On Sun, 2008-06-29 at 10:55 -0700, thadcoco wrote: > While if I can make this work at the procmail level, I would think it would > be better to use SA, because rules can be tested more easily using --lint. > Thoughts?
Where you do it depends on what tool chain you're using. Since you want to discard the message, you should do it as early as possible with the lightest-weight tool possible. SA can certainly add points for the message, but DA is a rather heavy tool for doing this. If procmail launches SA, then the logical place to deal with these messages is in a procmail rule *before* SA is invoked. Another alternative if you're using sendmail is to use milter-regex to look for that IP in a Received: header and reject the message with a 550 at SMTP time. -- John Hardin KA7OHZ http://www.impsec.org/~jhardin/ [EMAIL PROTECTED] FALaholic #11174 pgpk -a [EMAIL PROTECTED] key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 ----------------------------------------------------------------------- You do not examine legislation in the light of the benefits it will convey if properly administered, but in the light of the wrongs it would do and the harms it would cause if improperly administered. -- Lyndon B. Johnson ----------------------------------------------------------------------- 5 days until the 232nd anniversary of the Declaration of Independence