2026-10-25 11:34 UTC
which you should probably be able to see
I’ve heard (from one person on the internet) some servers might scan for presence of catch-all by sending e-mail to long random string e-mail at the domain, and then sending spam to anything if it doesn’t get rejected.
Replies (1)
-
@historicaldocuments@lemmy.world 2026-10-25 20:47
No idea. My first thought would be that sending an email to every possible random string would be a quick way to get flagged by whatever big city backend blacklisting goes on. If I were trying to set up my own email server for my own domain, unless there’s some rule that says I have to, I’m not sending a no-such-address message back. Making a success and a failure look different to the attacker (which I’m going to treat spam senders as for the purposes of histrionics) is giving them a signal for free.