Am 29.01.2015 um 10:18 schrieb Matus UHLAR - fantomas:
On 28.01.15 01:03, Reindl Harald wrote:if understand you correctly we agree that there is no reason /var can't be mounted read-only?I do not agree. The whole point of /var is to contain varying data and mounting it read-only defeats the whole purpose of /var.
i am not talking about a own partitioni am talking about a *systemd namespace* and the intention *not* have anything below /var writeable for a network facing service
frankly - can we stop to dicuss left and right?i asked for not touch bayes from the spamd service for good reasons, know the setup and there are well considered reasons why every piece is like it is - if it's not possible - can it made possible and is someone willing to implement it for money and how much money - that's it
__________________________________________________________
I see following possibilities for you: - move BAYES to a database of any kind
for sure not, the bayes is build with a script and rsynced to other machines which have to work *independent* from each other and so there is no point in setup a database with replication, failovers and a lot of time-invest when things can be simple
- set up SA to learn to journal, and use overlayfs for the journal (rememer to set bayes_journal_max_size big enough), droping it or syncing periodically
it is big enough use_learner 1 use_bayes 1 use_bayes_rules 1 bayes_use_hapaxes 1 bayes_expiry_max_db_size 2500000 bayes_auto_expire 0 bayes_auto_learn 0 bayes_learn_during_report 0 bayes_learn_to_journal 1 >> the intention of this *global bayes* is *not* to learn or expire >> anything - the implemented "remove from bayes" method is just remove >> the message from the corpus folder and type "sa-learn.sh rebuild" > > I believe it's much more effective to expire old tokens > that are not appeating in mail than to purge old mail > from DB, when you don't know if the tokens > are still used or not. > > I'm afraid you got the expire issue wrong... i got nothing wrongi don't matter if tokens are not used for two months, 10 years expierience shows they re-appear sooner or later and i don't invest hundrets of work-hours to collect thousands of mail samples to have token expire automatically
the bayes works *perfectly* and frankly as started with SA a large part of the spam bayes was built by years old archive data
signature.asc
Description: OpenPGP digital signature
