Quarantine or save SPAM based on rules

[Julian Field]

At 16:16 26/11/2003, you wrote:
>We've got a few customers in our network that are sending SPAM. We have a a
>firewall and every IP address is NAT so the IP addresses are different each
>time.
>
>Is there a way to quarantine or save SPAM emails based on an IP address
>range?
>
>For example, if IP X.X sends SPAM, it saves it.

Use a ruleset saying something like
From:   12.23.34.45     store
FromOrTo:       default deliver

and set "Spam Actions" and "High Scoring Spam Actions" to point at it. You
can put all sorts of network definitions in rulesets such as
12.23.34.45
12.23.34
12.23.34.
12.23.34.0-12.23.35.255
12.23.34/24
12.23.34/255.255.255.0


>My current solution is I forward all SPAM to a mailbox, every 5 minutes GREP
>for my IP, if found then copy it, else delete box.

--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC  7222 11F6 5947 1415 B654