I got a Cobalt RaQ 4i about 2 to 3 weeks ago and I installed all
the patches and enabled POP3-before-SMTP and checked for Open Relay and stuff and so far it is safe. I have even enabled the bandwidth throttling on the IP I was thinking of using to host my clients.

However, I am considering offering part of the server by reselling to my current clients. I would not advertise the fact that the server supports SMTP because of the strict policy at RS. Is there a way to turn off SMTP for some domain names ?

I know I could pop the no spam policy in front of my clients' face and place very harsh penalty if they break it. But words are just words. They can always break the rules and start spamming.

Apart from trailing and tracking the client's every move, scanning all their out going mails and staying up 24 hours eyes glued to the system straring at the log files, what would be my best option to prevent spams and most importantly from having my system shut down, reformatted and resold ?

I know I could probably pre-scan the user's past history and so on but nothing could stop them from breaking their norms. And I am sure that we may have one time or other started a new web site, got a little ambitious and mail out to all our friends , relatives or clients that we have a new website. Would that be considered as spam ? And how do we prevent them from using their own email address with their own ISP's SMTP to mail out such announcement if part of the message points back to the site hosted on our server (ie not using our servers to send out mails at all). Would I still be penalize ?

I currently using the server POP3-before-SMTP for my own legitimate purposes and thus cannot switch off the sendmail server or prevent all relays + pop3 before smtp support. So probably the next best option is to limit the emails that the server can send out to about maybe not more than 30 mails out each time. How could I do that ? I couldn't find any information.

By the way, how do you guys kill spams all together ? Do you really stare at logs 24 hours ?

I am sure that most of you have your ways of preventing all these from happening.

I want to stay within the acceptable policy of RS but I do still want to run a business.

Thanks.

Eddy