On Tue, Sep 12, 2006 at 11:24:37PM -0400, Matt Kettler wrote:
> might discover and publish and exploit for. Keeping allow_user_rules off
> protects you from future exploits in this area if you have untrusted users.

It's also worth noting that allow_user_rules makes spamd less efficient, at a
minimum because it has to rebuild all of the rule eval strings for every
message.

IMO, don't enable allow_user_rules unless you really need to do it.

-- 
Randomly Generated Tagline:
"We had no idea that part of our AAA dues were being spent on lobbyists who
 oppose just about everything having to do with public transportation. If
 AAA thinks that it's a good idea for every single person to get to work
 in 3000 pounds of iron, we sure don't want to help support such a silly
 idea. Cars stink. Everybody knows that."        - Tom Magliozzi

Attachment: pgpiWXcJ78RjK.pgp
Description: PGP signature

Reply via email to