Hello, I just wanted to update everyone since it was a bit heated in respect to the methods I was using.
Our maillog file shows that we have rejected 3,365,962 month to date. This is above and beyond my original firewall rules, and then my new over the top added country based CIDR rules. This is a lot of junk for a few hundred users. Firewall numbers of blocked connections ( we know it doesn't necessarily equate 1 to 1 email to reject ) has over 11 million which is double the previous month. I started thinking about CPU cycles etc, read a suggestion about running the SA CIDR, but that would really bog down the server. Finally I thought if I create an RBL in DNS locally with my IP numbers I will give the client an instant bounce message ( better than timing out ) and should probably use about the same amount of resources as the firewall method. Would you agree (opinions are important)? Just wanted to share the stats info and get your opinions. Thanks for all your feedback and support even when you didn't agree with my ideas! Joey