Re: Postfix VRFY

2019-11-20 Thread Philipp Ewald
oh damn it... i don't mean the MTA i think i mean MDA? i would suggest to check MX-record or/and reply-to or/and SMTP mail from so postfix can (maybe)probe only postmas...@doamin.tld and cache the result Am 20.11.19 um 15:01 schrieb Wietse Venema: Philipp Ewald: BTW: by reject_unverified_send

Re: Postfix VRFY

2019-11-20 Thread Wietse Venema
Philipp Ewald: > BTW: > by reject_unverified_sender: > would it not be better to check sending server? like accept connection > on port 25 not whole sender? this way dont work with mailing list ( it > would but its produce many mail probing) That would be immensely stupid idea. First, there is n

Postfix VRFY

2019-11-20 Thread Philipp Ewald
Hi folks, i have just installed postfix on Debian 10 and want to test "SMTP VRFY Command" i have noticed that postfix only probing a mail to vrfy the recipient. Is there any another way as probing mail delivery? at this point we use a custom script ( we want only "default-tools") BTW: by rej

Re: Postfix vrfy

2009-07-25 Thread Benny Pedersen
On Sat, July 25, 2009 19:41, mouss wrote: > That said, I personally disable it because I don't see the value it > brings. but that doesn't make me feel more secure. you prefer to see the probe email if probed ? :) maybe i dont understand the power of vrfy :/ -- xpoint

Re: Postfix vrfy

2009-07-25 Thread Benny Pedersen
On Sat, July 25, 2009 19:00, Damian Myerscough wrote: > VRFY command because it allow attackers to see what users > were valid e.g. local users could be identified. imho it does not make sense, what happend if sender try sending email to recipient and parse the results ? -- xpoint

Re: Postfix vrfy

2009-07-25 Thread mouss
Damian Myerscough a écrit : > Hello, > > I have been recently playing with Postfix a lot and I was curious of the > consequences of disabling the VRFY command. I have disabled the > VRFY command because it allow attackers to see what users > were valid e.g. local users could be identified. > the

Postfix vrfy

2009-07-25 Thread Damian Myerscough
Hello, I have been recently playing with Postfix a lot and I was curious of the consequences of disabling the VRFY command. I have disabled the VRFY command because it allow attackers to see what users were valid e.g. local users could be identified. -- Regards, Damian Myerscough