[exim] exim and iptables

Hi all,

I've setup exim in combintation with spamassassin and clamav and it is doing
it's job very good!!!
Only....
We get about 2 smtp hits/sec !!!! on the MTA, and it's killing the box :(
Now was thinking of combining iptables as well.
Blokking connections before they connect to exim and eat resources
I have all ready, except one imporant thing:
How to execute my script when a deny ACL is true ??
I tried playing with ${run} but without luck

thanks
--
UH-OH!! We're out of AUTOMOBILE PARTS and RUBBER GOODS!