On Thu, Feb 16, 2006 at 11:21:29PM -0500, Stuart D. Gathman wrote:
If you immediately reject invalid
RCPT TO, spammers use that to launch dictionary attacks. By delaying
until DATA, they get no information on valid emails.
Or you could delay a couple seconds for every invalid RCPT TO.
(Hmm. I have a milter idea. :-) )
And delaying until DATA means you have to reject--or greylist--the whole
lot.
--
Mark Shewmaker
mark(_at_)primefactor(_dot_)com
-------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com