ok, well, thanks for testing that.  thats decent news, but i still don't
understand why it lets anyone make up an email as long as it's to @bluntz420
com and send it to any user or list on the domain.
Ah, we now know what the issue is.

You want a way for SMTP to authenticate the sender of incoming E-mail. Unfortunately, that doesn't exist. If you want that, you may want to try developing a method that would allow for it, and writing an RFC.

The way that SMTP works, the sender of an E-mail decides what they would like the return address of the E-mail to be -- just like when you write the return address on an envelope. In either case, you can use your own address, the address of someone else with or without their permission, or a fake address that doesn't even exist.

It is possible with current technology to determine with almost 100% accuracy whether or not the domain of the sender exists (Declude JunkMail checks for this, for example, to detect spam). However, it is impossible to tell with anywhere near 100% accuracy whether or not the E-mail address of the sender exists. The last thing you want is to reject E-mail from a customer's dying great-great-grandmother because she uses an ISP whose backup mailserver doesn't know it is a backup (a *VERY* common problem -- how about every reading this take a minute to make sure that your backup mailserver accepts your E-mail -- you can do this by entering your E-mail address at http://www.DNSreport.com in the "Mail Test" box).

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches both viruses and vulnerabilities in E-mail, with no annual licensing fees.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


Reply via email to