http://gcc.gnu.org/bugzilla/show_bug.cgi?id=53632

--- Comment #7 from Frédéric Buclin <LpSolit at netscape dot net> 2012-06-11 
12:03:19 UTC ---
fche says that some spammers create a Bugzilla account to send spam, which is
why these spam checks are enabled for outgoing emails. So to mitigate the
problem till jobqueue is re-enabled, one alternative could be to whitelist
emails sent by @gcc.gnu.org users, as those users are trusted people. We could
even extend this whitelist to all users having editbugs privs, as you need to
be a trusted user to get such privileges. This way, only user accounts with no
privileges would see the slowness due to these checks, including spammers.

From a technical point of view, the email server should look at the
X-Bugzilla-Who header, which contains the email address of the user responsible
for the email to be sent. If it's a trusted user, just send the email without
scanning it. This header cannot be abused by spammers.

Reply via email to