info about spam messages

[Tayfun ASKER]

Hi Tom,
  I am using bogofilter to classify messages as spam or ham and putting 
spam classified messages into special spambox folders. I am going to 
continue with this. But I believe If I can determine frequent spammers, 
I can block some of the spam flood at MTA level. I am not going to block 
every address found in the logs automatically. Of course every Form or 
ip address needs validation before being blocked, and because of this 
building the access list will be a time consuming process. I can not 
tell wheter it is worth to spend some time on it right now. I just want 
to implement this and see the result.

Regards,


Tayfun


> Tayfun,
> 
> The "From" address will not tell you anything about the spammer in most
> cases.  Often, the spammer uses your own email in the "From" field, or a
> random username at your server.  Blocking this address will do nothing but
> foul up your own mail delivery.  Similarly, you can't depend on the IP that
> bogofilter outputs as being that of the spammer either.  You would have to
> try to validate it in other ways, including with your MTA.  Ultimately,
> outright blocking of any addresses is dangerous.  The best thing to do is to
> filter with bogofilter.
> 
> Tom
> 
>