On 10/03/2024 08:51, Cyborg via Exim-users wrote:
>
> @Jeremy:
Was that aimed at me? There is no "@" in my name.
> Why aren't the extended restrictions for the "$run{}" attack the new defaults?
Because nobody thinks it useful enough?
(I suspect it was one of the attacks that led to the introduction
of taint-tracking, for which a shedload of people bitched and
moaned, and worked hard on identifying ways to evade. I think
I saw a grand total of one approving comment).
But, hey, it's a part of the configuration that is under your
control. You want something there, you can add it.
--
Cheers,
Jeremy
--
## subscription configuration (requires account):
##
https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@???
## Exim details at
http://www.exim.org/
## Please use the Wiki with this list -
http://wiki.exim.org/
