I'd block them before they reach osTicket, if your email provider offers server-based mail filtering (like Gmail does). I guess what you're calling a "ban list" would do the same thing. The only collateral damage I can think of is, if this same email account is used by any human for SENDING mail, you would not get any notification of failed or delayed outgoing emails.Jack