Spammers harvesting addresses

Bill Moran wmoran at
Tue Apr 22 05:29:34 PDT 2003

Stephen Hovey wrote:
> OTHER than a unsecured fingerd, how else might spammers be harvest email
> addresses?  Every so often Ill end up with spam in an account created for
> some specific purpose, which never sends email, and which is a nonsense
> made up userid (thus hard to think of as being spammed on a lucky guess)

Isn't there an EXPN command that lists available users on an SMTP server,
that's usually disabled by default just for this reason?  Memory could be
bad on this one but it's something to look into.

Also, why would you be so suprised if spammers just tried every possible
combination of letters?  Hell, they're probably using someone else's
server (that they've cracked) so why should they worry about lots of

Bill Moran
Potential Technologies

More information about the freebsd-questions mailing list