[Linux-disciples] Postfix Auto-Blacklist

[Adam Rosi-Kessel]

Bostoncoop gets a lot of viral email. Usually the sender is something
like "webmaster at bostoncoop.net" and the recipient is every random name,
e.g., "ted at bostoncoop.net".  I usually catch it after a while and add it
to the postfix access file to reject.  In the meantime, it does guess
some legitimate bostoncoop user names (since many of us just use our
first names as email addresses) and some users get viruses.

I haven't heard any complaints but I'm not sure I would know.

I'm wondering if there is some way to automate the blocking
process--after one or two emails where the *from* address is clearly made
up and @bostoncoop.net (and also the *to* address is a guess), I'd just
like to block the IP address from sending mail for a long while.

I could write another ssh_login_blocker type script to do it, but I
wonder if anyone knows of any more "built in" way to do this with
postfix?
-- 
Adam Rosi-Kessel
http://adam.rosi-kessel.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.bostoncoop.net/pipermail/linux-disciples/attachments/20050611/2396d77f/attachment.pgp