Meng Weng Wong wrote:
Folks interested in implementing SES (which has been
reinvented as BATV by some people in the MARID group) should
review
http://www-uxsup.csx.cam.ac.uk/~fanf2/hermes/doc/antiforgery/cam.txt
http://asarian-host.net/srs/sendmailsrs.htm
It would be interesting to hear reports of how well it works
in the field, and what the costs and benefits are for a
large deploying site.
Despite the one layer-conflicted ezmlm setting to use the envelope-from for
checking membership-status, I have been using my own SES implementation,
almost from day one, and with great success. I even put a notice in my SMTP
banner:
--- 220- Effective immediately: Asarian-host no longer accepts
--- 220- DSN recipients without valid SRS signature.
It really cuts down an inordinate amount of spam. Well worth the
disadvantage of dealing with ezmlm.
- Mark
System Administrator Asarian-host.org
---
"If you were supposed to understand it,
we wouldn't call it code." - FedEx