Re: [Qmail-scanner-general]INCONTROLED SPAM

[Aecio F. Neto]

[EMAIL PROTECTED] wrote on 11/06/2005 10:00:29:

> Anyway - you simply want qmail to do something that it's design
> precludes it from doing (qmail-smtpd simply does not have PERMISSIONS
> to check weather the recepient exists. It was made that way because of
> security issues - any bug in SMTP code won't give attacker control of
> your system).

Not true, there ARE ways to verify that recipient exists!

Check this out:
http://www.fehcom.de/qmail/spamcontrol/README_spamcontrol.html

"
b) the Recipient address is checked against all readable cdbs listed in control/recipients and accepted if

    * either the entire address matches,
    * a VERP-part of the address matches,
    * the domain part of address is wildcarded or,
    * for the unqualified address an entry exist in the form '[EMAIL PROTECTED]'.
<snip>
Instead of a SMTP 450 Reply, you may want qmail-smtpd to return "550, sorry no mailbox by that name (#5.7.1)". In conf-spamcontrol use 'recipients550=yes'. The advantage is, that a potential Sender receives a quick bounce with the propper reason, instead a deferred one. The disadvantage is, that this might be used for address harvesting.
"

It works pretty fine for me up to now.

I am not defending this solution as *best one*. I am just indicating one I know.
Might exist many others out there or you can write your own...

Regards.