[rt-users] preventing ParseNewMessageForTicketCcs abuse

[ktm at rice.edu]

On Tue, Feb 21, 2012 at 04:04:01PM +0000, Roedel, Mark wrote:
> Has anybody made any tweaks to keep ParseNewMessageForTicketCcs from being abused (say, by restricting the number of Ccs or limiting the accounts that can add Ccs in that manner)?


Yes. Here is the bit we added to local/lib/RT/Interface/Email.pm for 3.8.5:

*** Email.pm_limitCcs	2011-03-04 09:43:40.000000000 -0600
--- Email.pm	2010-02-24 16:18:22.000000000 -0600
***************
*** 851,874 ****
  
          push @res, $address;
      }
- 
-     #
-     # Limit the number of Cc addresses that we add to a
-     # ticket during the initial create to minimize damage
-     # to our Email reputation when SPAM slips through DSPAM.
- 
-     $RT::Logger->debug("$#res Ccs");
-     if ( $#res > 4 ) {
-         my @riceCc;
-         my @nonriceCc;
-         @riceCc = grep /rice.edu/i, @res;
-         @nonriceCc = grep !/rice.edu/i, @res;
-         $RT::Logger->debug("$#riceCc riceCcs, $#nonriceCc nonriceCcs");
-         if ($#nonriceCc > 3) {
-             @res = (@riceCc, @nonriceCc[0..3]);
-         }
-     }
- 
      return @res;
  }
  
--- 851,856 ----