URGENT: rejecting emails over xMB

Hello,

I am having a problem with my server crashing all day today and I just happened to catch a top run before it crashed this time and found it to be someone sending what appears to be at least 50MB email and procmail is just eating up the CPU and memory before the system crashes.

su-2.01# ps aux
USER       PID %CPU %MEM   VSZ  RSS  TT  STAT STARTED       TIME  COMMAND
root      6519 91.6 34.6 44140 44608  ??  Rs    6:50PM    3:46.95 procmail -f art
root      6518  1.4  0.7   824  916  ??  S     6:50PM    0:06.98 sendmail: NAA14123: fr

I have already denied access in sendmail to this user (with a nice message to contact me) and emailed them to use ftp to transfer the file - which I just set them up an account for.  The problem is that I think the server sending it might be misconfigured because it keeps on going and going like that silly pink bunny.  :(  simply because it never completed the email and figures it'll try again.  And again.   And again.  

Anyways, I need to find a way for procmail (or sendmail) to recognize that there is some large attachment over xMB in size and then send that person a nice message to contact me directly and dump the email.  My big fear is that while I was able to catch who is sending it this time, is that it might happen again at a less opportune time.  And more importantly, it needs to figure this out before it brings the attachment into memory which is where the problem appears to be caused.

Can anyone help.

Jerry Preeper
(anxiously searching the archives now)
preeper(_at_)cts(_dot_)com