Zhou, Yan:
> Hi There,
>
> With Postfix set up by default, it will send a bounce message to sender
> if it cannot deliver the message. But I can create SPAM message with
> some innocent sender address and send to Postfix. Then, the innocent
> sender will get undelivered email from Postfix.
Solution: do not accept mail for a non-existent recipients.
> Even if we can solve the above problem without disable bounce, we still
> need to do that anyway. We are exchanging only-encrypted messages
> between sender & recipients, so the concept of bounce does not apply
Postfix does not decrypt mail, so there is no information leak.
Wietse
