IP address reputation, BorderWare

[Raymond Dijkxhoorn]

Hi!

> I see your point. Perhaps it depends on the order with which these checks 
> happen.
>
> My understanding is that our servers don't do SAV unless the inbound message 
> is for a real recipient (or alias). We prohibit the use of a "catch-all" 
> alias, so a dictionary attack on our server won't really have much effect on 
> you. Or am I wrong (we use SMF-SAV with Sendmail)? If I'm wrong, and the 
> milter initiates a verification even before checking to see if a recipient 
> exists, then I may have to re-evaluate our stance.

We do the same, only check on valid users ... on our end, then check the 
remote.

Bye,
Raymond.