This has worked out pretty awesome until we had a client making a legitimate mistake where he did a reply to an email where someone had put a name rather than an email address. After trying 3 times in rapid succession he was blocked for 24 hours.
3 is too low, double or triple it
the algorithm should be fast attacking, checking every 15 minutes or so, not every 4 or 24 hours.
My question would be what to tweak in order to change the 24 hours to only one hour?
1 hour is long enough.
If they come back (or persist while blocked), you block (refresh) for another hour.
For purging the list of inactive entries (to keep the list small), no activity for x hours, then remove from blocking.
Len
_____________________________________________________________________ http://IMGate.MEIway.com : free anti-spam gateway, runs on 1000's of sites
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
