Hi All, I was wondering if it is possible, or even etiquette to have the following spam filter: One that accepts the incoming tcp port 25, and then does the checks in realtime. ie: EHLO; mail <check with rbl lists if IP or reverse lookup is an open relay, if so, send a 530 Access Denied and exit> 250 myserver MAIL FROM: <[EMAIL PROTECTED]> <check system wide blacklist, if exists, then send 530 Access Denied and exit> 250 Ok MAIL TO: <[EMAIL PROTECTED]> <check user blacklist, if exists, then send a 550 recipient address rejected> 250 Ok DATA Then compare the data line by line, and if it is considered spam status, stop it at that line with a 530 Access Denied and Exit.
. Queued..... This would immediately tell the spammer to stop trying to send to this address, as he is just waisting money trying, or he will develop a new email format that gets around the spam trap - to which you would need to update the trap I suppose. Does this sort of thing not exist? or is it not a good idea? Cheers, Scott -- Scott Ragen Support Manager/IT Administrator Roadtech Systems www.roadtech.com.au PH: +61 2 9807 3516 FAX: +61 2 9808 5294 -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug