VRFY is part of SMTP, but many disable this on their server, as it
allows enumeration of usernames on the system (useful for bruteforce
attacks.) Here, I would surmise that SPF is your only real option for
doing anything like this.

Perhaps I'm wrong though...


On Tue, 14 Sep 2004 16:06:10 -0500, Ben Bargabus <ben_b at ppdonline.com> wrote:
> Hi,
> Is there a way (or program/script I can run) to verify that incoming
> messages come from valid email addys and bounce those that don't?  I
> know that the from header can easily be forged but I at least want to
> verify that the forged header is a legit user name on that server.  Just
> looking for another way to cut down on sp at m here.  By the way, I run
> sendmail and procmail if that matters.
> Ben.

_______________________________________________
TCLUG Mailing List - Minneapolis/St. Paul, Minnesota
Help beta test TCLUG's potential new home: http://plone.mn-linux.org
Got pictures for TCLUG? Beta test http://plone.mn-linux.org/gallery
tclug-list at mn-linux.org
https://mailman.real-time.com/mailman/listinfo/tclug-list