[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: OT: sorbs blacklisting scam



This one time, at band camp, Andrew Miehs said:
> 
> This argument seems to becoming a religious discussion regarding
> point 2.  - Accepting mails for a domain before know whether the
> person really  exists.
> 
> The mail protocol still allows for this.
> 
> Maybe this is something that should at some stage be considered bad
> practice?

It is already strongly discouraged.

> Many small companies have this problem, ie: protection your MS
> Exchange Server behind a postfix server... How do you want them ALL to
> fix this?  There are unfortunately no - out of the box scripts to
> query your exchange  server and fill your mail server configs.

There are plenty of ways to do this - exim can do recipient callout
verification.  Sendmail, postfix, and exim at least can query the LDAP
interface that AD provides.  There are other ways of doing this
statitcally as well, like grabbing a list of valid usernames once every
so often.  Having a stupid backend is no excuse for being a stupid
frontend.

Take care,
-- 
 -----------------------------------------------------------------
|   ,''`.                                            Stephen Gran |
|  : :' :                                        sgran@debian.org |
|  `. `'                        Debian user, admin, and developer |
|    `-                                     http://www.debian.org |
 -----------------------------------------------------------------

Attachment: signature.asc
Description: Digital signature


Reply to: