RE: [IMail Forum] SMTP32.EXE

[Len Conrad]

It was pointed out here that SMTP VRFY unchecked preempted spammers from a 
"dictionary attack" on your accounts.

VRFY function :  "I want you to verify that <username> is on your SMTP 
server".  ie, VRFY has nothing to do with security.

If checked, and the spammers is lucky in his harvesting, your server tells 
him 'yes, that user is here'.

If unchecked, the spammer gets no response.

Len

==============

>Make sure Disable SMTP VRFY is NOT checked. I believe the authentication
>uses VRFY to check to see if the user is homed on the server. Someone
>correct me if I'm wrong.
>
>Anyone have any comments about enabling SMTP VRFY? Are there any serious
>security concerns?

Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.