On Tue, 8 Apr 2014, [email protected] wrote:

On 04/08, John Hardin wrote:
And freqs contains no evidence of my new rule.  user_prefs still has that
new rule in it.  I'm confident that file is in the right place.

Did you enable allow_user_rules ?

I had not, but adding it didn't help.

$ grep -c FOUR_BLANK_LINES freqs
0

$ cat spamassassin/user_prefs
bayes_auto_learn 0
lock_method flock
bayes_store_module Mail::SpamAssassin::BayesStore::SDBM
use_auto_whitelist 0
whitelist_bounce_relays example.com
score ANY_BOUNCE_MESSAGE 0
score BOUNCE_MESSAGE 0
trusted_networks [redacted]
internal_networks [redacted]
allow_user_rules 1
rawbody FOUR_BLANK_LINES /\r?\n\r?\n\r?\n\r?\n/ms

I think allow_user_rules needs to go into the system local.cf. If the user can put it into their own private config file it offers no security.

A piece of advice: put the rules into a sandbox .cf script instead. You don't need to check it in, and compiling SA prior to the masscheck will incorporate them into the rules.

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 [email protected]    FALaholic #11174     pgpk -a [email protected]
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  Christian martyrs don't explode.                         -- Marisol
-----------------------------------------------------------------------
 5 days until Thomas Jefferson's 271st Birthday

Reply via email to