[exim-dev] [Bug 855] Sender-callout-Verification should use …

Top Page
Delete this message
Reply to this message
Author: Peter Gervai
Date:  
To: exim-dev
Subject: [exim-dev] [Bug 855] Sender-callout-Verification should use VRFY not RCPT TO
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://bugs.exim.org/show_bug.cgi?id=855

Peter Gervai <grin@???> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |grin@???
           Severity|bug                         |wishlist





--- Comment #12 from Peter Gervai <grin@???> 2009-06-26 11:33:45 ---
There is possible merits in implementing a switch to be able to use VRFY
additional to the current method.

The positive side is:
- possibility to follow other people's advices about it ;)
- try to be nicer to others
- prevent religious anti-antispam people to blacklist it in backstreet RBLs

Negative side is:
- it would be close to useless as most sites disable VRFY altogether (which is
stupid since RCPT TO reveals the same, if not more, information)
- ..thus most people wouldn't use it anyway
- require some new code to be written


And to make it spelled out: we *do* need RCPT checks since it's the only method
working in today's environment. We cannot move over to VRFY unless it's
compulsory to properly support, and even then we can expect some people to
violate that and result fake responses.

So this is not a bug, but a wishlist item.


--
Configure bugmail: http://bugs.exim.org/userprefs.cgi?tab=email