ietf-smtp
[Top] [All Lists]

Bounce/System Notification Address Verification

2005-06-27 09:39:44

From: "Keith Moore"

which allows you test for zombie/open relay.  Maybe the host
will say yes to> everything.

if the server says yes to everything, it doesn't mean it's a zombie or
open relay, nor does it mean that the address is bogus.  It just means
that the server isn't doing checking at RCPT TO time.  nothing in the
standards requires it to do so.

Very true.  The system can be operating in post SMTP mode which to me, means
the system is probably already abused with bounce-based attacks and/or
over-burden with bounce requirements if its operating in a standard expected
SMTP mode and not just dumping non-deliverable mail.

Question:

What is the BCP for allowing multiple RCPT TO when the return path is NULL?

Don't most system use accept one recipient for a null return path?

--
Hector Santos, Santronics Software, Inc.
http://www.santronics.com






<Prev in Thread] Current Thread [Next in Thread>