On Monday, July 8, 2002, at 08:03  AM, Justin Mason wrote:

>
> Patrice Fournier said:
>
>> I was wondering if there was someplace where we could have a new rule
>> tested automatically against both spam and non-spam corpus to see how
>> effective it is. Is this something everyone must make on their own or
>> there is some email/web interface to such a service someplace?
>
> I like the idea -- but finding time to write a CGI is the issue.
> Also there's security implications for the host, as Perl 5 regexps
> allow shelling out into arbitrary perl code, so that would have to
> be investigated, and sanitising code written... :(

And there's also the computation time involved in checking a 
rule -- particularly when said rule might be poorly written and 
have unpleasant regex characteristics.  Could easily lead to 
deliberate of accidental DoS attacks against the machine hosting 
the CGI.  I think it's somewhat impractical unfortunately...



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Oh, it's good to be a geek.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to