Re: Is predictable spam filtering a vulnerability? (silently dropping messages)
>> A 5xx failure code is a lot more friendly than actually generating a
>> DSN.
> Well, you're causing the sending/relaying host to generate the DSN.
Only if the sending host is running a real MTA. If it's ratware
talking to you, it won't do anything of the sort. _That_ is the real
gain of an SMTP-layer rejection over accept-and-bounce: it doesn't
generate DSNs when talking to ratware.
> Quite possibly back to some sod who has been joe-jobbed.
But in that respect it's no worse than generating a DSN yourself.
Better sometimes and no worse the other times - sounds like a win.
/~\ The ASCII der Mouse
\ / Ribbon Campaign
X Against HTML mouse@xxxxxxxxxxxxxxxxxxxxxx
/ \ Email! 7D C8 61 52 5D E7 2D 39 4E F1 31 3E E8 B3 27 4B