At 1:49 PM -0400 2006-05-07, Christopher X. Candreva wrote:
> This does not scale. Please do not turn this on.
>
> If everyone did this, it would mean when someone forges my domain into a
> spam run, my servers will be hammered by all these requests to verify this
> bogus mail.
Postfix AVE has some intelligence built-in. Information about
verification failures and successes is cached, and I think the
positive and negative caching periods are separately configurable
(with reasonable defaults).
So, if someone forges your domain on a spam run, you'll get a lot
of sites around the world who contact your server once per day (or
once per hour, or however they're configured), and that's it.
This is a much more scalable solution than might appear at first blush.
--
Brad Knowles, <[EMAIL PROTECTED]>
"Those who would give up essential Liberty, to purchase a little
temporary Safety, deserve neither Liberty nor Safety."
-- Benjamin Franklin (1706-1790), reply of the Pennsylvania
Assembly to the Governor, November 11, 1755
LOPSA member since December 2005. See <http://www.lopsa.org/>.
------------------------------------------------------
Mailman-Users mailing list
[email protected]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe:
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Security Policy:
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp
