Stephane,

The option to send to NULL for that filter is not available, however the new SpamFilter ISP v2.7 features a new blacklist IP cache that will actually be even better. The "send to NULL" still forces SpamFilter to receive the full email, so bandwidth is still not saved. However with the new IP cache functionality, the "bad" IPs will be denied a connection. The following is an excerpt from the help file describing the new filter:

Enable Cached IP Blocking - If an IP address sends more than a certain number of spam emails (3 by default) during a certain time interval (10 minutes by default), then it can be temporarily banned (blacklisted). All further connections from that IP address will be immediately rejected without allowing the sender to transmit any data. This should greatly reduce the load on the server. A banned IP address will be automatically removed from this temporary blacklist after a defined time interval (60 minutes by default).

Hi,

Is it not that effective for that kind of attack, since the attacks are coming from a different ip addresses each time (infected computers used as open relays or others ..) But the connection would be dropped when the max number of recipient is reach ? I can do so at this moment, manually by using the connection screen and terminate the connection for which is sending more that # of recipient.

Thanks.