Hi all,

fixed in assp 2.6.4 *SPAM-Evaporator* build 19309:

- IP-blocking was unexpected skipped, if PBextreme-blocking was not 
configured

- even if 'AllowCodeInRegex' was enabled, regular expressions with 
evaluation code were rejected by the regex-precheck
  known issue for 'AllowCodeInRegex': perl/assp variables used in regular 
expressions evaluation code are read and interpolated at the regex 
configuration time
                                      if such a variable is changed after 
configuration, this change is ignored inside the regular expression
  how ever - it is highly recommended to NOT enable this hidden feature 
('AllowCodeInRegex'). If regex files are not protected from unauthorized 
write access,
  assp/perl can be forced to execute any code at runtime!


Thomas




DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally 
privileged and protected in law and are intended solely for the use of the 

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no 
known virus in this email!
*******************************************************


_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to