Re: [Exim] Final Peer Review Sought: "Spam Filtering for MXs…

Chris Meadors <exim@???> wrote:
> On Mon, 2004-07-12 at 20:48 +0100, Peter Bowyer wrote:
>> Tor Slettnes <tor@???> wrote:
>>> It is true that sender callouts are of limited use, since they only
>>> verify the validity, not the authenticity of the sender address.
>>> But out of curiosity, what is the issue/why are these sites being
>>> annoyed by the callout attempt?
>>
>> If your domain is the victim of a joe-job, a storm of sender
>> callouts is indistinguishable from a storm of bounces.
>
> But potentially more friendly, as there is no DATA, just a few lines
> of SMTP dialog, and the results are cached.

A typical joe-job involves made-up sender addresses, and a well-configured
victim will be 550ing the recipient in both cases - hence indistinguishable.

> I wish people would do callouts against my domains before accepting
> mail.

Personally I agree. But the likes of AOL probably don't - I think it's a
scale thing.

Peter