Hi All,
I was wondering if it is possible, or even etiquette to have the following 
spam filter:
One that accepts the incoming tcp port 25, and then does the checks in 
realtime.
ie:
EHLO; mail
<check with rbl lists if IP or reverse lookup is an open relay, if so, 
send a  530 Access Denied and exit>
250 myserver
MAIL FROM: <[EMAIL PROTECTED]>
<check system wide blacklist, if exists, then send 530 Access Denied and 
exit>
250 Ok
MAIL TO: <[EMAIL PROTECTED]>
<check user blacklist, if exists, then send a 550 recipient address 
rejected>
250 Ok
DATA
Then compare the data line by line, and if it is considered spam status, 
stop it at that line with a 530 Access Denied and Exit.

.
Queued.....

This would immediately tell the spammer to stop trying to send to this 
address, as he is just waisting money trying, or he will develop a new 
email format that gets around the spam trap - to which you would need to 
update the trap I suppose.

Does this sort of thing not exist? or is it not a good idea?

Cheers,

Scott

-- 
Scott Ragen
Support Manager/IT Administrator
Roadtech Systems
www.roadtech.com.au
PH: +61 2 9807 3516 FAX: +61 2 9808 5294
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Reply via email to