kevin lyda <[EMAIL PROTECTED]> writes: > the only limit i could see that would make sense would be to limit > confirm requests per address (crpa's) to one per day (somewhat like > mailman for instance).
The problem of course, is that currently there is a 1-to-1 correspondence between an unconfirmed message and a confirmation request. So, if I send you 5 messages, I'll only get back one confirmation request leaving 4 messages stuck in your pending queue. The same problem doesn't exist for something like vacation, where there is no penalty for limiting responses to one per day. TMDA 0.62 and above does have per-sender auto-response rate limiting, controlled by the MAX_AUTORESPONSES_PER_DAY variable. One could tune this to their liking, keeping the above caveat in mind. In any case, it seems unlikely that in practice anyone would try this "attack" -- too much work for too little reward IMO. Cheers. _____________________________________________ tmda-users mailing list ([EMAIL PROTECTED]) http://tmda.net/lists/listinfo/tmda-users
