SA Bugzilla – Bug 49
Use of user-defined rules is inconsistent
Last modified: 2002-06-15 03:58:08 UTC
Using spamassassin, user-defined rules (ie. rules in ~/.spamassassin/user_prefs) are obeyed. Using spamc/spamd, they are not obeyed. This inconsistency is annoying. The two interfaces should be as equivalent as possible. For admin flexibility, there should be an 'allow_user_rules' config parameter (only recognized for the system config, of course) that would control both spamassassin and spamc/spamd. For security, this should default to false. It would be nice if user-defined rules in a non-allow_user_rules environment triggered a warning, but I'm not sure of the right way to get that warning to the user. Printing to stderr won't cut it. Add a new header perhaps?
I'll leave it inconsistent -- such that spamassassin ignores the 'allow_user_rules' parameter, while spamd does not. Also 'allow_user_rules' will be off by default. Not sure what the best way is to get a message to the user -- we could "cheat" and assume the user's going to be using outlook or OE, and use the X-Message-Flag field, which will then show up nicely in their MUA. Non-outlook people would just see it as a regular header.
Reassigning to list -- originally accepted before bugzilla policy change/clarification
Created attachment 69 [details] Implements allow_user_rules
Woohoo! attachment 69 [details]. Anyways... This implements the config option allow_user_rules, and includes a nice warning about why it isn't safe. Because of the way conf files are set up now, it would be tough to have extra rules give a warning to the user... but I could try...
Thanks Duncan. I guess I might as well stick this in 2.20 before release!