If you are running Exchange or Notes, it's a non-trivial interface to the
namespace to determine if a user is local...those who use a database can
often have the MX server and Email Application Server (POP/SMTP/HTTP)
share
the same tables and therefore reject dictionary attacks rather than
bounce
to non-existant email address (and watch the queue grow). Sure, you can
run
an LDAP interface to an Email server but often the dictionary attack is
less
load.
Sorry, what? Your justification for not doing BCP is that it's
"non-trivial" to do it on the software you've chosen?
Is it just me, or is this completely arse upwards?
--
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg