The point of the catchall account is that we frequently have clients that email the wrong address.
I never felt the urge to protect everybody from themselves. If the sender doesn't have the right email address, tough mammary. I don't do "fuzzy" deliveries, which are necessarily manual.
If the communication is important enough, the client knows how to find the correct email address. This works for phone numbers, so it works for email addresses.
They misspell our employee's names and we don't want to trust the bounce they may or may not get, to let them know they are morons.
It's strictly a local decision if the nobody@ vulnerability is risk you accept.
As long as we have a catchall we get emails for nonexistent users
that's the (dictionary attack) vulnerability
, but beside that point, the Antispam is grabbing emails for these former users before it would even reach their accounts. I've tried it already, whacked their accounts completely from Imail
which means SMTPD should reject the mail as "unknown user", but it's not.
and yet my Spam account gets dozens of emails for these people.
hmm, sounds like imail anti-spam automatically turns on a nobody@ for every domain?
Can you see in your Imail logs any SMTPD rejects for "unknown user"?
Len
_____________________________________________________________________ http://MenAndMice.com/DNS-training: Seattle; London; San Jose; Wash DC IMGate.MEIway.com: anti-spam gateway, effective on 1000's of sites, free
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
