> You are going about this all wrong. First step is finding a suitable > blunt instrument and getting the developers to fix it. The second step > is configuring rate limiting, along the lines of '1000 mails/hour'; > this will allow a large batch of e-mail to get through immediately, but > stop spammers. What you're planning now is both less effective and way > more work. >
exactly. spamd is not useful for this. just rate limit it. or better yet, rate limit the source connections into the web script, so one source can only make X many connections in 10 minutes or something - also easily doable with pf. -Bob