Blocked Email IP's Rotated Out of csf.deny

[inbuffalo]

Im using ConfigServer MailScanner Front-End where client IPS can be blocked by adding an entry into csf.deny. Ive been blocking the IP's for the persistent low scoring spam emails.

It is my understanding that due to the upper limit of IP's in csf.deny, the IP's for blocked emails will eventually get rotated out of the file.

Would it be worthwhile to consider having a separate file that could be checked for IP's that are denied for incoming emails. Or could IP's for blocked emails be identified and kept in the csf.deny file and not removed when the file gets rotated

Or is there a better method to handle this?

Thanks

[sawbuck]

You can always add a "do not delete" tag to any IPs you don't want removed.