task; accept_socket: accepted connection from ::1 port 49962
Mar 08 22:02:22 mail.pipiche.net rspamd[13779]: <4b798a>; task; rspamd_message_parse: loaded message; id: <d14181b278989d6cd12ab288274738da62d.20160308052952@mail246.suw12.mcsv.net>; queue-id: <81D202013F>
Mar 08 22:02:22 mail.pipiche.net rspamd[13779]: <4b798a>; task; make_dns_request_task: <d14181b278989d6cd12ab288274738da62d.20160308052952@mail246.suw12.mcsv.net> stop resolving on reaching 64 requests
Mar 08 22:02:22 mail.pipiche.net rspamd[13779]: <4b798a>; task; process_dns_results: <d14181b278989d6cd12ab288274738da62d.20160308052952@mail246.suw12.mcsv.net> domain [list-manage2.com.multi.uribl.com] is in surbl multi.uribl.com(1)
Mar 08 22:02:22 mail.pipiche.net rspamd[13779]: <4b798a>; task; process_dns_results: <d14181b278989d6cd12ab288274738da62d.20160308052952@mail246.suw12.mcsv.net> domain [list-manage.com.multi.uribl.com] is in surbl multi.uribl.com(1)
Mar 08 22:02:22 mail.pipiche.net rspamd[13779]: <4b798a>; task; process_dns_results: <d14181b278989d6cd12ab288274738da62d.20160308052952@mail246.suw12.mcsv.net> domain [campaign-archive1.com.multi.uribl.com] is in surbl multi.uribl.com(1)
Mar 08 22:02:22 mail.pipiche.net rspamd[13779]: <4b798a>; task; process_dns_results: <d14181b278989d6cd12ab288274738da62d.20160308052952@mail246.suw12.mcsv.net> domain [list-manage1.com.multi.uribl.com] is in surbl multi.uribl.com(1)
Mar 08 22:02:22 mail.pipiche.net rspamd[13779]: <4b798a>; task; process_dns_results: <d14181b278989d6cd12ab288274738da62d.20160308052952@mail246.suw12.mcsv.net> domain [linkedin.com.multi.uribl.com] is in surbl multi.uribl.com(1)
Mar 08 22:02:22 mail.pipiche.net rspamd[13779]: <4b798a>; task; process_dns_results: <d14181b278989d6cd12ab288274738da62d.20160308052952@mail246.suw12.mcsv.net> domain [eventbrite.fr.multi.uribl.com] is in surbl multi.uribl.com(1)
Mar 08 22:02:22 mail.pipiche.net rspamd[13779]: <4b798a>; task; process_dns_results: <d14181b278989d6cd12ab288274738da62d.20160308052952@mail246.suw12.mcsv.net
...

Vsevolod Stakhov

unread,
Apr 1, 2016, 7:19:12 AM4/1/16
to Patrick Pichon, rspamd
On 01/04/2016 10:36, Patrick Pichon wrote:
> Still have the same problem despite the recent update of rspamd
> rspamd-1.2.1-1.x86_64
> rmilter-1.7.5-1.x86_64
>

That usually means that one of your bayes classes (spam or ham) are not
trained sufficiently to process messages.

--
Vsevolod Stakhov

Patrick Pichon

unread,
May 26, 2016, 1:27:05 PM5/26/16
to rspamd, pip...@gmail.com


In such why the severity code use to log this message is set to '3' (Error) and not eventually 'Warning' ?
Reply all
Reply to author
Forward
0 new messages