Matt Kettler wrote:
While that fact is true, the recipient list is known BEFORE the data phase
begins.
Since SA isn't invoked until the DATA phase, you can decide to skip SA before
the DATA phase starts.
All you'd have to do is bypass scanning if any of the RCPT To: addresses are
part of the bypass list.
A slightly more refined version of this is to decide, when you get the
first recipient, whether this is going to be a bypass run or a
non-bypass run. If it's a bypass run, you issue temporary failures for
all recipients that do want spam filtering. If it's a non-bypass run,
you issue temporary failures for all recipients that don't want spam
filtering. That way everyone gets what they want (at the cost of some
delay.)