As you know ASSP already has ways to check if a given mail recipient exists, either using LDAP or using a flat file; fact is that sometimes one doesn't have the ability to perform LDAP queries and using a flat file may be unpractical/unfeasible, so, at the moment, there's no way to perform recipient checking
Now, there may be another way to perform such a check w/o using LDAP or a flat-file and which should work with most/all mailserver; I'm referring to the SMTP "VRFY" command; while usually the command is disabled to avoid dictionary attacks, in our case it may be a good help; the idea is to setup ASSP so that it will intercept and block VRFY commands coming from an external host (ASSP may even "tarpit" hosts sending such cmds) but ASSP will internally use the command (while talking to the backend SMTP server) to check if a given mail address exists (just like it does now using LDAP) This would allow ASSP to perform address verification even if the SMTP server doesn't implement LDAP or if the use of LDAP is impossible and I think it may be of great help; I don't know if it may be particularly complex to implement such a feature, but I think it may be worth ------------------------------------------------------------------------- Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://sourceforge.net/services/buy/index.php _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
