I don't understand: why can't the somebody do a telnet to port 25 and "vrfy nobody" to see if it points to /dev/null? Or find out if mail is piped to a script?

Try that on andrew.cmu.edu