> I thought that rejecting non-existent users at SMTP time was > considered a bad idea because now the spammer knows that any > messages that are accepted are valid email addresses. Is > this no longer considered a best practice?
Yes it's no longer considered best practice. The problem is that the accept-then-reject alternative wastes more resources due to accepting the whole message (what if it was an 8MB email?) and then bouncing back later. Also, it is possible to bounce the message back to forged from: addresses, wherease rejecting at SMTP time does not send a message back - it is the connecting MTA's responsibility to inform the sender. --- Chris Covington IT Plus One Health Management 75 Maiden Lane Suite 801 NY, NY 10038 646-312-6269 http://www.plusoneactive.com ------------------------------------------------------- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_idt77&alloc_id492&op=click _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
