On 2009-12-27 John Peach wrote: > On Sun, 27 Dec 2009 23:34:47 +0100 Ansgar Wiechers wrote: >> Perhaps I'm missing something, but I fail to see the big difference >> when it comes to address verification. Regardless of whether you use >> VRFY or MAIL FROM/RCPT TO/QUIT, if the address is invalid the >> response will be >> >> 550 5.1.1 <address_to_be_verif...@example.net>: Recipient address rejected >> >> If it isn't, the address can be considered verified. Unless, of >> course, the server produces backscatter. Which it shouldn't. > > No it is not. > > 502 5.5.1 VRFY command is disabled > > just tells you that VRFY has been disabled; not the validity of the > address.
You're missing the point. When you find that VRFY is disabled, you'd simply use MAIL FROM:<a...@example.com> RCPT TO:<address_to_be_verif...@example.net> QUIT instead of VRFY. If the server doesn't produce backscatter (i.e. accepts first, bounces later), the result of the above sequence will tell you whether or not <address_to_be_verif...@example.net> is valid. Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky
