it indeed does look like a possible attack vector but per se might also happen in non-malicious cases.  So is not a clear indicator... may be worth for smth like postfix-dos  filter but IMHO not for this one. similar argumentation for the one below -- couldn't it happen simply on unstable connection without any malicious attempt?  so let's keep this PR solely for the original purpose.  