OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Sender Verification Doc

From: David Cary Hart (PostfixMTATQMcube.com)
Date: Wed Nov 01 2006 - 21:18:52 CST


I think that SV is a terrible idea to begin with. I will
spare you the rant. Nevertheless:

        "By default, Postfix probe messages have
        postmaster$myorigin" as the sender address. This is SAFE
        because the Postfix SMTP server does not reject mail for this
        address."

That doesn't make sense to me. Doesn't that presuppose that the
probed server is running Postfix or am I suffering from a senior
moment? The concept makes sense - just not the explanation.

        "You can change this into the null address
        ("address_verify_sender ="). This is UNSAFE because address
        probes will fail with mis-configured sites that reject MAIL
        FROM: <>, while probes from 'postmaster$myorigin' would
        succeed."

While I agree, that's not limited to mis-configured servers.
Rejecting null sender seems to be the most effective means of
eliminating backscatter. Is that an errant conclusion on my part?

--
Our DNSRBL - Eliminate Spam at the Source: http://www.TQMcube.com
               Don't Subsidize Criminals: http://boulderpledge.org