On Sun, 2008-06-29 at 10:55 -0700, thadcoco wrote:

> While if I can make this work at the procmail level, I would think it would
> be better to use SA, because rules can be tested more easily using --lint.
> Thoughts?

Where you do it depends on what tool chain you're using. Since you want
to discard the message, you should do it as early as possible with the
lightest-weight tool possible.

SA can certainly add points for the message, but DA is a rather heavy
tool for doing this.

If procmail launches SA, then the logical place to deal with these
messages is in a procmail rule *before* SA is invoked.

Another alternative if you're using sendmail is to use milter-regex to
look for that IP in a Received: header and reject the message with a 550
at SMTP time.


-- 
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 [EMAIL PROTECTED]    FALaholic #11174     pgpk -a [EMAIL PROTECTED]
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  You do not examine legislation in the light of the benefits it
  will convey if properly administered, but in the light of the
  wrongs it would do and the harms it would cause if improperly
  administered.                                  -- Lyndon B. Johnson
-----------------------------------------------------------------------
 5 days until the 232nd anniversary of the Declaration of Independence

Reply via email to