Rejecting Spammers

[John Rowan]

I've posted similar inquiries to sendmail's news group without receiving 
a successful resolution.  I have had feedback there but it wasn't 
something that could be implemented without impacting potential customers.

I, like most everyone else receiving email, receive trash where the 
Received from: only indicates a number.  Sometimes the number is 
negative.  I don't know the significance of the number, perhaps it is 
the ad campaign or the spammer's customer number.  I have been using 
procmail recipes to send their crap to /dev/null.  The procmail recipe 
is getting quite long.   In a very large majority of the junk I have 
noticed that the X-Mailer is The Bat! (see last line below).  Today I 
added a new section to the recipe that looks to see if the X-Mailer line 
is The Bat! and will be /dev/nulling that crap as well.  This is all 
well and good but it takes (ever increasing) cpu cycles to process each 
message (as the recipe gets longer and longer).  I also use sendmail's 
access.db to reject domain names and IP netblocks which is more 
efficient as it turns these morons away at the door with an "in your 
face" message informing them of the rejection.  Granted these jerks 
aren't going to care about one rejected message.  I take some 
satisfaction though when I see that 7000 plus junk emails have been 
rejected by the access database or by the real time black hole listing 
services that are also part of my sendmail configuration.

Long story short, does anyone here know of additional methods of turning 
these morons away upon connection rather than accepting their junk then 
having to have procmail examine / trash them?
 

Two recipes from my .procmailrc file:

:0
* ^Received: from 149051672
{
        LOGFILE= $HOME/spammerhiding
        :0
        $HOME/spammerhiding.log
}

:0
* ^X-Mailer: The Bat!
{
        LOGFILE= $HOME/thebatcrap
        :0
        $HOME/thebatcrap.log
}



Received: from -1214334648 ([58.38.104.145])
        by deleted  (8.11.6/8.11.6) with SMTP id k6KF5Mb16420
        for <deleted>; Thu, 20 Jul 2006 11:05:23 -0400
Received: from graphimpressions.com (-1217230040 [-1214449216])
        by goodstitch.com (Qmailv1) with ESMTP id 91710279CB
        for <deleted >; Thu, 20 Jul 2006 08:07:33 -0700
Date: Thu, 20 Jul 2006 08:07:33 -0700
From: "Conservationists F. Divinest" <dbmaker at graphimpressions.com>
X-Mailer: The Bat! (v2.00.9) Personal

-------------- next part --------------
A non-text attachment was scrubbed...
Name: rowan.vcf
Type: text/x-vcard
Size: 235 bytes
Desc: not available
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20060720/4bfce678/rowan.vcf