Am 17.10.2014 um 19:45 schrieb RW:
On Fri, 17 Oct 2014 11:59:30 +0200 Reindl Harald wrote:does SA need anything to recognize a rsynced bayes on similar setups to load the new version or is it anyways reopened for each connection by spamd child?I think so, and I don't recall any special handling being needed for sa-learn, which can create a new token file. There is a lock-file that can be used but I doubt it would be needed in this case. I wouldn't just rsync it though. However the file is copied, I'd finish with an atomic mv so there is no risk of a partial file.
rsync is atomic as long you don't use "--inplace" it creates a temp-file http://stackoverflow.com/questions/3769263/are-rsync-operations-atomic-at-file-level
in case of clamd rsync "/var/lib/clamav/" is enough background: * a perfect trained bayes on the inbound spamfirewall * after recently a account was hacked and sent spam (luckily not massive by rate-limits) which would have been clearly caught by SA/spamass-milter i consider to install SA also on the submission servers and just rsync the bayes per cronjobThis is not ideal, a well-trained incoming database wont be well-trained for outgoing mail
the 2000 ham samples are incoming and outgoing legit mail for safety the high-scores of bayes are adjusted lower BAYES_99 only 5.0 instead 5.5, BAYES_999 0.5 should be safe given no RBL's and only URIBL _______________________________________________________________ in the meantime it's implemented on both submission servers my "sa-learn.sh" at the end does the sync automatically great, with 2.0 lower bayes weight copy the mailbody from the abuse-mail we got ofter the hacked account into a new mail and try to send it to my gmail address score 10.1 while milter rejects above 8.0Oct 17 18:09:07 mail spamd[30845]: spamd: identified spam (10.1/7.0) for sa-milt:189 in 0.1 seconds, 2724 bytes. Oct 17 18:09:07 mail spamd[30845]: spamd: result: Y 10 - ADVANCE_FEE_3_NEW,ADVANCE_FEE_4_NEW,ADVANCE_FEE_5_NEW,ALL_TRUSTED,BAYES_50,LOTTO_DEPT,RP_MATCHES_RCVD,TVD_APPROVED scantime=0.1,size=2724,user=sa-milt,uid=189,required_score=7.0,rhost=localhost,raddr=127.0.0.1,rport=33091,mid=<54413f22.4010...@thelounge.net>,bayes=0.500000,autolearn=disabled
signature.asc
Description: OpenPGP digital signature
