If you have a specific address - then just put a packet filter into your border router. Or even better - ask your upstream to do it.
try http://spamassassin.org/ if you have perl, (you don't have perl?) it's installable via CPAN. also, get the Razor database add-on as well, it contains the "checksum" of each reported spam, identification of spam using this method is really cool. procmail required. tcgs Some examples: Date: Tue, 12 Mar 2002 16:36:01 -1700 From: spyglasst5042(a)yahoo.com To: Undisclosed.Recipients(a)camelot.tdce.com.au Subject: *****SPAM***** last chance! cellphone antenna booster SPAM: -------------------- Start SpamAssassin results ---------------------- SPAM: This mail is probably spam. The original message has been altered SPAM: so you can recognise or block similar unwanted mail in future. SPAM: See http://spamassassin.org/tag/ for more details. SPAM: SPAM: Content analysis details: (15.15 hits, 6 required) SPAM: Hit! (4.24 points) Faked To "Undisclosed-Recipients" SPAM: Hit! (1.2 points) From: does not include a real name SPAM: Hit! (0.5 points) Subject has an exclamation mark SPAM: Hit! (1.94 points) From: ends in numbers SPAM: Hit! (2.37 points) Invalid Date: header (timezone does not exist) SPAM: Hit! (3 points) Listed in Razor, see http://razor.sourceforge.net/ SPAM: Hit! (1.9 points) Forged yahoo.com 'Received:' header found SPAM: SPAM: -------------------- End of SpamAssassin results --------------------- As seen on late night television. Now you can purchase your own cell phone booster for the fraction of the advertised price Date: Wed, 13 Mar 2002 03:06:11 -0500 From: pnczx(a)jubiipost.dk To: cpbnr(a)luso.pt Subject: *****SPAM***** Underground Mailing Service.. 24487 SPAM: -------------------- Start SpamAssassin results ---------------------- SPAM: This mail is probably spam. The original message has been altered SPAM: so you can recognise or block similar unwanted mail in future. SPAM: See http://spamassassin.org/tag/ for more details. SPAM: SPAM: Content analysis details: (21 hits, 6 required) SPAM: Hit! (1.2 points) From: does not include a real name SPAM: Hit! (1 point) Subject contains lots of white space SPAM: Hit! (0.01 points) BODY: Asks you to click below SPAM: Hit! (1 point) BODY: Claims you can be removed from the list SPAM: Hit! (1 point) BODY: Uses a dotted-decimal IP address in URL SPAM: Hit! (1.8 points) BODY: Tells you to click on a URL SPAM: Hit! (1.82 points) BODY: Link to a URL containing "remove" SPAM: Hit! (1.56 points) Contains phrases frequently found in spam SPAM: [score: 72, hits: click here, email address,] SPAM: [from future, from our, future mailings, list] SPAM: [click, mailing list, more information, one our,] SPAM: [received this, removed from, this email, you] SPAM: [must, your email] SPAM: Hit! (3 points) Listed in Razor, see http://razor.sourceforge.net/ SPAM: Hit! (1 point) spam-phrase score is over 20 SPAM: Hit! (1 point) spam-phrase score is over 30 SPAM: Hit! (3.33 points) HTML-only mail, with no text version SPAM: Hit! (0.8 points) Received via known spam-harbouring dialups SPAM: Hit! (1 point) Received via a relay in orbs.dorkslayers.com SPAM: [RBL check: found 140.64.129.61.orbs.dorkslayers.com.] SPAM: Hit! (1.48 points) Subject contains a unique ID number SPAM: SPAM: -------------------- End of SpamAssassin results --------------------- <html> <body> <p><b><font size="5" color="#FF0000">Hot Girls And Wild Horses!</font></b><br> - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog