[imp] help wiht spamers

[mbeltran@americatel.com.sv]

Hello

I have a mail server box wiht qmail, courier imap, Horde version 2.2.6,
Turba version 1.2.2. Kronolith version 1.1.2 and IMP version 3.2.6

I configured the box for costumers can acceses their email accounts
where-ever they are.

I few days ago some people use my box to post spam. they use several ip
addresses this is an example from my access.log form one of those ip
adresses:


196.201.74.92 - - [10/Aug/2005:06:39:21 -0600] "GET
/imp/mailbox.php?Horde=b445bdad50314ba54b3344435f9c92d3&newmail_popup=no&mai
lbox
=INBOX.drafts HTTP/1.1" 200 5423
"http://apps.americatelsal.com/imp/folders.php?Horde=b445bdad50314ba54b33444
35f9c92d3" "Mozilla/4.0
 (compatible; MSIE 6.0; Windows NT 5.1)"
196.201.74.92 - - [10/Aug/2005:06:39:36 -0600] "GET
/imp/compose.php?Horde=b445bdad50314ba54b3344435f9c92d3&popup=1&to=&cc=&bcc=
&msg
=&subject=&actionID=126&mailbox=INBOX.drafts&index=7&bodypart=1&thismailbox=
INBOX.drafts&uniq=1123670493230 HTTP/1.1" 200 25679 "-" 
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
196.201.74.92 - - [10/Aug/2005:06:39:40 -0600] "GET
/imp/compose.php?Horde=b445bdad50314ba54b3344435f9c92d3&popup=1&to=&cc=&bcc=
&msg
=&subject=&actionID=126&mailbox=INBOX.drafts&index=8&bodypart=1&thismailbox=
INBOX.drafts&uniq=1123670497536 HTTP/1.1" 200 34245 "-" 
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
196.201.74.92 - - [10/Aug/2005:06:39:44 -0600] "GET
/imp/compose.php?Horde=b445bdad50314ba54b3344435f9c92d3&popup=1&to=&cc=&bcc=
&msg
=&subject=&actionID=126&mailbox=INBOX.drafts&index=9&bodypart=1&thismailbox=
INBOX.drafts&uniq=1123670500020 HTTP/1.1" 200 21434 "-" 
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
196.201.74.92 - - [10/Aug/2005:06:39:57 -0600] "GET
/imp/compose.php?Horde=b445bdad50314ba54b3344435f9c92d3&popup=1&to=&cc=&bcc=
&msg
=&subject=&actionID=126&mailbox=INBOX.drafts&index=10&bodypart=1&thismailbox
=INBOX.drafts&uniq=1123670502423 HTTP/1.1" 200 22194 "-"
 "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"


if a see the email from that ip adress i see this email:


MESSAGE NUMBER 590068 
 --------------
Received: (qmail 8863 invoked by uid 48); 9 Aug 2005 22:17:06 -0000
Cc: recipient list not shown: ;
Received: from 196.201.77.76 ([196.201.77.76]) 
        by apps.americatelsal.com (IMP) with HTTP 
        for <kuma at 123.com.gt@localhost>; Tue,  9 Aug 2005 16:17:06 -0600
Message-ID: <1123625826.42f92b626db0d at apps.americatelsal.com>
Date: Tue,  9 Aug 2005 16:17:06 -0600
From: Kuma fam <kuma at 123.com.gt>
Reply-to: joanekev at yahoo.fr
Subject: Kind attention from joane
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
User-Agent: Internet Messaging Program (IMP) 3.2.6
X-Originating-IP: 196.201.77.76

FROM: JOANE KUMA
ABIDJAN, COTE D'IVIORE
WEST AFRICA
TEL: +22507285505


I have blocked all spam source ip address in httpd.conf but the list is very
high and i dont want to block ip adresses from apache

Nobody of my costumers use their emails accounts for send several times the
same email. 

so my question is, how can i block to send this kind of email (very very
times per minute) in IMP?

best regards
Mario