I am trying to implement some basic directory harvesting as a spam solution with my MT. Is there a way to scan the rcpt to:user@example.com in the TCP packets then mark it then block the senders IP? We are getting a lot of spam sent to users that have left the company so I want to block those IPs.
MANY people take the approach of using the firewall as a preliminary measure of blocking spam. Especially with folks that have a budget that even use MT.
you should use a packet sniffer and see if the recipient’s email address can actually be seen. if yes, then use the Layer7 filter facility to control this