SMTP-time spam rejection by IP

[Philip Waters]

I've read several documents on how it isn't useful to have a spam rule set based on an IP address because spammers are constantly changing their ip address. 

Does there exist, however, a script that would integrate with mailscanner to identify an ip address of someone sending massive amounts of messages in succession to which our server only responds "user unknown" (indicating a spammer). Furthermore, would it be possible to dynamically take that ip address and immediately block or tarpit the sender for a given time.

Is there any existing active filter that modifies the access.db on the fly based on failed reverse DNS lookups? would it be possible to have mailscanner send a message to like a 7-layer switch instructing it what type of message to just DISCARD.

If there is anyone who has already implemented something like this I'd be interested to know.

There's no place like root#cd ~/

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20040610/8aa83e7c/attachment.html