I do many things with swatch and have several instances running. I thought that I would share this idea. I got tired of a user abusing me over bounces from his clients using SBC and other spam havens. 1. Assign users a security code. To whitelist, user sends mail with the subject: [security_code] whitelistee@xxxxxxxxxx 2. Postfix -> header_checks /^Subject: [security-code]/ Warn 3. swatch.conf watchfor /Subject:.*security code/ exec "/usr/local/whitelist $12" 4. swatch swatch --use-cpan-file-tail \ --config-file=/etc/swatch.conf --daemon \ --awk-field-syntax --tail-file=/var/log/maillog 5. /usr/local/whitelist (temp file puts whites on the top) #!/bin/bash echo -e "$1\tOK" >/etc/postfix/access.tmp cat /etc/postfix/access >>/etc/postfix/access.tmp cat /etc/postfix/access.tmp >/etc/postfix/access postmap /etc/postfix/access -- Our DNSRBL - Eliminate Spam: http://www.TQMcube.com Multi-RBL Check: http://www.TQMcube.com/rblcheck.php Zombie Graphs: http://www.TQMcube.com/zombies.php