Preventing ParseNewMessageForTicketCcs abuse

RT Users
1

Has anybody made any tweaks to keep ParseNewMessageForTicketCcs from being abused (say, by restricting the number of Ccs or limiting the accounts that can add Ccs in that manner)?

2

Has anybody made any tweaks to keep ParseNewMessageForTicketCcs from being abused (say, by restricting the number of Ccs or limiting the accounts that can add Ccs in that manner)?

Yes. Here is the bit we added to local/lib/RT/Interface/Email.pm for 3.8.5:

*** Email.pm_limitCcs 2011-03-04 09:43:40.000000000 -0600
— Email.pm 2010-02-24 16:18:22.000000000 -0600
*** 851,874 ****

      push @res, $address;
  }

  • #

  • # Limit the number of Cc addresses that we add to a

  • # ticket during the initial create to minimize damage

  • # to our Email reputation when SPAM slips through DSPAM.

  • $RT::Logger->debug("$#res Ccs");

  • if ( $#res > 4 ) {

  •     my @riceCc;

  •     my @nonriceCc;

  •     @riceCc = grep /rice.edu/i, @res;

  •     @nonriceCc = grep !/rice.edu/i, @res;

  •     $RT::Logger->debug("$#riceCc riceCcs, $#nonriceCc nonriceCcs");

  •     if ($#nonriceCc > 3) {

  •         @res = (@riceCc, @nonriceCc[0..3]);

  •     }

  • }
return @res;
    }

— 851,856 ----