On 27/02/18 20:36, J Doe wrote: > Hi, > > I read in both the Postfix man file (man 5 postconf), and the SMTP RFC > (5321), that VRFY can be disabled on a site-by-site basis. > > I disabled this on my server for port 25 but am wondering if I should leave > this enabled on my Postfix instance that provides submission (587) ? I have > confirmed that by editing main.cf and master.cf it is only available on > submission and requires SASL authentication before working. > > Are there modern MUA’s that authenticated users may use that make use of VRFY > (perhaps by checking e-mail address validity before sending, while the > message body is still being composed), or am I better off leaving it disabled > everywhere ? > > Thanks, > > - J
I can't think of a compelling reason either to enable VRFY or to disable it. Disabling it stops people abusing it, but then they can just use RCPT TO to get the same information in most cases. I disabled it since I can't see any use for it. John
