Please look at these Exim log entries

[dsr at tao.merseine.nu (dsr at tao.merseine.nu)]

On Sat, Sep 17, 2005 at 12:45:55PM -0400, Bill Horne wrote:
> 1. This looks like a dictionary attack, but my wife is a nurse and 
> she has used epocrates, although not with either "cresler" or "mosher" as 
> a user name: is it a probe?
> 
> 2005-09-16 23:25:36 verify failed for SMTP recipient
> CRESLER at TIMESUCKER.HOMELINUX.ORG from
> <0640908066008.3953720 at b.prod.survey.epocrates.com>
> H=(smtp.epocrates.com) [63.241.66.159]

Yeah, probably.

> 2. Will disabling verify break anything?

No. Expecting VRFY to work is obsolete.

-dsr-

-- 
We don't need smaller government.
We don't need bigger government.
We need competent government.