Mailscanner and calmav are doing a decent job of blocking a recent wave of virus.
But is it possible to have the IP blacklisted in CSF once a vrus has been detected.
This might slow down sebsequent receipts for a short while.
I did see that i may have been possible many years ago, but don't see this feature today.