http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5410





------- Additional Comments From [EMAIL PROTECTED]  2007-04-12 10:16 -------
The timeouts could be used to DoS the machine by setting the timeouts to, say,
86400 and sending enough messages to tie up all the children.  I believe they'll
all time out after 600 seconds no matter what, but that's still a long time.

uridnsbl_max_domains... it affects resource usage... potentially the resources
of third parties that the admin (not the user) would be responsible to.  A
message with 50,000 domains in it (and a uridnsbl_max_domains setting to match)
sent a couple dozen times over the course of a day could quickly get you cut off
from public mirrors.


Although I still think they should all be is_admin, I could see the settings
being changed to is_priv.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

Reply via email to