Exim+ClamAV: how to temporary block virus sender automatically?

[Alexander Vasenin aka BlackSir]

> BTW, how do You deal with SPF domains/MTAs?

Not at all. Almost 95% of clients use RFC1918 IP-addresses, while others 5% don't know about SPF at all. I've never heard about SPF from our clients.
Anyway, SMTP-proxy in my case is simply to override by 2 additional strings in ipfw.

Alexander Vasenin aka BlackSir