--On Samstag, März 13, 2004 12:45:38 -0500 Hector Santos
<winserver(_dot_)support(_at_)winserver(_dot_)com> wrote:
[...]
In my technical view, an anti-probing logic should be for multiple RCPT,
not on the first RCPT and fortunately, the majority of responsible mail
systems don't operate that way. It would kill the system. Look at this
way, RFC 2821 says you must accept the local message anyway (for null
return paths), so what's the point of delaying it? All you are doing
is hurting innocent victims.
I think you hvae misunderstood me. I do not delay responses, only sometimes
my backup MXes mitght take a few minutes to respond because they are
heavily loaded (486 with 32MB RAM, good enough for a backup MX but sluggish
during maintenance ...).
With regard to IP blocks: I do this only when I start noticing them in the
IDS log. If you want to verify an address, just use VRFY (yes, it works)
and don't simulate an actual mail delivery that you abort.
Ralf