IP address reputation, BorderWare
    Chris Yuzik 
    itdept at fractalweb.com
       
    Thu Mar 22 23:13:15 CET 2007
    
    
  
Denis Croombs wrote:
> Over 90% of the email that the 200+ domains I protect is spam from spoofed
> email address's, why should I send an email to these poor sods who have had
> they email address spoofed just to fill up their email inbox.
> As far as I am concerned it is a joke system that compounds the spam issue.
>   
But Denis, sender address verification (SAV) doesn't actually send an 
email to the recipient--it aborts the SMTP transaction before really 
sending a message. Nothing ends up in the recipient's mailbox, or in the 
recipient's mail server's queue.
Here is an explanation from Wikipedia:
    A mail server can try to verify the an address by making an SMTP
    connection back to the mail exchanger for it (found via the usual MX
    records <http://en.wikipedia.org/wiki/MX_record>), pretending to be
    creating a bounce, but stopping just before any e-mail is sent. The
    commands sent out are:
        HELO <local host name>
        MAIL FROM:<>
        RCPT TO:<the address to be tested>
        QUIT
      
    This technique is technically compliant with the relevant SMTP RFCs
    (RFC 2821 <http://tools.ietf.org/html/rfc2821>).
Given this information, have you changed your opinion on SAV?
Cheers,
Chris
    
    
More information about the MailScanner
mailing list