> > To test the validity of an email address, one does not need to send an > > empty message. As long as no DATA is sent, the SMTP transaction is > > aborted. And you have already checked that the RCPT was ok. > > Not true. Testing as far as RCPT TO can determine if an email address > is sure to fail, but it cannot determine that it's sure to succeed.
Agreed, but in my case it saved some typos. And I would not think that spammer are dumb enough to send empty email just to see what would bounce. because by the time they are done with their testing, they will end up blacklisted/blackholed or whatever. I remember seeing something about graylist for SA. Wouldn't it be possibl to implement such a feature that sender who do not reach the threshold get grey listed, and that bad score is added to any further message they send. Of course if further messages are OK, the bad score should diminish. Olivier _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk