Randy,
though http://www.rommon.com/sandbox.html looks to be a
commercial product (and hence the spawn of evil:-), has
anyone got success/failure stories? it looks to speak
directly to this issue.
We have been using rommon for years now and are quite happy with it. It
has radically decreased workload of our abuse-handling crew and
zotob-infected customers for example got blocked with no extra
configuration needed.