So basically no one should be using catch-all mailboxes?
On 1/21/07, Alexey Loukianov <[EMAIL PROTECTED]> wrote:
George Sweetnam wrote: > You shouldn't set the catchall to bounce though... select delete. The > dictionary attacks will harvest the valid users if you select bounce! Agreed. Accordingly to the latest SMTP/MTA RFCs, all mail, directed to the non-existing addresses should be bounced in SMTP session. To prevent harvest attacks SMTP daemons may implement tarpeting. In case catchall address is used, NO bounces should be sent back? but RFCs recommends against using catchall, as it makes your mailserver act as a "black hole". Violating the rules above will shortly result in blacklisting your server by services like SpamCop and RFC-Ignorant. -- Best regards, Alexey Loukianov mailto:[EMAIL PROTECTED] System Engineer, IT Department, Lavtech Corp. --------------------------------------------------------------------- QmailToaster hosted by: VR Hosted <http://www.vr.org> --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
