On Fri, 24 Apr 2009, Adam Katz wrote:
I read recently that that's a Bad Thing (and I'm leaning on agreeing):
http://www.backscatterer.org/?target=sendercallouts
The most compelling argument on that site is one that almost slips by
un-noticed. A spammer could very well forge a honeypot as a sender
address, causing my system to 'send mail' (a verify) to a honeypot, and
possibly get blacklisted. And this would also open up a way for spammers
to 'poison' honey pots by having them blacklist so many legitimate
servers that the blacklists have to be thrown out.... Ouch.
Mind you, I receive mail on a different IP address than my outgoing mail.
So even if the incoming server was blacklisted for verifies, this wouldn't
impede my legitimate outgoing mail. Or would it....? Hmmmm......
- Charles
