Michael R. Brumm wrote:
Michael R. Brumm wrote:
-SRS is ONLY required by forwarders (not senders or receivers), and
extensions to SMTP are NOT needed.
-SUBMITTER is required by forwarders AND receivers, and an extension to SMTP
is needed. And, worst of all, bounces can be forged.
Stuart D. Gathman wrote:
-RSP (Reverse Source Path) is ONLY required by forwarders, and extensions
to SMTP are NOT needed.
You left out the fact that RSP also allows injections of forged bounces.
1. Don't bounce, reject.
2. If you must bounce, unwind the RSP.
3. If you must bounce and don't unwind the RSP, don't
be surprised to find your bounces getting rejected.
--
Daniel Taylor